{ "count" : 205675, "data" : [ { "id" : "6a30766ff292fd229c019a39", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nubank", "industry" : "FinTech", "salary" : { "min" : 250000.0, "max" : 400000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager level Security Engineering role in FinTech, adjusted for Belo Horizonte, Brazil, and company size." }, "location" : "Belo Horizonte", "locations" : [ "Belo Horizonte", "Campinas", "Rio de Janeiro", "São Paulo" ], "timestamp" : "2026-06-16T12:04:20.122", "fingerprint" : "36c982f5d44ccf85a52e1c2e1524bb8ada0bb2ac04d4713ea94af1f3033def16", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nubank/jobs/8007428", "externalId" : "8007428", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Belo Horizonte", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-19.9227318,-43.9450948" } ], "locationText" : "Belo Horizonte, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, IaC, Terraform, Pulumi, CloudFormation, AWS, GCP, Kubernetes, Kafka, CSPM/CNAPP platforms, AI/ML infrastructure", "professionalSkills" : [ "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management" ], "hardSkillsList" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Configuration baselines", "level" : "intermediate" }, { "name" : "Posture detection", "level" : "intermediate" }, { "name" : "Preventive controls", "level" : "intermediate" }, { "name" : "Remediation pipelines", "level" : "intermediate" }, { "name" : "AI enablement", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud Security, Engineering Management, AWS, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "AWS", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Plan team composition and skills, Drive technical decisions, Enable technical decisions on architecture, Be accountable for technical health, Set team's quality, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs to stakeholders, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Manage initiatives, Own squad's contribution to OKRs, Operate with accountability, Hold accountability for financials, Operate in compliance with policies, Lead and mentor others, Contribute to hiring panels", "teamCollaboration" : "Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement; Foundation Security; ITSec", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Multi-cloud patterns; Cloud configuration risk; International banking regulators; AI safety; PCI; ISO 27001; Banking regulators; Runtime security; Event-streaming platforms; Data pipelines; AI/ML infrastructure", "domainList" : [ "multi-cloud-patterns", "cloud-configuration-risk", "international-banking-regulators", "ai-safety", "pci", "iso-27001", "banking-regulators", "runtime-security", "event-streaming-platforms", "data-pipelines", "ai-ml-infrastructure" ], "domainSpecificKnowledge" : [ "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "communicationSkills" : "Written communication; Spoken communication", "continuousLearning" : "Nucleo learning platform", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Reduce blast radius", "qualificationsBasic" : "Engineering Manager experience, Hands-on software engineering background, Working knowledge of AWS at scale, Comfort designing and governing preventive controls, Track record of hiring, onboarding, and developing, Experience running performance and career conversations, Ability to make complex trade-offs clear", "qualificationsPreferred" : "Familiarity with GCP, Prior experience building and shipping software products, Prior exposure to CSPM/CNAPP platforms, Experience supporting regulatory or compliance workstreams, Familiarity with Kubernetes runtime security, Familiarity with event-streaming platforms, Familiarity with large-scale data pipelines, Experience embedding security into AI/ML infrastructure, Hands-on use of AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Us Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. About the Role We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. What You’ll Be Responsible For Lead the squad Set clear expectations, give frequent feedback, and run career conversations with senior ICs. Hire and onboard talent, partnering with P plan the team's composition and skills against Nubank's objectives. Drive technical decisions and engineering excellence Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders. Translate strategy into execution Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). Own the squad's contribution to OKRs, monthly business reviews, and the Area business board. Operate with accountability Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). Operate in compliance with corporate policies and risk-management processes. Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. We Are Looking for a Person Who Has Must-have Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. Prior exposure to CSPM/CNAPP platforms (any major vendor). Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. Experience embedding security into AI/ML infrastructure. Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. Direct line of sight to Nubank's regulatory and international expansion programs. A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. Our Benefits Chance of earning equity at Nubank Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) Public Transportation Commuting Benefit (Vale-Transporte) NuCare – Psychological, Financial and Legal Assistance Program Life Insurance Medical Plan Dental Plan NuLanguage – Language Course Program Nucleo - Our learning platform of courses Extended Parental Leave Daycare Allowance Parental Consultancy Work-from-home Allowance Gym Partnerships 30 days of paid vacation Work Model for this Role Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nubank. Skills: Cloud Security, Engineering Management, AWS, IaC. Lead the squad. Set clear expectations", "postedDate" : "2026-06-16T01:18:02.139", "createdAt" : "2026-06-16T01:18:02.139", "lastUpdated" : "2026-06-16T12:04:20.122", "ingestTimestamp" : "2026-06-16T01:18:02.139", "mongoId" : "6a30766ff292fd229c019a39", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Configuration baselines", "Posture detection", "Preventive controls", "Remediation pipelines", "AI enablement", "Leadership", "Mentoring", "Cloud Security", "Engineering Management", "AWS", "IaC", "Technical leadership", "Strategy execution", "Architecture design", "Root cause analysis", "Roadmap planning", "Financial management", "Risk management", "Multi-cloud patterns", "Cloud configuration risk", "International banking regulators", "AI safety", "PCI", "ISO 27001", "Banking regulators", "Runtime security", "Event-streaming platforms", "Data pipelines", "AI/ML infrastructure", "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "CSPM/CNAPP platforms", "Jira", "LookerigQuery", "Cursor", "Claude Code", "GitHub Copilot" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1786.7037, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "68b706967fc9a711f0f6f0fc", "title" : "Sr. Security Engineer, AWS Cloud Security Response", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:44:36.234", "fingerprint" : "8a7a3fd9386f46352c27b51d967635462826361466b369c04fe4a00251d6e89c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3051891/apply", "externalId" : "2298684c-4600-4216-9042-5f7f5e39f8c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Bash scripting, PowerShell scripting, Python scripting, Linux, Unix", "professionalSkills" : [ "Risk assessment", "Information security", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "hardSkillsList" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies" ], "softSkillsList" : [ "Leadership", "Mentoring", "Critical thinking" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Coding", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Operating system security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Virtualization technologies", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Critical thinking" } ], "majorSkills" : "Cloud Security, Incident Response, Security Engineering, AWS", "majorSkillsList" : [ "Cloud Security", "Incident Response", "Security Engineering", "AWS" ], "coreResponsibilities" : "Manage security and availability of AWS Cloud services, Operate on the ‘AWS’ side of the Shared, Protect customers, Work tactically with internal and external stakeholders, Solve security challenges at massive scale, Think strategically to develop and implement changes, Drive automation, Drive scalability, Drive continuous progress, Assess technical vs. business risks, Drive internal engineering teams to take the right, Mitigate risks, Triage/assess security issues, Engage with internal service teams, Ensure prompt remediation of issues, Escalate internally as necessary, Ensure the right level of urgency and engagement, Participate in efforts to promote security throughout the, Build good working relationships within the team, Build good working relationships with others across Amazon, Develop pragmatic solutions that achieve business requirements, Keep an acceptable level of risk, Help with recruiting activities, Help with administrative work, Mentoring of junior staff, Proactive knowledge sharing within the team, Proactive knowledge sharing across the company, Fulfill regular on-call responsibilities, Supply oversight of in-flight security issues, Triage new incoming issues, Determine the level of risk, Prioritize remediation, Communicate the state of these issues to various, Escalate issues to senior AWS leadership, Explore building and improving our tooling, Share tooling benefits with all our engineers globally, Take handover from the previous site, Be delegated ownership of various security issues, Learn on the go, Engage various stakeholders, Triage new issues, Determine impact level, Work towards resolving them, Document all issues you are tracking", "teamCollaboration" : "Internal stakeholders; External stakeholders; Internal service teams; Senior leadership; Partner teams; Other AWS teams", "projectManagementSkills" : [ "Prioritize multiple tasks", "Manage projects" ], "domainKnowledge" : "AWS Cloud Security; Shared Responsibility Model; Cloud computing; Network security; Operating system security; Cryptography; Software security; Security operations; Incident response; Security intelligence; Web protocols; Linux architecture; Unix architecture", "domainList" : [ "aws-cloud-security", "shared-responsibility-model", "cloud-computing", "network-security", "operating-system-security", "cryptography", "software-security", "security-operations", "incident-response", "security-intelligence", "web-protocols", "linux-architecture", "unix-architecture" ], "domainSpecificKnowledge" : [ "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Web protocols", "Linux architecture", "Unix architecture" ], "toolProficiency" : [ "AWS", "Linux tools", "Unix tools" ], "communicationSkills" : "Oral communication; Written communication; Communicate to leadership", "continuousLearning" : "Learn on the go", "innovationCreativity" : "Develop pragmatic solutions; Explore building and improving tooling", "problemSolvingSkills" : "Troubleshooting; Critical thinking; Creative thinking; Root cause analysis", "specialRequirements" : "On-call responsibilities", "outcomesObjectives" : "Ensure security of the Cloud; Mitigate risks; Drive automation; Drive scalability; Drive continuous progress; Ensure prompt remediation of issues; Achieve business requirements; Keep acceptable level of risk; Ensure customers are put first", "qualificationsBasic" : "BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience, 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security", "qualificationsPreferred" : "2+ years of scripting/coding experience in any language, Previous experience in Python scripting would be ideal, Understanding and experience with implementation of best practices across multiple security disciplines/domains, Strong, proven knowledge of virtualization technologies (AWS preferred), Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, employ critical and creative thinking, Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills, Ability to prioritize multiple tasks and projects in a dynamic environment", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Cloud Security Response team manages the security and availability of AWS Cloud services. We operate on the ‘AWS’ side of the Shared Responsibility Model to ensure “Security of the Cloud” and to protect our customers. This role requires engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale, and to think strategically to develop and implement changes to drive automation, scalability and continuous progress for the organization. We’re looking for talented software and systems professionals with a passion for security who thrive in high energy environments to help us continue to raise the security bar for cloud computing. Successful candidates should: - be able to assess technical vs. business risks and consistently drive internal engineering teams to take the right actions in the appropriate time frames to mitigate risks. - have a good mix of broad and deep technical knowledge and a demonstrated background in information security. - be technically proficient in the fields of network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence. - possess a combination of troubleshooting, technical, and communication skills, as well as the ability to manage a mix of disparate tasks which may include small-project and software development work. - be comfortable challenging and escalating to senior leadership to always ensure the best outcome for customers. An ideal candidate should be able to conduct most of the following: - Triage/assess security issues and engage with internal service teams to ensure prompt remediation of issues, escalating internally as necessary to ensure the right level of urgency and engagement. - Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon. - Demonstrate high ability and tolerance for frequent context switching and interruptions while staying productive and effective. - Develop pragmatic solutions that achieve business requirements while keeping an acceptable level of risk. - Help with recruiting activities and administrative work. - Mentoring of junior staff and proactive knowledge sharing within the team and across the company. - Fulfill regular on-call responsibilities. #SecOps Key job responsibilities - Supply oversight of in-flight security issues. - Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team. - Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including AWS’ Chief Information Security Officer). - Escalate issues to senior AWS leadership if you feel your issues are not being treated at the correct pace due to their impact to ensure that we are putting customers first. - Explore building and improving our tooling to make your own life easier, and at the same time, sharing that benefit with all our engineers globally. A day in the life In the morning you will take handover from the previous site and be delegated ownership of various security issues presently in-flight. The issues could relate to any of our many products, so you will often need to learn on the go. You will engage various stakeholders, such as the internal service team who actually needs to fix the issue, along with AWS Security Leadership, Legal, and the leadership from the impacted service team. As the day progresses, new issues will be automatically assigned to you based on your workload and you will be responsible for triaging them, determining their level of impact, and work towards resolving them at the appropriate pace. We staff a \"follow the sun\" on-call model from multiple geographic locations. At the end of the day, you will document all the issues you are tracking so they can be taken over by the next shift. About the team Cloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations. We work with other AWS teams, to ensure security issues are resolved with the right level of urgency, whilst ensuring that our stakeholders are kept into the loop. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering, or 3+ years’ equivalent technology experience. - 3+ years or more of proven experience with a focus in areas such as systems, network, and/or application security. Preferred Qualifications: - 2+ years of scripting/coding experience in any language (including Bash/PowerShell scripting). Previous experience in Python scripting would be ideal. - Understanding and experience with implementation of best practices across multiple security disciplines/domains. - Strong, proven knowledge of virtualization technologies (AWS preferred), web protocols, common attacks, and Linux/Unix tools and architecture. - Demonstrated ability to collaborate/develop partnerships with partner teams, work autonomously with a Bias for Action, and employ critical and creative thinking. - Maturity, judgment, negotiation/influence skills, analytical skills, and leadership skills. - Ability to prioritize multiple tasks and projects in a dynamic environment. - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Sr. Security Engineer, AWS Cloud Security Response at Amazon.com Services LLC. Skills: Cloud Security, Incident Response, Security Engineering, AWS. Manage security and availability of AWS Cloud services. Operate on the ‘AWS’ side of the Shared", "postedDate" : "2026-06-13T05:32:27.074", "createdAt" : "2026-06-13T05:32:27.074", "lastUpdated" : "2026-06-15T02:44:36.234", "ingestTimestamp" : "2026-06-13T05:32:27.074", "mongoId" : "68b706967fc9a711f0f6f0fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3051891/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Scripting", "Coding", "Network security", "Operating system security", "Cryptography", "Software security", "Security operations", "Incident response", "Security intelligence", "Troubleshooting", "System design", "Virtualization technologies", "Leadership", "Mentoring", "Critical thinking", "Cloud Security", "Incident Response", "Security Engineering", "AWS", "Risk assessment", "Information security", "Prioritize multiple tasks", "Manage projects", "AWS Cloud Security", "Shared Responsibility Model", "Cloud computing", "Web protocols", "Linux architecture", "Unix architecture", "Linux tools", "Unix tools" ], "skillCount" : 31, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1605.0121, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69fa63dd4c40e2acd1677550", "title" : "Security Engineering Manager, AWS Foundational & Hardware Security", "company" : "Amazon.com Services LLC", "industry" : "Software Development, Systems Security Engineering, amazon security", "salary" : { "min" : 100000.0, "max" : 236900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "CISSP", "CCSP", "AWS Security Specialty" ], "timestamp" : "2026-06-15T21:22:35.273", "fingerprint" : "57d02be7277c41ba24e997e416629383701d5d1e1d0e31910c3d8e86eba5b5c2", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10411738/apply", "externalId" : "85459f7b-1ad9-4065-a2b5-7d66e575e125", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Security engineering, Hardware security, AWS, Cloud security, Cryptography, Threat modeling, Security compliance", "professionalSkills" : [ "Team management", "Strategic planning", "Risk assessment", "Cross-functional collaboration" ], "hardSkillsList" : [ "Security architecture", "Vulnerability management", "Incident response" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security Engineering Management, Hardware Security, AWS Security", "majorSkillsList" : [ "Security Engineering Management", "Hardware Security", "AWS Security" ], "coreResponsibilities" : "Lead and manage a team of security engineers, Develop and implement security strategies, Oversee security architecture for AWS foundational services, Ensure hardware security best practices, Conduct security reviews and risk assessments, Collaborate with engineering teams to integrate security, Stay current with emerging security threats, Mentor and develop team members", "teamCollaboration" : "Cross-functional teams; Engineering teams; Product teams", "projectManagementSkills" : [ "Agile methodologies", "Project planning" ], "domainKnowledge" : "AWS foundational security; Hardware security; Cloud security architecture; Security compliance frameworks; Cryptography principles", "domainList" : [ "aws-foundational-security", "hardware-security", "cloud-security-architecture", "security-compliance-frameworks", "cryptography-principles" ], "domainSpecificKnowledge" : [ "AWS foundational security", "Hardware security", "Cloud security architecture", "Security compliance frameworks", "Cryptography principles" ], "toolProficiency" : [ "Security tools", "Monitoring tools", "Analysis tools" ], "communicationSkills" : "Technical presentations; Stakeholder communication", "documentationSkills" : "Security documentation; Architecture diagrams", "continuousLearning" : "Security conferences; Training programs", "innovationCreativity" : "Security innovation; Proactive security solutions", "problemSolvingSkills" : "Root cause analysis; Security incident analysis; Complex problem solving", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Enhance AWS foundational security posture; Strengthen hardware security controls; Reduce security risks; Ensure compliance with security standards", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, 3+ years of experience managing security teams, Experience with hardware security, Experience with AWS foundational security", "qualificationsPreferred" : "Master's degree or PhD, Experience with cloud security architecture, Experience with security compliance frameworks, Experience with threat modeling, Experience with cryptography", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security is seeking an experienced and technical Security Engineering Manager to lead the Foundational & Hardware Security team. In this role, you will own the hardware security practice within AWS, driving security strategy across custom silicon design, firmware, and platform technologies. You will lead a team of world-class security engineers, engage deeply with AWS hardware engineering and platform teams to shape their security roadmaps, and ensure that AWS hardware platforms — from custom chipsets to edge and hybrid devices — are built and operated to the highest security standards. This is a high-impact leadership role at the intersection of hardware engineering and security, with direct influence on the security posture of AWS's global cloud infrastructure, custom silicon programs, and edge computing portfolio. Key job responsibilities * Lead, mentor, and grow a team of security engineers, fostering a culture of technical excellence and ownership * Engage early with AWS hardware engineering teams — including silicon design, firmware, and platform engineering — to influence their security roadmaps, embed security requirements from the earliest stages of product design, and ensure security is a first-class consideration from chip architecture through deployment * Define and drive the multi-year hardware security strategy for AWS, covering: * Custom silicon security: chip-level security architecture for AWS-designed processors such as Graviton, Trainium, and Inferentia — including secure boot, hardware root of trust, memory protection, and inter-chip communication security (encryption, side-channel resistance, power analysis attack mitigations) * Firmware security: secure firmware development lifecycle, firmware integrity verification, anti-rollback protections, and vulnerability management across AWS hardware platforms * TPM and cryptographic hardware: TPM implementation, hardware security module (HSM) integration, and cryptographic key management at the hardware layer * Edge and hybrid device security: end-to-end hardware security for AWS edge and hybrid devices such as AWS Snowball and AWS Outposts — including physical tamper resistance, secure provisioning, and field security operations * IoT and device security: hardware security architecture for connected and embedded devices, including secure element integration, device attestation, over-the-air (OTA) update security, and hardware-enforced isolation * Platform and hypervisor security: security verification of platform technologies including hypervisors, virtualization layers, and hardware-software interfaces — ensuring hardware security controls are correctly implemented and enforced at the platform level * Verify security controls implemented across hardware, firmware, and platform technologies — conducting rigorous security assessments, threat modeling, and penetration testing to validate that security requirements are met end-to-end * Drive all hardware-related security issues to successful resolution, ensuring prompt response to emerging risks across silicon, firmware, and platform layers * Communicate major security risks and program status to CISO and AWS Security leadership * Develop and maintain team training, onboarding, and career development programs * Represent the AWS Security team as an ambassador with external partners, silicon vendors, and industry standards bodies * Establish scalable mechanisms for hardware and firmware security review, tooling, and detection across AWS's global hardware fleet About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree in Computer Science, Information Security, or a related field - 4+ years of deep domain expertise in hardware/firmware design and/or virtualization technologies - 3+ years of experience managing and developing high-performing security engineering teams - Technical understanding of: Chip-level security architecture, secure boot, and hardware root of trust * Firmware security — secure development practices, integrity verification, and vulnerability management * IoT and device hardware security concepts — device attestation, secure provisioning, hardware-enforced isolation, and OTA security * Platform and hypervisor security — understanding of how hardware security controls interact with virtualization and platform software layers - Demonstrated ability to engage with and influence engineering teams on security strategy and roadmap Preferred Qualifications: - Master's degree or PhD in Computer Science, Electrical Engineering, or a related field - Experience securing custom silicon programs (e.g., ARM-based SoCs, custom ASICs) in large-scale cloud or data center environments - Familiarity with side-channel attacks, fault injection, and physical security testing methodologies - Experience with edge and hybrid device security — including tamper-resistant hardware design, secure field provisioning, and remote attestation for devices like AWS Snowball or Outposts - Deep understanding of embedded systems security, RTOS security, and low-level firmware attack surfaces - Experience verifying security controls across hypervisors and virtualization platforms (e.g., Nitro, KVM, Xen) - Track record of influencing hardware and firmware security roadmaps across large engineering organizations - Experience working with external security researchers, silicon vendors, ODMs, and regulatory bodies - Strong written and verbal communication skills, with the ability to present complex hardware security topics to senior leadership Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, TX, Austin - 175,100.00 - 236,900.00 USD annually", "summaryDescription" : "Security Engineering Manager, AWS Foundational & Hardware Security at Amazon.com Services LLC. Skills: Security Engineering Management, Hardware Security, AWS Security. Lead and manage a team of security engineers. Develop and implement security strategies", "postedDate" : "2026-06-14T19:35:45.909", "createdAt" : "2026-06-14T19:35:45.909", "lastUpdated" : "2026-06-15T21:22:35.273", "ingestTimestamp" : "2026-06-14T19:35:45.909", "mongoId" : "69fa63dd4c40e2acd1677550", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10411738/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 236900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security architecture", "Vulnerability management", "Incident response", "Leadership", "Mentoring", "Security Engineering Management", "Hardware Security", "AWS Security", "Team management", "Strategic planning", "Risk assessment", "Cross-functional collaboration", "Agile methodologies", "Project planning", "AWS foundational security", "Hardware security", "Cloud security architecture", "Security compliance frameworks", "Cryptography principles", "CISSP", "CCSP", "AWS Security Specialty", "Security tools", "Monitoring tools", "Analysis tools" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1575.0427, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307964f292fd229c031f80", "title" : "Security Engineering Manager (Cloud Security)", "company" : "Nu", "industry" : "Engineer", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "BRL", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager-level Security Engineering Manager in FinTech in São Paulo, Brazil, adjusted for company size and industry." }, "location" : "São Paulo", "locations" : [ "São Paulo" ], "timestamp" : "2026-06-16T11:54:09.967", "fingerprint" : "94ee3a1086fbeb3b5e19be92d123c62122fa0b3e537c17b1bc08be929b5d0378", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/nubank/2a53d60e-88cd-4ef7-a217-270b31bb6f3a/application", "externalId" : "2a53d60e-88cd-4ef7-a217-270b31bb6f3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "São Paulo", "country" : "Brazil", "continent" : "sa", "source" : "llm", "workMode" : "hybrid", "geo" : "-23.5506507,-46.6333824" } ], "locationText" : "São Paulo, Brazil", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Golang, Clojure, Python, Shell scripting, AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, CSPM, CNAPP", "professionalSkills" : [ "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance" ], "hardSkillsList" : [ "Multi-cloud patterns", "Event-driven controls" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Multi-cloud patterns", "level" : "intermediate" }, { "name" : "Event-driven controls", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cloud Security, Engineering Management, Software Engineering, IaC", "majorSkillsList" : [ "Cloud Security", "Engineering Management", "Software Engineering", "IaC" ], "coreResponsibilities" : "Lead the squad, Set clear expectations, Give frequent feedback, Run career conversations, Hire and onboard talent, Partner with P&C, Mediate conflicts, Address low performance, Create safe space, Manage team engagement, Plan team composition, Drive technical decisions, Enable technical decisions, Understand multi-cloud patterns, Understand trade-offs, Be accountable for technical health, Manage code quality, Manage test coverage, Manage observability, Manage technical-debt, Set team quality standards, Oversee root cause analysis, Lead phased rollouts, Sponsor architectural decisions, Communicate trade-offs, Translate strategy into execution, Cascade strategy into roadmap, Balance regulatory commitments, Enable AI safely, Reduce cloud configuration risk, Manage initiatives, Own squad contribution to OKRs, Own monthly business reviews, Own Area business board, Hold accountability for financials, Operate in compliance, Lead others, Mentor others, Contribute to hiring panels", "teamCollaboration" : "Cross-functional teams; Infrastructure peers; Infrastructure teams; Product engineering; Compliance; GRC; Procurement", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Cloud security; Multi-cloud patterns; AWS; GCP; IaC; Kubernetes; Event-driven controls; International banking regulators; AI enablement; Cloud configuration risk", "domainList" : [ "cloud-security", "multi-cloud-patterns", "aws", "gcp", "iac", "kubernetes", "event-driven-controls", "international-banking-regulators", "ai-enablement", "cloud-configuration-risk" ], "domainSpecificKnowledge" : [ "Cloud security", "Multi-cloud patterns", "AWS", "GCP", "IaC", "Kubernetes", "Event-driven controls", "International banking regulators", "AI enablement", "Cloud configuration risk" ], "toolProficiency" : [ "Terraform", "Pulumi", "CloudFormation", "Kubernetes", "Kafka", "Jira", "GitHub Copilot" ], "communicationSkills" : "Stakeholder communication", "continuousLearning" : "Learning platform", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "Engineering Manager experience, Tech-lead/staff-level background, Hands-on software engineering background, Comfortable reading code, Comfortable reviewing code, Writing Shell/Python scripts, Reviewing IaC, Working knowledge of AWS at scale", "qualificationsPreferred" : "Experience with AI coding assistants", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "ABOUT NU Nu is one of the largest digital financial services platforms in the world, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our institutional page: https://www.nu.com/2026-en ABOUT US Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the Team Cloud Security defines and operates the cloud security controls that underpin Nubank's growth globally and across multiple cloud providers. The team owns the preventive guardrails, configuration baselines, and posture-detection mechanisms that allow Nubank to launch in new markets, sustain regulatory commitments with international banking regulators, and adopt AI safely at the cloud layer. ABOUT THE ROLE We are looking for an Engineering Manager II to lead a highly senior team of software engineers, translate Foundation Security's strategy into structured execution, and provide the close technical leadership of this squad's seniority and scope demand. This is a dedicated leadership seat — your full focus is one squad and its outcomes. WHAT YOU’LL BE RESPONSIBLE FOR Lead the squad - Set clear expectations, give frequent feedback, and run career conversations with senior ICs. - Hire and onboard talent, partnering with P&C and the Foundation Security hiring pipeline. - Mediate conflicts, address low performance promptly and impartially, and create a safe space for difficult conversations. - Manage team engagement with data; plan the team's composition and skills against Nubank's objectives. Drive technical decisions and engineering excellence - Lead and enable technical decisions on the squad's architecture, with a strong understanding of multi-cloud patterns and trade-offs (AWS, GCP, IaC, Kubernetes, event-driven controls). - Be accountable for the technical health of the squad's products: code quality, test coverage, observability, and technical-debt management. - Set the team's quality bar; oversee root cause analysis for complex incidents and lead phased rollouts that reduce blast radius. - Sponsor architectural decisions for squad-level projects and communicate trade-offs to non-technical stakeholders. Translate strategy into execution - Cascade Foundation Security and ITSec strategy into the squad's roadmap, balancing regulatory commitments across international markets, AI enablement, and ongoing reduction of cloud configuration risk. - Manage small-to-moderate initiatives that span multiple stakeholders (Infrastructure peers, infrastructure teams, product engineering, compliance, GRC, procurement). - Own the squad's contribution to OKRs, monthly business reviews, and the Area business board. Operate with accountability - Hold accountability for the squad's financials within ITSec's guidelines (tooling renewals, headcount, contracts). - Operate in compliance with corporate policies and risk-management processes. - Lead and mentor others within the squad; contribute to hiring panels across Foundation Security. WE ARE LOOKING FOR A PERSON WHO HAS Must-have - Engineering Manager experience leading a software/security squad, or strong tech-lead/staff-level background with clear intent and readiness to move into people management. - Solid hands-on software engineering background — comfortable reading and reviewing code in at least one of Golang, Clojure, or Python, writing Shell/Python scripts for automation, and reviewing IaC (Terraform, Pulumi). - Working knowledge of AWS at scale (multi-account, Organizations, IAM, networking, Security Hub, Config). Familiarity with GCP is a strong plus. - Comfort designing and governing preventive controls (SCPs, Organization Policies, admission controllers) and remediation pipelines. - Track record of hiring, onboarding, and developing engineers; experience (or strong appetite) for running performance and career conversations. - Strong written and spoken communication in English; ability to make complex trade-offs clear to non-technical stakeholders. Nice-to-have - Prior experience building and shipping software products (not only operating off-the-shelf security tools) — internal platforms, services, CLIs, integrations, APIs. - Prior exposure to CSPM/CNAPP platforms (any major vendor). - Experience supporting regulatory or compliance workstreams (PCI, ISO 27001, banking regulators). - Familiarity with Kubernetes runtime security, event-streaming platforms, and large-scale data pipelines. - Experience embedding security into AI/ML infrastructure. - Hands-on use of AI coding assistants (Cursor, Claude Code, GitHub Copilot, or similar) to accelerate engineering work and team productivity. Tech stack you'll be exposed to - AWS, GCP, Terraform, Pulumi, CloudFormation, Kubernetes, Kafka, Golang, Clojure, Python, shell scripting, CSPM/CNAPP platforms, internal data pipelines, Looker/BigQuery, Jira. AI coding assistants are part of our daily engineering workflow. What we offer - A dedicated leadership seat in a squad with very high seniority and very high strategic relevance. - Direct line of sight to Nubank's regulatory and international expansion programs. - A squad that builds its own products in-house — you'll lead software engineers shipping real software, not coordinating ticket queues. - A peer group of EMs across Foundation Security (Runtime, Infrastructure, Data) and a senior management layer that operates with full financial and strategic accountability. - Exposure to multi-country, multi-cloud problems at the scale of Latin America's largest digital bank. OUR BENEFITS - Chance of earning equity at Nubank - Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) - Public Transportation Commuting Benefit (Vale-Transporte) - NuCare – Psychological, Financial and Legal Assistance Program - Life Insurance - Medical Plan - Dental Plan - NuLanguage – Language Course Program - Nucleo - Our learning platform of courses - Extended Parental Leave - Daycare Allowance - Parental Consultancy - Work-from-home Allowance - Gym Partnerships - 30 days of paid vacation WORK MODEL FOR THIS ROLE Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ By submitting an application, I acknowledge that I have read and understand the Nubank Candidate Privacy Notice. Nubank Candidate Privacy Notice (English https://building.nubank.com/privacy-notice-for-candidates// Portuguese https://building.nubank.com/pt-br/aviso-de-privacidade-para-candidatos/ / Spanish). https://nu.com.mx/aviso-de-privacidad-candidatos/", "summaryDescription" : "Security Engineering Manager (Cloud Security) at Nu. Skills: Cloud Security, Engineering Management, Software Engineering, IaC. Lead the squad. Set clear expectations", "createdAt" : "2026-06-16T01:59:31.753", "lastUpdated" : "2026-06-16T11:54:09.967", "ingestTimestamp" : "2026-06-16T01:59:31.753", "mongoId" : "6a307964f292fd229c031f80", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Multi-cloud patterns", "Event-driven controls", "Leadership", "Cloud Security", "Engineering Management", "Software Engineering", "IaC", "Technical leadership", "People management", "Career conversations", "Hiring talent", "Conflict mediation", "Performance management", "Team engagement", "Technical decisions", "Engineering excellence", "Code quality", "Test coverage", "Observability", "Technical-debt management", "Root cause analysis", "Phased rollouts", "Architectural decisions", "Stakeholder communication", "Strategy translation", "Roadmap management", "Risk management", "Financial accountability", "Process compliance", "Roadmap planning", "Cloud security", "AWS", "GCP", "Kubernetes", "International banking regulators", "AI enablement", "Cloud configuration risk", "Terraform", "Pulumi", "CloudFormation", "Kafka", "Jira", "GitHub Copilot" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1566.4553, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306fd5f292fd229cfed7df", "title" : "Security Incident Response Manager", "company" : "Stripe", "industry" : "FinTech", "salary" : { "min" : 110000.0, "max" : 150000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Manager-level Security Incident Response Manager in the FinTech industry in Ireland, adjusted for seniority and company size." }, "location" : "Ireland Locations", "locations" : [ "Ireland Locations" ], "timestamp" : "2026-06-16T11:17:32.753", "fingerprint" : "5f1795380bd689254fa4ec13a24c81721330e837ac870f097537d3dd799086da", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://stripe.com/jobs/search?gh_jid=8007205", "externalId" : "8007205", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Ireland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Ireland", "experienceMinYears" : 5, "experienceLevel" : "Manager", "technicalSkills" : "Python, SQL, MacOS, Linux, Windows", "professionalSkills" : [ "Security management", "Data analytics", "Network security", "Digital forensics", "Incident response", "Threat intelligence", "Data processing", "Data analysis" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "System administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response Management, Security Operations, Team Leadership, Threat Analysis", "majorSkillsList" : [ "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis" ], "coreResponsibilities" : "Leverage security management experience, Improve incident response capabilities, Manage team of security analysts, Manage investigators, Manage responders, Hire team members, Train team members, Evaluate team performance, Provide technical guidance, Develop response procedures, Ensure timely resolution of casework, Collaborate with internal stakeholders, Make continuous improvements to incident response function, Lead team of security analysts, Support team of security analysts, Triage threats, Assess threats, Respond to threats, Provide technical guidance to team, Influence organizational mission, Influence organizational vision, Ensure prioritization of project work, Ensure delivery of project work, Align project work with security roadmaps, Strengthen KPIs for response operations, Strengthen metrics for response operations, Provide clear reporting to stakeholders, Provide consistent reporting to stakeholders, Work cross-functionally with security engineering teams, Gather requirements for analyzing security events data, Gather requirements for responding to security events data, Protect Stripe networks, Protect Stripe systems, Protect Stripe data, Develop strategies for incident response, Document strategies for incident response, Implement strategies for incident response, Develop runbooks for incident response, Document runbooks for incident response, Implement runbooks for incident response, Develop capabilities for incident response, Document capabilities for incident response, Implement capabilities for incident response, Continuously improve security processes, Continuously improve response capabilities, Collaborate with security engineers, Collaborate with security analysts, Coach individual contributors, Mentor individual contributors, Enable career development, Champion quality standards within team", "teamCollaboration" : "Cross-functional teams; Security Analytics teams; Detection teams; Security engineering teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Threat actor tactics; Threat actor techniques; Threat actor procedures; Security incident response; Network security; Digital forensics; Data analytics", "domainList" : [ "threat-actor-tactics", "threat-actor-techniques", "threat-actor-procedures", "security-incident-response", "network-security", "digital-forensics", "data-analytics" ], "domainSpecificKnowledge" : [ "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Network security", "Digital forensics", "Data analytics" ], "toolProficiency" : [ "Chronicle", "Tines", "Osquery", "Splunk" ], "communicationSkills" : "Operational reporting; Incident reporting", "documentationSkills" : "Response procedures; Runbooks", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Ensure timely and effective resolution of casework", "qualificationsBasic" : "5+ years leading Security Operations or Incident Response teams, Hands-on, technical management experience, B.S. or M.S. Computer Science or related field, Equivalent experience in Security, Experience recruiting, growing, and leading technical teams, Performance management experience, Excellent written and verbal communication skills, Ability to develop and deliver operational or incident-related information to leadership, Advanced knowledge of data analytics, Advanced knowledge of network security, Advanced knowledge of digital forensics, Advanced knowledge of incident response investigations, Experience with Python, Experience with SQL, Familiarity with macOS, Familiarity with Linux, Familiarity with Windows, Understanding of threat actor TTPs", "qualificationsPreferred" : "Broad knowledge across information security domain, Familiarity with endpoint security, Familiarity with email security, Familiarity with network security, Familiarity with identity management, Familiarity with cloud security, Familiarity with vulnerability management, Familiarity with incident response, Familiarity with threat intelligence, Experience with engineering, Experience with data processing and analysis tools, Familiarity with network observability, Familiarity with security software, Familiarity with data engineering solutions, Familiarity with Chronicle, Familiarity with Tines, Familiarity with osquery, Familiarity with Splunk", "remoteFriendly" : true, "rawDescription" : "Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About the team The Security Incident Response team is responsible for triaging and assessing the severity of incoming security alerts, responding with initial containment measures and escalating as needed to incident responders for further investigation and resolution. They analyze a variety of data sources to identify potential threats, collect requirements for operational enhancements to detection and response systems, and generally scale security processes. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed globally and regularly coordinates with stakeholders in North America, Europe, and Asia. What you’ll do You will leverage your security management experience to improve incident response capabilities at Stripe. You will manage a team of security analysts, investigators, and responders on the front lines of the incident response process, hiring, training, and evaluating their performance, providing technical guidance where needed, developing clear and consistent response procedures, and ensuring timely and effective resolution of casework. You will also collaborate with various internal stakeholders, including the Security Analytics and Detection teams, and make continuous improvements to Stripe’s security incident response function. Responsibilities Lead and support a team of security analysts, investigators, and responders who triage, assess, and respond to threats Provide technical guidance to the team, as a subject matter expert Influence the organizational mission and vision by ensuring prioritization and delivery of project work that is aligned with relevant security roadmaps Strengthen KPIs and metrics for measuring response operations effectiveness, for clear and consistent reporting to internal stakeholders Work cross-functionally with security engineering teams to gather requirements for analyzing and responding to security events data at scale while protecting Stripe networks, systems, and data from threats Develop, document, and implement strategies, runbooks, and capabilities to support the incident response process Continuously improve security processes and response capabilities by collaborating with security engineers and analysts Coach and mentor individual contributors, enabling career development and championing quality standards within the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum requirements 5+ years experience leading Security Operations or Incident Response teams, including hands-on, technical management experience of security analysts or engineers B. S. or M. S. Computer Science or related field, or equivalent experience in Security Experience recruiting, growing, and leading technical teams, including performance management Excellent written and verbal communication skills, including the ability to develop and deliver operational or incident-related information to leadership Advanced knowledge of data analytics (e. g. logs for first or third party applications, system / data access events), network security, digital forensics, and incident response investigations Experience with Python and SQL, and/or familiarity with other programming languages Familiarity with operating systems, file systems, and memory on macOS, Linux, or Windows Strong understanding of threat actor tactics, techniques, and procedures (TTPs) Preferred qualifications Broad knowledge and experience across the information security domain, including familiarity with endpoint, email, network, identity management, cloud security, vulnerability management, incident response, and threat intelligence. Experience with engineering, data processing and analysis tools Familiarity with network observability, security software, or data engineering solutions (Chronicle, Tines, osquery, Splunk, etc.)", "summaryDescription" : "Security Incident Response Manager at Stripe. Skills: Incident Response Management, Security Operations, Team Leadership, Threat Analysis. Leverage security management experience. Improve incident response capabilities", "postedDate" : "2026-06-16T01:16:18.624", "createdAt" : "2026-06-16T01:16:18.624", "lastUpdated" : "2026-06-16T11:17:32.753", "ingestTimestamp" : "2026-06-16T01:16:18.624", "mongoId" : "6a306fd5f292fd229cfed7df", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Forensic investigation", "Data analysis", "Network security", "System administration", "Leadership", "Incident Response Management", "Security Operations", "Team Leadership", "Threat Analysis", "Security management", "Data analytics", "Digital forensics", "Threat intelligence", "Data processing", "Roadmap planning", "Threat actor tactics", "Threat actor techniques", "Threat actor procedures", "Security incident response", "Chronicle", "Tines", "Osquery", "Splunk" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1546.2828, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305653f292fd229cf27dba", "title" : "Security Engineer II, Security Incident Response Team (SIRT)", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-16T08:11:33.016", "fingerprint" : "0987fca027bd6689942ce9706e1f89c85b280b67309ecc2a54aad3db41923465", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "externalId" : "c8d18061-5e73-4845-8dc5-690328d5af3a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cloud security, Network security, Endpoint security, Vulnerability management, Incident response, SIEM, Forensics, Scripting languages, AWS, Azure, GCP", "professionalSkills" : [ "Problem solving", "Analytical thinking", "Decision making" ], "hardSkillsList" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis" ], "hardSkills" : [ { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" } ], "majorSkills" : "Security Incident Response, Cloud Security, Threat Detection", "majorSkillsList" : [ "Security Incident Response", "Cloud Security", "Threat Detection" ], "coreResponsibilities" : "Respond to security incidents, Investigate security breaches, Analyze security alerts, Perform digital forensics, Develop incident response playbooks, Collaborate with engineering teams, Improve security posture, Stay current with threats", "teamCollaboration" : "Cross-functional teams; Engineering teams", "domainKnowledge" : "Cloud computing; Network protocols; Operating systems; Cyber threats", "domainList" : [ "cloud-computing", "network-protocols", "operating-systems", "cyber-threats" ], "domainSpecificKnowledge" : [ "Cloud computing", "Network protocols", "Operating systems", "Cyber threats" ], "toolProficiency" : [ "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Incident reports; Post-incident reviews", "continuousLearning" : "Stay current with threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Minimize impact of incidents; Reduce incident response time; Enhance security defenses", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in security engineering, Experience with security incident response, Experience with cloud security", "qualificationsPreferred" : "Master's degree in Computer Science or related field, Experience with scripting languages, Experience with SIEM tools, Experience with threat intelligence platforms, Experience with digital forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon is seeking qualified Security Engineers to join our innovative, high energy Information Security team. In this role you will work within the Amazon Security Incident Response Team (SIRT). SIRT Security Engineers respond to security events, conduct analysis of threats such as malware and intrusion attempts, and provide security services to safeguard highly sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. SIRT Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, threat hunting, and threat intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future. - Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk. - Identifying and recommending solutions that improve or expand Amazon’s incident response capabilities, leveraging AI approaches where suitable. - Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. - Evaluating the impact of current security trends, advisories, publications, and academic research to Amazon, coordinating response as necessary across affected teams. - Keeping your knowledge and skills current with the rapidly changing threat landscape. - Participating in a follow-the-sun on-call rotation. A day in the life You will be part of an operational team, which owns and drives outcomes for security issues reported through a variety of mechanisms. When not \"on deck\" for those operational duties, you will be identifying and developing solutions to consistently and efficiently handle issues. You will also work with partner security teams across Amazon to raise our security bar and delight customers. There are also training and travel opportunities due to SIRT being a global team with presence in multiple countries. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "Security Engineer II, Security Incident Response Team (SIRT) at Amazon.com Services LLC. Skills: Security Incident Response, Cloud Security, Threat Detection. Respond to security incidents. Investigate security breaches", "postedDate" : "2026-06-15T22:01:16.090", "createdAt" : "2026-06-15T22:01:16.090", "lastUpdated" : "2026-06-16T08:11:33.016", "ingestTimestamp" : "2026-06-15T22:01:16.090", "mongoId" : "6a305653f292fd229cf27dba", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443978/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident analysis", "Malware analysis", "Digital forensics", "Network traffic analysis", "Log analysis", "Security Incident Response", "Cloud Security", "Threat Detection", "Problem solving", "Analytical thinking", "Decision making", "Cloud computing", "Network protocols", "Operating systems", "Cyber threats", "SIEM tools", "Forensic tools", "Threat intelligence platforms" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1512.9564, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3056c3f292fd229cf2e4e2", "title" : "Senior Security Architect (m/f/d)", "company" : "Isar Aerospace SE", "industry" : "Technology", "salary" : { "min" : 950000.0, "max" : 1350000.0, "currency" : "NOK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Architect in Andenes, Norway, adjusted for senior experience level and the aerospace industry." }, "location" : "Andenes, Nordland, Norway", "locations" : [ "Andenes", "Nordland", "Norway" ], "certifications" : [ "CISSP", "CISM", "OSCP" ], "timestamp" : "2026-06-16T08:01:17.028", "fingerprint" : "d4afaa4d4930740801d776a2213f0ec123b825e62f7fee8b28ff2ba1da3c8cde", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/isaraerospace/jobs/4897729101", "externalId" : "4897729101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Andenes", "state" : "Nordland", "country" : "Norway", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "69.3122989,16.1057085" } ], "locationText" : "Andenes, Nordland, Norway", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Security architecture, Network security, Application security, Cloud security, Identity management, Endpoint security, Adversary emulation, Attack path analysis, Detection engineering, Incident response, Vulnerability management, Threat intelligence, ISO 27001, NIST", "professionalSkills" : [ "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution" ], "hardSkillsList" : [ "Penetration testing", "Security design", "Security operations", "Incident command" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Security design", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident command", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security architecture, Offensive security, Detection engineering, Incident response", "majorSkillsList" : [ "Security architecture", "Offensive security", "Detection engineering", "Incident response" ], "coreResponsibilities" : "Design security architecture, Implement security architecture, Build resilience, Run adversary emulation, Run attack path analysis, Prove controls fire, Prove detections fire, Convert findings into fixes, Convert findings into detections, Convert findings into hardened designs, Develop detection capability, Operationalize detection capability, Tune monitoring, Keep coverage honest, Own technical relationship, Set detection backlog, Set use-case backlog, Hold MSSP to standards, Run MSSP service reviews, Develop incident response plans, Maintain incident response plans, Lead incident handling, Run risk assessments, Run vulnerability assessments, Prioritize gaps, Close gaps, Track emerging threats, Track emerging tactics, Use threat intelligence, Anticipate adversary targeting, Harden systems, Partner with IT teams, Partner with engineering teams, Implement controls, Validate controls, Produce clear documentation, Produce clear standards", "teamCollaboration" : "Cross-functional teams; IT teams; Engineering teams", "projectManagementSkills" : [ "Detection backlog management", "Use-case backlog management", "Incident response planning" ], "domainKnowledge" : "New Space; Space business; Rocket systems; Satellite launch; Low Earth Orbit", "domainList" : [ "new-space", "space-business", "rocket-systems", "satellite-launch", "low-earth-orbit" ], "domainSpecificKnowledge" : [ "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit" ], "toolProficiency" : [ "Azure", "AWS", "CIS Benchmarks" ], "communicationSkills" : "Translate technical risk", "documentationSkills" : "Clear documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Security clearance requirements", "qualificationsBasic" : "10+ years information security, Hands-on depth defending systems, Hands-on depth attacking systems, Build secure architecture, Break secure architecture, Operate across full security stack, Switch context fast, Go deep where problem demands, Design security architecture, Implement security architecture, Detection capability, Incident response capability, Vulnerability management capability, In-depth networking protocols knowledge, In-depth systems architecture knowledge, In-depth core security principles knowledge, In-depth best practices knowledge, High autonomy operation, Take full ownership, Guide others, Excellent communication skills, Excellent collaboration skills, Translate technical risk, Bachelor's degree or equivalent experience, Master's degree or equivalent experience", "qualificationsPreferred" : "Aerospace experience, Defense experience, Regulated environments experience, Safety-critical environments experience, Defensive certifications, Architecture certifications, Offensive certifications, Cloud security depth, Azure security services depth, AWS security services depth, Hardening standards familiarity", "workSiteFlexibility" : "Onsite", "rawDescription" : "Mission Brief You are the guardian and the challenger of our security posture. At Isar Aerospace, the systems that build our rockets are mission critical, and protecting them takes more than good design. It takes someone who will attack their own work to be sure it holds. We are looking for a deeply hands-on Senior Security Architect. You will be in the environment, building and testing our defenses yourself, not directing from the sidelines. You wear two hats: the Defender who designs and operates the controls that keep us safe, and the Adversary who continuously attacks those controls the way a real threat would. You own your work end to end and turn what you find under attack into stronger defenses, sharper detection, and faster response. This is a senior role with one of the broadest mandates on the team. You are the kind of expert who can pick up almost anything we throw at you, from architecture to incident response to offensive testing, and go deep where it matters. A versatile generalist with real depth, not a narrow specialist, and a technical anchor others lean on. Your Role in Our Space Mission: Design the Defense: Lead the design and implementation of security architecture across our systems, networks, and applications, building in resilience from the start. Attack What We Build: Run realistic adversary emulation and attack-path analysis against our own environment, prove whether our controls and detections actually fire, and convert every finding into a fix, a new detection, or a hardened design. Own the Detection: Develop and operationalize our detection and response capability, tune monitoring to separate signal from noise, and keep our coverage honest against how attackers actually operate. Direct the MSSP: Own the technical relationship with our managed security provider. Set the detection and use-case backlog, hold them to escalation and response-quality standards, run service reviews, and make sure we get the protection we pay for. Lead the Response: Develop and maintain incident response plans, and lead the handling of incidents from day-to-day alerts through to high-profile events. Hunt and Reduce Risk: Run risk and vulnerability assessments across business-critical infrastructure, then work with stakeholders to prioritize and close the gaps that matter most. Stay Ahead of the Threat: Track emerging threats and tactics, and use threat intelligence to anticipate how an adversary would target us and harden accordingly. Embed Security with Engineering: Partner with IT and engineering teams to implement and validate controls, and produce clear documentation and standards others can execute against. Qualification Checklist Experience: 10+ years in information security, with hands-on depth across both defending and attacking systems. Dual Mindset: You can both build secure architecture and break it under controlled, agreed scope, and you know how to feed one into the other. Versatile Range: Comfortable operating across the full security stack and switching context fast, from design to detection to active testing, while still going deep where the problem demands it. Security Architecture: Proven experience designing and implementing security architecture across networks, cloud, identity, and endpoints. Operational Depth: Strong capability in detection, incident response, and vulnerability management, not just advisory or paper work. Foundations: In-depth knowledge of networking protocols, systems architecture, and core security principles and best practices. Frameworks: Familiarity with industry standards such as ISO 27001 and NIST. Autonomy: Operates with very high autonomy as an internal expert, taking full ownership of their work and guiding others. Communication: Excellent communication and collaboration skills, able to translate technical risk for a range of audiences. Education: Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field, or the equivalent through relevant certifications and hands-on experience. Bonus Skills Experience in aerospace, defense, or other regulated, safety-critical environments. Relevant certifications: defensive or architecture (e.g., CISSP, CISM) and offensive (e.g., OSCP or equivalent) are both valued. Cloud security depth in a major platform (Azure or AWS) and its native security services. Familiarity with hardening standards (e.g., CIS Benchmarks) applied in production. Benefits Employee Participation Program: Share in our success through our virtual company share program 6 weeks of vacation: Enjoy the days off to relax and recharge Subsidised lunch: Stay energised with delicious, subsidised lunches every day Relocation support: Benefit from our relocation bonus with deductible expenses up to an agreed amount Wellness allowance: Stay healthy and fit with our yearly allowance for wellness activities (e.g., Gym, Massages) Individual learning allowance: Grow your skills with an individual learning budget granted after the probation period Physical and mental well-being: Access via OpenUp the online support from certified psychologists and lifestyle experts at no cost to you and your family And Much More! Discover additional perks and benefits when you join our team. Who we are We are Isar Aerospace and we are at the forefront of New Space building a modern space business to enable faster, better and cheaper access to space. Our mission is to help democratise space and use it for good in order to improve life on Earth now and for the future generations. We are a fast-growing company aiming to provide sustainable and environmentally friendly launch solutions for small and medium-sized satellites and constellations into Low Earth Orbit. The company is privately funded by world-leading technology investors with strong commitment and support and our team is made of driven and talented people with a real passion for space innovation. We're making rockets in a way that hasn't been done before disrupting a traditional industry. If you are up for the challenge, want to work on cutting-edge projects and be part of a team changing the world for better, come, join us and launch your career! Want to find out more about us? Visit www.isaraerospace.com Data Protection We process your personal data for the purpose of managing the recruitment process and assessing your application. For detailed information on how your data is processed, including your rights, please refer to our Privacy Policy. Disclaimer Isar Aerospace SE is an equal-opportunity employer committed to fairness and inclusivity. We do not prioritize any specific religion, gender, nationality, or background. Due to security clearance requirements, affiliations with countries listed under § 13 para. 1 no. 17 SÜG may affect the application process. All qualified applicants are encouraged to apply. We use Metaview to record interview audio so our team can review it later and stay focused during the conversation. We will record interviews only if you opt in. Please note that we will request your consent separately during the interview process. Participation is completely voluntary and will not affect your application in any way. For more information on how we process your personal data, please see our Privacy Policy.", "summaryDescription" : "Senior Security Architect (m/f/d) at Isar Aerospace SE. Skills: Security architecture, Offensive security, Detection engineering, Incident response. Design security architecture. Implement security architecture", "postedDate" : "2026-06-15T23:17:35.898", "createdAt" : "2026-06-15T23:17:35.898", "lastUpdated" : "2026-06-16T08:01:17.028", "ingestTimestamp" : "2026-06-15T23:17:35.898", "mongoId" : "6a3056c3f292fd229cf2e4e2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Security design", "Security operations", "Incident command", "Leadership", "Security architecture", "Offensive security", "Detection engineering", "Incident response", "Security posture", "Risk assessment", "Vulnerability assessment", "Threat analysis", "Use case development", "Service reviews", "Incident handling", "Risk prioritization", "Gap closure", "Threat tracking", "Control validation", "Documentation production", "Standards execution", "Detection backlog management", "Use-case backlog management", "Incident response planning", "New Space", "Space business", "Rocket systems", "Satellite launch", "Low Earth Orbit", "CISSP", "CISM", "OSCP", "Azure", "AWS", "CIS Benchmarks" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1477.6785, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Aerospace", "llmIndustryConfidence" : 0.98 }, { "id" : "6a25145474d8ee00a00bb3b2", "title" : "Senior Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services Japan GK", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "JPY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Tokyo, Japan, adjusted for AWS's size and the technology industry." }, "location" : "Tokyo, JPN", "locations" : [ "Tokyo, JPN" ], "certifications" : [ "GCIH", "GSEC", "GREM", "GCFA", "CISSP" ], "timestamp" : "2026-06-15T08:24:56.602", "fingerprint" : "a57d3db022abec12088d7bb9660b2ed2ff73f018f6b5050988fd19a160c05a1a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "externalId" : "79b6888c-343c-4289-bbab-a95d6a41e1f2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tokyo", "country" : "Japan", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "35.6768601,139.7638947" } ], "locationText" : "Tokyo, Japan", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, C++, AWS, Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM", "professionalSkills" : [ "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations" ], "hardSkillsList" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Programming", "level" : "intermediate" }, { "name" : "Code review", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Command line tools", "level" : "intermediate" }, { "name" : "Security issue identification", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Mitigation planning", "level" : "intermediate" }, { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Attack pattern analysis", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security Incident Response, Automation, AI Feedback Loops, Detection Engineering", "majorSkillsList" : [ "Security Incident Response", "Automation", "AI Feedback Loops", "Detection Engineering" ], "coreResponsibilities" : "Build automation mechanisms, Investigate complex security incidents, Build frameworks for scalable detection, Build frameworks for auto-remediation, Architect AI feedback loops, Respond to threats, Build detection enhancements, Build auto-remediation playbooks, Build AI training pipelines, Lead incident response for customers, Scope blast radius, Coordinate containment, Guide remediation, Walk customers through compromises, Build pipelines to capture investigation patterns, Translate patterns into detection rules, Translate patterns into auto-remediation, Measure impact on investigation volume, Measure impact on investigation accuracy, Build mechanisms for engineer contribution, Build AI feedback loops, Improve autonomous investigation accuracy, Define and track metrics, Measure automation effectiveness, Reduce false positives, Increase auto-resolution coverage, Track engineer contribution rates, Mentor junior engineers, Structure artifacts as reusable automation inputs, Participate in on-call rotations, Review automation dashboard metrics, Investigate new attack patterns, Analyze malware behavior, Extract indicators, Build detection rules, Step into high-severity incidents, Analyze logs, Correlate indicators across accounts, Codify attack chains, Improve AI agent performance, Review and approve detection rule contributions", "teamCollaboration" : "Cross-functional teams; Leadership collaboration", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Attack patterns; Supply chain attacks; Cryptomining; Cloud-native architecture; Security operations", "domainList" : [ "attack-patterns", "supply-chain-attacks", "cryptomining", "cloud-native-architecture", "security-operations" ], "domainSpecificKnowledge" : [ "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "Security operations" ], "toolProficiency" : [ "AWS" ], "communicationSkills" : "Customer calls; Executive presentations", "continuousLearning" : "One-on-one coaching", "innovationCreativity" : "Prototype development", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data-driven decision making", "specialRequirements" : "On-call rotation, 24/7 follow-the-sun operating model", "outcomesObjectives" : "Reduce false positives; Increase auto-resolution coverage; Improve autonomous investigation accuracy", "qualificationsBasic" : "5+ years scripting, programming, or security code review, Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, Speak, write, and read fluently in Japanese, 5+ years troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans, Experience in industry-based security vulnerabilities identification, attack patterns, and remediation, Experience as a mentor, tech lead, or leading an engineering team", "qualificationsPreferred" : "Master's degree in Computer Science, Information Security, or a related field, Experience in automation or monitoring frameworks, deployment or development, Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent), Experience with AWS services in a security operations context", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for a Senior Security Engineer who builds the automation mechanisms that scale security response. You will investigate complex security incidents hands-on, build the frameworks that turn investigation expertise into scalable detection and auto-remediation, and architect the AI feedback loops that make the service smarter with every investigation. The AWS Security Incident Response team provides 24/7 security response through a follow-the-sun operating model. The service combines automated triage workflows, AI-powered investigation agents, and human security analysts to respond to threats across customer AWS environments at massive scale. Our AI systems autonomously resolve over 90% of routine investigations within minutes. The next challenge is building the mechanisms that accelerate this further — enabling every engineer on the team to contribute to detection and automation quality from their investigation work. Your deep understanding of how attacks work — from initial exploitation through lateral movement to data exfiltration — is what makes your automation effective. You will build detection enhancements, auto-remediation playbooks, and AI training pipelines that catch real threats, not just generate noise. We treat every investigation as a confirmed security incident until the data proves otherwise. Native Japanese language skills and fluent English language skills in speaking, reading, and writing. Key job responsibilities - Investigate and respond to complex security incidents hands-on — applying malware analysis, forensic analysis, or attribution skills to credential compromise, data exfiltration, supply chain attacks, and cryptomining - Lead incident response for customers during high-severity events: scope blast radius, coordinate containment, guide remediation, and get on calls with customers to walk them through what was compromised and the specific steps to contain the threat - Own the response-to-automation flywheel: build pipelines that capture investigation patterns (including Trust & Safety abuse cases), translate them into detection rules and auto-remediation, and measure impact on investigation volume and accuracy - Build mechanisms that enable every engineer on the team to contribute detection rules, automation playbooks, and AI training data — and build the AI feedback loops that ensure human corrections systematically improve autonomous investigation accuracy - Define and track metrics that measure automation effectiveness: false positive reduction, auto-resolution coverage, and engineer contribution rates to the pipeline - Mentor junior engineers on investigation methodology and structuring artifacts as reusable automation inputs - Participate in on-call rotations as part of the 24/7 follow-the-sun operating model, including weekends A day in the life - Review automation dashboard metrics: AI agent resolution rates, false positive trends, and engineer-submitted detection rules going live - Investigate new attack patterns the AI is struggling with — analyze malware behavior, extract indicators, and build detection rules that catch the pattern without generating false positives - Step into high-severity incidents directly — analyzing logs, correlating indicators across accounts, scoping blast radius, and getting on a call with the customer to guide containment - Codify attack chains from investigations into detection rules and AI agent improvements so the system catches the pattern autonomously next time - Review and approve detection rule contributions from junior engineers using your contribution framework About the team The AWS Security Incident Response team provides 24/7 threat monitoring, investigation, and response for customer AWS environments. The team is driving a strategic transformation — raising operational standards, building AI-powered investigation capabilities, and expanding coverage. We respond to customer requests within minutes. Zero queue tolerance is the operating standard. We value engineers who solve root causes over those who close tickets. Senior engineers enjoy close collaboration with leadership, one-on-one coaching, and the opportunity to shape the future of security operations at AWS scale. Basic Qualifications: - 5+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - Speak, write, and read fluently in Japanese - 5+ years of non-internship experience in troubleshooting systems issues, analyzing logs, automating complex tasks using command line tools, and identifying security issues, risks, and developing mitigation plans - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques; including experience as a mentor, tech lead, or leading an engineering team Preferred Qualifications: - Master's degree in Computer Science, Information Security, or a related field - Experience in automation or monitoring frameworks, deployment or development - Knowledge of compliance and security standards across the enterprise IT landscape - * Information security professional certification (GCIH, GSEC, GREM, GCFA, CISSP, or equivalent) - * Experience with AWS services in a security operations context (Amazon GuardDuty, AWS CloudTrail, AWS Security Hub, AWS IAM) Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Engineer, AWS Security Incident Response at Amazon Web Services Japan GK. Skills: Security Incident Response, Automation, AI Feedback Loops, Detection Engineering. Build automation mechanisms. Investigate complex security incidents", "postedDate" : "2026-06-13T18:41:50.371", "createdAt" : "2026-06-13T18:41:50.371", "lastUpdated" : "2026-06-15T08:24:56.602", "ingestTimestamp" : "2026-06-13T18:41:50.371", "mongoId" : "6a25145474d8ee00a00bb3b2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441597/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Scripting", "Programming", "Code review", "Log analysis", "Automation", "Command line tools", "Security issue identification", "Risk assessment", "Mitigation planning", "Vulnerability identification", "Attack pattern analysis", "Remediation", "Mentoring", "Security Incident Response", "AI Feedback Loops", "Detection Engineering", "Malware analysis", "Forensic analysis", "Attribution skills", "System design", "Automation development", "Detection engineering", "Incident response", "Threat monitoring", "Security operations", "Roadmap planning", "Attack patterns", "Supply chain attacks", "Cryptomining", "Cloud-native architecture", "GCIH", "GSEC", "GREM", "GCFA", "CISSP", "AWS" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1469.1575, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "68c2e412f8b1b0376634c220", "title" : "Security Engineer, AWS Global Services", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Dallas, Texas, USA", "locations" : [ "Dallas, Texas, USA" ], "timestamp" : "2026-06-16T02:15:50.236", "fingerprint" : "3392e875c3aecdd97b186d51b13a88b5b9dcb3ad1bd3555c75bc5b3bde3b9439", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3071644/apply", "externalId" : "4623f239-96aa-4999-aa47-0ce9ce373481", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dallas", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7762719,-96.7968559" } ], "locationText" : "Dallas, Texas, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Go, AWS, Cloud security, Security automation, Incident response, Threat modeling, Security architecture, CI/CD, Container security, Infrastructure as code", "professionalSkills" : [ "System design", "Risk assessment", "Security analysis" ], "hardSkillsList" : [ "Security engineering", "Cloud security controls", "Security automation scripting" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Security engineering, Incident response", "majorSkillsList" : [ "Cloud security", "Security engineering", "Incident response" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security automation, Respond to security incidents, Conduct threat modeling exercises, Develop security architecture designs, Collaborate with engineering teams, Improve security posture, Identify and mitigate security risks, Stay current with security threats", "teamCollaboration" : "Engineering teams; Cross-functional teams", "domainKnowledge" : "Cloud security; AWS services; Security best practices; Threat landscape", "domainList" : [ "cloud-security", "aws-services", "security-best-practices", "threat-landscape" ], "domainSpecificKnowledge" : [ "Cloud security", "AWS services", "Security best practices", "Threat landscape" ], "toolProficiency" : [ "AWS security services", "Security tooling" ], "documentationSkills" : "Technical documentation", "continuousLearning" : "Stay current with security threats", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Improve security posture; Mitigate security risks", "qualificationsBasic" : "Bachelor's degree or equivalent practical experience, 5+ years of experience in software development, 3+ years of experience in security engineering, Experience with cloud security controls, Experience with security automation, Experience with incident response, Experience with threat modeling, Experience with security architecture", "qualificationsPreferred" : "Master's degree or PhD in Computer Science or related field, Experience with AWS security services, Experience with security tooling, Experience with programming languages like Python or Go, Experience with CI/CD pipelines, Experience with container security, Experience with infrastructure as code", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You’ll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud. Do you want to work on planetary scale security solutions in the cloud? Are you skilled at performing Incident Response activities and helping customers build threat detection and incident response capabilities using highly scalable computing architectures? Are you excited to help customers automate security operations giving them unprecedented capability and agility? Do you enjoy working on fast-paced complex projects focused on game changing business outcomes for customers globally? AWS Security Incident Response Service is seeking a motivated professional who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams take the right actions in the right timeframes to mitigate risks. As a member of the AWS Customer Incident Response Team (CIRT) in the AWS Global Services Security Organization you will have the opportunity to pioneer technically excellent security solutions supporting customer initiatives that are meaningful to their business. As a member of AWS CIRT, you will be able to delight customers with leading edge security incident response via AWS Security Incident Response service and other escalation mechanisms. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. Building on those experiences you’ll collaborate with AWS service teams on new features, innovate with new technologies, and explore new challenges. Key job responsibilities • Perform and oversee incident response operations • Become a deep technical resource that earns the trust of customer stakeholders before, during, and after a security event. • Independently contribute to teams that include Amazonians, partners, and customers to build and deploy threat detection and incident response capabilities. • Design, build, and deploy solutions to automate security operations and incident response on AWS. • Independently contribute to internal builder projects to develop new consulting engagement models and capabilities for customers. • Develop high-quality content, such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work that we deliver. • Innovate on behalf of customers by translating your thoughts into action-oriented results. • Mentor and invest in our employees, partners, and customers to raise the bar for our customers. • Periodic on-call required. A day in the life As a Security Engineer on the proactive side of AWS CIRT, responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team Proactive side of AWS CIRT provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. AWS CIRT enhances existing security capabilities by supporting security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Completed Bachelor’s Degree in Computer Science, or equivalent experience - Demonstrated experience in a technical field and understanding of security concepts and common security threats in host operating systems (Linux/ Windows), Network security concepts, log analysis and investigation. - Familiarity with at least one functional scripting language (e.g. Python, JavaScript, shell scripting). Preferred Qualifications: - Knowledge of common system security vulnerabilities and remediation techniques. - Understanding of the tools, tactics, and techniques used by threat actors during security events. - Familiarity/experience with AWS services and security concepts. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, AWS Global Services at Amazon Web Services, Inc.. Skills: Cloud security, Security engineering, Incident response. Design and implement security controls. Develop and maintain security automation", "postedDate" : "2026-06-14T19:43:16.913", "createdAt" : "2026-06-14T19:43:16.913", "lastUpdated" : "2026-06-16T02:15:50.236", "ingestTimestamp" : "2026-06-14T19:43:16.913", "mongoId" : "68c2e412f8b1b0376634c220", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3071644/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Cloud security controls", "Security automation scripting", "Cloud security", "Incident response", "System design", "Risk assessment", "Security analysis", "AWS services", "Security best practices", "Threat landscape", "AWS security services", "Security tooling" ], "skillCount" : 13, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1457.1666, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a09f21e1663d49372a845c6", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon Web Services, Inc.", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:06:55.041", "fingerprint" : "904f0aa67a81b6232f23b2103c3a0821861d5aeddf314d79f37eabe4d6677bc4", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "externalId" : "7b963d63-e85c-488e-8ac7-ba83a3f3d74f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI, Amazon Bedrock", "professionalSkills" : [ "Security response", "Software development", "Automation" ], "hardSkillsList" : [ "Software development", "System design", "Automation" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software processes, Design intelligent automations, Implement intelligent automations, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with global teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Leverage AWS services, Create scalable solutions, Enhance security operations, Deliver delightful software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS security; Corporate network security; Security response", "domainList" : [ "aws-security", "corporate-network-security", "security-response" ], "domainSpecificKnowledge" : [ "AWS security", "Corporate network security", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Amazon Bedrock, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon Web Services, Inc.. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T16:08:57.360", "createdAt" : "2026-06-13T16:08:57.360", "lastUpdated" : "2026-06-15T06:06:55.041", "ingestTimestamp" : "2026-06-13T16:08:57.360", "mongoId" : "6a09f21e1663d49372a845c6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10410517/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Automation", "Security software", "AWS services", "Security response", "AWS security", "Corporate network security" ], "skillCount" : 8, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1440.9794, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69d140072beec4dd3ddbe417", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:05:22.074", "fingerprint" : "e2894a4e26f433c9bfa4feb2c29c9e1333a0d467b9baa905cfe0e71496e2c170", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10383075/apply", "externalId" : "6879b3a1-ef52-4a67-b131-e0bccf3540b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software, Automation, AWS services", "majorSkillsList" : [ "Security software", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvement opportunities, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network", "domainList" : [ "aws-security", "corporate-network" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Respond to threats; Respond to vulnerabilities", "outcomesObjectives" : "Strengthen security posture; Increase engineer productivity; Deliver efficiency gains; Deliver productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T13:03:49.850", "createdAt" : "2026-06-13T13:03:49.850", "lastUpdated" : "2026-06-15T06:05:22.074", "ingestTimestamp" : "2026-06-13T13:03:49.850", "mongoId" : "69d140072beec4dd3ddbe417", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10383075/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1416.3083, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c751574d8ee00a09360f7", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-16T03:29:01.550", "fingerprint" : "a9b58b622fae2a5e015d888ceb1430e0f4c7af9bae19294b10f2e0362b229c6e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "SIEM, Data lakes, EDR, Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management" ], "hardSkillsList" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident investigation", "level" : "intermediate" }, { "name" : "Incident containment", "level" : "intermediate" }, { "name" : "Incident remediation", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response planning", "level" : "intermediate" }, { "name" : "On-call management", "level" : "intermediate" }, { "name" : "Escalation paths", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Adversary tradecraft", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire for functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Ensure critical telemetry is available, Ensure critical telemetry is reliable, Ensure critical telemetry is actionable, Embed detection and response by design, Build a security program, Use Serval's agents for security problems, Use Serval's agents for security-operations problems", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure; Work with stakeholders", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments; AI-native automation", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments", "ai-native-automation" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "communicationSkills" : "Written communication; Verbal communication; Incident communication", "innovationCreativity" : "Solve frontier security problems; Solve frontier security-operations problems", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Scale detection and response operations; Improve response quality; Improve response speed", "qualificationsBasic" : "10+ years in cybersecurity, Deep expertise in detection engineering, Deep expertise in incident response, Deep expertise in security operations, Deep experience building detection and response teams, Deep experience building instrumentation/observability teams, Deep experience building threat intelligence teams, Stellar leadership skills, Demonstrated history of driving improvements, Exceptional written communication skills, Exceptional verbal communication skills, Remain calm under pressure, Effectively run command of security incidents, Deep expertise in modern observability stacks, Deep expertise in SIEM, Deep expertise in data lakes, Deep expertise in EDR, Deep expertise in cloud telemetry, Deep expertise in logging, Deep expertise in detection primitives, Understand modern adversary tradecraft (TTPs), Demonstrated experience translating TTPs into detection strategies, Demonstrated experience translating TTPs into response actions, Mission-oriented, Unimpeachable integrity, Passionate about detecting and responding to adversaries", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T19:27:55.217", "lastUpdated" : "2026-06-16T03:29:01.550", "ingestTimestamp" : "2026-06-14T19:27:55.217", "mongoId" : "6a2c751574d8ee00a09360f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Incident investigation", "Incident containment", "Incident remediation", "Threat detection", "Response planning", "On-call management", "Escalation paths", "Tabletop exercises", "Telemetry analysis", "Adversary tradecraft", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Instrumentation", "Observability", "Threat intelligence", "Program management", "Process improvement", "People management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments", "AI-native automation" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1322.7853, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6b2074d8ee00a0910568", "title" : "Corporate Security Engineer", "company" : "Xurrent", "industry" : "SaaS", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Corporate Security Engineer in Bangalore, India, adjusted for the SaaS industry and company size." }, "location" : "Bangalore, Karnataka, India", "locations" : [ "Bangalore", "Karnataka", "India" ], "certifications" : [ "CISSP", "CISM" ], "timestamp" : "2026-06-15T07:27:12.866", "fingerprint" : "da41361db96672ea5fbb082a64bec842ea55bf911fc3f7f5ed2008f90f5ac33c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.xurrent.com/careers/?gh_jid=5160905007", "externalId" : "5160905007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, Karnataka, India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "Cloud security, SaaS", "professionalSkills" : [ "Program management", "Risk assessment", "Vendor risk management" ], "hardSkillsList" : [ "Incident response", "Vulnerability management", "Business continuity", "Disaster recovery", "Information security audits", "Security awareness training", "Phishing simulation" ], "softSkillsList" : [ "Curious" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Business continuity", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Information security audits", "level" : "intermediate" }, { "name" : "Security awareness training", "level" : "intermediate" }, { "name" : "Phishing simulation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Curious" } ], "majorSkills" : "Security engineering, Program management, Compliance", "majorSkillsList" : [ "Security engineering", "Program management", "Compliance" ], "coreResponsibilities" : "Lead incident response process, Support vulnerability management process, Manage detection tools, Triage vulnerabilities, Provide guidance on remediation, Lead business continuity efforts, Lead disaster recovery efforts, Gather technical evidence for audits, Monitor security inboxes, Support responsible disclosure program, Develop vendor risk management program, Own corporate security policies, Own security awareness training, Run internal phishing simulations, Coordinate with audit firms, Coordinate with consultants, Coordinate with development teams, Stay informed about emerging threats, Stay informed about vulnerabilities, Define long-term vision for security, Define long-term vision for compliance, Implement long-term strategy for security, Implement long-term strategy for compliance, Implement roadmap for security, Implement roadmap for compliance, Communicate security risks to leadership, Communicate recommendations to leadership", "teamCollaboration" : "Cross-functional teams; Executive leadership", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Business security; Cloud security; SaaS platforms; ISO 27001; GDPR; SOC2; Security standards; Compliance standards", "domainList" : [ "business-security", "cloud-security", "saas-platforms", "iso-27001", "gdpr", "soc2", "security-standards", "compliance-standards" ], "domainSpecificKnowledge" : [ "Business security", "Cloud security", "SaaS platforms", "ISO 27001", "GDPR", "SOC2", "Security standards", "Compliance standards" ], "communicationSkills" : "Risk communication", "qualificationsBasic" : "Bachelor's in Computer Science, Bachelor's in Information Security, Background in security engineering, Background in program management, In-depth knowledge of business security, In-depth knowledge of cloud security, Familiarity with ISO 27001, Familiarity with GDPR, Familiarity with SOC2", "qualificationsPreferred" : "Advanced degrees in cybersecurity, Certifications in cybersecurity", "rawDescription" : "Join Xurrent, where our AI-driven Operations Management platform powers the way modern enterprises manage and evolve their service delivery. We’re looking for curious, driven individuals who want to make a real impact and grow with a company leading the next wave of service and operations innovation. Mission of the Position: The Corporate Security Engineer will lead the security program to ensure the confidentiality, integrity, and availability of the Xurrent company and customer data. The role requires expertise in security, compliance, and program management, and a firm understanding of compliance and security standards. Responsibilities: Take full ownership of incident response process including annual tabletop exercises Support the vulnerability management process including management of detection tools, assisting in the triage process, and providing guidance to internal teams on remediation of detected vulnerabilities Lead the company’s business continuity and disaster recovery efforts Gather technical evidence for annual information security audits Monitor security inboxes and support responsible disclosure program Risk assessment development and communication to stakeholders Third party (vendor) risk management program development and ownership Ownership of corporate security policies Ownership of security awareness training and internal phishing simulation campaigns Coordinate with audit firms, consultants, and development teams to provide the information required to complete security review and audits in a timely manner. Stay informed about emerging threats and vulnerabilities. Define and implement the long-term vision, strategy, and roadmap for security and compliance aligned with company objectives. Communicate security risks and recommendations to executive leadership. Requirements: In-depth knowledge of business and cloud security, particularly in a SaaS environment. Strong background in security engineering and program management. Familiarity with compliance requirements relevant to SaaS platforms (ISO 27001, GDPR, SOC2). Excellent communication and interpersonal skills. Bachelor’s degree in Computer Science, Information Security, or related field. Advanced degrees or certifications in cybersecurity (for example, CISSP, CISM) preferred. Important Notice: Beware of Recruitment Scams We have been made aware of fraudulent job offers being circulated under Xurrent’s name. Please note that only communications from verified recruiters using emails ending in \"@xurrent.com\" are official. If you receive unsolicited job offers, interview requests, or messages that seem suspicious, please exercise caution and do not share personal information or make any payments. Please note that Xurrent does not issue job offers without an application and interview process. Only candidates who successfully complete the interview process may receive an offer letter. We're actively addressing this and appreciate your help in staying alert and helping us protect our community. Statement of Equal Opportunity Xurrent is an equal opportunity employer. We’re committed to creating an inclusive environment for all our employees, where different backgrounds and perspectives are valued and encouraged - regardless of race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or on the basis of any protected group status under any applicable law.", "summaryDescription" : "Corporate Security Engineer at Xurrent. Skills: Security engineering, Program management, Compliance. Lead incident response process. Support vulnerability management process", "postedDate" : "2026-06-14T02:48:47.504", "createdAt" : "2026-06-14T02:48:47.504", "lastUpdated" : "2026-06-15T07:27:12.866", "ingestTimestamp" : "2026-06-14T02:48:47.504", "mongoId" : "6a2c6b2074d8ee00a0910568", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Vulnerability management", "Business continuity", "Disaster recovery", "Information security audits", "Security awareness training", "Phishing simulation", "Curious", "Security engineering", "Program management", "Compliance", "Risk assessment", "Vendor risk management", "Business security", "Cloud security", "SaaS platforms", "ISO 27001", "GDPR", "SOC2", "Security standards", "Compliance standards", "CISSP", "CISM" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 1322.6432, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.95 }, { "id" : "69d5e4972beec4dd3d931a94", "title" : "Security Software Dev Engineer II, AWS Security Corporate Response", "company" : "Amazon.com Services LLC", "industry" : "Software Development, amazon security", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:59:48.176", "fingerprint" : "0ec424e9d2b35a133660b95692851a41677cd191ce06dcc34f0740d1755687ea", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10384824/apply", "externalId" : "07995b8f-98eb-495e-8b78-1e1267149e43", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Gen AI", "professionalSkills" : [ "Security response", "Automation development", "Tooling improvements", "Security operations" ], "hardSkillsList" : [ "Software development", "System design", "Reliability", "Scaling" ], "hardSkills" : [ { "name" : "Software development", "level" : "intermediate" }, { "name" : "System design", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "Scaling", "level" : "intermediate" } ], "majorSkills" : "Security software development, Automation, AWS services", "majorSkillsList" : [ "Security software development", "Automation", "AWS services" ], "coreResponsibilities" : "Drive operational excellence, Design software processes, Implement software procedures, Streamline security response workflows, Build agentic automations, Empower security engineers, Collaborate with security teams, Identify automation opportunities, Identify tooling improvements, Leverage modern technologies, Create scalable solutions, Enhance security operations, Deliver software", "teamCollaboration" : "Global security teams", "domainKnowledge" : "AWS Security; Corporate network environment; Security response", "domainList" : [ "aws-security", "corporate-network-environment", "security-response" ], "domainSpecificKnowledge" : [ "AWS Security", "Corporate network environment", "Security response" ], "innovationCreativity" : "Develop innovative automations", "problemSolvingSkills" : "Troubleshoot security issues", "outcomesObjectives" : "Strengthen security posture; Impact engineer productivity; Enhance productivity gains", "qualificationsBasic" : "3+ years software development experience, 2+ years system design experience, Experience programming one language, Experience programming Gen AI platform", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Join us in developing and scaling security solutions that protect Amazon's global operations. As a Security Software Development Engineer, you'll create innovative automations and tools that transform how our security teams respond to threats and vulnerabilities. Your work will directly impact the productivity of security engineers worldwide and strengthen the security posture of AWS and for our customers. Key job responsibilities • Drive operational excellence by designing and implementing software processes, procedures, and intelligent automations that streamline security response workflows • Build agentic automations that empower security engineers to work more efficiently and effectively • Collaborate with global security teams to identify high-impact opportunities for automation and tooling improvements • Leverage modern technologies and AWS services to create scalable solutions that enhance security operations • Deliver software that delights users with measurable efficiency and productivity gains About the team AWS Security Corporate Response (CorpSec) protects the corporate network environment that enables all Amazon employees to innovate securely for our customers. We respond to security issues across the corporate network with speed and precision, ensuring the world's largest cloud provider maintains the highest security standards. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences with amazing outcomes, don’t let it stop you from applying. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language - Experience programming with Amazon Bedrock or another Gen AI platform. Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Security Software Dev Engineer II, AWS Security Corporate Response at Amazon.com Services LLC. Skills: Security software development, Automation, AWS services. Drive operational excellence. Design software processes", "postedDate" : "2026-06-13T02:52:31.356", "createdAt" : "2026-06-13T02:52:31.356", "lastUpdated" : "2026-06-15T01:59:48.176", "ingestTimestamp" : "2026-06-13T02:52:31.356", "mongoId" : "69d5e4972beec4dd3d931a94", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10384824/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software development", "System design", "Reliability", "Scaling", "Security software development", "Automation", "AWS services", "Security response", "Automation development", "Tooling improvements", "Security operations", "AWS Security", "Corporate network environment" ], "skillCount" : 13, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1321.784, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69e104402beec4dd3def2577", "title" : "Security Engineer, AWS Security Incident Response", "company" : "Amazon Web Services", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Engineer in Singapore, adjusted for the technology industry and a large company size." }, "location" : "SGP", "locations" : [ "SGP" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:22:21.224", "fingerprint" : "40bb89751ca82072e1830c381dd327c4aca04b10b3800fda172ae2e11fc89203", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386227/apply", "externalId" : "bf3e3eb2-1460-4e11-bafb-1fe3f4b46363", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Amazon GuardDuty, CrowdStrike Falcon, Wiz Defend", "professionalSkills" : [ "Security response", "Threat detection", "Incident response", "Security automation", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal" ], "hardSkillsList" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities" ], "softSkillsList" : [ "Learning new concepts" ], "hardSkills" : [ { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" }, { "name" : "Incident reporting", "level" : "intermediate" }, { "name" : "Auto-remediation capabilities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Learning new concepts" } ], "majorSkills" : "Incident response, Threat detection, Security automation", "majorSkillsList" : [ "Incident response", "Threat detection", "Security automation" ], "coreResponsibilities" : "Respond to threat findings, Identify security threats, Evaluate security threats, Communicate security threats, Propose remediation for security issues, Contribute to security automation development, Contribute to security posture improvements, Track effectiveness of detective controls, Report effectiveness of detective controls, Develop processes for response effectiveness, Develop policies for response effectiveness, Monitor networks for potential threats, Monitor systems for potential threats, Perform triage for security alerts, Document suspicious activity, Report security issues, Perform threat detection, Perform incident response, Detect cyber threats, Mitigate cyber threats, Protect AWS Customers, Learn new technologies, Learn new procedures", "teamCollaboration" : "Work alongside security engineers; Work with partner teams", "domainKnowledge" : "AWS Security; Incident response; Threat monitoring; Detective controls; Protective controls; Attack techniques; Cyber threats", "domainList" : [ "aws-security", "incident-response", "threat-monitoring", "detective-controls", "protective-controls", "attack-techniques", "cyber-threats" ], "domainSpecificKnowledge" : [ "AWS Security", "Incident response", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats" ], "toolProficiency" : [ "CrowdStrike Falcon", "Wiz Defend" ], "communicationSkills" : "Explain technical concepts", "documentationSkills" : "Document suspicious activity", "continuousLearning" : "Learning new concepts; Learning new technologies; Learning new procedures", "problemSolvingSkills" : "Work through ambiguity; Identify suspicious activity", "specialRequirements" : "On-call support, Periodic on-call responsibilities, On-call responsibilities including weekends", "outcomesObjectives" : "Keep customers secure; Increase security response effectiveness; Minimize disruption to customer workloads", "qualificationsBasic" : "Bachelor's degree in Engineering, Experience with web protocols, Experience with common security attacks, Experience with remediation, Knowledge of system, Knowledge of network, Knowledge of OS, Experience solving problems by writing code, Experience solving problems with scripts", "qualificationsPreferred" : "Experience with AWS services, Experience with other cloud offerings, Experience triaging security alerts, Front-line analysis experience, Escalation experience, GCIH certification, GSEC certification, Security+ certification", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Incident Response is looking for technical Security Engineers that are passionate about learning new concepts and work well within a team environment to keep customers secure. We value engineers that can work through ambiguity to identify suspicious activity, lead security response, and can explain technical security concepts to non-technical audiences. Key job responsibilities * Respond to threat findings that indicate unauthorized activity has occurred * Identify, evaluate and communicate security threats, risks and vulnerabilities, and propose recommended remediation for security issues. * Contribute to the development of security automation and security posture improvements. * Track and report on the effectiveness of AWS detective controls such as Amazon GuardDuty and partner products such as CrowdStrike Falcon or Wiz Defend * Develop processes and policies to increase security response effectiveness. * On-call support: This role requires periodic on-call responsibilities including weekends. A day in the life As a Security Engineer in AWS Security Incident Response, your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team AWS Security Incident Response provides 24/7 threat monitoring, investigation, and response across for customer’s AWS environments. The service enhances existing security capabilities by providing security monitoring for all native AWS services and supports vendor agnostic detective and protective controls to provide holistic security controls for customers. This is done by leveraging data on common attack techniques to enhance detective controls and incident response, then building auto-remediation capabilities to minimize disruption to customer workloads. When a security event does happen, you will be there provide guidance. Basic Qualifications: - Bachelor's degree in Engineering, Computer Science, or a related field - Experience with web protocols, common security attacks, and remediation (non-internship) - Knowledge of system, network and OS - Experience solving basic problems by writing code or scripts with some assistance Preferred Qualifications: - Experience with AWS services or other cloud offerings - Experience triaging security alerts, front-line analysis, and escalation - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer, AWS Security Incident Response at Amazon Web Services. Skills: Incident response, Threat detection, Security automation. Respond to threat findings. Identify security threats", "postedDate" : "2026-06-13T04:14:17.343", "createdAt" : "2026-06-13T04:14:17.343", "lastUpdated" : "2026-06-15T02:22:21.224", "ingestTimestamp" : "2026-06-13T04:14:17.343", "mongoId" : "69e104402beec4dd3def2577", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386227/apply", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Threat analysis", "Security monitoring", "Incident documentation", "Incident reporting", "Auto-remediation capabilities", "Learning new concepts", "Incident response", "Threat detection", "Security automation", "Security response", "Security posture improvement", "Risk assessment", "Vulnerability assessment", "Remediation proposal", "AWS Security", "Threat monitoring", "Detective controls", "Protective controls", "Attack techniques", "Cyber threats", "GCIH", "GSEC", "Security+", "CrowdStrike Falcon", "Wiz Defend" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1298.5571, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a305640f292fd229cf264ed", "title" : "Cloud Security Engineer", "company" : "Delivery Hero", "industry" : "Internet", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cloud Security Engineer in Barcelona, Spain, adjusted for the technology industry and company size." }, "location" : "Barcelona, Spain", "locations" : [ "Barcelona", "Spain" ], "certifications" : [ "CISSP-ISSAP", "AWS Certified Security - Specialty" ], "timestamp" : "2026-06-16T08:05:04.365", "fingerprint" : "a3a7a4141832bbc3dd02a36aefabdec4959bb664156bbacb6efb2302b1f4cbab", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/DeliveryHero/744000132192620-cloud-security-engineer-", "externalId" : "744000132192620", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Barcelona", "country" : "Spain", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "41.3825802,2.1770730" } ], "locationText" : "Barcelona, Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "AWS, GCP, Kubernetes, Python, Golang, Terraform, AWS CloudTrail, AWS Config, AWS Inspector", "professionalSkills" : [ "Policy as code", "Infrastructure as code", "Incident response", "Operational security" ], "hardSkillsList" : [ "Log source analysis", "Security policy creation", "Security standards creation", "Security procedures creation", "Security guidelines creation" ], "softSkillsList" : [ "Interpersonal skills", "Relationship building" ], "hardSkills" : [ { "name" : "Log source analysis", "level" : "intermediate" }, { "name" : "Security policy creation", "level" : "intermediate" }, { "name" : "Security standards creation", "level" : "intermediate" }, { "name" : "Security procedures creation", "level" : "intermediate" }, { "name" : "Security guidelines creation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Interpersonal skills" }, { "name" : "Relationship building" } ], "majorSkills" : "Cloud Security, AWS, GCP, Terraform", "majorSkillsList" : [ "Cloud Security", "AWS", "GCP", "Terraform" ], "coreResponsibilities" : "Design internal solutions, Build internal solutions, Identify compliance failures, Remedy compliance failures, Identify security failures, Remedy security failures, Develop policy as code, Develop templates, Develop modules, Implement secure patterns, Enforce secure patterns, Implement secure guidance, Enforce secure guidance, Respond to alerts, Participate in incidence response, Participate in on-call response, Analyze log sources, Understand log sources, Collaborate with teams, Consult on improvements, Respond to incidents, Ensure cloud security pipelines operational, Ensure cloud infrastructure operational, Help create security policies, Help create security standards, Help create security procedures, Help create security guidelines", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "GDPR security; GDPR privacy; NIST CSF; ISO 27001", "domainList" : [ "gdpr-security", "gdpr-privacy", "nist-csf", "iso-27001" ], "domainSpecificKnowledge" : [ "GDPR security", "GDPR privacy", "NIST CSF", "ISO 27001" ], "toolProficiency" : [ "AWS CloudTrail", "AWS Config", "AWS Inspector" ], "communicationSkills" : "Written communication; Verbal communication", "specialRequirements" : "On-call response", "qualificationsBasic" : "Operational experience with AWS, Operational experience with GCP, Proficiency in Python or Golang, Operational experience with Terraform, Excellent written skills, Excellent communication skills, Excellent interpersonal skills, Excellent relationship building skills", "qualificationsPreferred" : "Operational experience securing Kubernetes, CISSP-ISSAP, AWS Certified Security - Specialty, Knowledge of GDPR security requirements, Knowledge of GDPR privacy requirements, Knowledge of NIST CSF, Knowledge of ISO 27001", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Glovo is part of the Delivery Hero Group, the world’s pioneering local delivery platform, our mission is to deliver an amazing experience—fast, easy, and to your door. We operate in around 65 countries worldwide. Headquartered in Berlin, Germany. Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. YOUR MISSION Glovo’s success and constant growth is introducing new challenges in securing our assets. We are looking for a Cloud Security Engineer to join our team and play a critical role in safeguarding our digital infrastructure and protecting against potential threats. THE JOURNEY * Design and build internal solutions to identify and remedy compliance and security failures. * Develop policy as code, templates and modules to implement and enforce secure patterns and guidance * Respond to alerts and participate in the overall incidence response and on-call response * Experience with analyzing and understanding the log sources * Collaborate with cross-functional teams to consult on improvements to the operational security requirements vis-a-vis * Respond to detected incidents in the cloud environment and ensure that all cloud security pipelines and infrastructure are operational * Help create security policies, standards, procedures, and guidelines for engineers to consume ## Qualifications WHAT YOU WILL BRING TO THE RIDE * Operational experience with AWS, GCP * Operational experience securing Kubernetes is an extra plus * Proficiency in at least one programming language such as Python or Golang * Operational experience with infrastructure as a code: Terraform * Excellent written and communications skills, as well as strong interpersonal and relationship building skills; * Proven team player, collaborating well with others to tackle problems in a team-focused dynamic * Familiarity with cloud-native security platforms and tools like AWS CloudTrail, AWS Config, AWS Inspector, etc.) Nice-to-haves: * CISSP-ISSAP, AWS Certified Security - Specialty or similar certifications * Knowledge of GDPR security and privacy requirements * Knowledge of basic security frameworks (NIST CSF, ISO 27001) Individuals representing diverse profiles, and abilities, encompassing various genders, ethnicities, and backgrounds, are less likely to apply for this role if they do not possess solid experience in 100% of these areas. Even if it seems you don't meet our musts don't let it stop you, we are all about finding the best talent out there! Skills can be learned, and embracing diversity is invaluable. We believe driven talent deserves: * \uD83C\uDF1F An enticing equity plan that lets you own a piece of the action. * \uD83D\uDCAA Top-notch private health insurance to keep you at your peak. * \uD83C\uDF54 Monthly Glovo credit to satisfy your cravings! * \uD83D\uDCB3 Discounts on transportation, food, and even kindergarten expenses. * \uD83C\uDFCA Discounted gym memberships to keep you energized. * \uD83C\uDFD6️ Extra time off, the freedom to work from home two days a week, and the opportunity to work from anywhere for up to three weeks a year! * \uD83D\uDC6A Enhanced parental leave, and office-based nursery. * \uD83E\uDDE0 Online therapy and wellbeing benefits to ensure your mental well-being. Here at Glovo, we thrive on diversity, we believe it enhances our teams, products, and culture. We know that the best ideas come from a mashup of brilliant diverse minds. This is why we are committed to providing equal opportunities to talent from all backgrounds - all genders, racial/diverse backgrounds, abilities, ages, sexual orientations and all other unique characteristics that make you YOU. We will encourage you to bring your authentic self to work, fostering an inclusive environment where everyone feels heard. Feel free to note your pronouns in your application (e.g., she/her/hers, he/him/his, they/them/theirs, etc). So, ready to take the wheel and make this the ride of your life? Delve into our culture by taking a peek at our [Instagram](https://www.instagram.com/lifeatglovo/) and check out our [Linkedin](https://www.linkedin.com/company/glovo-app/) and [website](https://about.glovoapp.com/)! ## Additional Information At Glovo, your success is defined by both results and behaviors. We hire for excellence in craft and for the Leadership Principles that shape how we think, decide, and collaborate. What you achieve matters and how you achieve it defines us. Together, they move the business forward and deliver great experiences. Learn more about our Leadership Principles[ here](https://careers.deliveryhero.com/leadership-principles). Here at Glovo, we thrive on diversity, we believe it enhances our teams, products, and culture. We know that the best ideas come from a mashup of brilliant diverse minds. This is why we are committed to providing equal opportunities to talent from all backgrounds – all genders, racial/diverse backgrounds, abilities, ages, sexual orientations and all other unique characteristics that make you YOU. We will encourage you to bring your authentic self to work, fostering an inclusive environment where everyone feels heard. Feel free to note your pronouns in your application (e.g., she/her/hers, he/him/his, they/them/theirs, etc). So, ready to take the wheel and make this the ride of your life? Delve into our culture by taking a peek at our [Instagram](https://www.instagram.com/lifeatglovo/) and check out our [LinkedIn](https://www.linkedin.com/company/glovo-app/) and [website](https://about.glovoapp.com/)!", "summaryDescription" : "Cloud Security Engineer at Delivery Hero. Skills: Cloud Security, AWS, GCP, Terraform. Design internal solutions. Build internal solutions", "postedDate" : "2026-06-15T12:46:17.000", "createdAt" : "2026-06-15T23:39:46.442", "lastUpdated" : "2026-06-16T08:05:04.365", "ingestTimestamp" : "2026-06-15T23:39:46.442", "mongoId" : "6a305640f292fd229cf264ed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Log source analysis", "Security policy creation", "Security standards creation", "Security procedures creation", "Security guidelines creation", "Interpersonal skills", "Relationship building", "Cloud Security", "AWS", "GCP", "Terraform", "Policy as code", "Infrastructure as code", "Incident response", "Operational security", "GDPR security", "GDPR privacy", "NIST CSF", "ISO 27001", "CISSP-ISSAP", "AWS Certified Security - Specialty", "AWS CloudTrail", "AWS Config", "AWS Inspector" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1289.9365, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305758f292fd229cf3841f", "title" : "Senior Security Engineer", "company" : "Datarails", "industry" : "SaaS", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Tel Aviv-Yafo, Israel, adjusted for the SaaS industry and senior experience level." }, "location" : "Tel Aviv-Yafo, Tel Aviv District, Israel", "locations" : [ "Tel Aviv-Yafo", "Tel Aviv District", "Israel" ], "certifications" : [ "CISSP", "CISM", "CCSP" ], "timestamp" : "2026-06-16T08:09:52.484", "fingerprint" : "c44f1d255a4fc7828ec8d86c85fdb722517e11dbc7611f1ff0843bfe2c2db9c1", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/datarails/jobs/4282627009", "externalId" : "4282627009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv-Yafo", "state" : "Tel Aviv District", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv-Yafo, Tel Aviv District, Israel", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, GCP, Azure, AI/ML, LLM", "professionalSkills" : [ "Threat modeling", "Penetration testing", "Vulnerability management", "Risk assessment", "System design", "Program management" ], "hardSkillsList" : [ "Cloud security controls", "AI/ML security", "Compliance readiness", "Audit support", "Incident response" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "AI/ML security", "level" : "intermediate" }, { "name" : "Compliance readiness", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security engineering, Cloud security, AI/ML security, Compliance", "majorSkillsList" : [ "Security engineering", "Cloud security", "AI/ML security", "Compliance" ], "coreResponsibilities" : "Own security engineering function, Lead threat modeling, Lead penetration testing, Lead vulnerability management, Design cloud security controls, Implement cloud security controls, Improve cloud security controls, Assess AI/ML systems, Secure AI/ML systems, Drive compliance readiness, Support audit, Embed security into SDLC, Embed security into CI/CD, Translate technical risk, Advise leadership, Partner cross-functionally, Build security awareness, Build low-friction controls, Lead incident response, Support incident response, Contain incident, Remediate incident, Review post-incident", "teamCollaboration" : "Cross-functionally with engineering; Cross-functionally non-engineering teams; Customer Success; Marketing; Finance; Legal", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Cloud-native architecture; AI/ML systems; LLM behavior; SOC 2; ISO 27001; GDPR; OWASP LLM Top 10; NIST AI RMF", "domainList" : [ "cloud-native-architecture", "ai-ml-systems", "llm-behavior", "soc-2", "iso-27001", "gdpr", "owasp-llm-top-10", "nist-ai-rmf" ], "domainSpecificKnowledge" : [ "Cloud-native architecture", "AI/ML systems", "LLM behavior", "SOC 2", "ISO 27001", "GDPR", "OWASP LLM Top 10", "NIST AI RMF" ], "communicationSkills" : "Board-level language; Business language", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "8+ years security engineering, Deep cloud security experience, Hands-on threat modeling, Hands-on penetration testing, Hands-on vulnerability management, Working knowledge AI/ML systems, Experience SOC 2, Experience ISO 27001, Experience GDPR", "qualificationsPreferred" : "Prior experience fast-scaling SaaS, Prior experience AI-driven product company, Hands-on red-teaming LLM systems, Experience standing up security program", "rawDescription" : "We're looking for a Senior Security Engineer to own and elevate the security posture of our cloud-native, AI-driven SaaS platform. Reporting to the Director of DevOps, you'll be the technical anchor for security across our product, infrastructure, and organization - combining hands-on engineering with the strategic judgment to translate risk into clear, actionable priorities. This is a high-ownership role for someone who can operate end to end: threat modeling a new feature in the morning, hardening cloud infrastructure in the afternoon, and briefing leadership on risk posture by the end of the week. As we scale our platform and deepen our use of AI/ML, you'll define how we build, ship, and operate securely - often standing up programs and controls that don't yet exist. You'll work cross-functionally well beyond engineering, partnering with Customer Success, Marketing, Finance, and Legal to make security a shared, business-aware practice rather than a gate at the end of the line. What You'll Do • Own the day-to-day security engineering function across cloud infrastructure, application, and data layers. • Lead threat modeling, penetration testing, and vulnerability management across the product and platform lifecycle. • Design, implement, and continuously improve cloud security controls across AWS, GCP, and/or Azure environments. • Assess and secure our AI/ML systems, addressing the unique risks they introduce — from data pipelines to model and LLM behavior. • Drive compliance readiness and audit support for frameworks such as SOC 2, ISO 27001, and GDPR. • Embed security into the SDLC and CI/CD pipelines, partnering closely with DevOps and engineering teams. • Translate technical risk into clear business and board-level language, and advise leadership on prioritization and trade-offs. • Partner cross-functionally with non-engineering teams (Customer Success, Marketing, Finance, Legal) to build security awareness and practical, low-friction controls. • Lead or support incident response, including detection, containment, remediation, and post-incident review. Requirements: Must Have • 8+ years in security engineering, security architecture, or a CISO/Security Officer role. • Deep cloud security experience (AWS / GCP / Azure). • Hands-on with threat modeling, penetration testing, and vulnerability management. • Working knowledge of AI/ML systems and their unique security challenges. • Experience with compliance frameworks: SOC 2, ISO 27001, GDPR (or equivalent). • Strong communication — translates technical risk into business and board language. • Comfortable operating cross-functionally with non-engineering teams (CS, Marketing, Finance). Nice to Have • Prior experience in a fast-scaling SaaS or AI-driven product company. • Hands-on red-teaming of LLM-based systems. • Familiarity with the OWASP LLM Top 10 and NIST AI RMF. • Certifications: CISSP, CISM, CCSP, or equivalent. • Experience standing up a security program from scratch (rather than scaling an existing one). What We Offer • A pivotal, high-visibility role with the autonomy to shape security from the ground up. • Direct collaboration with engineering leadership and a clear path to broader security ownership. • The chance to secure a modern, AI-driven product at a meaningful inflection point of growth.", "summaryDescription" : "Senior Security Engineer at Datarails. Skills: Security engineering, Cloud security, AI/ML security, Compliance. Own security engineering function. Lead threat modeling", "postedDate" : "2026-06-15T23:24:09.712", "createdAt" : "2026-06-15T23:24:09.712", "lastUpdated" : "2026-06-16T08:09:52.484", "ingestTimestamp" : "2026-06-15T23:24:09.712", "mongoId" : "6a305758f292fd229cf3841f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "AI/ML security", "Compliance readiness", "Audit support", "Incident response", "Leadership", "Security engineering", "Cloud security", "Compliance", "Threat modeling", "Penetration testing", "Vulnerability management", "Risk assessment", "System design", "Program management", "Cloud-native architecture", "AI/ML systems", "LLM behavior", "SOC 2", "ISO 27001", "GDPR", "OWASP LLM Top 10", "NIST AI RMF", "CISSP", "CISM", "CCSP" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1285.6555, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2a660474d8ee00a062b84a", "title" : "Area Security Manager", "company" : "Amazon.com Services LLC", "industry" : "Investigation Loss Prevention, Amazon Corporate Security, amazon security", "salary" : { "min" : 140700.0, "max" : 190300.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Sunnyvale, California, USA", "locations" : [ "Sunnyvale, California, USA" ], "certifications" : [ "CPP", "PSP", "CISSP", "PMP" ], "timestamp" : "2026-06-15T01:59:38.898", "fingerprint" : "f6ac4ed522c08b7e928e432d8939b54317e3698d6028057345a848791edede7c", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443887/apply", "externalId" : "ae8cc75b-db0e-4eaf-94e5-dc43e132c128", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Sunnyvale", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.3688301,-122.0363490" } ], "locationText" : "Sunnyvale, California, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "professionalSkills" : [ "Corporate security", "Security operations", "Crisis response", "Security consultancy", "Risk management", "Business continuity" ], "hardSkillsList" : [ "Security assessments", "Incident management", "Crisis response", "Security controls", "Guarding operations", "Access control", "Threat monitoring", "Risk minimization", "Performance metrics", "Process implementation", "Drill leadership", "Incident investigations", "Event support", "Business continuity plans", "Site security assessments", "Systemic issue resolution", "Commissioning checks", "Maintenance activities" ], "softSkillsList" : [ "Ownership", "Earn Trust", "Bias for Action" ], "hardSkills" : [ { "name" : "Security assessments", "level" : "intermediate" }, { "name" : "Incident management", "level" : "intermediate" }, { "name" : "Crisis response", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Guarding operations", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Risk minimization", "level" : "intermediate" }, { "name" : "Performance metrics", "level" : "intermediate" }, { "name" : "Process implementation", "level" : "intermediate" }, { "name" : "Drill leadership", "level" : "intermediate" }, { "name" : "Incident investigations", "level" : "intermediate" }, { "name" : "Event support", "level" : "intermediate" }, { "name" : "Business continuity plans", "level" : "intermediate" }, { "name" : "Site security assessments", "level" : "intermediate" }, { "name" : "Systemic issue resolution", "level" : "intermediate" }, { "name" : "Commissioning checks", "level" : "intermediate" }, { "name" : "Maintenance activities", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Ownership" }, { "name" : "Earn Trust" }, { "name" : "Bias for Action" } ], "majorSkills" : "Corporate security, Security operations, Crisis response", "majorSkillsList" : [ "Corporate security", "Security operations", "Crisis response" ], "coreResponsibilities" : "Deliver security services, Enhance safety and security, Line-manage security professionals, Manage day-to-day security operations, Implement security plans, Improve security programs, Coordinate security incident response, Respond to security concerns, Monitor external threat environments, Minimize security risk, Align ACS metrics, Align goals and strategic direction, Earn trust through engagements, Liaise with external partners, Be trusted security advisor, Be subject matter expert, Communicate accurately with stakeholders, Communicate in a timely manner, Build relationships with peers, Share security concerns, Collaborate on closing gaps, Collaborate on building best practices, Oversee guarding operations, Hold vendors accountable, Identify cost efficiencies, Build relationships with partners, Coordinate with security partners, Coordinate with local law enforcement, Develop performance metrics, Monitor performance metrics, Track site performance, Improve site performance, Implement predictable processes, Implement measurable procedures, Communicate processes clearly, Develop plans based on risk assessments, Close potential gaps in security controls, Conduct site security assessments, Identify trends in findings, Develop measures to address issues, Implement measures to address issues, Plan security readiness activities, Lead security readiness activities, Manage cross-functional projects, Manage cross-functional operations, Drive teams to meet goals, Drive partners to meet goals, Conduct initial incident investigations, Triage incidents, Support the customer, Coordinate security support to events, Support maintenance of business continuity plans, Support testing of business continuity plans, Conduct customer outreach, Support organizational safety initiatives, Support organizational security initiatives, Monitor physical security device installation, Monitor commissioning checks, Monitor maintenance activities, Engage with vendors", "teamCollaboration" : "Key customer engagements; Stakeholder engagements; External partners; Internal security partners; External security partners; Local law enforcement; Peers at other security functions; Cross-functional projects; Cross-functional operations", "projectManagementSkills" : [ "Cross-functional projects" ], "domainKnowledge" : "Corporate security; Physical security; Crisis operations; Risk management; Business continuity", "domainList" : [ "corporate-security", "physical-security", "crisis-operations", "risk-management", "business-continuity" ], "domainSpecificKnowledge" : [ "Corporate security", "Physical security", "Crisis operations", "Risk management", "Business continuity" ], "communicationSkills" : "High quality communication; Excellent briefing skills; Accurate communication; Timely communication", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Trend analysis", "outcomesObjectives" : "Minimize security risk; Align ACS metrics; Align goals; Align strategic direction; Close gaps in security controls; Address systemic issues; Improve individual performance; Improve team performance; Improve system performance; Improve site performance", "qualificationsBasic" : "5+ years in leadership role, Experience managing third party vendors", "qualificationsPreferred" : "Master's degree, CPP, PSP, CISSP, PMP or similar certifications, Understanding of crisis operations, Understanding of risk management, Understanding of crisis communication best practices, Substantive experience in physical security operations, Understanding of related technologies, Skilled in measuring SLA/KPI metrics, Conducting security-related trend analysis, Understanding of business continuity concepts, Understanding of the Incident Command System", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Corporate Security is looking for an experienced, self-motivated, corporate security leader who embodies Amazon’s Leadership Principles, in particular, Customer Obsession, Ownership, Earn Trust, and Bias for Action, to join the team as an Area Security Manager for Northern California. The Area Security Manager reports to a Regional Security Manager, who leads a team of security experts. The Area Security Manager is responsible for implementation of all elements of the Corporate Security program at all Amazon corporate locations in their area of responsibility. The Area Security Manager supports the Regional Security Manager with delivery and oversight of the day-to-day security operations at multiple sites across multiple locations in a highly ambiguous and dynamically fluid environment. The Area Security Manager conducts security assessments, ensures that the corporate sites meet or exceed all requisite security standards, and manages incidents and supporting crisis response. Finally, the Area Security Manager provides security consultancy to local business leadership, develops plans to mitigate gaps in security controls, and manages the guarding and access control programs. Key job responsibilities • Deliver best-in-class security services focused on enhancing the safety and security of all Amazon employees, contractors, and visitors. • Line-manage security professionals and day-to-day security operations for a diverse portfolio of sites and customers with unique requirements. • Implement and improve security plans, policies, and programs. • Coordinate security incident response. • Respond to customer security concerns. • Monitor the external threat environments in the defined area and take measures to minimize security risk to the business to the dynamic security environment. • Successfully align ACS metrics, goals, and strategic direction across the geographic area to support overall team mission. • Earn trust through key customer and stakeholder engagements, and liaison with external partners. • Be the trusted security advisor and subject matter expert in the assigned area of responsibility, through high quality communication and excellent briefing skills. • Communicate accurately and in a timely manner with stakeholders at the tactical and strategic level. • Build and maintain close relationships with peers at other security functions at Amazon to exchange and share security concerns and collaborate on closing gaps and building best practices. A day in the life • Oversee guarding operations and hold guarding vendors accountable for the quality-of-service delivery. This includes identifying opportunities for cost efficiencies and frugality. • Build relationships through coordination with internal and external security partners including local law enforcement. • Develop and monitor performance metrics to track and improve individual, team, system, and site performance. Implement effective, predictable, and measurable processes and procedures to be communicated clearly among Amazon stakeholders. • Develop and deliver plans, based on risk assessments, to close any potential gaps in security controls. • Conduct site security assessments and identify trends in findings and develop and implement measures to address systemic issues. • Plan and lead drills, tabletop exercises, and other security readiness activities across sites. • Manage cross-functional projects and operations. Drive team(s)/partners to meet program and/or product goals. • Conduct initial incident investigations, triage incidents and collaborate with specialist security teams to support the customer. • Coordinate corporate security support to events. • Support the maintenance and testing of business continuity plans. • Conduct customer outreach and support organizational safety and security initiatives. • Monitor physical security device installation, commissioning checks of new buildings; and ongoing maintenance activities, including engagement with vendors. About the team The team drives security operations for Amazon Corporate Security at Corporate sites worldwide. Divided in three regions (Americas; Asia Pacific; and Europe, Middle East, and Africa) each led by a Head of Corporate Security, the team of security experts work closely together to protect and secure Amazon’s people and business. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in project/contract management - Bachelor’s degree (or higher) in Criminal Justice, Security, Law Enforcement, Business Management, Accounting, International Relations or equivalent professional experiences. - 7+ years of experience in the security field in a global corporate environment or large-sized organization (e.g. military, intelligence, police, or public sector). - 5+ years of experience in a leadership or management role. - Experience managing third party service providers and vendors. Preferred Qualifications: - Master's degree - CPP, PSP, CISSP, PMP or similar security/intelligence government certifications. - Understanding of crisis operations, risk management, and crisis communication best practices. - Substantive experience in physical security operations and understanding of related technologies. - Skilled in measuring SLA/KPI metrics and in conducting security-related trend analysis. - Understanding of business continuity concepts and the Incident Command System. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, Sunnyvale - 140,700.00 - 190,300.00 USD annually", "summaryDescription" : "Area Security Manager at Amazon.com Services LLC. Skills: Corporate security, Security operations, Crisis response. Deliver security services. Enhance safety and security", "postedDate" : "2026-06-13T04:07:05.027", "createdAt" : "2026-06-13T04:07:05.027", "lastUpdated" : "2026-06-15T01:59:38.898", "ingestTimestamp" : "2026-06-13T04:07:05.027", "mongoId" : "6a2a660474d8ee00a062b84a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443887/apply", "salaryAnnualMin" : 140700, "salaryAnnualMax" : 190300, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security assessments", "Incident management", "Crisis response", "Security controls", "Guarding operations", "Access control", "Threat monitoring", "Risk minimization", "Performance metrics", "Process implementation", "Drill leadership", "Incident investigations", "Event support", "Business continuity plans", "Site security assessments", "Systemic issue resolution", "Commissioning checks", "Maintenance activities", "Ownership", "Earn Trust", "Bias for Action", "Corporate security", "Security operations", "Security consultancy", "Risk management", "Business continuity", "Cross-functional projects", "Physical security", "Crisis operations", "CPP", "PSP", "CISSP", "PMP" ], "skillCount" : 33, "jobCategory" : "marketing", "dataQualityScore" : 1.0, "_score" : 1253.5237, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69cf3f052beec4dd3d9340a4", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 159000.0, "max" : 202400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect" ], "timestamp" : "2026-06-15T08:10:44.516", "fingerprint" : "e7b6067f8d5e1ee3cf111fd915ee7bae8c724b95799fbd946bdb1b7400dc7409", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10382311/apply", "externalId" : "49079c29-efa4-48bb-96db-5c916f303463", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Java, C++, HTTP(S), DNS, TCP/IP, Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, AWS", "professionalSkills" : [ "Risk assessment", "Security engineering" ], "hardSkillsList" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System tooling development", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Software security", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design cohesive responses, Coordinate responses across teams, Build security utilities, Build security tools, Communicate effectively", "teamCollaboration" : "Multiple teams across organization; Fellow Security Engineers", "domainKnowledge" : "Cloud security; National security; Cryptography; Network security; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; AWS services", "domainList" : [ "cloud-security", "national-security", "cryptography", "network-security", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "aws-services" ], "domainSpecificKnowledge" : [ "Cloud security", "National security", "Cryptography", "Network security", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "AWS services" ], "toolProficiency" : [ "Splunk", "ELK" ], "communicationSkills" : "Communicate at multiple levels; Communicate to multiple audiences", "problemSolvingSkills" : "Think like attacker; Think like defender; Mitigate risks", "specialRequirements" : "US Citizen, TS/SCI with polygraph, On-call responsibilities", "qualificationsBasic" : "Bachelor's degree or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+, 2+ years scripting or programming or security code review, Knowledge of networking protocols, Current, active US Government Security Clearance of TS/SCI with Polygraph", "qualificationsPreferred" : "AWS certification, Cloud Technology Certification, Knowledge of web protocols, Knowledge of common attacks, Knowledge of Linux/Unix tools, Knowledge of Linux/Unix architecture, Deep understanding of AWS service catalog, Used AWS services in production, Experience with log analysis systems, Familiarity with Windows logging systems, Familiarity with Linux logging systems, Understanding of high-level cryptography principles", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree, or CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - AWS certification, such as, AWS Solutions Architect, or a similar cloud certification, or Cloud Technology Certification - Knowledge of web protocols, common attacks, and Linux/Unix tools and architecture - Deep understanding of the AWS service catalog. Ideally, you have used AWS services in a production capacity. - Experience with log analysis systems, like Splunk or ELK. - Familiarity with Windows and Linux logging systems. - Understanding of high-level cryptography principles (PKI, encryption algorithms, etc) Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 159,300.00 - 202,400.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T14:00:19.237", "createdAt" : "2026-06-13T14:00:19.237", "lastUpdated" : "2026-06-15T08:10:44.516", "ingestTimestamp" : "2026-06-13T14:00:19.237", "mongoId" : "69cf3f052beec4dd3d9340a4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10382311/apply", "salaryAnnualMin" : 159000, "salaryAnnualMax" : 202400, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Incident response", "Forensics", "System tooling development", "Risk assessment", "Cryptography", "Network security", "Software security", "Malware analysis", "Security operations", "Security intelligence", "Leadership", "Cloud security", "Security engineering", "National security", "AWS services", "CCSP", "Certified Cloud Security Professional", "CEH", "Certified Ethical Hacker", "CFR", "CyberSec First Responder", "Cloud+", "CySA+", "CompTIA Cybersecurity Analyst", "GCED", "GIAC Certified Enterprise Defender", "GICSP", "Global Industrial Cyber Security Professional", "PenTest+", "AWS certification", "AWS Solutions Architect", "Splunk", "ELK" ], "skillCount" : 34, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1250.6108, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Security" }, { "id" : "68c2e423f8b1b0376634c56d", "title" : "Senior Incident Response Engineer, Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Hawthorne, California, USA", "locations" : [ "Hawthorne, California, USA" ], "certifications" : [ "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA" ], "timestamp" : "2026-06-15T08:13:32.312", "fingerprint" : "3317fe4da3a6f579d3a5ccdc8430939e8a2a28d3935ec2384cf4f9b32c5db032", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3072356/apply", "externalId" : "2d1861cb-aa75-46c6-9067-b6a683645372", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hawthorne", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9128272,-118.3426122" } ], "locationText" : "Hawthorne, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, WAF, EDR/XDR, Python, PowerShell, Bash, Splunk, SOAR, SQL", "professionalSkills" : [ "Incident response", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis" ], "hardSkillsList" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries" ], "softSkillsList" : [ "Judgment under pressure", "Calmness" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Network telemetry", "level" : "intermediate" }, { "name" : "Attacker TTPs", "level" : "intermediate" }, { "name" : "MITRE ATT&CK", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "SQL queries", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Judgment under pressure" }, { "name" : "Calmness" } ], "majorSkills" : "Incident response, Security engineering, Detection engineering", "majorSkillsList" : [ "Incident response", "Security engineering", "Detection engineering" ], "coreResponsibilities" : "Investigate security incidents, Respond to security incidents, Drive rapid response, Drive effective response, Act as incident responder, Act as incident commander, Coordinate technical response, Keep stakeholders informed, Conduct post-mortem analysis, Identify root causes, Identify security improvement opportunities, Consult with builder teams, Ensure security designed into products, Collaborate with stakeholders, Execute incident response, Develop detections, Maintain detections, Respond to detections, Combat fraud, Combat abuse, Develop prevention capabilities, Develop detection capabilities, Develop response capabilities, Increase capability through automation, Increase efficiency through automation, Increase signal quality using AI/ML, Assist in runbook development, Assist in playbook tuning, Drive process improvements, Coordinate response efforts, Share learnings, Maintain WAF products, Support WAF products, Protect services from abuse, Drive WAF adoption, Evaluate WAF rules, Tune WAF rules, Develop SQL queries, Analyze log data, Extract information from logs, Extract information from databases, Extract information from services, Spearhead incident response, Drive decision-making, Conduct impact assessments, Implement containment strategies, Develop durable solutions, Proactively hunt threats, Create new detection mechanisms, Consult on security for new product designs, Analyze data, Identify hidden vulnerabilities", "teamCollaboration" : "Cross-functional teams; Global Amazon Security team; Other Incident Response teams", "projectManagementSkills" : [ "Runbook development", "Playbook tuning" ], "domainKnowledge" : "Devices and Services security; IoT platforms; Customer safety; Customer privacy; Fraud and abuse; Distributed systems; Cloud-native architectures; Service-oriented environments; IoT device security; Embedded systems", "domainList" : [ "devices-and-services-security", "iot-platforms", "customer-safety", "customer-privacy", "fraud-and-abuse", "distributed-systems", "cloud-native-architectures", "service-oriented-environments", "iot-device-security", "embedded-systems" ], "domainSpecificKnowledge" : [ "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems" ], "toolProficiency" : [ "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "communicationSkills" : "Clear communication; Stakeholder communication", "documentationSkills" : "Document work thoroughly; Contribute to post-incident reviews", "continuousLearning" : "Expand AI/ML skills", "innovationCreativity" : "Identify opportunities to raise the bar", "problemSolvingSkills" : "Problem-solvers; Investigative instincts; Troubleshooting", "specialRequirements" : "On-call rotation", "outcomesObjectives" : "Reduce or eliminate risk; Improve security for Amazon products; Improve security for Amazon services", "qualificationsBasic" : "5+ years cybersecurity experience, Incident response experience, Detection engineering experience, Security operations experience, Working knowledge of AWS, Working knowledge of WAF, Working knowledge of EDR/XDR tools, Working knowledge of network telemetry, Working knowledge of log analysis, Practical knowledge of attacker TTPs, Experience leveraging MITRE ATT&CK, Interpersonal skills, Communication skills, Proficiency with scripting, Proficiency with automation", "qualificationsPreferred" : "Proficiency with SIEM platform, Writing SIEM searches, Creating SIEM alerts, Analyzing SIEM log data, Forensic techniques, Threat hunting techniques, Identify adversary behavior, Detect anomalies, Analyze malware, Experience in large enterprise environments, Supporting multiple business lines, Experience securing distributed systems, Responding to incidents in distributed systems, Experience with cloud-native architectures, Experience with service-oriented environments, Experience with IoT device security, Experience with embedded systems forensics", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Are you ready to protect millions of homes and families as part of Amazon's elite Device Security Incident Response team? Join us in defending Ring, Blink, eero, and other industry-leading IoT platforms where every incident response decision impacts real people's safety and privacy. We’re looking for a seasoned security engineer to join a cross-functional Incident Response team supporting multiple Amazon devices brands. This is a hands-on role is focused on protecting the security and privacy of millions of customers by responding to incidents that impact real-world products and services. Our customers trust us with their safety and personal spaces, and it’s our responsibility to uphold that trust through strong, effective security practices. You will become a subject matter expert in the brands you support, leading our response to incidents through detection, assessment, containment, eradication, and post-mortem, while identifying opportunities to raise the bar on security for Amazon products and Customers. This high-visibility role requires clear communication, sound judgment under pressure, and the ability to work across organizational boundaries. You will be a strong advocate for customer safety and privacy, ensuring our devices deliver protection without compromise. You will document your work thoroughly, contribute to post-incident reviews, and collaborate with engineering teams to drive long-term improvements across the business. You will have opportunities to utilize, or expand your AI/ML skills, as we focus on automation. Key job responsibilities * Investigate and respond to security incidents in the Devices and Services org, setting the pace, and driving rapid, effective response that reduces or eliminates risk * Act as an incident responder or commander during active security events, coordinating technical response while keeping business stakeholders informed * Conduct thorough post-mortem analysis of security incidents, driving root cause identification, and identifying opportunities to improve security for Amazon products and services * Security consults with builder teams to ensure that security is designed into products from their inception * Collaborate with both technical, and non-technical stakeholders at all levels of the business, to execute rapid, and effective incident response * Develop, maintain, and respond to detections using Splunk/SOAR, as well as internal Amazon tooling * Combat various forms of fraud and abuse, by coordinating with business teams to develop comprehensive prevention/detection/response capabilities * Contribute to team efforts to increase capability and efficiency through automation of manual workloads and increase signal quality using AI/ML tools or approaches * Assist in runbook development, playbook tuning, and continuous process improvements * Participate in an on-call rotation (approx. two weekend days per month) * Work within a global, collaborative Amazon Security team where engineers and specialists support one another to solve complex problems and respond to security challenges together * Coordinate response efforts with other Incident Response teams at Amazon when appropriate, and share learnings * Maintain and support WAF products that protect Amazon services from abuse, drive adoption, evaluate or tune rules * Develop and update SQL queries to investigate security incidents, analyze log data, and extract relevant information from logs, databases and services. A day in the life As a Security Incident Response Engineer, you'll guide our team through complex security challenges impacting millions of customers. You'll: • Spearhead end-to-end incident response across Amazon's device ecosystem • Drive real-time decision-making during active incidents • Conduct impact assessments and implement containment strategies • Develop durable solutions with engineering teams • Proactively hunt threats and create new detection mechanisms • Consult on security for new product designs • Analyze data to identify hidden vulnerabilities We seek naturally curious problem-solvers who combine technical expertise with investigative instincts. You'll be the calm voice in the storm, transforming chaos into clarity and consistently safeguarding our customers' trust in Amazon's devices and services. About the team We're a tight-knit group of Security Engineers united by our mission to protect Amazon's customers. Though small, our impact is outsized. We've driven meaningful improvements across Amazon's device ecosystem through technical excellence and relentless customer advocacy. We're engineers first, approaching challenges with security expertise to create practical solutions. We champion \"better products\" over \"more products,\" solving problems collaboratively with empathy and partnership. We're not the team that just says \"no\" – we find secure paths forward. When incidents arise, we need our builders to feel relief when we arrive. We build bridges, not ivory towers, transforming security from a barrier into an enabler of innovation. Basic Qualifications: - * 5+ years of industry experience in cybersecurity, with a strong foundation in incident response, detection engineering, or security operations - * Working knowledge of AWS, WAF, EDR/XDR tools, network telemetry, and log analysis - * Practical knowledge of attacker tactics, techniques, and procedures (TTPs), with experience leveraging MITRE ATT&CK or similar frameworks to guide incident response or detection engineering - * Strong interpersonal and communication skills; able to calmly manage high-stakes coordination and decision-making - * Proficiency with scripting or automation (e.g., Python, PowerShell, Bash) Preferred Qualifications: - * Proficiency with at least one SIEM platform, including writing searches, creating alerts, and analyzing log data to support security investigations; experience with Splunk strongly preferred - * Exposure to AI/ML-driven anomaly detection, or behavior modeling tools - * Demonstrated ability to use forensic or threat hunting techniques to identify adversary behavior, detect anomalies, analyze potential malware to support containment and eradication - * Security certifications such as CISSP, CISM, CRISC, GCIH, CCIR, GCDA, etc. - * Prior experience in large enterprise environments or supporting multiple business lines - * Experience securing or responding to incidents in large-scale distributed systems, including cloud-native architectures and service-oriented environments - * Experience with IOT device security and embedded systems forensics Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Incident Response Engineer, Devices & Services Security at Amazon.com Services LLC. Skills: Incident response, Security engineering, Detection engineering. Investigate security incidents. Respond to security incidents", "postedDate" : "2026-06-13T10:06:54.792", "createdAt" : "2026-06-13T10:06:54.792", "lastUpdated" : "2026-06-15T08:13:32.312", "ingestTimestamp" : "2026-06-13T10:06:54.792", "mongoId" : "68c2e423f8b1b0376634c56d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3072356/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Network telemetry", "Attacker TTPs", "MITRE ATT&CK", "Scripting", "Automation", "Forensic analysis", "Malware analysis", "SQL queries", "Judgment under pressure", "Calmness", "Incident response", "Security engineering", "Detection engineering", "Security operations", "Threat hunting", "Risk assessment", "Root cause analysis", "Runbook development", "Playbook tuning", "Devices and Services security", "IoT platforms", "Customer safety", "Customer privacy", "Fraud and abuse", "Distributed systems", "Cloud-native architectures", "Service-oriented environments", "IoT device security", "Embedded systems", "CISSP", "CISM", "CRISC", "GCIH", "CCIR", "GCDA", "AWS", "WAF", "EDR/XDR", "Splunk", "SOAR", "SQL" ], "skillCount" : 42, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1235.5702, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security" }, { "id" : "6a305119f292fd229cefa150", "title" : "Security Analyst (Cyber Defense Analyst)", "industry" : "IT", "salary" : { "min" : 1750000.0, "max" : 2750000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Analyst in India, adjusted for seniority and industry." }, "location" : "India", "locations" : [ "India" ], "certifications" : [ "GCIH", "CySA+", "GSEC", "SSCP", "CCSP" ], "timestamp" : "2026-06-16T11:24:45.864", "fingerprint" : "79d0850a6e7105df6d7a472da8558864f5a1306c8e56ca957ae1be846f7f2629", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/63fc29fe-8221-46d6-ba45-613929eed7ce/apply", "externalId" : "63fc29fe-8221-46d6-ba45-613929eed7ce", "industryFunction" : { }, "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, Microsoft Defender XDR, Microsoft 365, AWS, Azure, Windows, MacOS, PowerShell, Python", "professionalSkills" : [ "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction" ], "hardSkillsList" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security analysis", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Data correlation", "level" : "intermediate" } ], "majorSkills" : "Cyber defense, Incident response, Security analysis", "majorSkillsList" : [ "Cyber defense", "Incident response", "Security analysis" ], "coreResponsibilities" : "Monitor security alerts, Triage security alerts, Analyze security alerts, Investigate security incidents, Determine incident scope, Determine incident impact, Correlate security events, Validate threats, Support escalation decisions, Contribute to incident response, Document investigations, Document findings, Document response activities, Conduct threat hunting, Identify attack patterns, Identify adversary techniques, Identify detection gaps, Support detection engineering, Support automation initiatives, Assist refining incident response, Assist refining playbooks, Assist refining procedures, Collaborate with owners, Prioritize vulnerability remediation, Track risk reduction", "teamCollaboration" : "Cross-team development", "domainKnowledge" : "Cybersecurity; Cyber defense; Incident response; SIEM platforms; Enterprise security; Endpoint security; Identity systems; Cloud environments; Network security; Application security; Threat frameworks; MITRE ATT&CK; NIST CSF; CIS Controls; Vulnerability management; Networking fundamentals; AWS; Azure; Windows OS; macOS; Microsoft 365 ecosystem", "domainList" : [ "cybersecurity", "cyber-defense", "incident-response", "siem-platforms", "enterprise-security", "endpoint-security", "identity-systems", "cloud-environments", "network-security", "application-security", "threat-frameworks", "mitre-att-ck", "nist-csf", "cis-controls", "vulnerability-management", "networking-fundamentals", "aws", "azure", "windows-os", "macos", "microsoft-365-ecosystem" ], "domainSpecificKnowledge" : [ "Cybersecurity", "Cyber defense", "Incident response", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem" ], "toolProficiency" : [ "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "communicationSkills" : "Technical findings communication", "documentationSkills" : "Incident reports", "continuousLearning" : "Certification support", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years cybersecurity experience, Hands-on SIEM tools experience, Microsoft Defender XDR experience, Microsoft 365 security experience, Networking fundamentals understanding, Cloud environments understanding, Operating systems understanding, MITRE ATT&CK familiarity, NIST CSF familiarity, CIS Controls familiarity, Write clear incident reports, Communicate technical findings, Scripting or query languages exposure, Bachelor's degree", "qualificationsPreferred" : "CrowdStrike NG-SIEM experience, Vulnerability management tools experience, Tenable experience, Wiz experience, GCIH certification preferred, CySA+ certification preferred, GSEC certification preferred, SSCP certification preferred, CCSP certification preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Monitor, triage, and analyze security alerts and telemetry across SIEM and enterprise security platforms to identify potential threats and anomalies. Investigate security incidents across endpoints, identity systems, cloud environments, networks, and applications to determine scope and impact. Correlate security events to validate threats, support escalation decisions, and contribute to timely incident response actions. Document investigations, findings, and response activities while maintaining clear communication with stakeholders and leadership. Conduct proactive threat hunting activities to identify emerging attack patterns, adversary techniques, and detection gaps. Support detection engineering and automation initiatives to improve monitoring coverage and response efficiency. Assist in refining incident response processes, playbooks, and operational procedures to enhance cyber defense maturity. Collaborate with infrastructure and system owners to prioritize vulnerability remediation and track risk reduction efforts. Requirements: 5+ years of experience in cybersecurity, SOC, cyber defense, or incident response roles within enterprise environments. Hands-on experience with SIEM tools (searches, dashboards, alerts, investigations), preferably CrowdStrike NG-SIEM. Experience with Microsoft Defender XDR and Microsoft 365 security ecosystem (identity, email, and collaboration security). Strong understanding of networking fundamentals, cloud environments (AWS/Azure), and operating systems (Windows and macOS). Familiarity with threat frameworks such as MITRE ATT&CK, NIST CSF, or CIS Controls. Ability to write clear incident reports and communicate technical findings to both technical and non-technical stakeholders. Exposure to scripting or query languages such as PowerShell, Python, or similar for analysis and automation. Experience with vulnerability management tools such as Tenable or Wiz is preferred. Relevant certifications such as GCIH, CySA+, GSEC, SSCP, or CCSP are strongly preferred. Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or related field. Benefits: Competitive compensation with comprehensive benefits package. Health insurance coverage with options for dependents. Paid time off, company holidays, and additional leave benefits. Flexible work arrangements supporting work-life balance. Continuous learning and certification support to accelerate career growth. Employee wellness programs focused on physical and mental well-being. Strong engineering-driven culture with access to advanced security tools and lab environments. Inclusive, collaborative workplace with opportunities for cross-team development and ownership. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Security Analyst (Cyber Defense Analyst). Skills: Cyber defense, Incident response, Security analysis. Monitor security alerts. Triage security alerts", "postedDate" : "2026-06-15T12:04:42.126", "createdAt" : "2026-06-15T12:04:42.126", "lastUpdated" : "2026-06-16T11:24:45.864", "ingestTimestamp" : "2026-06-16T03:23:21.500", "mongoId" : "6a305119f292fd229cefa150", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Incident response", "Security analysis", "Threat analysis", "Security monitoring", "Data correlation", "Cyber defense", "Threat hunting", "Detection engineering", "Vulnerability remediation", "Risk reduction", "Cybersecurity", "SIEM platforms", "Enterprise security", "Endpoint security", "Identity systems", "Cloud environments", "Network security", "Application security", "Threat frameworks", "MITRE ATT&CK", "NIST CSF", "CIS Controls", "Vulnerability management", "Networking fundamentals", "AWS", "Azure", "Windows OS", "macOS", "Microsoft 365 ecosystem", "GCIH", "CySA+", "GSEC", "SSCP", "CCSP", "CrowdStrike NG-SIEM", "Microsoft Defender XDR", "Tenable", "Wiz" ], "skillCount" : 38, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1234.7616, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3064dcf292fd229cfa345d", "title" : "Senior Security Engineer", "company" : "Welltech", "industry" : "Engineering", "salary" : { "min" : 140000.0, "max" : 210000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Engineer in Romania, adjusted for seniority and the technology industry." }, "location" : "Romania", "locations" : [ "Romania", "Hungary", "Bulgaria" ], "timestamp" : "2026-06-16T08:27:34.132", "fingerprint" : "40312e8abd25955fe979c391a1fa214a7bc8cb4e28d3c44e2a011da5b56297e0", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/welltech/10072d2a-159c-48af-9a6f-dc6e3f873ccf/application", "externalId" : "10072d2a-159c-48af-9a6f-dc6e3f873ccf", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Romania", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Romania", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Lambda functions, Kubernetes, CI/CD, AWS, Google Cloud", "professionalSkills" : [ "Security engineering", "Risk assessment", "Incident response", "Security policies", "Security standards", "Security awareness" ], "hardSkillsList" : [ "Security controls", "Threat modeling" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security engineering, Cloud security, PCI-DSS Compliance", "majorSkillsList" : [ "Security engineering", "Cloud security", "PCI-DSS Compliance" ], "coreResponsibilities" : "Own security initiatives, Drive security initiatives, Shape team roadmap, Mentor junior team members, Embed security best practices, Review processes, Implement automation, Drive standardization, Lead PCI-DSS Compliance, Design security controls, Implement security controls, Maintain security controls, Contribute to threat modeling, Contribute to risk assessments, Contribute to incident response, Develop security policies, Refine security policies, Develop security standards, Refine security standards, Develop security tools, Refine security tools, Support security awareness, Lead security awareness, Evaluate emerging threats, Evaluate emerging technologies, Evaluate emerging practices", "teamCollaboration" : "Collaborate with leadership; Collaborate with engineering; Collaborate with IT; Collaborate with product teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Security principles; Attack techniques; Cloud environments; Security maturity", "domainList" : [ "security-principles", "attack-techniques", "cloud-environments", "security-maturity" ], "domainSpecificKnowledge" : [ "Security principles", "Attack techniques", "Cloud environments", "Security maturity" ], "toolProficiency" : [ "Kubernetes" ], "communicationSkills" : "Written communication; Verbal communication; Complex concepts", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "qualificationsBasic" : "5+ years security engineering experience, Solid understanding of security principles, Proficiency with Python, Experience with Kubernetes, Familiarity with CI/CD tooling, Knowledge of cloud platforms", "qualificationsPreferred" : "Solid Experience with PCI, Experience with application security, Experience with DLP platforms, Experience with observability", "remoteFriendly" : true, "rawDescription" : "Who Are We? Welltech is a global wellness technology company with Ukrainian roots. Our mission is to build and scale wellness apps globally through state-of-the-art, tech-driven performance marketing. We are one of the most established players in the wellness app space, and we are accelerating. Over 25.5 million people across the world use our apps — Muscle Booster, Yoga-Go, and WalkFit — to build healthier habits, move more, and feel better every day. Every subscription represents a real person making a real change in their life, and we take that seriously. With 500+ people across hubs in Cyprus, Ukraine, Poland, Spain, and the UK, we combine the scale of a market leader and the drive of a team that's just getting started. What We're Looking For We are seeking a talented and motivated Senior Security Engineer (x/f/m) to join our small but dedicated Security Team. In this role, you will play a crucial part in strengthening our overall security posture, collaborate across teams and domains, and own security initiatives company-wide. Responsibilities: - Own and drive execution of multiple key security initiatives, ensuring they are well-integrated, documented, and effectively support Welltech’s security goals. - Collaborate with leadership to shape the team’s roadmap, providing your expertise. - Mentor junior team members in the Security team to help them grow in their role. - Collaborate with engineering, IT, and product teams to embed security best practices throughout the development lifecycle and operational processes. - Champion continuous improvement in Security Engineering by regularly reviewing processes, implementing automation, and driving standardization to enhance team efficiency and organizational impact - Lead PCI-DSS Compliance initiative with relevant stakeholders - Design, implement, and maintain security controls and measures across Welltech’s systems, networks, and cloud environments. - Contribute to threat modeling, risk assessments, and incident response, supporting a proactive and resilient security posture. - Develop and refine internal security policies, standards, and tools to support company-wide security goals. - Support and lead security awareness efforts, helping to foster a strong security culture throughout the organization. Continuously evaluate emerging threats, technologies, and practices, driving improvements to Welltech’s overall security maturity. Requirements: - 5+ years of hands-on security engineering experience with proven expertise in implementing and managing security solutions - Solid understanding of security principles, vulnerabilities, and common attack techniques. - Proficiency with Python (especially writing Lambda functions). - Experience with Kubernetes in production environments. - Familiarity with CI/CD tooling and secure deployment practices. - Very good knowledge of cloud platforms - AWS or Google Cloud. - Big plus: Solid Experience with PCI. - Nice to have: Experience with application security, DLP platforms, and observability. Soft Skills: - Excellent written and verbal communication skills. - A collaborative, proactive mindset and passion for continuous improvement. - Ability to clearly communicate complex security concepts to technical and non-technical stakeholders. - Strong organizational skills to effectively prioritize and manage multiple concurrent tasks and meet deadlines. Candidate journey: ⭕️ Recruiter call ----> ⭕️ Skills assessment-----> ⭕️ Meet the hiring manager Check out some of our products Muscle Booster — https://musclebooster.fitness/ Yoga-Go — https://yoga-go.io/ WalkFit -http://walkfit.pro", "summaryDescription" : "Senior Security Engineer at Welltech. Skills: Security engineering, Cloud security, PCI-DSS Compliance. Own security initiatives. Drive security initiatives", "createdAt" : "2026-06-16T00:24:44.939", "lastUpdated" : "2026-06-16T08:27:34.132", "ingestTimestamp" : "2026-06-16T00:24:44.939", "mongoId" : "6a3064dcf292fd229cfa345d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security controls", "Threat modeling", "Leadership", "Mentoring", "Security engineering", "Cloud security", "PCI-DSS Compliance", "Risk assessment", "Incident response", "Security policies", "Security standards", "Security awareness", "Roadmap planning", "Security principles", "Attack techniques", "Cloud environments", "Security maturity", "Kubernetes" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1214.4828, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2cb0c074d8ee00a09daf1c", "title" : "Security Engineer, Detection and Response", "company" : "Serval", "industry" : "Engineering", "salary" : { "min" : 200000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "timestamp" : "2026-06-15T09:19:56.220", "fingerprint" : "14803e741daf8986e22ba67efd869ed1db5cb9f7c1f099fcc2a20c6ed18f6f72", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/Serval/5250c679-d490-407e-bd2e-b8b160c62aac/application", "externalId" : "5250c679-d490-407e-bd2e-b8b160c62aac", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud telemetry, Logging", "professionalSkills" : [ "Detection engineering", "Incident response", "Security operations", "Threat intelligence", "Observability", "Program management" ], "hardSkillsList" : [ "Adversary tradecraft", "Detection strategies", "Response actions" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Adversary tradecraft", "level" : "intermediate" }, { "name" : "Detection strategies", "level" : "intermediate" }, { "name" : "Response actions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Detection engineering, Incident response, Security operations, Team leadership", "majorSkillsList" : [ "Detection engineering", "Incident response", "Security operations", "Team leadership" ], "coreResponsibilities" : "Design detection and response operations, Implement detection and response operations, Operate detection and response operations, Monitor security events, Triage security events, Investigate security events, Contain security events, Remediate security events, Build a team, Lead a team, Mentor a team, Hire functions, Scale functions, Ensure operational rigor, Ensure operational readiness, Improve detection quality, Improve detection coverage, Partner with engineering teams, Ensure telemetry availability, Ensure telemetry reliability, Ensure telemetry actionability, Embed detection and response, Build security program", "teamCollaboration" : "Partner with Engineering; Partner with Product; Partner with Infrastructure", "domainKnowledge" : "Modern observability stacks; Modern adversary tradecraft; Cloud environments; Corporate environments; Production environments", "domainList" : [ "modern-observability-stacks", "modern-adversary-tradecraft", "cloud-environments", "corporate-environments", "production-environments" ], "domainSpecificKnowledge" : [ "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "communicationSkills" : "Written communication; Verbal communication", "innovationCreativity" : "Use Serval's agents", "qualificationsBasic" : "10+ years cybersecurity, Deep expertise detection engineering, Deep expertise incident response, Deep expertise security operations, Deep experience building teams, Deep experience leading teams, Stellar leadership skills, Demonstrated history driving improvements, Exceptional written communication, Exceptional verbal communication, Remain calm under pressure, Effectively run incidents, Deep expertise observability stacks, Deep expertise detection primitives, Understand modern adversary tradecraft, Experience translating TTPs, Experience into detection strategies, Experience into response actions", "qualificationsPreferred" : "Experience with SIEM, Experience with data lakes, Experience with EDR, Experience with cloud telemetry, Experience with logging", "rawDescription" : "WHO WE ARE Serval http://serval.com is an AI-native automation platform transforming how enterprises operate. We build intelligent agents that understand real-world workflows and execute them end-to-end — replacing manual processes and rigid legacy systems with adaptive, learning software. Founded in early 2024, Serval is already trusted by companies like Fox, Notion, Perplexity, Vercel, and Brex to automate high-volume, high-friction operational work across their organizations. At the core of Serval is an agentic AI platform that turns natural language into production-grade workflows. Our agents don’t just respond to requests — they reason, take action across systems, and continuously improve with usage. What began with operational use cases has quickly evolved into a horizontal AI automation layer used across IT, HR, Finance, Security, Legal, and Engineering. Our mission is to eliminate repetitive, manual work across the enterprise and give teams leverage through intelligent automation. Long term, we’re building the universal AI operations layer — a system of agents that sits across business functions and runs the workflows that keep modern companies moving. We’re backed by leading investors including Sequoia Capital, Redpoint Ventures, Meritech, First Round, General Catalyst, Elad Gil, and others. ROLE OVERVIEW As Detection and Response Lead, you'll build and scale the foundations of Serval's cybersecurity detection and response operations. You will set the strategy and drive execution for security monitoring, incident response, recovery, and post-incident improvement across our infrastructure and the systems our customers trust us to operate in. You'll be a hands-on leader with deep technical credibility and strong operational instincts. You will build and mentor a team, partner closely with Engineering and Product, and ensure that detection and response capabilities are embedded by design into the systems that power Serval. WHAT YOU'LL DO - Design, implement, and operate detection and response operations, including continuous monitoring, triage, investigation, containment, and remediation of security events across a diverse set of networks and infrastructure. - Build, lead, and directly mentor a team spanning observability, detection and response, and threat intelligence, hiring and scaling these functions deliberately and proportionately as Serval's platform and customer footprint grow. - Ensure world-class operational rigor and readiness through incident playbooks, on-call and escalation paths, tabletop exercises, and continuous improvement of response quality and speed. - Improve detection quality and coverage by partnering with engineering teams to ensure critical telemetry is available, reliable, and actionable across cloud, corporate, and production environments. - Partner deeply across Engineering, Product, and Infrastructure to embed detection and response into Serval's systems by design rather than as an afterthought. - Build a security program capable of withstanding sophisticated adversaries, including by using Serval's own agents to solve frontier security and security-operations problems. WHAT YOU'LL NEED - Have 10+ years in cybersecurity with deep expertise in detection engineering, incident response, and security operations. - Have deep experience building and leading detection and response, instrumentation/observability, and threat intelligence teams. - Have stellar leadership skills and a demonstrated history of driving durable, continuous improvements to programs, processes, and people. - Have exceptional written and verbal communication skills, can remain calm under pressure, and can effectively run command of security incidents involving numerous stakeholders across a diverse gamut of teams, expertise, and seniority. - Have deep expertise in modern observability stacks (e.g., SIEM, data lakes, EDR, cloud telemetry, logging) and detection primitives. - Understand modern adversary tradecraft (TTPs) and have demonstrated experience translating it into practical detection strategies and response actions. - Are mission-oriented, have unimpeachable integrity, and are passionate about detecting and responding to adversaries in a highly complex, fast-paced environment. WHAT WE OFFER - Impact: Be a key player in shaping the success of our product and company. - Growth: Build a fundamentally new AI product offering with the support of our experienced team and investors. Grow rapidly with the company. - Culture: Join a culture that values innovation, ownership, accountability, and fun.", "summaryDescription" : "Security Engineer, Detection and Response at Serval. Skills: Detection engineering, Incident response, Security operations, Team leadership. Design detection and response operations. Implement detection and response operations", "createdAt" : "2026-06-14T03:16:25.185", "lastUpdated" : "2026-06-15T09:19:56.220", "ingestTimestamp" : "2026-06-14T03:16:25.185", "mongoId" : "6a2cb0c074d8ee00a09daf1c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 200000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Adversary tradecraft", "Detection strategies", "Response actions", "Leadership", "Mentoring", "Detection engineering", "Incident response", "Security operations", "Team leadership", "Threat intelligence", "Observability", "Program management", "Modern observability stacks", "Modern adversary tradecraft", "Cloud environments", "Corporate environments", "Production environments" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1210.0618, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "68e0a7e5ce260f92cbf8ec2f", "title" : "Security Engineer I, Corporate Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T02:11:38.217", "fingerprint" : "418154fcb96c9a8a4ab0acceaaef4f10a7f0cbb2c4482842e37898cf2f46bf2a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3099188/apply", "externalId" : "60cf4257-a61e-446a-992e-59a55d77328b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Python, Ruby, Java, C/C++, EC2, RDS, AWS", "professionalSkills" : [ "Risk analysis", "Security policy", "Security tooling", "Security operations", "Threat intelligence", "Vulnerability detection", "Incident response", "Network security", "Security architecture" ], "hardSkillsList" : [ "Network security design", "TCP/IP protocols", "Incident triage", "Incident response", "Log management", "Alert writing", "Forensic methodologies" ], "hardSkills" : [ { "name" : "Network security design", "level" : "intermediate" }, { "name" : "TCP/IP protocols", "level" : "intermediate" }, { "name" : "Incident triage", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Log management", "level" : "intermediate" }, { "name" : "Alert writing", "level" : "intermediate" }, { "name" : "Forensic methodologies", "level" : "intermediate" } ], "majorSkills" : "Security automation, Vulnerability detection, Incident response, Network security", "majorSkillsList" : [ "Security automation", "Vulnerability detection", "Incident response", "Network security" ], "coreResponsibilities" : "Review threat intelligence and offensive security data, Develop technologies for automated vulnerability detection and prevention, Perform risk analysis, Drive technical mitigations, Participate in security operations support, Perform incident response and triage, Develop security policies and procedures, Interpret security policies and procedures, Implement security policies and procedures, Evaluate new security tooling and technologies, Recommend new security tooling and technologies, Support learning and development for internal customers", "teamCollaboration" : "Internal customers", "domainKnowledge" : "Security exploit concepts; Cybersecurity attacks; Network security; TCP/IP protocols; Network security architecture; Forensic methodologies", "domainList" : [ "security-exploit-concepts", "cybersecurity-attacks", "network-security", "tcp-ip-protocols", "network-security-architecture", "forensic-methodologies" ], "domainSpecificKnowledge" : [ "Security exploit concepts", "Cybersecurity attacks", "Network security", "TCP/IP protocols", "Network security architecture", "Forensic methodologies" ], "toolProficiency" : [ "SIEM", "Log management tools", "BurpSuite", "Metasploit", "IDA Pro", "Caldera" ], "communicationSkills" : "Translating technical issues", "continuousLearning" : "Learning and development", "innovationCreativity" : "Inventing security tooling; Developing security tooling; Automating security tooling", "problemSolvingSkills" : "Solve security challenges", "qualificationsBasic" : "Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, In-depth understanding of security exploit concepts, Advanced knowledge in network security design, TCP/IP protocols and topology, and network security architecture, Experience with incident triage and response, Working knowledge of Python, Ruby, Java, or C/C++, Versed in SIEM, log management tools, and alert writing", "qualificationsPreferred" : "3+ years of progressive experience in a security-focused role, Experience in a security operations team or conducting threat hunting operations, Experience in generating automated metrics to measure IT security effectiveness and consistency, Effective teacher and instructor, Experience developing and delivering training, Excellent written communication skills, Experience architecting, securing, and operating Amazon Web Services, Experience in using standard Security Assessment and Penetration Testing tools, Knowledgeable of forensic methodologies and best practices", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Arlington, VA, USA We are the \"blue team\" for Amazon's Corporate Services Security organization. Our team designs and builds secure monitoring solutions, develops security automation, and solves security challenges at a massive scale. We are responsible for securing the infrastructure and software built and operated by service teams in Amazon Finance, Legal, People Experience & Technology, and Communications & Corporate Responsibility Key job responsibilities · Review threat intelligence and offensive security data to develop technologies for automated vulnerability detection and prevention · Perform risk analysis and drive technical mitigations · Participate in security operations support to include incident response and triage · Develop, interpret, and implement security policies and procedures · Evaluate and recommend new security tooling and technologies · Support the learning and development our internal customers A day in the life If you enjoy inventing, developing, and automating security tooling, this position will provide you with a unique opportunity to secure thousands of EC2 instances, hundreds of RDS databases, petabytes of data, and millions of lines of code. You will help defend critical Amazon data and join a team that secures the applications and infrastructure used by hundreds of millions of customers every day. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline - An in-depth understanding of security exploit concepts and how to detect and prevent cybersecurity attacks and anomalies - Advanced knowledge in network security design, TCP/IP protocols and topology, and network security architecture - Experience with incident triage and response - Working knowledge of at-least one of the following languages: Python, Ruby, Java, or C/C++ - Versed in security information and event management (SIEM), log management tools, and alert writing Preferred Qualifications: - 3+ years of progressive experience in a security-focused role - Experience in a security operations team or conducting threat hunting operations - Experience in generating automated metrics to measure IT security effectiveness and consistency - An effective teacher and instructor, with experience developing and delivering training to security, technical, and business professionals - Excellent written communication skills with a focus on translating technically complex security issues into simple, easy to understand concepts for leadership consumption - Experience architecting, securing, and operating Amazon Web Services - Experience in using standard Security Assessment and Penetration Testing tools such as BurpSuite, Metasploit, IDA Pro, Caldera - Knowledgeable of forensic methodologies and best practices to investigate intrusions, preserve evidence, and coordinate a unified security response Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer I, Corporate Services Security at Amazon.com Services LLC. Skills: Security automation, Vulnerability detection, Incident response, Network security. Review threat intelligence and offensive security data. Develop technologies for automated vulnerability detection and prevention", "postedDate" : "2026-06-13T16:54:11.174", "createdAt" : "2026-06-13T16:54:11.174", "lastUpdated" : "2026-06-15T02:11:38.217", "ingestTimestamp" : "2026-06-13T16:54:11.174", "mongoId" : "68e0a7e5ce260f92cbf8ec2f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3099188/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Network security design", "TCP/IP protocols", "Incident triage", "Incident response", "Log management", "Alert writing", "Forensic methodologies", "Security automation", "Vulnerability detection", "Network security", "Risk analysis", "Security policy", "Security tooling", "Security operations", "Threat intelligence", "Security architecture", "Security exploit concepts", "Cybersecurity attacks", "Network security architecture", "SIEM", "Log management tools", "BurpSuite", "Metasploit", "IDA Pro", "Caldera" ], "skillCount" : 25, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1206.8932, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a660974d8ee00a062ba99", "title" : "Senior Security & Compliance Engineer", "company" : "AWS Security Assurance Services LLC", "industry" : "Solutions Architect, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 178400.0, "max" : 226700.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Austin, Texas, USA", "locations" : [ "Austin, Texas, USA" ], "certifications" : [ "CISSP", "CCSP", "AWS Certified Security Specialty" ], "timestamp" : "2026-06-16T04:30:33.102", "fingerprint" : "dc87cec50f78cf2a5dc019173f2ca7458bf394bc619de93af396cf1b29a21db1", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443022/apply", "externalId" : "512c8dfe-fd12-4225-9eb8-34f7b90e9cf1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud security, Security tools, AWS, Azure, GCP, IAM, VPC, Security groups, WAF, SIEM, Vulnerability scanning, Penetration testing, Scripting, Automation", "professionalSkills" : [ "System design", "Risk assessment", "Security architecture" ], "hardSkillsList" : [ "Cloud security", "Compliance frameworks", "Security tools", "Incident response", "Vulnerability management", "Threat modeling", "Security automation" ], "hardSkills" : [ { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Compliance frameworks", "level" : "intermediate" }, { "name" : "Security tools", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Compliance, Security engineering", "majorSkillsList" : [ "Cloud security", "Compliance", "Security engineering" ], "coreResponsibilities" : "Design and implement security controls, Develop and maintain security policies, Conduct security assessments, Respond to security incidents, Automate security processes, Collaborate with engineering teams, Stay current with security threats", "teamCollaboration" : "Engineering teams; Security operations; Compliance teams", "domainKnowledge" : "Cloud security; Compliance frameworks; AWS; Azure; GCP; NIST; ISO 27001; SOC 2; PCI DSS", "domainList" : [ "cloud-security", "compliance-frameworks", "aws", "azure", "gcp", "nist", "iso-27001", "soc-2", "pci-dss" ], "domainSpecificKnowledge" : [ "Cloud security", "Compliance frameworks", "AWS", "Azure", "GCP", "NIST", "ISO 27001", "SOC 2", "PCI DSS" ], "toolProficiency" : [ "SIEM tools", "Vulnerability scanners", "Cloud security tools", "Automation tools" ], "communicationSkills" : "Technical documentation; Security reports", "documentationSkills" : "Security policies; Security procedures; Architecture diagrams", "continuousLearning" : "Security conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Incident investigation; Security troubleshooting", "outcomesObjectives" : "Maintain security posture; Reduce security risks; Ensure compliance", "qualificationsBasic" : "Bachelor's degree or equivalent experience, 5+ years of experience in security engineering, Experience with cloud security, Experience with compliance frameworks, Experience with security tools", "qualificationsPreferred" : "Master's degree in a related field, Experience with AWS security services, Experience with compliance audits, Experience with incident response", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS Security Assurance Services (SAS) is hiring a Senior Security & Compliance Engineer to innovate on behalf of customers and lead prototyping and development of the security and compliance solutions. The right candidate will own security risk identification, mitigation, and engineering outcomes that span beyond a single team: designing controls, writing code, leading reviews, automating remediations, and translating compliance frameworks into secure-by-default implementations on AWS. They will lead design, deployment, and implementation of complex AWS security and compliance solutions that accomplish defined business and security outcomes, solving for new levels of scale, complexity, and performance. Key job responsibilities Engineer AI-enabled automations, lead threat modeling, security design reviews, architecture reviews & security assessments Own design and architecture choices for security and compliance automation solutions for regulated customers and influence partner-org designs. Build secure-by-default IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI/ML workloads. Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, technical control validation, visualization and reporting, automated evidence collection and remediation of insecure configurations at scale. Architect custom preventive, detective, and proactive controls, e.g. service-Control- policies, Resource-Control Policies (SCPs and RCPs), policy-as-code (cfn-guard, OPA Rego, Cedar), and automated remediation workflows. Set the bar for authentication and authorization, data handling, least privilege, encryption, micro-segmentation, tagging strategy, integrations via API and MCP, and secure AI agentic design. Write and review architecture, code, scripts, IaC, including Python, Terraform, AWS CDK, CloudFormation, REGO). Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure with peers, senior managers, and principal engineers. Lead the development of technical content: sample code, blog posts, workshops, reference architectures, whitepapers. Communicate security risk and design decisions clearly verbally and in writing to technical, non-technical, and C-level audiences. Identify and shape sales opportunities; provide input to AWS service-team roadmaps and SAS offering strategy. Travel to customer sites as needed. About the team The Security Assurance Services team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world's workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers. AWS Security Assurance Services LLC, a PCI-QSAC and HITRUST External Assessor Firm, is a team of industry certified assessors, Security & Compliance Engineers with DevOps and Cloud Infrastructure Architect backgrounds, helping our customers achieve, maintain, and automate security & compliance in the cloud. Basic Qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - 5+ years of (non-internship) scripting, programming, and security code review in common programming languages experience - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team - Experience in Cyber Security and in at least one relevant technical area: large-scale systems engineering, queuing and messaging, Linux networking, performance analysis, software-defined networking - Experience in the full secure software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations Preferred Qualifications: - Custom controls development, SCPs and RCPs. - Experience writing and deploying reusable policy-as-code (cfn-guard, OPA Rego, Cedar, or equivalent). - Hands-on expertise with the AWS Security Reference Architecture, AWS Organizations multi-account strategy, Well-Architected Framework, CI/CD at enterprise scale. - Expert-level knowledge of AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge. - Hands-on technical experience in incident response technology, security, automation, implementation, integration, and/or deployment - Spec-driven development; AI agentic design and Model Context Protocol (MCP) experience. - AWS certifications: Solutions Architect Professional and Security Specialty strongly preferred; additional specialty certifications a plus. - Experience producing audit-ready evidence and working with third-party assessors. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, CA, San Francisco - 183,000.00 - 247,600.00 USD annually USA, TN, Nashville - 151,200.00 - 204,600.00 USD annually USA, TX, Austin - 178,400.00 - 226,700.00 USD annually USA, TX, Dallas - 178,400.00 - 226,700.00 USD annually USA, TX, Houston - 178,400.00 - 226,700.00 USD annually USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually USA, VA, Herndon - 178,400.00 - 226,700.00 USD annually USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually", "summaryDescription" : "Senior Security & Compliance Engineer at AWS Security Assurance Services LLC. Skills: Cloud security, Compliance, Security engineering. Design and implement security controls. Develop and maintain security policies", "postedDate" : "2026-06-14T20:22:11.725", "createdAt" : "2026-06-14T20:22:11.725", "lastUpdated" : "2026-06-16T04:30:33.102", "ingestTimestamp" : "2026-06-14T20:22:11.725", "mongoId" : "6a2a660974d8ee00a062ba99", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443022/apply", "salaryAnnualMin" : 178400, "salaryAnnualMax" : 226700, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cloud security", "Compliance frameworks", "Security tools", "Incident response", "Vulnerability management", "Threat modeling", "Security automation", "Compliance", "Security engineering", "System design", "Risk assessment", "Security architecture", "AWS", "Azure", "GCP", "NIST", "ISO 27001", "SOC 2", "PCI DSS", "CISSP", "CCSP", "AWS Certified Security Specialty", "SIEM tools", "Vulnerability scanners", "Cloud security tools", "Automation tools" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1196.5625, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a307731f292fd229c02354a", "title" : "Software Engineer II, Security Engineering (Auth0)", "company" : "Okta", "industry" : "Cybersecurity", "salary" : { "min" : 105000.0, "max" : 145000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Junior Software Engineer II in Toronto, Canada, adjusted for the technology industry and mid-level experience." }, "location" : "Toronto, ON, Canada", "locations" : [ "Toronto", "ON", "Canada" ], "timestamp" : "2026-06-16T11:53:46.530", "fingerprint" : "a4b0058d7dade276f94fdd0af0df7464787f4bd6f244b7e2cb47dd30625fecf7", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.okta.com/company/careers/opportunity/8003538?gh_jid=8003538", "externalId" : "8003538", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Toronto", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.6534817,-79.3839347" } ], "locationText" : "Toronto, Ontario, Canada", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Go, Python, Kubernetes, Docker, AWS, GCP, Azure, Terraform, PostgreSQL, Redis, Kafka, SQL, NoSQL, REST, GRPC, Protobuf", "professionalSkills" : [ "System design", "API design", "Distributed systems" ], "hardSkillsList" : [ "Authentication", "Authorization", "Cryptography", "Security protocols" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "majorSkills" : "Security Engineering, Authentication, Authorization", "majorSkillsList" : [ "Security Engineering", "Authentication", "Authorization" ], "coreResponsibilities" : "Design and implement authentication and authorization systems, Build and maintain scalable microservices, Develop and manage CI/CD pipelines, Automate infrastructure provisioning and management, Monitor system performance and reliability, Troubleshoot and resolve production issues, Collaborate with product and engineering teams, Write technical documentation, Participate in code reviews, Mentor junior engineers", "teamCollaboration" : "Cross-functional teams; Engineering teams; Product teams", "projectManagementSkills" : [ "Agile methodologies", "Scrum" ], "domainKnowledge" : "Identity and Access Management; OAuth 2.0; OpenID Connect; SAML; JWT; TLS; Network security; Cloud security", "domainList" : [ "identity-and-access-management", "oauth-2-0", "openid-connect", "saml", "jwt", "tls", "network-security", "cloud-security" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "OAuth 2.0", "OpenID Connect", "SAML", "JWT", "TLS", "Network security", "Cloud security" ], "toolProficiency" : [ "Kubernetes", "Docker", "Terraform", "Prometheus", "Grafana", "Datadog", "Splunk", "Pprof", "Git" ], "communicationSkills" : "Technical documentation; Code reviews", "documentationSkills" : "Technical writing; API documentation; Architecture diagrams", "continuousLearning" : "Conferences; Training", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "3+ years experience", "remoteFriendly" : false, "rawDescription" : "Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. We are looking for a Software Engineer II to join the Auth0 Security Engineering organization. You'll help build and maintain the security guardrails for our multi-cloud environment, implementing security and compliance standards as programmatic, code-driven policies. What You Will Do Cloud Security Controls: Implement and maintain organization-wide controls (SCPs, Azure Policy) balancing protection with developer experience. Identity & Access Management (IAM): Build and update templates and permission boundaries that govern how services and humans interact with our cloud, applying the principle of least privilege. Infrastructure & Network Security: Contribute to the security standards for VPC architecture, edge networking, and cross-account connectivity. System Design: Help build systems and processes that validate the security posture of the platform, enforcing our security policies and surfacing actionable feedback for engineering teams. Growth & Collaboration: Partner with teammates across the organization, share what you learn, and continually deepen your security expertise. What You Bring Cloud & Infrastructure Experience: 3+ years of experience in software engineering or information security, with hands-on exposure to cloud-native environments, Kubernetes (EKS, AKS), and cloud security concepts. Policy & Automation: Experience building or maintaining automated controls and infrastructure-as-code, ideally within Terraform workflows. Security Mindset: An eagerness to identify attack vectors and think through risk in distributed systems, with a willingness to learn formal risk assessment practices. Tooling & AI Curiosity: Familiarity with security or cloud tooling, and an interest in applying AI to streamline security tasks and governance. Communication: Strong communication skills and the ability to collaborate effectively across teams. Education: A Bachelor's degree in Computer Science, Information Security, Systems Engineering, or a related field, or equivalent practical experience. Nice to Have Exposure to compliance frameworks such as SOC2, or HIPAA in a cloud environment. Proficiency in one or more languages used for automation and tooling, such as Python, Go, or JavaScript. Experience creating, managing, or securing containerized environments. Familiarity with service mesh (Istio) security policies and zero-trust networking concepts. #LI-HYBRID #LI-SH1 P-2247.2_3470231 Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between: $110,000—$151,800 CAD The Okta Experience Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.", "summaryDescription" : "Software Engineer II, Security Engineering (Auth0) at Okta. Skills: Security Engineering, Authentication, Authorization. Design and implement authentication and authorization systems. Build and maintain scalable microservices", "postedDate" : "2026-06-16T01:19:30.925", "createdAt" : "2026-06-16T01:19:30.925", "lastUpdated" : "2026-06-16T11:53:46.530", "ingestTimestamp" : "2026-06-16T01:19:30.925", "mongoId" : "6a307731f292fd229c02354a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Cryptography", "Security protocols", "Security Engineering", "System design", "API design", "Distributed systems", "Agile methodologies", "Scrum", "Identity and Access Management", "OAuth 2.0", "OpenID Connect", "SAML", "JWT", "TLS", "Network security", "Cloud security", "Kubernetes", "Docker", "Terraform", "Prometheus", "Grafana", "Datadog", "Splunk", "Pprof", "Git" ], "skillCount" : 27, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 1.0, "_score" : 1195.7747, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305fd6f292fd229cf816f7", "title" : "Security Engineer - IAM", "company" : "Netradyne", "industry" : "Technology", "salary" : { "min" : 1750000.0, "max" : 2750000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Engineer - IAM in Bengaluru, India, adjusted for the technology industry and company size." }, "location" : "Bengaluru, Karnataka, India", "locations" : [ "Bengaluru", "Karnataka", "India" ], "certifications" : [ "Microsoft Certified: Identity and Access Administrator Associate (SC-300)" ], "timestamp" : "2026-06-16T07:05:49.913", "fingerprint" : "77162e974e96ae566ee686c5c2590f25fe1e7fe199d746c2d5acee30dcc6d7f3", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.netradyne.com/company/careers?gh_jid=4705894005", "externalId" : "4705894005", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "state" : "Karnataka", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, Karnataka, India", "experienceMinYears" : 3, "experienceMaxYears" : 6, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, AWS IAM, Privileged Access Management, OAuth, SAML, LDAP, Kerberos, Copilot Studio, PowerShell, Python, Bash", "professionalSkills" : [ "Identity governance", "Cloud security", "Least privilege", "Security audits", "Access reviews", "Disaster recovery", "Role-Based Access Control", "Identity lifecycle management", "Access certification" ], "hardSkillsList" : [ "Cloud Security", "User provisioning", "Authentication policies", "Conditional access", "Cloud architecture security", "Shared responsibility models", "Cloud-native security", "IAM policies", "IAM roles", "Privileged user activities", "Multi-factor authentication", "Single sign-on", "Federation mechanisms", "Regulatory standards", "Enterprise applications", "AI agents", "Automated workflows", "Model Context Protocol", "Agent-to-service authentication", "Token management", "Service principal governance", "Permission hierarchies", "Access provisioning", "Access deprovisioning", "Human identities", "Non-human identities", "Identity federation", "Cross-account access", "Security incident response" ], "softSkillsList" : [ "Competitive" ], "hardSkills" : [ { "name" : "Cloud Security", "level" : "intermediate" }, { "name" : "User provisioning", "level" : "intermediate" }, { "name" : "Authentication policies", "level" : "intermediate" }, { "name" : "Conditional access", "level" : "intermediate" }, { "name" : "Cloud architecture security", "level" : "intermediate" }, { "name" : "Shared responsibility models", "level" : "intermediate" }, { "name" : "Cloud-native security", "level" : "intermediate" }, { "name" : "IAM policies", "level" : "intermediate" }, { "name" : "IAM roles", "level" : "intermediate" }, { "name" : "Privileged user activities", "level" : "intermediate" }, { "name" : "Multi-factor authentication", "level" : "intermediate" }, { "name" : "Single sign-on", "level" : "intermediate" }, { "name" : "Federation mechanisms", "level" : "intermediate" }, { "name" : "Regulatory standards", "level" : "intermediate" }, { "name" : "Enterprise applications", "level" : "intermediate" }, { "name" : "AI agents", "level" : "intermediate" }, { "name" : "Automated workflows", "level" : "intermediate" }, { "name" : "Model Context Protocol", "level" : "intermediate" }, { "name" : "Agent-to-service authentication", "level" : "intermediate" }, { "name" : "Token management", "level" : "intermediate" }, { "name" : "Service principal governance", "level" : "intermediate" }, { "name" : "Permission hierarchies", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Access deprovisioning", "level" : "intermediate" }, { "name" : "Human identities", "level" : "intermediate" }, { "name" : "Non-human identities", "level" : "intermediate" }, { "name" : "Identity federation", "level" : "intermediate" }, { "name" : "Cross-account access", "level" : "intermediate" }, { "name" : "Security incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Competitive" } ], "majorSkills" : "Cloud Security, Microsoft Entra ID, AWS IAM", "majorSkillsList" : [ "Cloud Security", "Microsoft Entra ID", "AWS IAM" ], "coreResponsibilities" : "Design identity governance frameworks, Implement identity governance frameworks, Maintain identity governance frameworks, Manage AWS IAM policies, Manage AWS IAM roles, Manage user provisioning, Implement Privileged Access Management solutions, Maintain Privileged Access Management solutions, Monitor privileged user activities, Control privileged user activities, Audit privileged user activities, Configure multi-factor authentication, Manage multi-factor authentication, Configure single sign-on, Manage single sign-on, Configure federation mechanisms, Manage federation mechanisms, Conduct security audits, Conduct access reviews, Integrate IAM solutions, Develop IAM documentation, Maintain IAM documentation, Develop IAM runbooks, Maintain IAM runbooks, Develop disaster recovery procedures, Maintain disaster recovery procedures, Manage identity controls for AI agents, Manage access controls for AI agents, Implement security frameworks for MCP integrations, Implement agent-to-service authentication, Design granular access controls for AI agents, Design scope limitations, Design token management, Design service principal governance, Design Role-Based Access Control models, Maintain Role-Based Access Control models, Build access provisioning workflows, Automate access provisioning workflows, Build access deprovisioning workflows, Automate access deprovisioning workflows, Implement lifecycle management processes, Implement access certification processes, Respond to security incidents", "domainKnowledge" : "Fleet safety; Computer Vision; Edge Computing; Zero Trust; NIST; SOC 2; ISO 27001; Cloud-native architecture; Model Context Protocol", "domainList" : [ "fleet-safety", "computer-vision", "edge-computing", "zero-trust", "nist", "soc-2", "iso-27001", "cloud-native-architecture", "model-context-protocol" ], "domainSpecificKnowledge" : [ "Fleet safety", "Computer Vision", "Edge Computing", "Zero Trust", "NIST", "SOC 2", "ISO 27001", "Cloud-native architecture", "Model Context Protocol" ], "toolProficiency" : [ "Microsoft Entra ID", "AWS IAM", "Delinea Secret Server", "BeyondTrust", "CyberArk", "Okta", "ServiceNow", "Microsoft Identity Manager" ], "communicationSkills" : "Documentation skills", "documentationSkills" : "IAM documentation; Runbooks; Disaster recovery procedures", "qualificationsBasic" : "3-5 years of IAM experience, Demonstrated expertise in Microsoft Entra ID, Solid understanding of AWS IAM, Experience with at least one PAM solution, Understanding of authentication and authorization protocols, Knowledge of compliance frameworks", "qualificationsPreferred" : "3+ years of IAM experience, Senior-level security background, Microsoft Certified: Identity and Access Administrator Associate (SC-300) or similar certification, Experience designing and securing AI agent architectures, Experience designing and securing autonomous workflows, Hands-on experience with Copilot Studio, Hands-on experience with Copilot agents security configurations, Knowledge of Model Context Protocol (MCP), Knowledge of agent-to-service authentication patterns, Experience designing and implementing RBAC models, Expertise in automating access provisioning, Expertise in automating access deprovisioning, Experience implementing access controls for AI agents, Experience implementing access controls for service principals, Experience implementing access controls for automated workflows, Knowledge of identity governance solutions, Knowledge of lifecycle management (ILM) solutions, Experience with multiple cloud providers, Experience implementing Zero Trust security architecture, Familiarity with scripting languages, Experience with identity-first security incident response", "remoteFriendly" : false, "rawDescription" : "Netradyne harnesses the power of Computer Vision and Edge Computing to revolutionize the modern-day transportation ecosystem. We are a leader in fleet safety solutions. With growth exceeding 4x year over year, our solution is quickly being recognized as a significant disruptive technology. Our team is growing, and we need forward-thinking, uncompromising, competitive team members to continue to facilitate our growth. Job Role : Security Engineer – IAM Experience : 3- 6 years About Netradyne Netradyne is a leader in cutting-edge AI-powered safety and fleet management technology. We strive to enhance driver safety, operational efficiency, and overall user experience. As an innovative and rapidly growing company, we are committed to securing a connected future for the transportation industry through technological advancements. Role Overview We are seeking an experienced Security Engineer with a strong focus on Identity and Access Management (IAM) along with Cloud Security. This role offers the opportunity to design, implement, and manage enterprise-level IAM solutions across Microsoft and AWS environments. You will work with cutting-edge IAM technologies including Microsoft Entra ID (formerly Azure AD), AWS IAM, and Privileged Access Management (PAM) solutions. We welcome applicants with 3-5 years of IAM experience, and we are open to considering senior-level candidates with broader security expertise. Key Responsibilities Design, implement, and maintain identity governance frameworks using Microsoft Entra ID, including user provisioning, authentication policies, and conditional access strategies Strong understanding of cloud security concepts including cloud architecture security, shared responsibility models, and cloud-native security best practices Manage AWS IAM policies, roles, and user provisioning across multiple AWS accounts, ensuring least privilege access principles Implement and maintain Privileged Access Management (PAM) solutions to monitor, control, and audit privileged user activities Configure and manage multi-factor authentication (MFA), single sign-on (SSO), and federation mechanisms across hybrid environments Conduct security audits and access reviews to ensure compliance with regulatory standards and internal security policies Integrate IAM solutions with enterprise applications and SaaS platforms Develop and maintain IAM documentation, runbooks, and disaster recovery procedures Manage identity and access controls for AI agents, including Copilot Studio agents and automated workflows Implement security frameworks for Model Context Protocol (MCP) integrations and agent-to-service authentication Design and implement granular access controls for AI agents, including scope limitations, token management, and service principal governance Design and maintain Role-Based Access Control (RBAC) models across enterprise applications, ensuring appropriate permission hierarchies and least privilege principles Build and automate access provisioning and deprovisioning workflows using identity governance tools, reducing manual errors and improving compliance Implement lifecycle management and access certification processes for both human and non-human identities Respond to security incidents related to identity compromise and unauthorized access Required Qualifications 3-5 years of hands-on experience with IAM technologies and solutions Demonstrated expertise in Microsoft Entra ID, including administration and configuration Solid understanding of AWS IAM including identity federation, cross-account access, and policy management Experience with at least one PAM solution (Delinea Secret Server, BeyondTrust, CyberArk, or similar) Strong understanding of authentication and authorization protocols (OAuth, SAML, LDAP, Kerberos) Knowledge of compliance frameworks (Zero Trust, NIST, SOC 2, ISO 27001) Excellent communication and documentation skills Preferred Qualifications 3+ years of IAM experience or senior-level security background Microsoft Certified: Identity and Access Administrator Associate (SC-300) or similar certification Experience designing and securing AI agent architectures and autonomous workflows Hands-on experience with Copilot Studio and Copilot agents security configurations Knowledge of Model Context Protocol (MCP) and agent-to-service authentication patterns Experience designing and implementing RBAC models across complex application ecosystems Expertise in automating access provisioning and deprovisioning workflows using platforms like Okta, ServiceNow, or Microsoft Identity Manager Experience implementing access controls specifically for AI agents, service principals, and automated workflows Knowledge of identity governance and lifecycle management (ILM) solutions Experience with multiple cloud providers (Azure, AWS, GCP) Experience implementing Zero Trust security architecture Familiarity with scripting languages (PowerShell, Python, Bash) for automation Experience with identity-first security incident response Key Technical Skills Category Technologies does not promise any advance payment for work equipment set-up and does not use recruitment or job-sourcing agencies that charge candidates an advance fee of any kind. Official communication about your application will only come from emails ending in ‘@netradyne.com’ or ‘@us-greenhouse-mail.io’. Please review and apply to our available job openings at Netradyne.com/company/careers. For more information on avoiding and reporting scams, please visit the Federal Trade Commission's job scams website.", "summaryDescription" : "Security Engineer - IAM at Netradyne. Skills: Cloud Security, Microsoft Entra ID, AWS IAM. Design identity governance frameworks. Implement identity governance frameworks", "postedDate" : "2026-06-15T23:27:18.621", "createdAt" : "2026-06-15T23:27:18.621", "lastUpdated" : "2026-06-16T07:05:49.913", "ingestTimestamp" : "2026-06-15T23:27:18.621", "mongoId" : "6a305fd6f292fd229cf816f7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud Security", "User provisioning", "Authentication policies", "Conditional access", "Cloud architecture security", "Shared responsibility models", "Cloud-native security", "IAM policies", "IAM roles", "Privileged user activities", "Multi-factor authentication", "Single sign-on", "Federation mechanisms", "Regulatory standards", "Enterprise applications", "AI agents", "Automated workflows", "Model Context Protocol", "Agent-to-service authentication", "Token management", "Service principal governance", "Permission hierarchies", "Access provisioning", "Access deprovisioning", "Human identities", "Non-human identities", "Identity federation", "Cross-account access", "Security incident response", "Competitive", "Microsoft Entra ID", "AWS IAM", "Identity governance", "Cloud security", "Least privilege", "Security audits", "Access reviews", "Disaster recovery", "Role-Based Access Control", "Identity lifecycle management", "Access certification", "Fleet safety", "Computer Vision", "Edge Computing", "Zero Trust", "NIST", "SOC 2", "ISO 27001", "Cloud-native architecture", "Microsoft Certified: Identity and Access Administrator Associate (SC-300)", "Delinea Secret Server", "BeyondTrust", "CyberArk", "Okta", "ServiceNow", "Microsoft Identity Manager" ], "skillCount" : 56, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1189.7716, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a3053c2f292fd229cf147e3", "title" : "IT Security Manager", "company" : "bTranz", "industry" : "Computer Software", "salary" : { "min" : 275000.0, "max" : 450000.0, "currency" : "SAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Manager in Riyadh, Saudi Arabia, adjusted for Manager seniority and the Technology industry." }, "location" : "Riyadh, Riyadh Province, SA", "locations" : [ "Riyadh", "Riyadh Province", "SA" ], "certifications" : [ "CISSP", "CISM", "CCSP", "GIAC", "ISO 27001 LI/LA" ], "timestamp" : "2026-06-16T07:17:32.595", "fingerprint" : "2e7e8a56b5236e01aa792dc0f9d77a4a4f42d341925635bead7451fbfc87546c", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/BTranz/744000132126174-it-security-manager", "externalId" : "744000132126174", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Riyadh", "state" : "Riyadh Province", "country" : "Saudi Arabia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.2663059,47.7788542" } ], "locationText" : "Riyadh, Riyadh Province, Saudi Arabia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "IAM, SSO, MFA, Encryption, Monitoring, Vulnerability management, Secure SDLC, Crypto, KMS, HSM, Zero Trust", "professionalSkills" : [ "Pre-sales support", "Audit management", "Risk mitigation", "Security governance" ], "hardSkillsList" : [ "Cloud security controls" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, Customer Accounts", "majorSkillsList" : [ "Cloud Security", "Customer Accounts" ], "coreResponsibilities" : "Serve as primary security point of contact, Build relationships with customer security leadership, Build relationships with IT teams, Build relationships with risk/compliance teams, Build relationships with engineering teams, Lead security governance cadences, Conduct posture reviews, Conduct risk discussions, Conduct roadmap alignment, Conduct discovery sessions, Understand customer environments, Understand threat models, Understand regulatory requirements, Advise on cloud security controls, Advise on best practices", "teamCollaboration" : "Cross-functional teams; Internal security specialists", "domainKnowledge" : "Cloud architecture; OCI; AWS; Azure; Data residency; Regulated industries", "domainList" : [ "cloud-architecture", "oci", "aws", "azure", "data-residency", "regulated-industries" ], "domainSpecificKnowledge" : [ "Cloud architecture", "OCI", "AWS", "Azure", "Data residency", "Regulated industries" ], "communicationSkills" : "Customer-facing lead", "qualificationsBasic" : "Understanding of cloud architecture, Background in security consulting, Background in cloud security architecture, Background in enterprise risk/GRC, Proven experience handling complex escalations, Proven experience leading cross-functional teams", "qualificationsPreferred" : "CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "bTranz Software Solutions is an ERP and Mobile Application Development company, which offers a wide range of services across Oracle ERP, VAT and Cloud Services along with Mobile Application Development. With its presence in multiple countries, it offers its services across the globe with most of their customers reside in UAE and EAST African Countries. It’s a company professionally managed by team of highly experienced technocrats having over a decade of experience. Our innovative, qualified and experienced team brings together knowledge, experience and processes which enables us to deliver a solution which is the best value proposition for our customers. For more information please logon to https://www.btranz.com Role Overview We are seeking an experienced ITSM Security Account Manager to serve as a trusted advisor and customer‑facing lead for strategic engagements. This role involves pre‑sales support, audit management, and proactive IT Security Management to ensure compliance, risk mitigation, and consistent support for key EU customer accounts. Key Responsibilities * Serve as the primary security point of contact for assigned strategic accounts. * Build strong relationships with customer security leadership (CISO org), IT, risk/compliance, and engineering teams. * Lead security governance cadences (monthly/quarterly) including posture reviews, risk discussions, and roadmap alignment. * Conduct discovery sessions to understand customer environments, threat models, and regulatory requirements. * Advise on cloud security controls and best practices (IAM/SSO/MFA, encryption, segmentation, monitoring, vulnerability management, secure SDLC). * Collaborate with internal security specialists on advanced topics (crypto/KMS/HSM, workload isolation, data residency, Zero Trust). Qualifications * Strong understanding of cloud architecture (OCI, AWS, Azure) and ability to translate architecture into security posture implications. * Background in security consulting, cloud security architecture, or enterprise risk/GRC in regulated industries. * Relevant security certifications : CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA. * Proven experience handling complex escalations and leading cross‑functional teams in matrixed organizations. * Familiarity with customer security assurance processes (audit requests, pen test coordination, attestations).", "summaryDescription" : "IT Security Manager at bTranz. Skills: Cloud Security, Customer Accounts. Serve as primary security point of contact. Build relationships with customer security leadership", "postedDate" : "2026-06-15T07:18:36.000", "createdAt" : "2026-06-15T23:31:20.994", "lastUpdated" : "2026-06-16T07:17:32.595", "ingestTimestamp" : "2026-06-15T23:31:20.994", "mongoId" : "6a3053c2f292fd229cf147e3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Cloud Security", "Customer Accounts", "Pre-sales support", "Audit management", "Risk mitigation", "Security governance", "Cloud architecture", "OCI", "AWS", "Azure", "Data residency", "Regulated industries", "CISSP", "CISM", "CCSP", "GIAC", "ISO 27001 LI/LA" ], "skillCount" : 18, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1185.5718, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.85 }, { "id" : "6a30704bf292fd229cff307e", "title" : "Senior Security Operations Analyst", "company" : "NuHarbor Security", "industry" : "Cybersecurity", "salary" : { "min" : 110000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote", "Vermont", "United States" ], "certifications" : [ "Relevant industry certifications" ], "timestamp" : "2026-06-16T11:21:20.145", "fingerprint" : "3beb472f9b9441ed873cd3e0d296125167bd0a272c7086b41fed4fc363a7dc2c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.nuharborsecurity.com/careers?gh_jid=7988994", "externalId" : "7988994", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, EDR, Identity telemetry, CrowdStrike, Microsoft Defender, Microsoft Sentinel, Splunk Enterprise Security, Python, PowerShell", "professionalSkills" : [ "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement" ], "hardSkillsList" : [ "Security event triaging", "Threat hunting", "Scripting" ], "softSkillsList" : [ "Mentorship" ], "hardSkills" : [ { "name" : "Security event triaging", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" } ], "majorSkills" : "Security Operations, Incident Response, Threat Analysis", "majorSkillsList" : [ "Security Operations", "Incident Response", "Threat Analysis" ], "coreResponsibilities" : "Own investigations end-to-end, Conduct root cause analysis, Reconstruct attack chains, Produce client-ready written narrative, Correlate across SIEM, EDR, and identity telemetry, Identify what alerts missed, Self-assign to difficult work, Deliver work reflecting technical excellence, Support Security Analyst team, Triage alerts, Classify alerts, Dispose alerts, Escalate alerts within SLA, Identify security gaps, Communicate security mitigations, Communicate proactively with Manager, Facilitate client-facing meetings, Produce ticket documentation, Include evidence trail in tickets, Include analyst reasoning in tickets, Include disposition rationale in tickets, Include plain-language client summary, Remain current on emerging threats, Remain current on CVEs, Remain current on attacker techniques, Support onboarding of new clients, Train junior analysts, Mentor junior analysts, Support junior analysts, Coach on investigation methodology, Coach on documentation standards, Coach on client communication, Review escalations from junior analysts, Ensure investigative completeness, Ensure documentation quality, Develop automation playbooks, Refine automation playbooks, Contribute tuning feedback, Contribute noise identification, Contribute alert fidelity assessments, Develop recommendations for client cybersecurity program, Develop enhancements for client cybersecurity program, Coordinate with NuHarbor clients, Coordinate with internal stakeholders during incident response, Coordinate with internal stakeholders after incident response", "teamCollaboration" : "Security Operations team; Detection Engineering program; Internal stakeholders", "projectManagementSkills" : [ "Incident response management" ], "domainKnowledge" : "Cybersecurity services; SOC operations; MSSP environment; Endpoint Detection and Response", "domainList" : [ "cybersecurity-services", "soc-operations", "mssp-environment", "endpoint-detection-and-response" ], "domainSpecificKnowledge" : [ "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR" ], "communicationSkills" : "Client-ready documentation; Client-facing meetings; Incident briefings; Escalation reviews; Threat landscape discussions; Plain-language client summary", "documentationSkills" : "Client-ready documentation; Runbooks; Support procedures; Ticket documentation", "continuousLearning" : "Remain current on emerging threats; Remain current on CVEs; Remain current on attacker techniques", "innovationCreativity" : "Develop automation playbooks; Refine automation playbooks", "problemSolvingSkills" : "Deep investigations; Root cause analysis; Attack chain reconstruction; Identify what alerts missed; Self-assign to complex problems; Troubleshooting", "specialRequirements" : "Work Sunday - Thursday, 8:30am - 5:00pm, Authorized to work within the United States", "outcomesObjectives" : "Improve cybersecurity of clients; Deliver work that reflects technical excellence; Deliver work that reflects client outcomes", "qualificationsBasic" : "Bachelor's Degree and five (5) years of experience in cybersecurity, Relevant industry certifications, Demonstrated experience with SOC operations, Executing security event triaging and tuning, Demonstrated experience writing runbooks and support procedures, Demonstrated experience executing Monitoring and Response, Containment, eradication, and recovery experience, Demonstrated experience with threat hunting, Hands on experience with at least two EDR/SOAR solutions, Demonstrated experience with scripting in Python, PowerShell, or equivalent, Excellent written and verbal communication skills, Previous experience in technical support or security-focused role, Authorized to work within the United States", "qualificationsPreferred" : "Bachelor's Degree and seven (7) or more years of experience in cybersecurity, Progressive cybersecurity disciplines experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The Company Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission. The Role The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes. . What you’ll do Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative. Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged. Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes. Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements. Identify and communicate security gaps and mitigations in the context of client environments. Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility. Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions. Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments. Support the onboarding of new clients onto NuHarbor Security Services and Platforms. Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication. Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality. Develop and refine automation playbooks to reduce alert volume and improve analyst workflow. Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership. Develop recommendations and enhancements to mature a client’s cybersecurity program. Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities. Your foundation. The requirements for this role: Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. Demonstrated experience with SOC operations, executing security event triaging and tuning. Demonstrated experience writing runbooks and support procedures. Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment. Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset. Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions. CrowdStrike Microsoft Defender Microsoft Sentinel Splunk Enterprise Security Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions. Excellent written and verbal communication skills. Previous experience in technical support or security-focused role. Willing and able to work Sunday - Thursday, 8:30am - 5:00pm. Must be authorized to work within the United States. Additional capabilities that will differentiate you for this role: Bachelor’s Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment. Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.) Demonstrated experience communicating and presenting to executive level client stakeholders. Technical writing and reporting experience. Experience executing initial triaging and response through a SOAR platform. Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems. Experience with memory and storage forensics. Experience with static and dynamic malware analysis. Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences. Experience with data science techniques (clustering, anomaly detection, data normalization, etc. General systems administrator experience. Fluency with the MITRE ATT&CK framework as an active investigation and communication tool. Experience working in multiple cybersecurity disciplines (i. e. Penetration Testing, Threat, Information Assurance, Engineering, etc.) The Rewards What you can expect: The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market. An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption. A collaborative and driven working environment in a rapidly growing company and market A fun and social working environment where you are encouraged to be your true self. You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO. The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer. We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled. NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.", "summaryDescription" : "Senior Security Operations Analyst at NuHarbor Security. Skills: Security Operations, Incident Response, Threat Analysis. Own investigations end-to-end. Conduct root cause analysis", "postedDate" : "2026-06-16T01:19:48.332", "createdAt" : "2026-06-16T01:19:48.332", "lastUpdated" : "2026-06-16T11:21:20.145", "ingestTimestamp" : "2026-06-16T01:19:48.332", "mongoId" : "6a30704bf292fd229cff307e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 135000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security event triaging", "Threat hunting", "Scripting", "Mentorship", "Security Operations", "Incident Response", "Threat Analysis", "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement", "Incident response management", "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response", "Relevant industry certifications", "SIEM", "EDR", "SOAR" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1183.4845, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30591ef292fd229cf4530c", "title" : "IT Security Manager", "company" : "bTranz", "industry" : "Computer Software", "salary" : { "min" : 240000.0, "max" : 360000.0, "currency" : "SAR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Manager in Riyadh, Saudi Arabia, adjusted for manager seniority and full-time employment in the technology industry." }, "location" : "Riyadh, Riyadh Province, SA", "locations" : [ "Riyadh", "Riyadh Province", "SA" ], "certifications" : [ "CISSP", "CISM", "CCSP", "GIAC", "ISO 27001 LI/LA" ], "timestamp" : "2026-06-16T14:04:01.056", "fingerprint" : "774f6ab1f937b582397770077d4e4faefc5ede4552022e43296e1541454ba593", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/BTranz/744000132126174-it-security-manager", "externalId" : "744000132126174", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Riyadh", "state" : "Riyadh Province", "country" : "Saudi Arabia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.2663059,47.7788542" } ], "locationText" : "Riyadh, Riyadh Province, Saudi Arabia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "IAM, SSO, MFA, Encryption, Monitoring, Vulnerability management, Secure SDLC, Crypto, KMS, HSM, Zero Trust", "professionalSkills" : [ "Pre-sales support", "Audit management", "Risk mitigation", "Security governance" ], "hardSkillsList" : [ "Cloud security controls" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, Customer Account Management", "majorSkillsList" : [ "Cloud Security", "Customer Account Management" ], "coreResponsibilities" : "Serve as primary security point of contact, Build relationships with customer security leadership, Build relationships with customer IT teams, Build relationships with customer risk/compliance teams, Build relationships with customer engineering teams, Lead security governance cadences, Conduct posture reviews, Conduct risk discussions, Align roadmaps, Conduct discovery sessions, Understand customer environments, Understand threat models, Understand regulatory requirements, Advise on cloud security controls, Advise on best practices", "teamCollaboration" : "Cross-functional teams; Internal security specialists", "domainKnowledge" : "Cloud architecture; OCI; AWS; Azure; Regulated industries", "domainList" : [ "cloud-architecture", "oci", "aws", "azure", "regulated-industries" ], "domainSpecificKnowledge" : [ "Cloud architecture", "OCI", "AWS", "Azure", "Regulated industries" ], "communicationSkills" : "Customer-facing lead", "qualificationsBasic" : "Understanding of cloud architecture, Background in security consulting, Background in cloud security architecture, Background in enterprise risk/GRC, Proven experience handling complex escalations, Proven experience leading cross-functional teams", "qualificationsPreferred" : "CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "bTranz Software Solutions is an ERP and Mobile Application Development company, which offers a wide range of services across Oracle ERP, VAT and Cloud Services along with Mobile Application Development. With its presence in multiple countries, it offers its services across the globe with most of their customers reside in UAE and EAST African Countries. It’s a company professionally managed by team of highly experienced technocrats having over a decade of experience. Our innovative, qualified and experienced team brings together knowledge, experience and processes which enables us to deliver a solution which is the best value proposition for our customers. For more information please logon to https://www.btranz.com Role Overview We are seeking an experienced ITSM Security Account Manager to serve as a trusted advisor and customer‑facing lead for strategic engagements. This role involves pre‑sales support, audit management, and proactive IT Security Management to ensure compliance, risk mitigation, and consistent support for key EU customer accounts. Key Responsibilities * Serve as the primary security point of contact for assigned strategic accounts. * Build strong relationships with customer security leadership (CISO org), IT, risk/compliance, and engineering teams. * Lead security governance cadences (monthly/quarterly) including posture reviews, risk discussions, and roadmap alignment. * Conduct discovery sessions to understand customer environments, threat models, and regulatory requirements. * Advise on cloud security controls and best practices (IAM/SSO/MFA, encryption, segmentation, monitoring, vulnerability management, secure SDLC). * Collaborate with internal security specialists on advanced topics (crypto/KMS/HSM, workload isolation, data residency, Zero Trust). Qualifications * Strong understanding of cloud architecture (OCI, AWS, Azure) and ability to translate architecture into security posture implications. * Background in security consulting, cloud security architecture, or enterprise risk/GRC in regulated industries. * Relevant security certifications : CISSP, CISM, CCSP, GIAC, ISO 27001 LI/LA. * Proven experience handling complex escalations and leading cross‑functional teams in matrixed organizations. * Familiarity with customer security assurance processes (audit requests, pen test coordination, attestations).", "summaryDescription" : "IT Security Manager at bTranz. Skills: Cloud Security, Customer Account Management. Serve as primary security point of contact. Build relationships with customer security leadership", "postedDate" : "2026-06-15T07:18:36.000", "createdAt" : "2026-06-16T00:15:18.799", "lastUpdated" : "2026-06-16T14:04:01.056", "ingestTimestamp" : "2026-06-16T00:15:18.799", "mongoId" : "6a30591ef292fd229cf4530c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Cloud Security", "Customer Account Management", "Pre-sales support", "Audit management", "Risk mitigation", "Security governance", "Cloud architecture", "OCI", "AWS", "Azure", "Regulated industries", "CISSP", "CISM", "CCSP", "GIAC", "ISO 27001 LI/LA" ], "skillCount" : 17, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1176.9181, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.92 }, { "id" : "68dd1eeace260f92cbea0d48", "title" : "Security Engineer, Corporate Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 136000.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Boston, Massachusetts, USA", "locations" : [ "Boston, Massachusetts, USA" ], "timestamp" : "2026-06-15T05:44:44.106", "fingerprint" : "8bae78392acbe54e5bc142c819e39feec5276108e47c860ece1e51fa379f6f43", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3098656/apply", "externalId" : "b22c0072-7252-41a3-980c-b06f4163a21e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Boston", "state" : "Massachusetts", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "42.3588336,-71.0578303" } ], "locationText" : "Boston, Massachusetts, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Java, Python, Javascript", "professionalSkills" : [ "Application security", "Risk assessment", "Security architecture" ], "hardSkillsList" : [ "Secure code review", "Threat modeling", "Adversarial security analysis" ], "hardSkills" : [ { "name" : "Secure code review", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Adversarial security analysis", "level" : "intermediate" } ], "majorSkills" : "Application security, Security engineering, Risk management", "majorSkillsList" : [ "Application security", "Security engineering", "Risk management" ], "coreResponsibilities" : "Perform design reviews, Perform security reviews, Prioritize remediation, Promote security throughout Company, Build working relationships, Handle disparate tasks, Manage security review activities, Escalate issues to senior leadership, Build tooling, Improve tooling, Share tooling benefits, Assist with recruiting, Assist with administrative work, Create threat models, Update threat models, Maintain threat models, Perform manual secure code review, Perform automated secure code review, Develop security automation tools, Perform adversarial security analysis, Provide security training, Provide security outreach, Provide security architecture guidance, Provide design guidance, Solve complex security problems, Influence process, Influence priorities, Influence choices, Improve security outcomes, Provide technical guidance, Provide strategic guidance, Collaborate with application teams, Inspect application code, Build new frameworks, Fine-tune service design", "teamCollaboration" : "Development teams; Service team; Across Amazon; Application development teams; Builder teams", "domainKnowledge" : "Application security; AWS Services; Corporate services security", "domainList" : [ "application-security", "aws-services", "corporate-services-security" ], "domainSpecificKnowledge" : [ "Application security", "AWS Services", "Corporate services security" ], "toolProficiency" : [ "AWS Services" ], "communicationSkills" : "Oral communication; Written communication", "innovationCreativity" : "Pursue projects", "problemSolvingSkills" : "Troubleshooting systems issues; Analyze logs; Solve complex security problems", "outcomesObjectives" : "Minimize security risks; Provide high quality findings; Improve security outcomes", "qualificationsBasic" : "2+ years troubleshooting systems issues, 2+ years analyzing logs, 2+ years automating tasks, Bachelor's degree in computer science, Bachelor's degree in STEM, 2+ years IT Security experience, Knowledge of networking protocols, Knowledge of security vulnerabilities, Experience in scripting, Experience in programming, Experience in security code reviewing", "qualificationsPreferred" : "2+ years threat modeling experience, 2+ years secure coding, 2+ years identity management, 2+ years software development, 2+ years cryptography, 2+ years system administration, 2+ years network security, 2+ years scripting experience, 2+ years programming experience, 2+ years security code review, Knowledge of command line tools, Knowledge of AWS products, Knowledge of AWS services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: Boston, MA, USA Corporate Services Security (CPSS) is the Amazon security team aligned to Finance & Global Business Services (FGBS), People eXperience & Technology (PXT), Legal, and Communications and Corporate Responsibility (CCR) business organizations. Our Mission is to protect and safeguard Amazon's corporate services, systems, and data. Through proactive engagement with the development teams, we understand the dynamic business processes that run Amazon, and enable our stakeholders to innovate, build, and scale securely. The Product Security Team within CPSS supports numerous applications built using AWS Services. Apart from work, we provide opportunities for our engineers to pursue projects they are passionate about while maintaining work life harmony. Key job responsibilities A successful candidate will need a combination of application security, technical, and communication skills, as well as the ability to handle a mix of disparate tasks and include projects in addition to managing security review activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Perform Design and Security Reviews to determine the level of risk they present to our customers, and then accordingly prioritize their remediation in conjunction with the service team. Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon Demonstrate high capacity and tolerance for context switching and interruptions while remaining productive and effective Escalate issues to senior leadership when issues are not progressing at the correct pace based on impact to ensure we are putting customers first. Explore building and improving our tooling to make your own life easier and share that benefit with all our engineers globally. Assistance with recruiting activities and administrative work Creating, updating, and maintaining threat models for a wide variety of software projects Manual and Automated Secure Code Review, primarily in Java, Python and Javascript Development of security automation tools Adversarial security analysis using tools to augment manual effort Provide Security training and outreach for internal development teams Provide Security architecture and design guidance to application development teams Independently solve systemic, complex security problems that require novel methods or approaches Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications A day in the life As a Security Engineer, you will collaborate with application development teams to ensure we keep our customers safe while developing novel services. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this person will be a security specialist with one or more areas of deep expertise within application security. They will clearly articulate risks to technical and non-technical audiences alike. Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions. The Corporate Services Security (CPSS) Product Security Team is responsible for securing the applications, infrastructure and data developed across People eXperience and Technology (PXT), Finance & Global Business Services (FGBS), Legal and Communications and Corporate Responsibility (CCR). We partner with builder teams to minimize security risks across their applications while being a business enabler. Our team develops security tooling and automation to provide high quality security findings earlier in development lifecycles. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in computer science or equivalent - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience - Knowledge of networking protocols such as HTTP, DNS and TCP/IP - Knowledge of industry-based security vulnerabilities and remediation techniques - Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) - Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience) Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Corporate Services Security at Amazon.com Services LLC. Skills: Application security, Security engineering, Risk management. Perform design reviews. Perform security reviews", "postedDate" : "2026-06-13T11:33:36.094", "createdAt" : "2026-06-13T11:33:36.094", "lastUpdated" : "2026-06-15T05:44:44.106", "ingestTimestamp" : "2026-06-13T11:33:36.094", "mongoId" : "68dd1eeace260f92cbea0d48", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3098656/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Secure code review", "Threat modeling", "Adversarial security analysis", "Application security", "Security engineering", "Risk management", "Risk assessment", "Security architecture", "AWS Services", "Corporate services security" ], "skillCount" : 10, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1176.5935, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c6a5674d8ee00a090b560", "title" : "Director Security Engineering", "company" : "MX Technologies, Inc.", "industry" : "FinTech", "salary" : { "min" : 225000.0, "max" : 325000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director of Security Engineering in Lehi, United States, adjusted for FinTech industry and company size." }, "location" : "Lehi, Utah, United States", "locations" : [ "Lehi", "Utah", "United States" ], "timestamp" : "2026-06-15T12:23:39.324", "fingerprint" : "035c644fd92e9ea5603f5bdf1465ec9a767cd438ff7b06718b30669a396bbe39", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/mxtechnologiesinc/jobs/4246764009", "externalId" : "4246764009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Lehi", "state" : "Utah", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.3881114,-111.8486019" } ], "locationText" : "Lehi, Utah, United States", "experienceLevel" : "Director", "technicalSkills" : "Cloud security, AWS, GCP, Generative AI, GenAI, LLM security, Agentic AI, Prompt injection mitigation, CI/CD security, Runtime security", "professionalSkills" : [ "Product design reviews", "Service ownership model", "Risk management", "Compliance frameworks" ], "hardSkillsList" : [ "Threat detection", "Response program", "Security engineering", "Network security" ], "softSkillsList" : [ "Servant leader", "Forward thinking" ], "hardSkills" : [ { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Response program", "level" : "intermediate" }, { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Servant leader" }, { "name" : "Forward thinking" } ], "majorSkills" : "Security Engineering, GenAI Security, Cloud Security, AI Security", "majorSkillsList" : [ "Security Engineering", "GenAI Security", "Cloud Security", "AI Security" ], "coreResponsibilities" : "Mature operational security capabilities, Evolve threat detection program, Drive strategic improvements, Lead day-to-day operations, Shape organization's strategic direction, Provide tactical operational support, Drive GenAI use, Secure Generative AI models, Secure related data pipelines, Secure agentic AI systems, Protect customer data, Preserve integrity of MX platform, Develop vision for Security Engineering, Develop strategy for Security Engineering, Align strategy with business objectives, Align strategy with risk appetite, Align strategy with industry best practices, Lead cybersecurity engineers, Mentor cybersecurity engineers, Develop cybersecurity engineers, Direct service ownership model, Track service effectiveness, Evaluate engineering processes, Improve engineering processes, Identify automation areas, Identify optimization areas, Identify efficiency areas, Develop policies, Maintain policies, Develop procedures, Maintain procedures, Develop standards, Maintain standards, Perform product requirements analysis, Perform design reviews, Evaluate technology, Select technology", "teamCollaboration" : "Cross functional teams; GRC teams", "projectManagementSkills" : [ "Program leadership" ], "domainKnowledge" : "Modern cloud security; Modern network security; Zero trust; Microservices security; Distributed systems; SOC 2; PCI DSS; NIST", "domainList" : [ "modern-cloud-security", "modern-network-security", "zero-trust", "microservices-security", "distributed-systems", "soc-2", "pci-dss", "nist" ], "domainSpecificKnowledge" : [ "Modern cloud security", "Modern network security", "Zero trust", "Microservices security", "Distributed systems", "SOC 2", "PCI DSS", "NIST" ], "innovationCreativity" : "Innovation encouraged", "qualificationsBasic" : "10+ years cybersecurity experience, 5+ years leadership role, 5+ years cloud security experience, 3+ years GenAI security experience", "qualificationsPreferred" : "Experience securing agentic AI systems, Understanding of modern security architecture, Experience implementing security tools, Partnering with GRC teams, Bachelor's degree, Master's degree preferred, Relevant certifications preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "MX is a fintech company on a mission to empower the world to be financially strong. We build technology that helps banks, credit unions, and fintechs deliver smarter, more intuitive financial experiences to millions of people. Like many startups, we’ve navigated real growth challenges — and we’ve come out stronger on the other side. Today, MX is in a phase of renewed momentum and scale, with a solid foundation and a clear vision for what’s next. This is a place where thoughtful execution matters, innovation is encouraged, and individuals have real ownership over their work. Our culture values curiosity, accountability, and impact. We give people the space to question assumptions, design better solutions, and help shape how the company grows. If you’re looking to do meaningful work, influence outcomes, and grow alongside a company that’s ready to move fast, you’ll feel at home at MX. As a Director of Security Engineering, you’ll work to mature our operational security capabilities, evolve our threat detection and response program, and drive strategic improvements. We’re looking for a hands-on Director of Security Engineering to join our team and help elevate our security team and program to the next level. The ideal candidate for the role will be a passionate, data driven, team-oriented, servant leader who can lead day-to-day operations, help shape the organization’s strategic direction, and, when needed, provide tactical operational support to the team. We are looking for a forward thinking leader already driving programs in: Driving the use of GenAI and Agentic AI to make Security functions more efficient and effective. Deep experience securing Generative AI (GenAI) models and related data pipelines, including prompt injection mitigation and LLM security to enable our engineering teams. Demonstrated expertise in securing agentic AI systems, focusing on runtime protection, secure communication between agents, and mitigating risks associated with autonomous operations. Strong understanding of modern cloud and network security principles, especially in AWS and GCP. In depth experience in executing and leading all Security Engineering verticals, from product design reviews to CI/CD security to runtime security. This person must be mission and values-driven, must have an ownership mentality, and must put the well-being of our customers, our teammates, and our organization at the forefront of how they operate. This person must be able to operate and thrive in a dynamic, high-growth startup environment with established Security Engineering and GRC teams. This is a critical, high-impact role that will serve as a catalyst for growth for any seasoned cybersecurity and technology leader up to the challenge. The Director of Security Engineering is the senior operational leader overseeing this critical area of the organization. This position operates within the Office of the Chief Information Security Officer (CISO) and reports directly to the CISO. The director is responsible for the daily operational leadership and management of the company’s enterprise cybersecurity, information security, and related programs. Additionally, they partner with the Director, GRC to ensure the effective governance of security risks necessary to manage organizational risk, maintain compliance with relevant frameworks and programs, implement resilient and secure IT systems, and prioritize security, privacy, and customer trust throughout the organization. Here are some of the problems you’ll help us solve: Program Leadership - Develop and refine the overall vision and strategy for the Security Engineering and Operations program, aligning it with business objectives, risk appetite, and industry best practices. Team Management - Lead, mentor, and develop a high-performing team of cybersecurity engineers, focusing on the concepts of Service Ownership.  Own and direct a service ownership model for all security services based on security design foundations. The services will be closely tracked for effectiveness using service outcome metrics, maturity metrics, and business ROI metrics. Foster a collaborative and results-oriented environment.  Assign tasks, provide feedback, and conduct performance reviews. Process Improvement - Continuously evaluate and improve engineering processes and system/control performance, identifying areas for automation, optimization, and increased efficiency.  Develop and maintain relevant policies, procedures, and standards. MX Platform oversight - Partner with cross functional teams to perform product requirements analysis and design reviews to ensure the delivery of services that protect our customers data and preserve the integrity of all MX platform processes. Technology Oversight - Evaluate, select, and implement technology solutions and tools that efficiently provide required security control capabilities, with a specific focus on robust security in AWS cloud environments.  Ensure the effective utilization of these tools and integrate them with other security systems.  Stay current with emerging security technologies and threats, including those related to GenAI and agentic AI. Reporting & Metrics - Develop and maintain key performance indicators (KPIs) and metrics to track the performance and effectiveness of security technologies and the overall security engineering program.  Provide regular reports to peers and leadership on trends, progress, risks, and overall security posture. Compliance & Audits: Partner with the Governance, Risk, and Compliance (GRC) team to strike a balance between enforcing controls and maintaining engineering velocity. Ensuring compliance with relevant security regulations and standards (e.g., PCI DSS, SOC2, & NIST).  Support internal and external audits as necessary. Collaboration & Communication - Effectively communicate information related to the security engineering program to technical and non-technical audiences. Collaborate with other security teams, IT operations, and business units. Cultivate and evangelize a culture of security across MX through training, internal communications, and stakeholder engagement, making security a shared responsibility at every level. Serve as a strategic partner to all MX business teams to drive cross-functional security initiatives, reduce technical debt, and implement pragmatic, risk-based and scalable solutions. The Team You'll Work With: You will be part of a security-minded team that believes in progress over perfection and where both security culture and mindset are key. Our team is rethinking how security operations can be accomplished in innovative ways. We focus on enabling our business to security deliver world class services while minimizing and managing risk exposure for MX and its customers. Basic Qualifications 10+ years of experience in cybersecurity, security engineering, or related fields 5+ years in a leadership role overseeing security operations or engineering teams 5+ years of hands-on experience in cloud security, particularly in AWS or GCP environments 3+ years of experience securing Generative AI (GenAI) systems, including LLM security, prompt injection mitigation, and data pipeline protection Preferred Qualifications Experience securing agentic AI systems, including runtime protection and secure agent communication Strong understanding of modern security architecture patterns, including zero trust, microservices security, and distributed systems Experience implementing and optimizing security tools and platforms across cloud environments Experience partnering with GRC teams and supporting compliance frameworks (e.g., SOC 2, PCI DSS, NIST) Bachelor’s degree in Computer Science, Cybersecurity, or related field (Master’s or relevant certifications preferred) Compensation The expected on-target earnings (OTE), which is comprised of a base salary and other forms of cash compensation, such as bonus or commissions is currently $225,600 to $283,200. This pay range is just one component of MX's total rewards package. MX takes a number of factors into account when determining individual starting pay, including job and level they are hired into, location, skillset, peer compensation. At MX, we are a high-performance organization that thrives on trust and results. This role is based in Lehi, Utah. We believe in empowering our team members to deliver exceptional outcomes while taking advantage of our incredible office space when it best supports their work. Our Utah office features onsite perks such as company-paid meals, a sports simulator, gym, mother’s lounge, and meditation room and meaningful interactions with amazing people. We encourage team members to come together in the office to collaborate, kick off key projects, or strategize cross-functionally, fostering connection and innovation. MX is proudly committed to recruiting and retaining a diverse and inclusive workforce. As an Equal Opportunity Employer, we never discriminate based on race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, military or veteran status, status as an individual with a disability, or other applicable legally protected characteristics. We particularly welcome applications from veterans and military spouses. All your information will be kept confidential according to EEO guidelines. You may request reasonable accommodations by sending an email to hr@mx.com.", "summaryDescription" : "Director Security Engineering at MX Technologies, Inc.. Skills: Security Engineering, GenAI Security, Cloud Security, AI Security. Mature operational security capabilities. Evolve threat detection program", "postedDate" : "2026-06-14T09:22:45.668", "createdAt" : "2026-06-14T09:22:45.668", "lastUpdated" : "2026-06-15T12:23:39.324", "ingestTimestamp" : "2026-06-14T09:22:45.668", "mongoId" : "6a2c6a5674d8ee00a090b560", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 225000, "salaryAnnualMax" : 325000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "Threat detection", "Response program", "Security engineering", "Network security", "Servant leader", "Forward thinking", "Security Engineering", "GenAI Security", "Cloud Security", "AI Security", "Product design reviews", "Service ownership model", "Risk management", "Compliance frameworks", "Program leadership", "Modern cloud security", "Modern network security", "Zero trust", "Microservices security", "Distributed systems", "SOC 2", "PCI DSS", "NIST" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.8888889, "_score" : 1169.0392, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "6a30531ff292fd229cf112d9", "title" : "IT Security Ops Specialist", "company" : "Mattel", "industry" : "Retail", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Ops Specialist in Hyderabad, India, adjusted for Lead seniority and a large company size in the Technology industry." }, "location" : "Hyderabad, IN", "locations" : [ "Hyderabad", "IN" ], "timestamp" : "2026-06-16T06:55:30.416", "fingerprint" : "3f590e72efb588affcef3a3560d6c2a2e3a849060de26884bea8fad8edb44aad", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/MattelInc/744000132139477-it-security-ops-specialist", "externalId" : "744000132139477", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "GCP, AWS, Azure, OCI, CSPM, IAM, Network controls, Cloud security, DevSecOps, Automation, Scripting, SIEM, SOAR", "professionalSkills" : [ "Technical leadership", "Risk identification", "Risk prioritization", "Risk remediation", "Threat intelligence", "Business impact analysis", "Secure architecture", "Design reviews", "Security by design", "Operational maturity", "Escalation support" ], "hardSkillsList" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "Remediation guidance", "Risk reduction", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring controls", "Secure workload design", "Automation development", "Scripting development", "Security baselines enforcement", "Tool integration", "Threat monitoring", "Vulnerability monitoring", "Regulatory change monitoring", "Runbook development", "Playbook development", "Operational documentation" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Configuration reviews", "level" : "intermediate" }, { "name" : "Misconfiguration detection", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Validation", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Risk-based prioritization", "level" : "intermediate" }, { "name" : "Remediation guidance", "level" : "intermediate" }, { "name" : "Risk reduction", "level" : "intermediate" }, { "name" : "IAM implementation", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Encryption implementation", "level" : "intermediate" }, { "name" : "Logging implementation", "level" : "intermediate" }, { "name" : "Monitoring controls", "level" : "intermediate" }, { "name" : "Secure workload design", "level" : "intermediate" }, { "name" : "Automation development", "level" : "intermediate" }, { "name" : "Scripting development", "level" : "intermediate" }, { "name" : "Security baselines enforcement", "level" : "intermediate" }, { "name" : "Tool integration", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Vulnerability monitoring", "level" : "intermediate" }, { "name" : "Regulatory change monitoring", "level" : "intermediate" }, { "name" : "Runbook development", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Operational documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud security operations, GCP security, AWS security, Azure security, OCI security", "majorSkillsList" : [ "Cloud security operations", "GCP security", "AWS security", "Azure security", "OCI security" ], "coreResponsibilities" : "Provide technical leadership, Oversee cloud security operations, Own cloud security operations, Manage configuration reviews, Manage misconfiguration detection, Manage remediation tracking, Manage validation, Serve as execution partner, Serve as escalation point, Design cloud security review strategies, Optimize cloud security review strategies, Maintain cloud security review strategies, Design monitoring strategies, Optimize monitoring strategies, Maintain monitoring strategies, Translate findings into risk intelligence, Drive risk-based prioritization, Partner with application owners, Partner with DevOps teams, Partner with platform teams, Provide remediation guidance, Influence risk reduction decisions, Ensure secure IAM implementation, Ensure secure network segmentation, Ensure secure encryption, Ensure secure logging, Ensure secure monitoring, Lead secure architecture reviews, Support secure architecture reviews, Lead design reviews, Support design reviews, Champion Zero Trust principles, Champion security-by-design practices, Develop automation, Enhance automation, Maintain automation, Develop scripting, Enhance scripting, Maintain scripting, Detect misconfigurations, Enforce cloud security baselines, Integrate CSPM tooling, Integrate cloud security tooling, Improve visibility, Improve response, Monitor cloud security threats, Monitor vulnerabilities, Monitor regulatory changes, Incorporate lessons learned, Improve controls, Improve processes, Develop cloud security runbooks, Maintain cloud security runbooks, Improve cloud security runbooks, Develop cloud security playbooks, Maintain cloud security playbooks, Improve cloud security playbooks, Develop operational documentation, Maintain operational documentation, Improve operational documentation, Mentor cloud security engineers, Mentor cloud security analysts, Strengthen technical depth, Strengthen operational maturity, Provide advanced escalation support", "teamCollaboration" : "Security Operations; IT teams; Engineering teams; Application teams; DevOps teams; Platform teams", "domainKnowledge" : "Cloud security; Zero Trust principles; Regulatory requirements; Cloud-native architecture", "domainList" : [ "cloud-security", "zero-trust-principles", "regulatory-requirements", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Cloud security", "Zero Trust principles", "Regulatory requirements", "Cloud-native architecture" ], "toolProficiency" : [ "AWS Security Hub", "OCI Cloud Guard", "CSPM platforms", "SIEM platforms", "SOAR platforms" ], "documentationSkills" : "Operational documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Work hours may vary, Availability during off-business hours, Incidents, System changes, Project needs", "qualificationsBasic" : "9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations, Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment, Hands-on expertise securing Google Cloud Platform (GCP), Working knowledge of AWS, Azure, and OCI, Experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers. Cloud Security Tech lead is responsible for leading and delivering day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role combines hands-on technical execution with technical leadership, ensuring cloud security risks are accurately identified, prioritized, and remediated in alignment with business risk, Zero Trust principles, and regulatory requirements. Cloud Security Tech lead provides direct technical leadership and guidance to cloud security engineers and analysts while partnering closely with Security Operations, IT, Engineering, and Application teams to drive remediation accountability and continuous improvement. Operating within a global delivery model, this role serves as a key execution and escalation point to ensure consistency, scalability, and resilience of the organization’s cloud security program. In addition to operational ownership, cloud security strategy, tooling optimization, automation, and analytics, ensuring the cloud security capability evolves alongside emerging threats, technologies, and compliance requirements. Roles and Responsibilities Skill:GCP/AWS/Azure/OCI security operations, CSPM (SCC, Security Hub, Defender, Cloud Guard), IAM & network controls, misconfiguration remediation * Provide direct technical leadership and day-to-day oversight of cloud security operations across GCP (primary), AWS, Azure, and OCI. * Own and manage cloud security operations including configuration reviews, misconfiguration detection, prioritization, remediation tracking, and validation. * Serve as a key execution partner and escalation point for cloud security initiatives, ensuring alignment with enterprise security strategy and priorities. * Design, optimize, and maintain cloud security review and monitoring strategies using native cloud security tools and CSPM platforms. * Translate large-scale cloud security findings into actionable risk intelligence through dashboards, metrics, and executive reporting. * Drive risk-based prioritization of cloud security issues using threat intelligence, asset criticality, exposure, and business impact. * Partner with application owners, DevOps, and platform teams to provide clear remediation guidance and influence timely risk reduction decisions. * Ensure secure implementation and continuous improvement of IAM, network segmentation, encryption, logging, and monitoring controls across cloud platforms. * Lead and support secure architecture and design reviews for new and existing cloud workloads. * Champion Zero Trust principles and security-by-design practices across cloud environments. * Develop, enhance, and maintain automation and scripting to detect misconfigurations and enforce cloud security baselines. * Integrate CSPM and cloud security tooling with SIEM and SOAR platforms to improve visibility and response. * Monitor emerging cloud security threats, vulnerabilities, and regulatory changes, incorporating lessons learned into improved controls and processes. * Develop, maintain, and continuously improve cloud security runbooks, playbooks, and operational documentation. * Mentor and develop cloud security engineers and analysts, strengthening technical depth and operational maturity. * Provide advanced escalation support for complex cloud security findings, tooling issues, and remediation challenges. * Work hours may vary, and the position may require availability during off-business hours due to incidents, system changes, or project needs. * Additional duties may be assigned as necessary to meet the ongoing needs of the organization. ## Qualifications Skills and Qualifications Required: * 9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations. * Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment. * Hands-on expertise securing Google Cloud Platform (GCP), with working knowledge of AWS, Azure, and OCI. * Strong experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard. * Deep understanding of IAM, network security, encryption, key management, logging, and monitoring across cloud platforms. * Experience implementing and operationalizing CSPM, CWPP, and cloud IAM solutions. * Hands-on experience with infrastructure-as-code security using Terraform, CloudFormation, or equivalent tools. * Strong scripting and automation skills using Python, Bash, PowerShell, or cloud-native tooling. * Experience supporting compliance initiatives aligned with CIS benchmarks, NIST CSF, and ISO 27001. * Strong analytical, leadership, and stakeholder communication skills. * Ability to support after-hours coordination or incident response activities as needed. Preferred: * Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent practical experience. * Cloud security certifications such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or Azure Security Engineer Associate. * Security certifications such as CISSP, CCSP, or CISM. * Experience integrating cloud security tooling with enterprise SIEM and SOAR platforms. * Familiarity with Zero Trust architecture and cloud-native security design patterns. Shift Timing: * Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events. ## Additional Information Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. How We Work: We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors: * We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower. * We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking. * We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results. Our Approach to Flexible Work: We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter. Who We Are: Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.", "summaryDescription" : "IT Security Ops Specialist at Mattel. Skills: Cloud security operations, GCP security, AWS security, Azure security, OCI security. Provide technical leadership. Oversee cloud security operations", "postedDate" : "2026-06-15T08:24:32.000", "createdAt" : "2026-06-15T21:54:30.659", "lastUpdated" : "2026-06-16T06:55:30.416", "ingestTimestamp" : "2026-06-15T21:54:30.659", "mongoId" : "6a30531ff292fd229cf112d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "Remediation guidance", "Risk reduction", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring controls", "Secure workload design", "Automation development", "Scripting development", "Security baselines enforcement", "Tool integration", "Threat monitoring", "Vulnerability monitoring", "Regulatory change monitoring", "Runbook development", "Playbook development", "Operational documentation", "Leadership", "Mentoring", "Cloud security operations", "GCP security", "AWS security", "Azure security", "OCI security", "Technical leadership", "Risk identification", "Risk prioritization", "Risk remediation", "Threat intelligence", "Business impact analysis", "Secure architecture", "Design reviews", "Security by design", "Operational maturity", "Escalation support", "Cloud security", "Zero Trust principles", "Regulatory requirements", "Cloud-native architecture", "AWS Security Hub", "OCI Cloud Guard", "CSPM platforms", "SIEM platforms", "SOAR platforms" ], "skillCount" : 51, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 1167.7471, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69d5e4962beec4dd3d931981", "title" : "AWS Security Operations/Incident Response Engineer", "company" : "Amazon Web Services, Inc.", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, Cloud Computing", "salary" : { "min" : 136000.0, "max" : 184000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Herndon, Virginia, USA", "locations" : [ "Herndon, Virginia, USA" ], "certifications" : [ "GCIH", "GSEC", "Security+" ], "timestamp" : "2026-06-15T02:08:07.757", "fingerprint" : "0c97d9ed2d550c199650d60b2166fb48eb0e947fd71728e016fa19334f04915f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10385139/apply", "externalId" : "f0a1c5b4-3fd4-4296-8fb3-027521c0d98b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Herndon", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9695316,-77.3859479" } ], "locationText" : "Herndon, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Cryptography, Network security, Software security, Malware analysis, Forensics, Security operations, Incident response, Security intelligence", "professionalSkills" : [ "Risk assessment", "Information security" ], "hardSkillsList" : [ "Log analysis", "Forensics", "System development", "Tool development" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "System development", "level" : "intermediate" }, { "name" : "Tool development", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Cloud security", "majorSkillsList" : [ "Incident response", "Security operations", "Cloud security" ], "coreResponsibilities" : "Respond to security incidents, Prevent future incidents, Design security responses, Coordinate security responses, Build security utilities, Build security tools, Communicate effectively, Instill best practices", "teamCollaboration" : "Multiple teams across organization; Security engineers", "domainKnowledge" : "Cloud security; National security program", "domainList" : [ "cloud-security", "national-security-program" ], "domainSpecificKnowledge" : [ "Cloud security", "National security program" ], "communicationSkills" : "Communicate at multiple levels", "problemSolvingSkills" : "Think like attacker; Think like defender", "specialRequirements" : "On-call responsibilities, US Citizen, TS/SCI with polygraph", "qualificationsBasic" : "Associate's degree or above, GCIH or GSEC or Security+, Current, active US Government Security Clearance of TS/SCI with Polygraph, US Citizen", "qualificationsPreferred" : "Experience with AWS products and services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is the leading cloud provider, providing virtual infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises, run their operations and applications on AWS’s multi-tenant infrastructure. Governmental organizations are also looking to and depending on AWS for cloud solutions and services. The AWS Security Incident Response team is seeking a focused Security Engineer who can take on a leadership role in responding to security issues in support of our National Security program. This engineer will work as a part of a growing team of security engineers who are focused on protecting the AWS infrastructure that is used by our national security customers. Our security engineers perform many duties during an average day: log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. They also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph. Key job responsibilities You should be able to accomplish most of the following: - Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future. - Design and coordinate cohesive responses to security events that involve multiple teams across the organization. - Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale. - Ability to communicate effectively at multiple levels of sensitivity, and multiple audiences. - Recognize, adopt and instill the best practices in security engineering fields throughout the organization: development, cryptography, network security, security operations, incident response, security intelligence. - Fulfill regular on-call responsibilities. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Associate's degree or above - GCIH (GIAC Certified Incident Handler) or GSEC (GIAC Security Essentials) or Security+ - Current, active US Government Security Clearance of TS/SCI with Polygraph Preferred Qualifications: - Experience with AWS products and services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Herndon - 136,000.00 - 184,000.00 USD annually", "summaryDescription" : "AWS Security Operations/Incident Response Engineer at Amazon Web Services, Inc.. Skills: Incident response, Security operations, Cloud security. Respond to security incidents. Prevent future incidents", "postedDate" : "2026-06-13T01:35:14.469", "createdAt" : "2026-06-13T01:35:14.469", "lastUpdated" : "2026-06-15T02:08:07.757", "ingestTimestamp" : "2026-06-13T01:35:14.469", "mongoId" : "69d5e4962beec4dd3d931981", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10385139/apply", "salaryAnnualMin" : 136000, "salaryAnnualMax" : 184000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Log analysis", "Forensics", "System development", "Tool development", "Leadership", "Incident response", "Security operations", "Cloud security", "Risk assessment", "Information security", "National security program", "GCIH", "GSEC", "Security+" ], "skillCount" : 14, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1158.3086, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2caf9c74d8ee00a09d75bb", "title" : "Senior Security Engineer", "company" : "Ivo", "industry" : "Security", "salary" : { "min" : 249000.0, "max" : 405000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco", "locations" : [ "San Francisco" ], "certifications" : [ "GCIH", "GCIA", "GCFA", "OSCP" ], "timestamp" : "2026-06-15T10:00:53.254", "fingerprint" : "37d1e00e33ba49612098b223ca87013c404818923d4c9b029cea66052e43f046", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/ivo-inc/261e580a-d201-43b0-a8bf-2a30e7884659/application", "externalId" : "261e580a-d201-43b0-a8bf-2a30e7884659", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "GCP, Azure, Cloudflare, Okta, SSO, SAML, SCIM, MFA, RBAC, Kandji, Python", "professionalSkills" : [ "Detection engineering", "Incident response", "Cloud security", "Identity security", "Network security", "Vulnerability management", "Security automation", "Threat hunting", "Compliance", "Risk prioritization", "Access management" ], "hardSkillsList" : [ "SIEM tuning", "Telemetry analysis", "Infrastructure hardening", "Network hardening", "Access provisioning", "Access deprovisioning", "Least-privilege enforcement", "Endpoint security", "Email security", "Security automation scripting", "Threat modeling" ], "hardSkills" : [ { "name" : "SIEM tuning", "level" : "intermediate" }, { "name" : "Telemetry analysis", "level" : "intermediate" }, { "name" : "Infrastructure hardening", "level" : "intermediate" }, { "name" : "Network hardening", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Access deprovisioning", "level" : "intermediate" }, { "name" : "Least-privilege enforcement", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Email security", "level" : "intermediate" }, { "name" : "Security automation scripting", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" } ], "majorSkills" : "Detection engineering, Incident response, Cloud security", "majorSkillsList" : [ "Detection engineering", "Incident response", "Cloud security" ], "coreResponsibilities" : "Own detection and response, Build and tune detections, Turn telemetry into alerts, Lead incident response, Run investigations end to end, Drive containment and recovery, Write post-incident review, Own cloud security posture, Find misconfigurations, Prioritize real risk, Partner with engineering, Own perimeter and network security, Manage Cloudflare WAF rules, Manage DNS security, Manage edge controls, Harden network config, Harden infrastructure config, Run vulnerability management, Triage vulnerabilities, Prioritize vulnerabilities, Drive remediation to closure, Operate identity and access, Harden identity and access, Own provisioning hygiene, Own deprovisioning hygiene, Own access reviews, Enforce least-privilege, Manage endpoint security, Manage device security, Manage email security, Keep fleet hardened, Keep fleet monitored, Build security automation, Remove toil with automation, Script repetitive work, Wire up SOAR response, Make secure path easy, Run proactive threat hunting, Develop detection coverage, Produce operational evidence, Maintain operational evidence, Support compliance programs, Support enterprise security reviews, Contribute security operations input, Support customer reviews, Ship paved roads", "teamCollaboration" : "Partner with engineering; Work alongside engineering; Work alongside IT", "domainKnowledge" : "SaaS security; Cloud-native security; Identity and access management; Network security; Endpoint security; Vulnerability management; Incident response; Detection engineering; SOC 2 Type II; ISO 27001; ISO 42001; AI/LLM security", "domainList" : [ "saas-security", "cloud-native-security", "identity-and-access-management", "network-security", "endpoint-security", "vulnerability-management", "incident-response", "detection-engineering", "soc-2-type-ii", "iso-27001", "iso-42001", "ai-llm-security" ], "domainSpecificKnowledge" : [ "SaaS security", "Cloud-native security", "Identity and access management", "Network security", "Endpoint security", "Vulnerability management", "Incident response", "Detection engineering", "SOC 2 Type II", "ISO 27001", "ISO 42001", "AI/LLM security" ], "toolProficiency" : [ "Panther", "Cloudflare WAF", "Okta", "Kandji", "GCP", "Azure" ], "communicationSkills" : "Written communication; Runbook writing; Detection writeup; Post-incident review; Customer-facing documentation", "documentationSkills" : "Runbooks; Detection writeups; Post-incident reviews; Trust documentation", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Detect threats; Respond to threats; Defend against threats; Close misconfigurations; Drive remediation to closure; Reduce toil with automation", "qualificationsBasic" : "5+ years in security operations, 5+ years detection engineering, 5+ years incident response, 5+ years infrastructure security, 5+ years cloud security, Time owning detection, Time owning IR, Hands-on detection engineering, Hands-on detection tuning, Hands-on detection pipelines, Hands-on SIEM work, Cloud security background, Hands-on perimeter security, Hands-on network security, Deep identity access experience, Real incident response experience, Led investigations end to end, Comfortable scripting and automating, Track record running vulnerability management, Excellent written communication", "qualificationsPreferred" : "Detection-as-code experience, Experience securing AI infrastructure, Experience securing LLM infrastructure, Series or earlier experience, Built or scaled security operations, SOAR platform experience, Security automation platform experience, Background supporting enterprise customers", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "WHY IVO? Every civilization runs on the same infrastructure: agreements between people who don't fully trust each other. Sumerians pressed them into clay. Romans carved them into stone. We bury them in 80-page PDFs. The way those agreements are reviewed hasn't changed in four thousand years - a human reads the whole thing and tries not to miss anything. We're building the AI that finally changes that. Ivo is the contract intelligence platform of choice for companies like Uber, Meta, Canva, IBM, and Shopify. We recently raised our Series B and have grown 800% over the last 12 months. THE ROLE: We're hiring a Senior Security Engineer to own how Ivo detects, responds to, and defends against threats across our infrastructure, identity, network, and endpoints. You'll partner directly with our Head of IT & Security and work alongside engineering and IT to keep the systems behind our product safe. This is a hands-on senior IC role with broad scope: detection engineering, incident response, cloud and identity security operations, perimeter and network hardening, vulnerability management, and security automation. Where our Application Security Engineer owns the product itself, you own everything around it: the systems, the signals, and the response. Our platform handles legally privileged documents for some of the largest companies in the world. The security stakes are real, and so is the impact. RESPONSIBILITIES • Own detection and response across Ivo's cloud, identity, and endpoint estate. - Build and tune detections in our SIEM (Panther). Turn noisy telemetry into high-signal alerts engineers and IT actually act on, with a strong bias toward signal over noise. - Lead incident response for infrastructure, identity, and corporate-layer security events. Run investigations end to end, drive containment and recovery, and write the post-incident review. - Own cloud security posture across GCP and Azure. Find misconfigurations, prioritize real risk, and partner with engineering to close it. - Own perimeter and network security. Manage Cloudflare WAF rules, DNS security, and edge controls, and harden our network and infrastructure config against real-world attack patterns. - Run vulnerability management for our infrastructure and assets. Triage, prioritize, and drive remediation to closure rather than just forwarding scanner output. - Operate and harden identity and access (Okta, SSO, SAML, SCIM, MFA, RBAC). Own provisioning and deprovisioning hygiene, access reviews, and least-privilege enforcement. - Manage endpoint and device security (Kandji for MDM) and email security (Material). Keep the fleet hardened and monitored. - Build security automation that removes toil. Script away repetitive work, wire up SOAR-style response, and make the secure path the easy path. - Run proactive threat hunting across logs and telemetry, and develop detection coverage against the threats that actually target a company like ours. - Produce and maintain operational evidence for SOC 2 Type II, ISO 27001, and ISO 42001, and support our compliance and enterprise security review programs. - Contribute security operations input to enterprise security reviews and customer-facing trust documentation. - Partner with engineering and IT rather than blocking them. You ship paved roads, not tickets. WHO YOU ARE: - 5+ years in security operations, detection and response, or infrastructure and cloud security at a SaaS company, including time owning detection or IR for a production environment. - Hands-on detection engineering. You write and tune detections, build pipelines, and work in a SIEM directly. You don't just watch dashboards. - Strong cloud security background in GCP and/or Azure: identity, network, workload, and posture management. - Hands-on with perimeter and network security: WAF/CDN (Cloudflare or similar), DNS security, and edge controls. - Deep identity and access experience: Okta or similar IdP, SSO, SAML, SCIM, MFA, and RBAC in practice. - Real incident response experience. You've led investigations end to end, from first alert to post-incident review. - Comfortable scripting and automating (Python or similar). You can read code and build your own tooling, not just buy it. - Track record of running vulnerability management as a program, not a queue. - Excellent written communication. You can write a runbook engineers follow, a detection writeup that's genuinely useful, and a post-incident review leadership trusts. - A strong internal sense of urgency and a bias toward shipping and automating today rather than tomorrow. NICE TO HAVE: - Detection-as-code experience (Panther, Sigma, or similar) and treating detections like software. - Experience securing AI / LLM infrastructure and the operational risks around agents and model access. - Series B or earlier experience where you built or scaled a security operations function from limited scaffolding. - GCIH, GCIA, GCFA, OSCP, or comparable hands-on credentials. - Experience with SOAR or security automation platforms. - Background supporting enterprise customers in regulated industries. WHY THIS ROLE MATTERS: Ivo's customers entrust us with their most sensitive contracts. As we move further upmarket and into more regulated industries, our ability to detect and respond to threats fast is becoming a direct driver of enterprise revenue and a key part of the trust we earn at the deal table. This role owns the operational security of the company itself. The person who fills it will define what good detection and response looks like at Ivo for years to come. FAQ - How far along are we? We launched in early access in 2023. Since then, we’ve had an incredible response from the market and are growing rapidly. We 6x'd in ARR in the last 12 months. Our clients include companies like Uber, Reddit, IBM, Canva, Pinterest, WordPress, and more. We're happy to share more details with candidates who go through our interview process. - Can I work remotely? We have an in-office culture, with some hybrid flexibility. - Compensation: The USD salary range for this role is $249K - $405K. Final offer amounts are determined by multiple factors, including, experience and expertise, and may vary from the amounts listed above.", "summaryDescription" : "Senior Security Engineer at Ivo. Skills: Detection engineering, Incident response, Cloud security. Own detection and response. Build and tune detections", "createdAt" : "2026-06-14T09:48:20.608", "lastUpdated" : "2026-06-15T10:00:53.254", "ingestTimestamp" : "2026-06-14T09:48:20.608", "mongoId" : "6a2caf9c74d8ee00a09d75bb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 249000, "salaryAnnualMax" : 405000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "SIEM tuning", "Telemetry analysis", "Infrastructure hardening", "Network hardening", "Access provisioning", "Access deprovisioning", "Least-privilege enforcement", "Endpoint security", "Email security", "Security automation scripting", "Threat modeling", "Detection engineering", "Incident response", "Cloud security", "Identity security", "Network security", "Vulnerability management", "Security automation", "Threat hunting", "Compliance", "Risk prioritization", "Access management", "SaaS security", "Cloud-native security", "Identity and access management", "SOC 2 Type II", "ISO 27001", "ISO 42001", "AI/LLM security", "GCIH", "GCIA", "GCFA", "OSCP", "Panther", "Cloudflare WAF", "Okta", "Kandji", "GCP", "Azure" ], "skillCount" : 39, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1152.6439, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a3057f5f292fd229cf3f231", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:14:43.050", "fingerprint" : "bb3bf1fd4e7d55411eb83fbc341b38e2ce2335d962e33ef3f3feb348a180b316", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring use cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage service provider relationships, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Protect against threats, Resolve threats, Participate in selection of security solutions, Evaluate security solutions, Improve enterprise security, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud computing; Threat Intelligence Management; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud-computing", "threat-intelligence-management", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T23:44:55.017", "lastUpdated" : "2026-06-16T08:14:43.050", "ingestTimestamp" : "2026-06-15T23:44:55.017", "mongoId" : "6a3057f5f292fd229cf3f231", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Cyber Security Operations", "Incident Response", "SIEM tuning", "Cyber Security", "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1151.5126, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305299f292fd229cf0ec61", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:29:37.048", "fingerprint" : "50545fa5c12fe38cf8ac3a90e9d739c9b1a419db521bdc38142890221e997e19", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" }, { "name" : "Security solution evaluation", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM Tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM Tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring Use Cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage relationship to service providers, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Provide implementations for incidents, Provide recommendations for incidents, Participate in selection of security solutions, Participate in evaluation of security solutions, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM Tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T21:55:54.859", "lastUpdated" : "2026-06-16T08:29:37.048", "ingestTimestamp" : "2026-06-15T21:55:54.859", "mongoId" : "6a305299f292fd229cf0ec61", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation", "Cyber Security Operations", "Incident Response", "SIEM Tuning", "Cyber Security", "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1151.5126, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6bcd74d8ee00a0914a7e", "title" : "2026 Security Analyst - Early Career Rotation Program", "company" : "Anduril Industries", "industry" : "Technology", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for entry-level security analysts in the US, adjusted for the defense technology industry in a high cost-of-living area like Costa Mesa, California." }, "location" : "Costa Mesa, California, United States", "locations" : [ "Costa Mesa", "California", "United States" ], "timestamp" : "2026-06-16T05:38:00.692", "fingerprint" : "78984d156692e01025df53984ec263a52d0b127bf8e569f44afcc2c579307b5d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/andurilindustries/jobs/5159902007?gh_jid=5159902007", "externalId" : "5159902007", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Costa Mesa", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6633386,-117.9033170" } ], "locationText" : "Costa Mesa, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "softSkillsList" : [ "Adaptability", "Discretion" ], "softSkills" : [ { "name" : "Adaptability" }, { "name" : "Discretion" } ], "majorSkills" : "Corporate Security", "majorSkillsList" : [ "Corporate Security" ], "coreResponsibilities" : "Rotate through four key Corporate Security teams, Develop comprehensive understanding of Corporate Security functions, Gain hands-on experience across security disciplines, Support Strategic Security Services, Support Global Security Operations, Support Specialty Programs, Support Technical Security, Learn foundational knowledge base, Develop critical skills", "teamCollaboration" : "Cross-functional teams", "domainKnowledge" : "Defense technology; Military capabilities; AI; Autonomy; Computer vision; Sensor fusion; Networking technology; Corporate security", "domainList" : [ "defense-technology", "military-capabilities", "ai", "autonomy", "computer-vision", "sensor-fusion", "networking-technology", "corporate-security" ], "domainSpecificKnowledge" : [ "Defense technology", "Military capabilities", "AI", "Autonomy", "Computer vision", "Sensor fusion", "Networking technology", "Corporate security" ], "continuousLearning" : "Rotational program", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "12-month program, 4 months per rotation", "outcomesObjectives" : "Springboard for successful career", "qualificationsBasic" : "Recent graduate", "qualificationsPreferred" : "Impeccable analytical abilities, Keen attention to detail, High degree of adaptability, High degree of discretion", "workSiteFlexibility" : "Onsite", "rawDescription" : "Anduril Industries is a defense technology company with a mission to transform U. S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century’s most innovative companies to the defense industry, Anduril is changing how military systems are designed, built and sold. Anduril’s family of systems is powered by Lattice OS, an AI-powered operating system that turns thousands of data streams into a realtime, 3D command and control center. As the world enters an era of strategic competition, Anduril is committed to bringing cutting-edge autonomy, AI, computer vision, sensor fusion, and networking technology to the military in months, not years. ABOUT THE JOB The Anduril Corporate Security team is looking for emerging leaders to join its inaugural Emerging Talent Rotational Program in Costa Mesa, CA. In this role, you will develop a comprehensive understanding of how Anduril's Corporate Security team functions to protect our people, assets, and information, enabling the company's mission and growth. You will gain hands-on experience across four critical security disciplines: Strategic Security Services, Global Security Operations, Specialty Programs, and Technical Security. This program will establish a foundational knowledge base and critical skills that will be a springboard for a successful career in corporate security. We are looking for proactive problem-solvers with impeccable analytical abilities, keen attention to detail, and a high degree of adaptability and discretion. If you are a highly motivated recent grad, who is eager to learn and make a visible impact in safeguarding a cutting-edge technology company, this program is for you. WHAT YOU’LL DO Rotate through four key Corporate Security teams over 12 months (4 months each): Rotation 1: Strategic Security Services (Travel Security, GSOC and are considered part of Anduril's total compensation package. Additionally, Anduril offers top-tier benefits for full-time employees, including: Benefits At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next. For more information, Explore Our Benefits. Protecting Yourself from Recruitment Scams Anduril is committed to maintaining the integrity of our Talent acquisition process and the security of our candidates. We've observed a rise in sophisticated phishing and fraudulent schemes where individuals impersonate Anduril representatives, luring job seekers with false interviews or job offers. These scammers often attempt to extract payment or sensitive personal information. To ensure your safety and help you navigate your job search with confidence, please keep the following critical points in mind: No Financial Requests: Anduril will never solicit payment or demand personal financial details (such as banking information, credit card numbers, or social security numbers) at any stage of our hiring process. Our legitimate recruitment is entirely free for candidates. Please always verify communications: Direct from Anduril: If you receive an email from one of our recruiters, it will only come from an @anduril.com address. Via Agency Partner: If contacted by a recruiting agency for an Anduril role, their email will clearly identify their agency. If you suspect any suspicious activity, please verify the agency's authenticity by reaching out to contact@anduril.com. Exercise Caution with Unsolicited Outreach: If you receive any communication that appears suspicious, contains grammatical errors, or makes unusual requests, do not engage. Always confirm the sender's email domain is @anduril.com before providing any personal information or clicking on links. What to Do If You Suspect Fraud: Should you encounter any questionable or fraudulent outreach claiming to be from Anduril, please report it immediately to contact@anduril.com. Your proactive caution is invaluable in protecting your personal information and upholding the security and trustworthiness of our recruitment efforts. Data Privacy To view Anduril's candidate data privacy policy, please visit https://anduril.com/applicant-privacy-notice/. By submitting your application, you consent to Anduril Industries using a third-party service provider to conduct pre-employment risk, integrity, and due diligence screening and assessing potential risks as part of your application process. This third-party service provider provides risk-intelligence services that may include analysis of sanctions and watchlists, adverse media, public-record information, and other lawful open-source or commercial data sources. This third-party service provider does not act as a consumer reporting agency. Use of this provider helps to ensure compliance with applicable laws and protect technology, intellectual property, and organizational security.", "summaryDescription" : "2026 Security Analyst - Early Career Rotation Program at Anduril Industries. Skills: Corporate Security. Rotate through four key Corporate Security teams. Develop comprehensive understanding of Corporate Security functions", "postedDate" : "2026-06-14T19:07:38.050", "createdAt" : "2026-06-14T19:07:38.050", "lastUpdated" : "2026-06-16T05:38:00.692", "ingestTimestamp" : "2026-06-14T19:07:38.050", "mongoId" : "6a2c6bcd74d8ee00a0914a7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Adaptability", "Discretion", "Corporate Security", "Defense technology", "Military capabilities", "AI", "Autonomy", "Computer vision", "Sensor fusion", "Networking technology", "Corporate security" ], "skillCount" : 11, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 1145.4371, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Defense Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305a35f292fd229cf4e392", "title" : "Security Guard", "industry" : "Glassboro", "salary" : { "min" : 18.5, "max" : 18.5, "currency" : "USD", "frequency" : "bi-week-salary" }, "location" : "Glassboro, New Jersey", "locations" : [ "Glassboro, New Jersey" ], "certifications" : [ "Formal security training", "Security certifications" ], "timestamp" : "2026-06-16T12:49:33.227", "fingerprint" : "699b14726ecbdf3b8941e5afdab9904003e40c9cb34e53e0c3506ea6917cd09c", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/restore-dispensaries/a3b3f556-d5a0-4227-a03e-744cf582e5f5/apply", "externalId" : "a3b3f556-d5a0-4227-a03e-744cf582e5f5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Glassboro", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.7027677,-75.1119434" } ], "locationText" : "Glassboro, New Jersey, United States", "employmentType" : "PART_TIME", "minimumEducation" : "High School", "technicalSkills" : "CCTV systems, Surveillance monitoring", "professionalSkills" : [ "Conflict resolution", "Asset protection" ], "hardSkillsList" : [ "Access control", "Inventory transfer", "Incident documentation" ], "softSkillsList" : [ "Discretion", "Confidentiality", "Adaptability", "Decision-making" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Inventory transfer", "level" : "intermediate" }, { "name" : "Incident documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Discretion" }, { "name" : "Confidentiality" }, { "name" : "Adaptability" }, { "name" : "Decision-making" } ], "majorSkills" : "Site security, Access control, Incident response", "majorSkillsList" : [ "Site security", "Access control", "Incident response" ], "coreResponsibilities" : "Maintain site security protocols, Monitor restricted access areas, Verify credentials upon entry, Conduct routine inspections, Supervise CCTV systems, Monitor live surveillance feeds, Support product deliveries, Ensure secure transfer of inventory, Maintain strict access control, Maintain visitor logs, De-escalate tense situations, Protect company assets, Protect patients, Protect team members, Coordinate with management, Complete incident documentation", "teamCollaboration" : "Coordinate with management; Respectful communication with staff", "domainKnowledge" : "Company policy; State regulations; Regulated industries", "domainList" : [ "company-policy", "state-regulations", "regulated-industries" ], "domainSpecificKnowledge" : [ "Company policy", "State regulations", "Regulated industries" ], "toolProficiency" : [ "CCTV systems" ], "communicationSkills" : "De-escalation skills; Respectful communication", "documentationSkills" : "Incident documentation", "problemSolvingSkills" : "Decision-making", "specialRequirements" : "Flexibility to work rotating shifts, Comfort working in dynamic retail environment", "outcomesObjectives" : "Protect company assets; Protect patients; Protect team members", "qualificationsBasic" : "Prior experience in security, Observational skills, Attention to detail, Ability to remain calm, Ability to follow structured protocols, Ability to work rotating shifts", "qualificationsPreferred" : "Experience with CCTV systems, Experience with surveillance monitoring, Formal security training, Security certifications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Key Responsibilities Maintain site security protocols in accordance with company policy and state regulations Monitor restricted access areas and verify credentials upon entry Conduct routine interior and exterior perimeter inspections Supervise CCTV systems and monitor live surveillance feeds Support product deliveries and ensure secure transfer of inventory Maintain strict access control and visitor logs De-escalate tense or potentially risky situations using professional conflict-resolution techniques Protect company assets, patients, and team members Coordinate with management regarding security concerns or incidents Complete required incident documentation accurately and promptly Maintain a visible, professional presence at the storefront ## Required Qualifications Prior experience in security, loss prevention, or related protective services role Strong observational skills and attention to detail Ability to remain calm and professional in high-pressure situations Experience with CCTV systems or surveillance monitoring preferred Strong communication and de-escalation skills Ability to follow structured protocols and regulatory requirements Flexibility to work rotating shifts, including opening and closing ## What You Bring Accountability Commitment to safety and compliance Reliability and punctuality Strong sense of responsibility for asset protection Professionalism Calm and composed demeanor Respectful communication with patients and staff Discretion and confidentiality Adaptability Ability to assess evolving situations Quick, sound decision-making Comfort working in a dynamic retail environment ## Bonus If You Have Experience in regulated industries (cannabis, pharmacy, banking, etc.) Formal security training or certifications Proven experience in incident response and documentation Strong situational awareness and a preventative mindset", "summaryDescription" : "Security Guard. Skills: Site security, Access control, Incident response. Maintain site security protocols. Monitor restricted access areas", "postedDate" : "2026-06-15T11:59:33.776", "createdAt" : "2026-06-15T11:59:33.776", "lastUpdated" : "2026-06-16T12:49:33.227", "ingestTimestamp" : "2026-06-16T03:22:21.896", "mongoId" : "6a305a35f292fd229cf4e392", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 18, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Access control", "Inventory transfer", "Incident documentation", "Discretion", "Confidentiality", "Adaptability", "Decision-making", "Site security", "Incident response", "Conflict resolution", "Asset protection", "Company policy", "State regulations", "Regulated industries", "Formal security training", "Security certifications", "CCTV systems" ], "skillCount" : 17, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 0.7777778, "_score" : 1143.8223, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Retail", "llmIndustryConfidence" : 0.95 }, { "id" : "68c2e418f8b1b0376634c36a", "title" : "Security Engineer, Incident Response, CorpSec", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 125500.0, "max" : 212800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:14:41.009", "fingerprint" : "1d73ed9116d8a3da3a8809fe15ae6abbeb90fed1911a7e130db33978905c1cf9", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3079013/apply", "externalId" : "6e9703e8-c44e-4f5b-9f27-1aa702f0786e", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Threat hunting, Detection engineering, Malware analysis, Forensics, Security operations, Incident response, Security intelligence, Programming language, Scripting language, Amazon Web Services", "professionalSkills" : [ "Security monitoring", "Response activities" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence" ], "softSkillsList" : [ "Leadership", "Curiosity", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Response activities", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Detection engineering", "level" : "intermediate" }, { "name" : "Malware analysis", "level" : "intermediate" }, { "name" : "Forensics", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Security intelligence", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Curiosity" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security engineering, Threat intelligence", "majorSkillsList" : [ "Incident response", "Security engineering", "Threat intelligence" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities", "teamCollaboration" : "Global team environment; Security issues", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Threat hunting; Detection engineering; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "threat-hunting", "detection-engineering", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider" ], "toolProficiency" : [ "SOAR", "SIEM platforms" ], "communicationSkills" : "Clear communication; Accurate communication", "continuousLearning" : "Learn about security domains", "problemSolvingSkills" : "Think like attacker; Think like defender", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 3 years systems, network, or application security experience, 3 years experience on Security team, Coordinating security incident responses, Proficiency with one high-level programming or scripting language", "qualificationsPreferred" : "Experience in security operations or incident response, Experience in security automation tooling, Experience in threat intelligence, Familiarity with threat hunting, Familiarity with detection engineering, Familiarity with malware analysis, Familiarity with forensics, Familiarity with SOAR, Familiarity with SIEM platforms, Familiarity with variety of Operating Systems, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, threat hunting, detection engineering, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. Or equivalent industry certification. - 3 years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 3 years experience on a Security team, especially experience coordinating responses to security incidents. Proficiency with one high-level programming or scripting language. Preferred Qualifications: - Experience working in security operations or incident response, security automation tooling, or threat intelligence. - Familiarity with threat hunting, detection engineering, malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS). - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Security Engineer, Incident Response, CorpSec at Amazon.com Services LLC. Skills: Incident response, Security engineering, Threat intelligence. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T11:16:05.380", "createdAt" : "2026-06-13T11:16:05.380", "lastUpdated" : "2026-06-15T02:14:41.009", "ingestTimestamp" : "2026-06-13T11:16:05.380", "mongoId" : "68c2e418f8b1b0376634c36a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3079013/apply", "salaryAnnualMin" : 125500, "salaryAnnualMax" : 212800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Response activities", "Threat hunting", "Detection engineering", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Leadership", "Curiosity", "Critical thinking", "Incident response", "Security engineering", "Threat intelligence", "Operating system security", "Network security", "Cryptography", "Software security", "Cloud provider", "SOAR", "SIEM platforms" ], "skillCount" : 22, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1131.5409, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "68b706967fc9a711f0f6f106", "title" : "Senior Security Incident Response Engineer", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 143300.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:15:22.523", "fingerprint" : "557fc71c43f8425ad3ede7e1896c755a137ec1863b4d9868b798c7018c19161b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3054814/apply", "externalId" : "9b21d22c-d0c3-4bd6-9b1b-3f576fbb97c6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Operating system security, Network security, Cryptography, Software security, Malware analysis, Forensics, Security operations, Incident response, Security automation, Cloud computing, AWS", "professionalSkills" : [ "Security engineering", "Threat landscape", "Security automation tooling" ], "hardSkillsList" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention" ], "softSkillsList" : [ "Creative problem solving", "Critical thinking" ], "hardSkills" : [ { "name" : "Incident response lifecycle", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Programmatic automation", "level" : "intermediate" }, { "name" : "Security issue prevention", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creative problem solving" }, { "name" : "Critical thinking" } ], "majorSkills" : "Incident response, Security automation, Cloud security", "majorSkillsList" : [ "Incident response", "Security automation", "Cloud security" ], "coreResponsibilities" : "Lead response to security issues, Conduct security monitoring, Conduct response activities, Design and build tooling, Enable programmatic automation, Lead security engineer, Provide security guidance, Provide technical guidance, Influence process and priorities, Improve security outcomes, Provide strategic guidance, Bar raise security issues, Escalate security issues, Identify prevention opportunities, Mentor junior engineers, Develop junior engineers", "teamCollaboration" : "Global team environment; Multiple security teams; Cross-functional teams", "domainKnowledge" : "Operating system security; Network security; Cryptography; Software security; Malware analysis; Forensics; Security operations; Incident response; Security intelligence; Cloud provider security", "domainList" : [ "operating-system-security", "network-security", "cryptography", "software-security", "malware-analysis", "forensics", "security-operations", "incident-response", "security-intelligence", "cloud-provider-security" ], "domainSpecificKnowledge" : [ "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Incident response", "Security intelligence", "Cloud provider security" ], "toolProficiency" : [ "SOAR platforms", "SIEM platforms" ], "communicationSkills" : "Oral communication; Written communication", "continuousLearning" : "Learning about security domains", "innovationCreativity" : "Creative problem solving", "problemSolvingSkills" : "Creative problem solving; Critical problem solving", "outcomesObjectives" : "Improve security outcomes", "qualificationsBasic" : "BS degree in Computer Science or equivalent, 7+ years systems/network/application security, 5+ years on Security team, 1 year programming/scripting language, Experience leading junior engineers", "qualificationsPreferred" : "Excellent written/verbal communication, 7+ years security response/automation/threat intelligence, Malware analysis experience, Forensics experience, SOAR platforms experience, SIEM platforms experience, Experience with MS Windows, Linux, MacOS, Experience with Amazon Web Services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services team is looking for a passionate Senior Security Incident Response Engineer who can lead the response to security issues across the largest cloud provider in the world. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical. In this role you’ll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. We don’t expect you to be an expert in all of the domains mentioned above, but we do expect you to be excited to learn about them! You’ll apply your creative and critical problem solving skills to quickly design and build tooling that enables programmatic automation at a massive scale. You must have a passion for engineering solutions to complex security challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about information security, the threat landscape and security automation and tooling. Key job responsibilities - Work across multiple security teams as a lead security engineer providing security and technical guidance. - Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes - Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications - Bar raise security issues and escalate appropriately - Identify opportunities to prevent security issues at scale - Mentor and develop teammates both technically and professionally About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - BS degree in Computer Science, Computer Engineering, Electrical Engineering or equivalent related field. - 7+ years of demonstrated experience with a focus in areas such as systems, network, and/or application security. - 5+ years experience on a Security team, especially experience coordinating responses to security incidents. - 1 year proficiency with one high-level programming or scripting language. - Experience leading and coaching junior security engineers to improve their skills and effectiveness Preferred Qualifications: - Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences. - 7+ years experience working in security response, security automation tooling, or threat intelligence. - Experience with malware analysis, forensics, SOAR, SIEM platforms, and a variety of Operating Systems (MS Windows, Linux, MacOS) - Experience with Amazon Web Services. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Security Incident Response Engineer at Amazon.com Services LLC. Skills: Incident response, Security automation, Cloud security. Lead response to security issues. Conduct security monitoring", "postedDate" : "2026-06-13T10:52:46.897", "createdAt" : "2026-06-13T10:52:46.897", "lastUpdated" : "2026-06-15T03:15:22.523", "ingestTimestamp" : "2026-06-13T10:52:46.897", "mongoId" : "68b706967fc9a711f0f6f106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3054814/apply", "salaryAnnualMin" : 143300, "salaryAnnualMax" : 247600, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Incident response lifecycle", "Security monitoring", "Programmatic automation", "Security issue prevention", "Creative problem solving", "Critical thinking", "Incident response", "Security automation", "Cloud security", "Security engineering", "Threat landscape", "Security automation tooling", "Operating system security", "Network security", "Cryptography", "Software security", "Malware analysis", "Forensics", "Security operations", "Security intelligence", "Cloud provider security", "SOAR platforms", "SIEM platforms" ], "skillCount" : 23, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1131.2319, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2c68fa74d8ee00a0905806", "title" : "Senior Incident Response Specialist, Cyber Security", "industry" : "Cygnify", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Incident Response Specialist in Kuala Lumpur, Malaysia, adjusted for the cybersecurity industry and senior experience level." }, "location" : "Kuala Lumpur, Malaysia", "locations" : [ "Kuala Lumpur, Malaysia" ], "timestamp" : "2026-06-16T02:39:21.304", "fingerprint" : "d361c038e80e7ee25f06c2708e696babafce6881749e9a55b1eb9bfeb96da610", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/cygnify/f8691c89-168e-4178-9678-8a9d39b9914d/application", "externalId" : "f8691c89-168e-4178-9678-8a9d39b9914d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Kuala Lumpur", "country" : "Malaysia", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "3.1516964,101.6942371" } ], "locationText" : "Kuala Lumpur, Malaysia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Elastic Stack, SIEM, Cloud", "professionalSkills" : [ "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding" ], "hardSkillsList" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises" ], "hardSkills" : [ { "name" : "Security alerts", "level" : "intermediate" }, { "name" : "Security events", "level" : "intermediate" }, { "name" : "Malware investigation", "level" : "intermediate" }, { "name" : "Phishing investigation", "level" : "intermediate" }, { "name" : "Insider threats", "level" : "intermediate" }, { "name" : "Cloud breaches", "level" : "intermediate" }, { "name" : "Detection rule creation", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Compliance reporting", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "Simulation exercises", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" } ], "majorSkills" : "Incident Response, Cyber Security, SIEM platform", "majorSkillsList" : [ "Incident Response", "Cyber Security", "SIEM platform" ], "coreResponsibilities" : "Monitor security alerts, Investigate security alerts, Analyze security incidents, Contain security incidents, Escalate security incidents, Tune SIEM rules, Suggest new detections, Analyze logs, Correlate logs, Create incident documentation, Maintain incident documentation, Create incident reports, Maintain incident reports, Create lessons learned, Maintain lessons learned, Support playbook execution, Remediate incidents, Perform root cause analysis, Provide use case insights, Validate use cases, Test use cases, Escalate confirmed incidents, Participate in reviews, Improve processes, Improve detections, Validate security events, Identify legitimate threats, Investigate malware incidents, Investigate phishing incidents, Investigate insider threats, Investigate cloud breaches, Assist in rule creation, Assist in rule tuning, Map MITRE ATT&CK, Improve detection quality, Hunt threats, Handle incidents, Collect evidence, Document incidents, Support compliance, Support audits, Contribute to automation, Participate in training, Participate in simulations, Participate in exercises, Onboard log sources, Manage log availability", "teamCollaboration" : "Collaborate with IT; Collaborate with network; Collaborate with application teams; Collaborate with MSSP; Collaborate with CSIRT; Collaborate with IT infrastructure", "domainKnowledge" : "Cyber resilience; MITRE ATT&CK; Cloud breaches; Insider threats; Malware; Phishing", "domainList" : [ "cyber-resilience", "mitre-att-ck", "cloud-breaches", "insider-threats", "malware", "phishing" ], "domainSpecificKnowledge" : [ "Cyber resilience", "MITRE ATT&CK", "Cloud breaches", "Insider threats", "Malware", "Phishing" ], "toolProficiency" : [ "Elastic Stack", "SIEM" ], "documentationSkills" : "Incident documentation; Incident reports; Lessons learned; Evidence collection; Compliance documentation; Audit documentation", "continuousLearning" : "Training sessions; Simulations; Tabletop exercises", "innovationCreativity" : "Automation opportunities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "outcomesObjectives" : "Ensure timely response; Maintain cyber resilience; Align with MTTD goals; Align with MTTR goals", "qualificationsBasic" : "Perform deep-dive investigations, Conduct threat hunting, Support incident response reporting, Manage continuous logs availability", "qualificationsPreferred" : "MITRE ATT&CK mapping, Automation opportunities", "rawDescription" : "Role Mission The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution. Accountabilities: - Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts. - Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals. - Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections. - Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud). - Create and maintain incident documentation, reports, and lessons learned. - Support incident response playbook execution during containment and recovery phases. - Collaborate with IT, network, and application teams for incident remediation and root cause analysis. - Provide insights for use case improvements and participate in use case validation and testing. - Escalate confirmed incidents to CSIRT / Assistant Manager - Incident Response for further action. - Participate in post-incident reviews, contributing to process and detection improvements. - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. Requirements - Monitor alerts generated from the SOC/SIEM and perform initial to intermediate-level investigations. - Review and validate security events from multiple log sources and identify legitimate threats. - Perform deep-dive investigations for incidents involving malware, phishing, insider threats, and cloud breaches. - Assist in detection rule creation and tuning under the guidance of senior incident responders. - Use frameworks like MITRE ATT&CK for mapping and improving detection quality. - Conduct threat hunting using Elastic Stack and related tools. - Collaborate with MSSP, CSIRT, and IT infrastructure teams to ensure timely incident handling. - Support incident response reporting, evidence collection, and documentation for compliance and audit. - Contribute to automation opportunities in detection and response workflows. - Participate in training sessions, simulations, and tabletop exercises to enhance readiness. - Responsible for the log source onboarding and managing the continuous logs availability on the SIEM platform. #LI-JE1", "summaryDescription" : "Senior Incident Response Specialist, Cyber Security. Skills: Incident Response, Cyber Security, SIEM platform. Monitor security alerts. Investigate security alerts", "createdAt" : "2026-06-14T19:11:17.518", "lastUpdated" : "2026-06-16T02:39:21.304", "ingestTimestamp" : "2026-06-14T19:11:17.518", "mongoId" : "6a2c68fa74d8ee00a0905806", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Security alerts", "Security events", "Malware investigation", "Phishing investigation", "Insider threats", "Cloud breaches", "Detection rule creation", "Threat hunting", "Compliance reporting", "Audit support", "Simulation exercises", "Tabletop exercises", "Incident Response", "Cyber Security", "SIEM platform", "Incident triage", "Log analysis", "Root cause analysis", "Use case improvements", "Detection quality", "Incident handling", "Evidence collection", "Detection workflows", "Readiness enhancement", "Log source onboarding", "Cyber resilience", "MITRE ATT&CK", "Malware", "Phishing", "Elastic Stack", "SIEM" ], "skillCount" : 31, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1129.084, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "69c94a659bc74574cbbb2ff2", "title" : "Security Engineer III", "company" : "Amazon Web Services, Inc.", "industry" : "Corporate Operations, Systems Security Engineering, no business category", "salary" : { "min" : 183000.0, "max" : 247600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Mountain View, California, USA", "locations" : [ "Mountain View, California, USA" ], "timestamp" : "2026-06-15T03:35:50.943", "fingerprint" : "6f56488172fd1b0457db308b776407b8e8426e09c69e9f9a42d79420a73986e7", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3196185/apply", "externalId" : "61f7f252-2733-4a3d-b7cd-304c3b3784db", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Mountain View", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.3893889,-122.0832101" } ], "locationText" : "Mountain View, California, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Master's", "experienceMinYears" : 2, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS", "professionalSkills" : [ "Security posture", "Security incidents", "Security guardrails", "Emerging threats", "Security documentation", "Security trends", "Security technologies", "Security best practices", "Security risks", "Mitigation strategies", "Security status reports", "Security concerns", "Security requirements" ], "hardSkillsList" : [ "Incident response", "Trend analysis", "Automation processes", "Risk assessment" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Trend analysis", "level" : "intermediate" }, { "name" : "Automation processes", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Security engineering, Incident response, Security automation", "majorSkillsList" : [ "Security engineering", "Incident response", "Security automation" ], "coreResponsibilities" : "Maintain security posture, Enhance security posture, Investigate security incidents, Respond to security incidents, Deploy security guardrails, Maintain security guardrails, Analyze trends in emerging threats, Assess trends in emerging threats, Work closely with AWS teams, Develop security documentation, Maintain security documentation, Stay updated on security trends, Stay updated on security technologies, Stay updated on security best practices, Propose innovative solutions, Implement innovative solutions, Contribute to internal security tools, Contribute to automation processes, Communicate security risks, Communicate security incidents, Communicate mitigation strategies, Prepare security status reports, Present security status reports, Collaborate with customers, Collaborate with partners, Address security concerns, Ensure compliance with security requirements, Mentor junior security team members", "teamCollaboration" : "Various AWS teams; Technical stakeholders; Non-technical stakeholders; Customers and partners; Junior security team members", "domainKnowledge" : "Amazon Web Services; Cloud security", "domainList" : [ "amazon-web-services", "cloud-security" ], "domainSpecificKnowledge" : [ "Amazon Web Services", "Cloud security" ], "communicationSkills" : "Communicate risks; Communicate incidents; Communicate strategies; Present reports", "documentationSkills" : "Security documentation", "continuousLearning" : "Stay updated on trends; Stay updated on technologies; Stay updated on best practices", "innovationCreativity" : "Propose innovative solutions; Implement innovative solutions", "problemSolvingSkills" : "Investigate incidents; Respond to incidents; Analyze trends; Assess trends", "qualificationsBasic" : "Master's degree or foreign equivalent, 2 years of experience, Bachelor's degree or foreign equivalent, 5 years progressive post-baccalaureate experience, 1 year experience communicating security risks, 1 year experience developing security tools, 1 year experience identifying security risks, 1 year experience delivering cross functional projects", "qualificationsPreferred" : "See job description, Position requirements above", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "MULTIPLE POSITIONS AVAILABLE Employer: AMAZON WEB SERVICES, INC. Offered Position: Security Engineer III Job Location: Mountain View, California Job Number: AMZ9443303 Position Responsibilities: Responsible for maintaining and enhancing the security posture of Amazon Web Services (AWS) across multiple work streams. Investigate and respond to security incidents promptly and effectively. Deploy and maintain security guardrails to prevent future incidents. Analyze and assess trends in emerging threats to stay ahead of potential risks. Work closely with various AWS teams to ensure the overall security of AWS. Develop and maintain security documentation and procedures. Continuous Improvement and Innovation. Stay updated on the latest security trends, technologies, and best practices. Propose and implement innovative solutions to enhance the security posture. Contribute to the development of internal security tools and automation processes. Communicate security risks, incidents, and mitigation strategies to both technical and non-technical stakeholders. Prepare and present regular security status reports to management. Collaborate with customers and partners to address security concerns and ensure compliance with security requirements. Mentor junior security team members. 40 hours / week, 8:00am-5:00pm, Salary Range $183,000/year to $247,600/year. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, visit: https://www.aboutamazon.com/workplace/employee-benefits. Amazon.com is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation.#0000 Basic Qualifications: Position Requirements: Master's degree or foreign equivalent degree in Computer Science, Engineering, Information Systems, Mathematics, or a related field and two years of experience in the job offered or a related occupation. Employer will accept a Bachelor's degree or foreign equivalent degree in Computer Science, Engineering, Information Systems, Mathematics, or a related field and five years of progressive post-baccalaureate experience in the job offered or a related occupation as equivalent to the Master’s degree and two years of experience. Must have one year of experience in the following skill(s): (1) communicating complex security risks, incidents, and mitigation strategies across technical and non-technical audiences, including executive level stakeholders; (2) developing internal security tools and automation processes; (4) experience identifying common security risks, developing, and executing comprehensive security strategies; and (5) delivering cross functional projects and working cross functionally with tech and non-tech teams.#0000 Preferred Qualifications: Please see job description and the position requirements above. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Engineer III at Amazon Web Services, Inc.. Skills: Security engineering, Incident response, Security automation. Maintain security posture. Enhance security posture", "postedDate" : "2026-06-13T01:34:29.826", "createdAt" : "2026-06-13T01:34:29.826", "lastUpdated" : "2026-06-15T03:35:50.943", "ingestTimestamp" : "2026-06-13T01:34:29.826", "mongoId" : "69c94a659bc74574cbbb2ff2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3196185/apply", "salaryAnnualMin" : 183000, "salaryAnnualMax" : 247600, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response", "Trend analysis", "Automation processes", "Risk assessment", "Mentoring", "Security engineering", "Security automation", "Security posture", "Security incidents", "Security guardrails", "Emerging threats", "Security documentation", "Security trends", "Security technologies", "Security best practices", "Security risks", "Mitigation strategies", "Security status reports", "Security concerns", "Security requirements", "Amazon Web Services", "Cloud security" ], "skillCount" : 22, "jobCategory" : "operations", "dataQualityScore" : 1.0, "_score" : 1127.9519, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "694ae6ce70f0b99d589b2804", "title" : "Security Operations and Incident Response Manager", "company" : "Hyundai Capital America", "industry" : "FinTech", "salary" : { "min" : 155000.0, "max" : 210000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager in Security Operations and Incident Response in Irvine, United States, adjusted for the FinTech industry and company size." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "timestamp" : "2026-06-15T08:40:47.148", "fingerprint" : "d5f865261d9c50964a8d89f96af400da1cdb2f3eecdc20e0391203f2e5cc71a5", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=105024", "externalId" : "105024", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "SIEM, EDR, Threat intelligence, Ransomware, Phishing, Account takeover, Forensic analysis, Automation, Cloud security, AWS, Azure, Google Cloud, Oracle Cloud, Python, PowerShell", "professionalSkills" : [ "Incident response", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance" ], "hardSkillsList" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning" ], "softSkillsList" : [ "Analytical mindset", "Leadership" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Alert triage", "level" : "intermediate" }, { "name" : "Incident handling", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Post-incident review", "level" : "intermediate" }, { "name" : "Tool configuration", "level" : "intermediate" }, { "name" : "Detection rule tuning", "level" : "intermediate" }, { "name" : "Automation scripting", "level" : "intermediate" }, { "name" : "Cloud monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical mindset" }, { "name" : "Leadership" } ], "majorSkills" : "Incident response, Security operations, Threat detection, SIEM management", "majorSkillsList" : [ "Incident response", "Security operations", "Threat detection", "SIEM management" ], "coreResponsibilities" : "Monitor security events, Analyze security events, Detect threats, Respond to threats, Tune SIEM rules, Optimize SIEM ingestion, Leverage threat intelligence, Analyze financial threats, Develop detection strategies, Triage security alerts, Correlate data, Escalate critical incidents, Lead incident response, Support incident response, Perform forensic investigations, Document findings, Create incident response playbooks, Maintain incident response playbooks, Conduct post-incident reviews, Recommend improvements, Update security controls, Coordinate with MSSP partners, Validate escalations, Provide tuning feedback, Manage security tools, Configure security tools, Ensure tool performance, Ensure tool coverage, Develop detection rules, Tune detection rules, Develop alerts, Tune alerts, Implement automation responses, Streamline tasks, Monitor cloud environments, Secure cloud environments, Protect financial data, Protect workloads, Integrate security tools, Partner with vulnerability management, Partner with IAM teams, Collaborate with IT Infrastructure, Collaborate with IT Application Teams, Collaborate with DevOps, Collaborate with IAM, Collaborate with DLP, Collaborate with Application Security, Integrate security operations, Conduct vulnerability scans", "teamCollaboration" : "Cross-functional collaboration; Collaborate with IT Infrastructure; Collaborate with IT Application Teams; Collaborate with DevOps; Collaborate with IAM; Collaborate with DLP; Collaborate with Application Security; Collaborate with threat intelligence; Collaborate with vulnerability management; Collaborate with engineering teams; Collaborate with cybersecurity architecture; Collaborate with cybersecurity engineering", "domainKnowledge" : "Financial systems; Cybersecurity; Cloud environments; MITRE framework", "domainList" : [ "financial-systems", "cybersecurity", "cloud-environments", "mitre-framework" ], "domainSpecificKnowledge" : [ "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework" ], "toolProficiency" : [ "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "communicationSkills" : "Communicate risk; Communicate operational performance; Documentation skills", "documentationSkills" : "Document findings", "continuousLearning" : "Continuous learning; Staying ahead of threats; Tuition reimbursement", "problemSolvingSkills" : "Analytical mindset; Root cause analysis", "specialRequirements" : "Work at home, Office environment", "outcomesObjectives" : "Reduce false positives; Improve detection fidelity; Enhance detection strategies; Prevent recurrence", "qualificationsBasic" : "5+ years experience, Experience with SIEM platforms, Experience with EDR, Experience with threat intelligence platforms, Experience with incident response lifecycle, Experience with cybersecurity metrics, Experience with KPIs, Experience communicating risk, Experience communicating operational performance, Experience with cloud environments, Experience with automation scripts, Experience with vulnerability scanners, Experience with firewalls", "qualificationsPreferred" : "Experience with Splunk, Experience with NGSIEM, Experience with AWS, Experience with Azure, Experience with Google Cloud, Experience with Oracle Cloud, Experience with Python, Experience with PowerShell", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Security Operations & Incident Response (SOIR) Manager is responsible for the enterprise-wide incident response function within the Security Operations Center (SOC), ensuring rapid detection, containment, and remediation of cybersecurity threats. This role is pivotal in maintaining the integrity, confidentiality, and availability of Hyundai Capital America’s digital assets and infrastructure. This role will oversee 3 rd party vendor of incident responders and collaborate with threat intelligence, vulnerability management, and engineering teams to drive continuous improvement in detection and response capabilities. In addition, this role will create and maintain incident response playbooks and establish processes for proactive threat hunting, as well as be responsible for administration and day-to-day support of HCA EDR, SIEM, and HCA Monitoring, Threat detection, and remediation tools. What You Will Do 1. Security Monitoring & Threat Detection : · Monitor and analyze security events in real-time using SIEM platforms (e.g., Splunk, NGSIEM etc.) to detect and respond to threats targeting financial systems, such as ransomware, phishing, or account takeover. · Tune and optimize SIEM correlation rules and ingestion pipelines to reduce false positives and improve detection fidelity. · Leverage threat intelligence platforms to analyze emerging financial-specific threats, correlate intelligence with internal data, and develop actionable insights to enhance detection and prevention strategies. 2. Incident Response & Remediation : · Alert Triage: Investigate and triage security alerts, correlating data from endpoints, networks, and cloud environments to identify true positives and escalate critical incidents. · Incident Handling: Lead and support incident response activities, including containment, eradication, and recovery, for security incidents spanning the MITRE framework. · Forensic Analysis: Perform forensic investigations to determine the root cause of incidents, and document findings for audits and legal purposes. · Playbook Development: Create and maintain incident response playbooks, ensuring rapid and consistent response processes. · Post-Incident Review: Conduct post-Incident reviews to identify lessons learned, recommend improvements, and update security controls to prevent recurrence. · Coordinate with MSSP partners in a co-managed SIEM/SOC model to validate escalations and provide tuning feedback. 3. Tool Administration and Management of SOC Solutions : · Tool Administration: Manage and configure security tools, including SIEM, EDR, firewalls, and vulnerability scanners, to ensure optimal performance and coverage. · Rule Tuning: Develop and tune detection rules, signatures, and alerts to reduce false positives and improve detection accuracy in financial environments. · Automation: Implement automation responses (e.g. SOUR) scripts (e.g., Python, PowerShell) to streamline tasks like alert enrichment, incident triage, or vulnerability scans. · Cloud Security Monitoring: Monitor and secure cloud environments (e.g., AWS, Azure, Google Cloud, Oracle Cloud) using native security tools and third-party integrations, protecting financial data and workloads. · Collaborate with cybersecurity architecture & engineering team to ensure proper integration of security tools across cloud, network, and endpoint environments. · Partner with vulnerability management and IAM teams to ensure holistic security coverage. 4. Collaboration, Automation, and Innovation Activities : · Cross-Functional Collaboration: Partner with IT Infrastructure and IT Application Teams, DevOps, IAM, DLP, and Application Security teams to integrate security operations with broader cybersecurity initiatives, such as cloud migrations or fintech development. · Vulnerability Management: Collaborate with Vulnerability Management team to conduct regular vulnerability scans across networks, systems, and applications to identify weaknesses, such as unpatched software or misconfigurations and support the patching management and/or adequate remediation plan. 5. Documentation, Reporting, and Compliance Activities : · Incident Documentation: Document security incidents, investigations, and remediation actions in detail to support audits, compliance, and lessons learned. · Vulnerability and Penetration Test Reports: Produce comprehensive reports on vulnerability scans and penetration tests, including risk assessments, remediation plans, and validation results. · Metrics and Reporting: Develop and report on SOC metrics (e.g., Mean Time to Detect, Mean Time to Respond, vulnerability remediation rates, penetration test coverage) to demonstrate operational effectiveness. · Runbooks and Procedures: Maintain and update SOC runbooks, standard operating procedures (SOPs), and knowledge bases for incident response, vulnerability management, and penetration testing. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity with proven knowledge in Security Operations Center practices and incident response processes; including 3+ years of experience in financial services, with a strong understanding of financial threats (e.g., fraud, data breaches) and regulations (e.g., PCI DSS, Korean SOX, GDPR) · Hands-on experience with SIEM platforms, EDR solutions, and other Monitoring and Vulnerability management tools (e.g., Splunk, Crowdstrike, Rapid 7) · Strong understanding of cyber threat landscapes, attack vectors, MITRE ATT&CK framework, and adversary tactics, techniques, and procedures · Bachelor’s degree in Computer Science, Information Security, or related field · Master’s degree preferred · Certification in one of the following: CISSP, CCSP, CISM, TOGAF or equivalent · Demonstrated ability to manage major incident investigations, including root cause analysis, executive reporting, and coordination with legal, compliance, and law enforcement when necessary · Familiarity with regulatory and compliance frameworks such as HIPAA, PCI-DSS, NIST, ISO 27001, and GDPR. · Proven ability to develop and maintain incident response playbooks, escalation procedures, and SOC standard operating procedures (SOPs) · Experience with cybersecurity metrics and KPIs, and the ability to communicate risk and operational performance to executive leadership · Demonstrated expertise in incident response lifecycle, including detection, triage, containment, eradication, recovery, and post-incident review · Analytical mindset with attention to detail · Excellent communication and documentation skills · Ability to work under pressure and manage multiple incidents simultaneously · Passion for continuous learning and staying ahead of emerging threats Work Environment Employees in this class are subject to extended periods of sitting, standing, and walking, vision to monitor and moderate noise levels. Work is performed in an at home and office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Security Operations and Incident Response Manager at Hyundai Capital America. Skills: Incident response, Security operations, Threat detection, SIEM management. Monitor security events. Analyze security events", "createdAt" : "2026-06-14T08:13:57.992", "lastUpdated" : "2026-06-15T08:40:47.148", "ingestTimestamp" : "2026-06-14T08:13:57.992", "mongoId" : "694ae6ce70f0b99d589b2804", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 210000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Threat detection", "Alert triage", "Incident handling", "Forensic investigation", "Playbook development", "Post-incident review", "Tool configuration", "Detection rule tuning", "Automation scripting", "Cloud monitoring", "Vulnerability scanning", "Analytical mindset", "Leadership", "Incident response", "Security operations", "SIEM management", "Threat hunting", "Tool administration", "Rule tuning", "Vulnerability management", "IAM", "DLP", "Application security", "Risk assessment", "Operational performance", "Financial systems", "Cybersecurity", "Cloud environments", "MITRE framework", "Splunk", "NGSIEM", "EDR", "SIEM", "Firewalls", "Vulnerability scanners" ], "skillCount" : 36, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.7777778, "_score" : 1126.3257, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145374d8ee00a00bb396", "title" : "Front-End Engineer, AWS Security Hub", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T22:47:35.744", "fingerprint" : "10072a7789fe9395647b2bff93c632330392254f37e44cb232faf6589e8db38d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441498/apply", "externalId" : "ec807ada-a129-4ecf-93b7-e0d763567a06", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Python, Go, Terraform, Docker, Kubernetes, CI/CD, Cloud security, Infrastructure as Code", "professionalSkills" : [ "System design", "Problem solving" ], "hardSkillsList" : [ "Security automation", "Infrastructure automation" ], "hardSkills" : [ { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Infrastructure automation", "level" : "intermediate" } ], "majorSkills" : "AWS, Python, Go, Terraform", "majorSkillsList" : [ "AWS", "Python", "Go", "Terraform" ], "coreResponsibilities" : "Design and implement security automation, Build and maintain infrastructure, Develop and deploy services, Automate security controls, Collaborate with engineering teams, Troubleshoot production issues, Participate in on-call rotation", "teamCollaboration" : "Cross-functional teams; Engineering teams", "projectManagementSkills" : [ "Agile methodologies" ], "domainKnowledge" : "Cloud security; AWS security services; Distributed systems; Large-scale systems", "domainList" : [ "cloud-security", "aws-security-services", "distributed-systems", "large-scale-systems" ], "domainSpecificKnowledge" : [ "Cloud security", "AWS security services", "Distributed systems", "Large-scale systems" ], "toolProficiency" : [ "AWS", "Terraform", "Docker", "Kubernetes" ], "documentationSkills" : "Technical documentation", "problemSolvingSkills" : "Problem solving; Troubleshooting", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "5+ years of experience, Bachelor's degree in Computer Science, Experience with AWS, Experience with Python, Experience with Go, Experience with Terraform, Experience with Docker, Experience with Kubernetes", "qualificationsPreferred" : "Master's degree, Experience with security automation, Experience with CI/CD pipelines, Experience with distributed systems, Experience with large-scale systems", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "AWS Security Hub is an exciting new service that acts as the central clearing house for managing security and compliance in AWS accounts, bringing the power of many security providers together under one roof. We need a strong Front-End Engineer with experience in AI integration to help us build innovative features with a strong focus on fantastic user experiences that are responsive, dynamic, and modern. We are a small team, but growing quickly with a big roadmap. You will build robust commercial web applications, leveraging modern AI technologies and tools. You will help drive technical decisions around architecture, frameworks, and AI implementation strategies. Experience with large language models, AI-assisted development tools, and modern AI frameworks is highly desired. Although AWS Security Hub is at the center of security within AWS, you don't need to have a security background to be successful on the team. What you do need is a desire to work on the bleeding edge of technology - including AI/ML integration, the ability to collaborate with others, and the desire to have fun doing it - all while delighting our customers with the new experiences delivered. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded engineer and enable them to take on more complex tasks in the future, particularly in emerging technologies like AI. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon's culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Required Skills: * Strong front-end development experience * Experience with AI tools and technologies * Familiarity with AI-assisted development practices * Knowledge of modern AI frameworks and their integration Basic Qualifications: - 2+ years of non-internship professional front end, web or mobile software development using JavaScript, HTML and CSS experience - 1+ years of computer science fundamentals (object-oriented design, data structures, algorithm design, problem solving and complexity analysis) experience - Experience using JavaScript frameworks such as angular and react Preferred Qualifications: - 1+ years of agile software development methodology experience - Experience with common front-end technologies such as HTML, CSS, JS, TypeScript, and Node Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 158,100.00 - 213,800.00 USD annually USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Front-End Engineer, AWS Security Hub at Amazon Development Center U.S., Inc.. Skills: AWS, Python, Go, Terraform. Design and implement security automation. Build and maintain infrastructure", "postedDate" : "2026-06-14T20:21:20.637", "createdAt" : "2026-06-14T20:21:20.637", "lastUpdated" : "2026-06-15T22:47:35.744", "ingestTimestamp" : "2026-06-14T20:21:20.637", "mongoId" : "6a25145374d8ee00a00bb396", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441498/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security automation", "Infrastructure automation", "AWS", "Python", "Go", "Terraform", "System design", "Problem solving", "Agile methodologies", "Cloud security", "AWS security services", "Distributed systems", "Large-scale systems", "Docker", "Kubernetes" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Junior", "dataQualityScore" : 0.8888889, "_score" : 1116.3452, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca36a74d8ee00a09aba74", "title" : "Sr. Security Engineer, Corporate Information Security", "company" : "Betterment", "industry" : "FinTech", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in New York, adjusted for the FinTech industry and company size." }, "location" : "61 West 23rd Street, Fifth Floor, New York, New York", "locations" : [ "61 West 23rd Street", "Fifth Floor", "New York", "New York" ], "timestamp" : "2026-06-15T09:22:09.285", "fingerprint" : "72c875a3162a4c2e09d8c8dc48b7c153e2abafe284223ef079d06afa2c355b42", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.betterment.com/careers/current-openings/job?gh_jid=7979278&gh_jid=7979278", "externalId" : "7979278", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Go, Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, SaaS, Windows, Linux, MacOS, Mobile, Managed browser, Workstation, AI Governance, CIS benchmarks, ACLs, Firewall rules, Cryptography, VPNs, Tunneling, Encapsulation", "professionalSkills" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Risk reduction", "Business enablement", "Network monitoring", "Automation" ], "hardSkillsList" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation" ], "softSkillsList" : [ "AI fluency" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Network monitoring", "level" : "intermediate" }, { "name" : "ACLs", "level" : "intermediate" }, { "name" : "Firewall rules", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "VPNs", "level" : "intermediate" }, { "name" : "Tunneling", "level" : "intermediate" }, { "name" : "Encapsulation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "AI fluency" } ], "majorSkills" : "Identity architecture, Access controls, Endpoint hardening, Workforce security", "majorSkillsList" : [ "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security" ], "coreResponsibilities" : "Design identity architecture, Implement identity architecture, Improve identity architecture, Design privileged access controls, Implement privileged access controls, Improve privileged access controls, Design endpoint hardening standards, Implement endpoint hardening standards, Improve endpoint hardening standards, Improve workforce security posture, Embed secure access patterns, Partner with Security teams, Partner with IT, Partner with Legal, Partner with Compliance, Partner with business units, Operationalize CIS benchmarks, Extend security to mobile, Extend security to managed browser", "teamCollaboration" : "Cross-functional teams; Security teams; IT; Legal; Compliance; Business units", "domainKnowledge" : "Workforce security; Identity management; Logical access; Change management; SaaS security; Endpoint security; Mobile security; Managed browser security; Workstation security; AI Governance; CIS benchmarks; SOC 2; ISO 27001; NIST; Enterprise network; Privileged Access Management; Identity Governance", "domainList" : [ "workforce-security", "identity-management", "logical-access", "change-management", "saas-security", "endpoint-security", "mobile-security", "managed-browser-security", "workstation-security", "ai-governance", "cis-benchmarks", "soc-2", "iso-27001", "nist", "enterprise-network", "privileged-access-management", "identity-governance" ], "domainSpecificKnowledge" : [ "Workforce security", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance" ], "toolProficiency" : [ "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "communicationSkills" : "Writing RFCs; Writing one-pagers; Writing audit narratives", "documentationSkills" : "Technical writing; Audit narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years Python, Experience with Okta, Experience with Google Workspace, Experience with Slack, Experience with Atlassian, Experience with Glean, Experience with Jamf, Experience with SaaS portfolio, Experience with Windows, Experience with Linux, Experience with macOS, Experience with mobile, Experience with managed browser, Experience with workstation environments, Experience with AI Governance, Experience with CIS benchmarks, Experience with RFCs, Experience with one-pagers, Experience with audit narratives, Experience with SOC 2, Experience with ISO 27001, Experience with NIST, Experience with network monitoring, Experience with ACLs, Experience with firewall rules, Experience with cryptography, Experience with VPNs, Experience with tunneling, Experience with encapsulation", "qualificationsPreferred" : "Privileged Access Management experience, Identity Governance experience, Cloud security experience, Endpoint security experience, Vulnerability management experience, Security automation experience, AI fluency", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Betterment Betterment is a leading, technology-driven financial services company that offers investing, savings and retirement solutions for retail investors and investment advisors as well as financial wellness solutions, including a 401(k) for small and medium-sized businesses. Our team is passionate about our mission, to empower people to build wealth with confidence and ease. We're headquartered in NYC and offer hybrid NY-based positions (four days/week in-office, with no required office days during the summer and winter holidays). About the Role Betterment is hiring a Sr. Security Engineer, Corporate Information Security to be a principal member of the Workforce Security team. We're responsible for managing identity and logical access across the company, owning change management for the systems employees and contractors rely on every day, and operating the technologies that secure them: Okta, Google Workspace, Slack, Atlassian, Glean, Jamf, and the SaaS portfolio that surrounds them. As we extend centralized management to a small Windows and Linux footprint, you'll help shape how we do that securely from day one. This is a hands-on senior IC role focused on designing, implementing, and continuously improving identity architecture, privileged access controls, endpoint hardening standards, and our overall workforce security posture. You'll embed secure access patterns across SaaS, managed browser, mobile, and workstation environments partnering closely with other Security teams, IT, Legal, Compliance, and the business units we serve. In parallel, you'll partner with our AI Governance an opinion on operationalizing CIS benchmarks across macOS and Windows without crushing the user experience; comfort extending security to mobile and managed browser surfaces. Vulnerability Python, Go, or similar with a track record of automation that survives the person who built it. AI fluency: Curiosity for AI tools and workflows; an instinct for enabling responsibly rather than reflexively blocking. Communication: Strong writing — RFCs, one-pagers, audit narratives — and the cross-functional patience to bring stakeholders along. Compliance posture: Comfort operating in SOC 2 and ISO 27001/NIST environments, balancing risk reduction with business enablement. Enterprise network: Experience with network monitoring building/testing ACLs, firewall rules, cryptography, VPNs and tunneling/encapsulation. Preferred Qualifications Hands-on experience with Privileged Access Management (CyberArk, BeyondTrust, Delinea), Identity Governance to empower people to build wealth with confidence and ease. We set audacious goals We set them for the company, our customers, and ourselves, and we won’t stop until we reach them. We don’t just show up; we give our all, then celebrate our wins. We value all perspectives When we collaborate, we're at our best. We believe diverse perspectives lead to better outcomes and strive to uphold our supportive and inclusive community. We simplify financial services We’re financial services pioneers, always finding new ways to improve, optimize, and enhance. Constant improvement is in our DNA. Our Commitment to Your Total Well-being: We offer a competitive suite of benefits, including medical, dental, and vision coverage; life and AD short- and long-term disability; infertility support and WPATH-aligned transgender health benefits; an Employee Assistance Program (EAP); transit benefits and FSA and HSA options Ownership: Equity for all employees, including new hire and refresher grants. Time: Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth year. Growth: Company-paid professional coaching for all employees. Wealth: Day-one 401(k) match plus matching on qualified student loan payments. What happens next We’ll take a few weeks to review all applications. If we’d like to spend more time with you, we’ll reach out to arrange next steps, which will include 3-4 sets of meetings with your future colleagues. In the interview process, we’ll look to learn more about your skills, experiences, capabilities, and motivators. Many of our questions will be aimed at understanding how you might operate here at Betterment. Depending on the role, we may ask you to complete a case study exercise or technical assessments, as we want to collect a robust set of data points to better inform our decisions. On average, it takes us around 3-5 weeks to make a hiring decision, depending on your availability and sense of urgency. As a best practice, we aim to interview at least 2-3 final round candidates before making a hiring decision. Please note that, as we usually receive an overwhelming number of applications for open positions, we’re unable to offer individual feedback during the interview process. We recognize that interviewing for a new role is a big deal. We appreciate you considering Betterment as the next step in your career, and our Recruiting Team is here to support and advocate for you through the interview process! Betterment is dedicated to providing accommodations to candidates upon request. If you need accommodations at any point throughout the interview process, please reach out to your recruiter. Please note that in any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Come join us! We’re an equal opportunity employer and comply with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, religion, creed, national origin or ancestry, ethnicity, sex, gender (including gender nonconformity and status as a transgender or transsexual individual), sexual orientation, marital status, age, physical or mental disability, citizenship, past, current or prospective service in the uniformed services, predisposing genetic characteristic, domestic violence victim status, arrest records, or any other characteristic protected under applicable federal, state or local law.", "summaryDescription" : "Sr. Security Engineer, Corporate Information Security at Betterment. Skills: Identity architecture, Access controls, Endpoint hardening, Workforce security. Design identity architecture. Implement identity architecture", "postedDate" : "2026-06-14T03:38:21.776", "createdAt" : "2026-06-14T03:38:21.776", "lastUpdated" : "2026-06-15T09:22:09.285", "ingestTimestamp" : "2026-06-14T03:38:21.776", "mongoId" : "6a2ca36a74d8ee00a09aba74", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability management", "Security automation", "Network monitoring", "ACLs", "Firewall rules", "Cryptography", "VPNs", "Tunneling", "Encapsulation", "AI fluency", "Identity architecture", "Access controls", "Endpoint hardening", "Workforce security", "Risk reduction", "Business enablement", "Automation", "Identity management", "Logical access", "Change management", "SaaS security", "Endpoint security", "Mobile security", "Managed browser security", "Workstation security", "AI Governance", "CIS benchmarks", "SOC 2", "ISO 27001", "NIST", "Enterprise network", "Privileged Access Management", "Identity Governance", "Okta", "Google Workspace", "Slack", "Atlassian", "Glean", "Jamf", "CyberArk", "BeyondTrust", "Delinea" ], "skillCount" : 42, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1113.5349, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c9ff474d8ee00a09a0ea9", "title" : "Cloud Application Security Engineer", "company" : "Trulioo", "industry" : "Engineering", "salary" : { "min" : 80000.0, "max" : 100000.0, "currency" : "CAD", "frequency" : "Yearly" }, "location" : "Vancouver", "locations" : [ "Vancouver" ], "timestamp" : "2026-06-16T01:13:27.473", "fingerprint" : "450a276986bd182cd720828a4c34c02fc8edefa1bf7c911e19830bdd4308ed62", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trulioo/84ffcdae-09d6-403f-899a-0440c06de24f/application", "externalId" : "84ffcdae-09d6-403f-899a-0440c06de24f", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS, Kubernetes, CI/CD, Terraform, Docker, Cloud security", "professionalSkills" : [ "System design", "Threat modeling", "Vulnerability management", "Automation" ], "hardSkillsList" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response" ], "hardSkills" : [ { "name" : "Application security reviews", "level" : "intermediate" }, { "name" : "Static testing", "level" : "intermediate" }, { "name" : "Dynamic testing", "level" : "intermediate" }, { "name" : "Security guardrails", "level" : "intermediate" }, { "name" : "Container security", "level" : "intermediate" }, { "name" : "Runtime considerations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "majorSkills" : "Cloud security, Application security, AWS, Kubernetes", "majorSkillsList" : [ "Cloud security", "Application security", "AWS", "Kubernetes" ], "coreResponsibilities" : "Collaborate to design security capabilities, Implement security capabilities, Operate security capabilities, Support application security reviews, Support threat modeling, Support vulnerability management processes, Assist in implementing AWS security guardrails, Assist in maintaining AWS security guardrails, Support Kubernetes security controls, Support container security controls, Contribute to automation of security workflows, Support Infrastructure as Code security practices, Monitor systems for irregular behavior, Improve detection capabilities, Assist in incident response", "teamCollaboration" : "DevOps; Engineering; Stakeholders", "domainKnowledge" : "Cloud application security; Digital identity verification; Cloud infrastructure; Container security; CI/CD security", "domainList" : [ "cloud-application-security", "digital-identity-verification", "cloud-infrastructure", "container-security", "ci-cd-security" ], "domainSpecificKnowledge" : [ "Cloud application security", "Digital identity verification", "Cloud infrastructure", "Container security", "CI/CD security" ], "toolProficiency" : [ "Terraform" ], "continuousLearning" : "Annual education stipend", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call escalation coverage", "qualificationsBasic" : "5+ years cloud application security, Experience in AWS, Experience with Kubernetes, Experience with CI/CD security", "qualificationsPreferred" : "Kubernetes experience a plus, CI/CD security experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace. Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite. What We Offer - Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency). Specific benefits may vary by location and will be discussed further during the interview process. - Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity. - Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized. - Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization. Position Summary: We are seeking a Cloud Application Security Engineer to join our ISC team and support the continued improvement of the cloud application security posture for Trulioo’s SaaS platform. Reporting to the Senior Director, Technology Infrastructure and Security, you will contribute to securing applications and infrastructure hosted in AWS. This role focuses on supporting scalable, automated security solutions that balance strong protection with developer productivity. This is a hands-on role within a 24/7 environment that includes participation in on-call escalation coverage for security incidents. This role is ideal for someone looking to deepen their experience in cloud, Kubernetes, and CI/CD security within a collaborative engineering environment. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3 days per week in the office). What You'll Be Doing: You will be a key resource within the Trulioo security team, supporting security capabilities across our cloud platform and application environment. The ideal candidate is a self-starter with strong experience in cloud and platform security, and a focus on building scalable, automated security solutions in AWS. - Collaborate with DevOps, Engineering, and other stakeholders to design, implement, and operate cloud and application security capabilities across CI/CD pipelines and production environments - Support application security reviews and threat modeling, including code review, static and dynamic testing - Support vulnerability management processes across application and infrastructure layers, including CI/CD-integrated workflows - Assist in implementing and maintaining AWS security guardrails, ensuring services are properly configured with effective monitoring, visibility, and alerting - Support Kubernetes and container security controls, including configuration standards, access controls, and runtime considerations - Contribute to automation of security workflows to reduce manual effort and improve response times - Support Infrastructure as Code (IaC) security practices, including Terraform-based deployments - Monitor systems for irregular behavior, improve detection capabilities, and assist in incident response and investigation - Support reporting and continuous improvement of security controls and operational security processes - Support the evaluation and adoption of AI-assisted security and operational workflows - Work closely with senior engineers and cross-functional teams to support secure platform operations and continuous improvement initiatives You Will Bring: - 2-5 years of experience in cloud, application, or platform security, with demonstrated depth in AWS and modern cloud-native environments - Bachelor’s degree in computer science, engineering, or equivalent experience - Experience working with cloud security technologies, preferably AWS, including implementation of security controls and guardrails - Experience securing containerized environments and Kubernetes platforms (RBAC, network policies, workload security), including implementing controls in production environments - Experience implementing security controls within CI/CD pipelines and supporting developer workflows - Experience with vulnerability management across application and infrastructure layers, including prioritization and remediation workflows - Hands-on experience with AWS security services such as SecurityHub, GuardDuty, IAM, Config, Control Tower, CloudWatch, and related tooling - Experience working within DevSecOps environments and CI/CD workflows, ideally in AWS-based infrastructure (bonus points for AWS certifications) - Strong scripting and automation experience (Python, Terraform, or similar), with a focus on reducing manual operational work - Experience with monitoring and logging platforms (e.g., Sumo Logic or equivalent) - Knowledge of security frameworks and standards (e.g., OWASP Top 10, ISO 27001, SOC 2) - Strong technical background in Linux and cloud-based systems - Ability to manage competing priorities and operate effectively within a collaborative team environment - Strong problem-solving and critical thinking skills, with a focus on practical, scalable solutions - Excellent communication and collaboration skills across engineering and security teams Thriving at Trulioo At Trulioo, you’re not just an employee. You’re a valued member of our Trulicrew on a journey of professional and personal growth with a world-class organization. With Trulioo, you have the power to revolutionize the intersection of technology, digital trust and online identity to open the global economy to everyone. Together, we can shape the digital future. We’re on the lookout for exceptional people to empower with trust, autonomy and the freedom to cultivate their potential. Your curiosity, meticulous attention to detail and passion to contribute are highly valued. If that resonates with you, apply today to become a part of our team. Join us in shaping a future where your career isn’t just a journey but also a boundless exploration into the possibilities of technology and digital identity verification. Get an inside look at life at Trulioo by following us on LinkedIn https://ca.linkedin.com/company/trulioo, or learn more about us at www.trulioo.com http://www.trulioo.com If you don’t see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that minorities and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations, and life experiences to apply. Trulioo welcomes applications from people with disabilities. Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time-to-time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility. Privacy Notice As part of our job application process, Trulioo collects, processes, and discloses personal data for the purpose of identifying suitable candidates for our job openings. For more detail, please visit Trulioo’s Website Privacy Policy https://www.trulioo.com/website-privacy-policy in the section “When you apply for a job”.", "summaryDescription" : "Cloud Application Security Engineer at Trulioo. Skills: Cloud security, Application security, AWS, Kubernetes. Collaborate to design security capabilities. Implement security capabilities", "createdAt" : "2026-06-14T18:14:12.400", "lastUpdated" : "2026-06-16T01:13:27.473", "ingestTimestamp" : "2026-06-14T18:14:12.400", "mongoId" : "6a2c9ff474d8ee00a09a0ea9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Application security reviews", "Static testing", "Dynamic testing", "Security guardrails", "Container security", "Runtime considerations", "Incident response", "Cloud security", "Application security", "AWS", "Kubernetes", "System design", "Threat modeling", "Vulnerability management", "Automation", "Cloud application security", "Digital identity verification", "Cloud infrastructure", "CI/CD security", "Terraform" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1111.6605, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2cb14f74d8ee00a09dccc6", "title" : "Engineering Manager, Security", "company" : "Recharge", "industry" : "Open Positions", "salary" : { "min" : 6000000.0, "max" : 9000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Security Engineering Manager in the SaaS industry, adjusted for manager seniority and remote work in India." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "CCSP", "GSEC" ], "timestamp" : "2026-06-15T08:57:31.228", "fingerprint" : "86f3b15525e56dad6ec32727214201266c09044bcc7ebb551ed1e728817ef4e7", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/recharge/df77f239-a1d9-4d95-a4a5-49ff4d1af3b2/application", "externalId" : "df77f239-a1d9-4d95-a4a5-49ff4d1af3b2", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Network security, Network protocols, Firewalls, Intrusion prevention, Cloud security, CSPM tools, VPN, SAML, OAuth, WAF, SIEM, Vulnerability Management, Malware defense, Backup systems, Disaster recovery, Helm, Terraform, Docker, Linux, Kubernetes, Monitoring, Metrics, Logging, GCP, AWS, Azure, Python, Flask, React, Vue.js, Snowflake, Looker, Wiz, HackerOne, Gitlab, Splunk, Google Cloud Armor", "professionalSkills" : [ "Network architecture", "Application security", "Incident response", "Vulnerability assessment", "Team management", "Process improvement", "Agile processes" ], "hardSkillsList" : [ "Network configuration", "Firewall management", "Intrusion prevention systems", "SIEM configuration", "Vulnerability assessment", "Incident response planning", "Security incident response" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Network configuration", "level" : "intermediate" }, { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Intrusion prevention systems", "level" : "intermediate" }, { "name" : "SIEM configuration", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Security incident response", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Network security architecture, Application security architecture, Cloud infrastructure security, Vulnerability management", "majorSkillsList" : [ "Network security architecture", "Application security architecture", "Cloud infrastructure security", "Vulnerability management" ], "coreResponsibilities" : "Manage engineering team, Scale engineering team, Fill team gaps, Develop team culture, Foster collaboration, Foster open communication, Deliver outcomes, Be responsible for team output, Write code, Review code, Improve team productivity, Refine agile processes, Create methods to increase efficiency, Design secure network architectures, Implement secure network architectures, Maintain secure network architectures, Ensure data confidentiality, Ensure data integrity, Ensure data availability, Create network documentation, Maintain network documentation, Create security documentation, Maintain security documentation, Integrate security measures into network designs, Integrate security measures into network implementations, Integrate application security tools, Integrate application security processes, Utilize AI tooling for skills files, Apply application security practices, Configure firewalls, Manage firewalls, Configure intrusion prevention systems, Manage intrusion prevention systems, Configure SIEM, Manage SIEM, Configure network security devices, Manage network security devices, Monitor network traffic, Respond to security incidents, Conduct vulnerability assessments, Remediate security risks, Apply proactive measures against threats, Maintain incident response plans, Improve incident response plans, Participate in tabletop exercises, Lead incident response efforts, Investigate security incidents, Mitigate security incidents, Mentor engineers on security configurations, Mentor engineers on security best practices, Investigate security posture, Analyze security posture, Evangelize good security posture", "teamCollaboration" : "Cross-functional teams; Internal teams; External stakeholders", "projectManagementSkills" : [ "Agile processes" ], "domainKnowledge" : "Cloud-native environments; Network protocols; Firewall configurations; Intrusion detection systems; Intrusion prevention systems; Cloud infrastructure security; CSPM tools; VPN; Remote access management; Authentication technologies; SAML; OAuth; WAF technologies; SIEM tools; Vulnerability Management; Virus defense systems; Malware defense systems; Backup systems; Disaster recovery planning; Security assessment techniques", "domainList" : [ "cloud-native-environments", "network-protocols", "firewall-configurations", "intrusion-detection-systems", "intrusion-prevention-systems", "cloud-infrastructure-security", "cspm-tools", "vpn", "remote-access-management", "authentication-technologies", "saml", "oauth", "waf-technologies", "siem-tools", "vulnerability-management", "virus-defense-systems", "malware-defense-systems", "backup-systems", "disaster-recovery-planning", "security-assessment-techniques" ], "domainSpecificKnowledge" : [ "Cloud-native environments", "Network protocols", "Firewall configurations", "Intrusion detection systems", "Intrusion prevention systems", "Cloud infrastructure security", "CSPM tools", "VPN", "Remote access management", "Authentication technologies", "SAML", "OAuth", "WAF technologies", "SIEM tools", "Vulnerability Management", "Virus defense systems", "Malware defense systems", "Backup systems", "Disaster recovery planning", "Security assessment techniques" ], "toolProficiency" : [ "Akamai", "Cloudflare", "Google Cloud Armor", "Imperva", "Splunk", "LogRhythm", "Panther", "Crowdstrike", "Sentinel One", "Trend Micro", "Helm", "Terraform", "Docker", "Ansible", "Nginx", "Redis", "CloudSQL", "MySQL", "Snowflake", "Looker", "Wiz", "HackerOne", "Gitlab" ], "communicationSkills" : "Excellent communication", "documentationSkills" : "Network documentation; Security documentation", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "Network security design experience, In-depth knowledge of network protocols, Firewall configurations knowledge, Intrusion detection/prevention systems knowledge, Cloud infrastructure security knowledge, Hardening standards knowledge, CSPM tools knowledge, VPN/remote access management knowledge, Authentication technologies knowledge, SAML knowledge, OAuth knowledge, WAF technologies knowledge, SIEM tools configuration experience, Extensive knowledge of Vulnerability Management, Virus and malware defense systems knowledge, Backup systems knowledge, Disaster recovery planning knowledge, Security assessment tools experience, Security assessment techniques experience, Ability to manage multiple projects, Ability to learn new systems, Ability to support new applications, Analytical skills, Problem-solving skills, Excellent communication skills, Helm experience, Terraform experience, Docker experience, Linux experience, Kubernetes experience, 2+ years Monitoring experience, 2+ years Metrics experience, 2+ years Logging experience, 2+ years SIEM tools configuration experience, 5+ years cloud-native environments experience, Bachelor's degree in Computer Science, Bachelor's degree in Information Technology", "qualificationsPreferred" : "CISSP certification, CCSP certification, GSEC certification, Relevant certifications equivalent", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Recharge is the subscription platform for the world’s fastest-growing and most innovative brands. Shopify’s premier subscription solution, Recharge is on a mission to build the future of commerce around customer retention. Known for its relentless product innovation and focus on ease of use, Recharge helps merchants deliver seamless customer experiences that drive customer retention and revenue growth. The Recharge platform leverages data from over 100 million shoppers to help brands more successfully set up, manage, and grow their subscription businesses. Recharge is a hands-on partner to over 20,000 brands globally — including quip, Dr. Squatch, Blueland, Estrid, Oats Overnight, Bobbie, and more. Learn more at: getrecharge.com http://getrecharge.com OVERVIEW - As an Engineering Manager, Security you will play a pivotal role in designing, implementing, and maintaining robust security measures to safeguard our cloud network infrastructure. You will be responsible for ensuring the confidentiality, integrity, and availability of our critical systems, as well as proactively identifying and mitigating potential security threats. - In this role, you will be a core contributor in ensuring the security of Recharge’s cloud platform. You will collaborate, both within and outside of your team to clarify, theorize, figure out, and decide solutions to complex problems. While this is a leadership role, the person in this role is expected to be a player/coach who isn’t afraid to get their hands dirty. WHAT YOU’LL DO - Leadership - Manage a first-class engineering team that will scale as the company and business grows, identifying and filling any team gaps. - Develop a team-oriented, supportive culture with a strong focus on creating a working environment that fosters collaboration, open communication, and delivering outcomes. - Be responsible for team output and hands on day-to-day writing and reviewing code. - Constantly improve team productivity, refine agile processes, and create methods to increase efficiency. - Network Security Architecture: - Design, implement, and maintain secure network architectures, ensuring the confidentiality, integrity, and availability of data. - Create and maintain network and security documentation. - Collaborate with cross-functional teams to integrate security measures into network designs and implementations. - Application Security Architecture: - Integrate application security tools and processes with automated release management tools. - Utilize AI tooling to implement skills files for vulnerability triage, root cause analysis, scope analysis and vision MR creation. - Utilize your strong working knowledge of our technical stack to apply sound application security practices. - Firewall and Intrusion Prevention: - Configure and manage firewalls (including WAFs), intrusion prevention systems, SIEM, and other network security devices and/or tools. - Monitor network traffic for unusual activity and respond to security incidents in a timely manner. - Vulnerability Assessment: - Conduct regular vulnerability assessments on network infrastructure to identify and remediate potential security risks. - Stay abreast of emerging threats and vulnerabilities, applying proactive measures to protect against them. - Incident Response: - Maintain and continuously improve incident response plans, participate in tabletop exercises, and lead incident response efforts when necessary. - Collaborate with internal teams and external stakeholders to investigate and mitigate security incidents. - Mentor other engineers on security configurations and best practices - Investigate, analyze and evangelize good security posture throughout the organization - Live by and champion our values: Accountability, Collaboration, Iteration and Details WHAT YOU’LL BRING - Network security design experience and an an in-depth knowledge of network protocols, firewall configurations, and intrusion detection/prevention systems - Cloud infrastructure security knowledge including hardening standards, CSPM tools, VPN/remote access management and authentication technologies such as SAML, OAuth - Robust understanding of WAF technologies such as Akamai, Cloudflare, Google Cloud Armor, Imperva, etc - Experience configuring SIEM tools such as Splunk, LogRhythm, Panther etc - Extensive knowledge of Vulnerability Management practices - Understanding of virus and malware defense systems such as Crowdstrike, Sentinel One, Trend Micro, etc - Understanding of backup systems and disaster recovery planning - Experience with security assessment tools and techniques - Ability to manage multiple projects, activities, and tasks simultaneously - Ability to learn and support new systems and applications - Strong analytical and problem-solving skills - Excellent communication and collaboration skills - Willingness to participate in a first line of support on-call rotation - Desire to work remotely and to make an impact WHAT YOU’LL BRING - 3+ years experience managing high performing security teams - 10+ years experience in network and/or security roles, with a focus on edge security tools - 2+ years experience with Infrastructure as Code tools such as Helm, Terraform, Docker, Linux, Kubernetes, etc - 2+ years experience with Monitoring, Metrics and Logging solutions such as Splunk, Datadog, ELK stack, Axiom, etc - 2+ years experience configuring SIEM tools such as Splunk, LogRhythm, Panther, etc - 5+ years experience in cloud-native environments such as GCP, AWS, or Azure - Bachelor’s degree in Computer Science, Information Technology, or related field - Relevant certifications such as CISSP, CCSP, GSEC, or equivalent OUR STACK - GCP, Kubernetes, GitLab, Helmfile, Terraform, Docker, Ansible, Nginx, Redis, CloudSQL/MySQL, Python, Flask, React, Vue.js, Snowflake, Looker, Wiz, HackerOne, Gitlab Application Security, Splunk (including Enterprise Security), Google Cloud Armor Compensation Recharge’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. Salary ranges are designed to be competitive and aligned with country specific practices, while individual compensation is determined by skills, qualifications, and experience. The compensation listed is not inclusive of any equity and benefits that might exist in your total compensation package. - Hiring range in the US $196,000 USD - $245,000 USD Application window anticipated to close: 7/1/2026. If you’re interested in this opportunity, please submit an application as soon as possible. Interview recording & AI notetakers To protect privacy, legal compliance, and interviewer/candidate experience, recording, transcribing, or using AI notetaker tools during interviews is not permitted without our prior written consent. Handwritten notes are welcome. If you need an accommodation (e.g., captions), email recruiting@getrecharge.com before your interview—we’ll arrange an approved solution. Benefits at a Glance - Medical, dental and vision plans - Retirement plan with employer contribution - Flexible Time Off - Paid Parental Leave - Monthly Remote Life and Merchant stipends Recharge http://www.rechargepayments.com/ | Instagram https://www.instagram.com/rechargepayments/?hl=en | Twitter https://twitter.com/ReChargePayment | Facebook https://www.facebook.com/rechargepayments/ Recharge Payments is an equal opportunity employer. In addition to EEO being the law, it is a policy that is fully consistent with our principles. All qualified applicants will receive consideration for employment without regard to status as a protected veteran or a qualified individual with a disability, or other protected status such as race, religion, color, national origin, sex, sexual orientation, gender identity, genetic information, pregnancy or age. Recharge Payments prohibits any form of workplace harassment.", "summaryDescription" : "Engineering Manager, Security at Recharge. Skills: Network security architecture, Application security architecture, Cloud infrastructure security, Vulnerability management. Manage engineering team. Scale engineering team", "createdAt" : "2026-06-14T04:17:19.966", "lastUpdated" : "2026-06-15T08:57:31.228", "ingestTimestamp" : "2026-06-14T04:17:19.966", "mongoId" : "6a2cb14f74d8ee00a09dccc6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Network configuration", "Firewall management", "Intrusion prevention systems", "SIEM configuration", "Vulnerability assessment", "Incident response planning", "Security incident response", "Leadership", "Mentoring", "Network security architecture", "Application security architecture", "Cloud infrastructure security", "Vulnerability management", "Network architecture", "Application security", "Incident response", "Team management", "Process improvement", "Agile processes", "Cloud-native environments", "Network protocols", "Firewall configurations", "Intrusion detection systems", "CSPM tools", "VPN", "Remote access management", "Authentication technologies", "SAML", "OAuth", "WAF technologies", "SIEM tools", "Vulnerability Management", "Virus defense systems", "Malware defense systems", "Backup systems", "Disaster recovery planning", "Security assessment techniques", "CISSP", "CCSP", "GSEC", "Akamai", "Cloudflare", "Google Cloud Armor", "Imperva", "Splunk", "LogRhythm", "Panther", "Crowdstrike", "Sentinel One", "Trend Micro", "Helm", "Terraform", "Docker", "Ansible", "Nginx", "Redis", "CloudSQL", "MySQL", "Snowflake", "Looker", "Wiz", "HackerOne", "Gitlab" ], "skillCount" : 63, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1106.4691, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "SaaS", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca10a74d8ee00a09a4259", "title" : "Senior Platform & Security Engineer", "company" : "Taekus", "industry" : "Engineering", "salary" : { "min" : 175000.0, "max" : 230000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "United States", "locations" : [ "United States" ], "timestamp" : "2026-06-15T12:56:58.244", "fingerprint" : "ea979b5f541f4448dcef0372aa1184d9360f837cab69ad675e646cf957a6799c", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/taekus/f8bf7189-6e1e-4f2c-83b8-6739e6eddb49/application", "externalId" : "f8bf7189-6e1e-4f2c-83b8-6739e6eddb49", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 6, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, EKS, Kubernetes, EC2, Lambda, RDS, Docker, Python, Django, Celery, Redis, RabbitMQ, PostgreSQL, IAM, Infrastructure-as-code", "professionalSkills" : [ "Platform engineering", "Infrastructure engineering", "Backend focus", "Release engineering", "Developer experience", "Observability", "Operational health", "Security guardrails", "Vulnerability management", "Compliance automation", "Audit readiness" ], "hardSkillsList" : [ "Secrets management", "Access control", "PCI/PII data handling", "Dependency hygiene" ], "hardSkills" : [ { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "PCI/PII data handling", "level" : "intermediate" }, { "name" : "Dependency hygiene", "level" : "intermediate" } ], "majorSkills" : "Platform engineering, Security engineering, AWS, Kubernetes", "majorSkillsList" : [ "Platform engineering", "Security engineering", "AWS", "Kubernetes" ], "coreResponsibilities" : "Own platform and infrastructure, Build tooling for engineers, Create paved roads, Develop self-service workflows, Own CI/CD, Automate releases, Own feature-flag infrastructure, Own configuration infrastructure, Own secrets infrastructure, Manage background-job reliability, Manage caching reliability, Manage queue systems reliability, Improve observability, Improve operational health, Share on-call rotation, Own platform security guardrails, Manage secrets, Manage IAM, Manage access control, Handle PCI/PII data, Manage vulnerability, Automate compliance, Automate audit readiness, Coordinate external auditors, Make audit process repeatable, Set technical direction, Drive infrastructure-as-code", "teamCollaboration" : "Treat engineers as customers", "domainKnowledge" : "Fintech; Banking; Rewards ecosystem; PCI-DSS; SOC 2", "domainList" : [ "fintech", "banking", "rewards-ecosystem", "pci-dss", "soc-2" ], "domainSpecificKnowledge" : [ "Fintech", "Banking", "Rewards ecosystem", "PCI-DSS", "SOC 2" ], "toolProficiency" : [ "Docker", "Kubernetes", "Terraform", "Celery", "Redis", "RabbitMQ" ], "innovationCreativity" : "Driving innovation", "specialRequirements" : "Travel for interview, On-call rotation", "qualificationsBasic" : "6+ years engineering experience, Hands-on AWS experience, CI/CD background, Containerization experience, Python/Django codebase experience, Modern observability tooling experience, Security-minded engineer, PCI-DSS or SOC 2 experience", "qualificationsPreferred" : "Terraform a plus, Hands-on PCI-DSS experience, Hands-on SOC 2 experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Taekus is a profitable fintech and travel startup building a next-generation premium banking and rewards ecosystem for affluent customers. With $70M in annual revenue and $3B+ in annual transaction volume, we're entering a new stage of growth focused on scaling our core banking systems, rewards infrastructure, and partner integrations. We're seeking a Senior Platform & Security Engineer to own the infrastructure, reliability, and security that everything we build runs on. This is a high-autonomy role for an engineer ready to define a function from the ground up—setting technical direction, taking work from concept through production, and growing into broader technical leadership as we scale. Join us as we tackle a $3.2T opportunity to redefine the super-premium financial services and rewards market—driving innovation beyond what's existed since the inception of rewards credit cards Interview Process Candidates must be able to travel to San Francisco, New York, Chicago, or Austin for an onsite interview. All required travel will be paid for by Taekus. Your Responsibilities - Own and unify the platform and infrastructure that powers our core products and services. - Treat our engineers as your customers—build the tooling, paved roads, and self-service workflows that let them ship quickly and safely. - Own CI/CD and release automation, keeping the path to production fast, reliable, and observable. - Own feature-flag, configuration, and secrets infrastructure, along with the reliability of our background-job, caching, and queue systems (Celery, Redis, RabbitMQ). - Improve observability and operational health across services through structured logging, error monitoring, and APM, and share in the on-call rotation for platform and infrastructure services. - Own the platform's security guardrails—secrets management, IAM and access control, PCI/PII data handling, and vulnerability management. - Own and automate compliance and audit readiness (PCI-DSS, SOC 2, partner security reviews), coordinating external auditors and making the process repeatable. - Set technical direction for platform and security, driving toward infrastructure-as-code over time. What We're Looking For - 6+ years of professional engineering experience, with a strong platform, infrastructure, or backend focus. - Deep, hands-on AWS experience (EKS/Kubernetes, EC2, Lambda, RDS) in high-availability production environments. - Strong CI/CD and release-engineering background, with containerization using Docker and Kubernetes, and a track record of building tooling that improves developer experience (Terraform a plus). - Comfort working in a Python/Django codebase (Celery, Redis, PostgreSQL), able to read and contribute to platform code. - Experience with modern observability and monitoring tooling across logging, error tracking, and APM. - A security-minded engineer fluent in secrets management, IAM/access control, and dependency hygiene, ideally with hands-on PCI-DSS or SOC 2 experience. - Bachelor's degree in Computer Science, Engineering, or equivalent practical experience. You’d Love This Job If - You want to establish and own a platform and security function from the ground up. - You'd rather automate security and compliance than grind through them by hand. - You enjoy contributing across the code base where needed. - You want to be in a scaling startup that is experiencing exponential growth. - You're excited by building foundational work and enjoy making an impact. - Traveling is in your DNA and you get to apply your passion into your work. - You thrive in growing high-caliber teams and want to influence both technical and strategic direction. About Taekus Taekus is a 6-year-old luxury financial services company that offers travel rewards credit cards, debit cards, and other banking services for the affluent market. We currently process $3B+ annually in transactions and operate as a highly profitable company. With a lean team of under 20 employees, we’re undergoing tremendous growth as we redefine the premium banking and rewards experience. What We Offer - Competitive salary and stock option plan - Medical, Dental, and Vision insurance - 401(k) plan with 5% company match - Flexible vacation policy - Fully remote work environment", "summaryDescription" : "Senior Platform & Security Engineer at Taekus. Skills: Platform engineering, Security engineering, AWS, Kubernetes. Own platform and infrastructure. Build tooling for engineers", "createdAt" : "2026-06-13T22:19:54.533", "lastUpdated" : "2026-06-15T12:56:58.244", "ingestTimestamp" : "2026-06-13T22:19:54.533", "mongoId" : "6a2ca10a74d8ee00a09a4259", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 230000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Secrets management", "Access control", "PCI/PII data handling", "Dependency hygiene", "Platform engineering", "Security engineering", "AWS", "Kubernetes", "Infrastructure engineering", "Backend focus", "Release engineering", "Developer experience", "Observability", "Operational health", "Security guardrails", "Vulnerability management", "Compliance automation", "Audit readiness", "Fintech", "Banking", "Rewards ecosystem", "PCI-DSS", "SOC 2", "Docker", "Terraform", "Celery", "Redis", "RabbitMQ" ], "skillCount" : 28, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1102.5804, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a191e7758b93c861e39f6d9", "title" : "Security Operation", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Operation role in Beijing, China, adjusted for the technology industry and a large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP", "CISM" ], "timestamp" : "2026-06-16T06:35:48.202", "fingerprint" : "0f6917ea953a3e131579c32b1270584e12d4a83b21426a992e4f929c5c0f6ad5", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=873155", "externalId" : "873155", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Firewalls, Intrusion detection, Vulnerability scanners, Python, PowerShell, AWS, Azure, Ali Cloud", "professionalSkills" : [ "Risk assessment", "Incident response", "Vulnerability management", "Log analysis", "Forensic investigations", "Threat analysis" ], "hardSkillsList" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation" ], "softSkillsList" : [ "Adaptability" ], "hardSkills" : [ { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Forensic investigation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Adaptability" } ], "majorSkills" : "Security operations, Incident response, Vulnerability management", "majorSkillsList" : [ "Security operations", "Incident response", "Vulnerability management" ], "coreResponsibilities" : "Safeguard information assets, Manage security risks, Respond to incidents, Improve security posture, Protect information assets, Identify security risks, Assess security risks, Mitigate security risks, Lead incident response, Coordinate incident response, Monitor security incidents, Respond to security incidents, Contain security threats, Eradicate security threats, Recover from security threats, Investigate security incidents, Analyze logs, Conduct forensic investigations, Develop incident reports, Identify gaps, Recommend improvements, Coordinate response activities, Conduct vulnerability assessments, Manage remediation efforts, Identify vulnerabilities, Assess vulnerabilities, Report vulnerabilities, Remediate vulnerabilities, Fine-tune detection rules, Minimize false positives, Improve detection accuracy, Analyze security measures, Update policies, Update configurations, Update procedures, Track emerging threats, Track attack patterns, Track tactics, Track techniques, Track procedures, Develop documentation, Maintain documentation, Develop playbooks, Maintain playbooks, Develop procedures, Maintain procedures, Onboard new team members, Facilitate team integration, Develop planning processes, Develop collaboration processes, Provide technical support, Provide administrative support, Integrate security into SDLC, Provide security training, Provide security awareness, Communicate security status, Communicate security risks, Communicate security incidents", "teamCollaboration" : "IT teams; RD application teams; Business stakeholders; Executive leadership", "domainKnowledge" : "Security operations; Incident response; Vulnerability management; Cloud platforms; ISO 27001; SOC; NIST", "domainList" : [ "security-operations", "incident-response", "vulnerability-management", "cloud-platforms", "iso-27001", "soc", "nist" ], "domainSpecificKnowledge" : [ "Security operations", "Incident response", "Vulnerability management", "Cloud platforms", "ISO 27001", "SOC", "NIST" ], "toolProficiency" : [ "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "communicationSkills" : "Written communication; Verbal communication; Technical audiences; Executive audiences", "documentationSkills" : "Documentation; Playbooks; Standard operating procedures", "problemSolvingSkills" : "Analytical skills; Troubleshooting skills; Issue resolution", "outcomesObjectives" : "Minimize impact; Ensure timely recovery; Minimize false positives; Improve detection accuracy", "qualificationsBasic" : "5+ years experience in security operations, Bachelor's degree in Computer Science", "qualificationsPreferred" : "CISA certification, CISSP certification, CISM certification", "remoteFriendly" : false, "rawDescription" : "Objective of job To safeguard the organization's information assets by proactively managing security risks, effectively responding to incidents, and continuously improving the overall security posture. -Protect the organization's information assets by maintaining confidentiality, integrity, and availability. -Proactively identify, assess, and mitigate security risks and vulnerabilities. -Lead and coordinate effective responses to security incidents, minimizing impact and ensuring timely recovery. -Continuously improve the organization's security posture through proactive monitoring, analysis, and implementation of security best practices. -Ensure compliance with relevant security standards, regulations, and policies. Job designation •Security Incident Management -Monitor and respond to security incidents in alignment with incident response protocols. -Lead incident response efforts to ensure timely containment, eradication, and recovery from security threats. -Conduct thorough investigations of security incidents, including log analysis, host-based and network forensic investigations, to determine the root cause and impact. -Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement. -Coordinate investigation, containment, and other response activities with business stakeholders and groups. •Vulnerability Management -Conduct vulnerability assessments and manage remediation efforts. -Continually identify, assess, report on, manage, and remediate vulnerabilities across endpoints, workloads, and systems. •Security Operations -Fine-tune incident detection and alert-triggering rules to minimize false positives and improve detection accuracy. -Analyze and improve security measures by assessing and updating policies, configurations, and procedures. -Maintain situational awareness by tracking emerging threats, attack patterns, and tactics, techniques, and procedures -Develop and maintain documentation, playbooks, and standard operating procedures. -Perform onboarding of new team members and facilitate smooth integration. -Help develop processes used for internal and external planning and collaboration. -Provide technical and administrative support for day-to-day operations. •Collaboration and Communication -Collaborate with IT and RD application teams to ensure security is integrated into all stages of the software development lifecycle. -Provide security training and awareness programs for employees. -Communicate security status, risks, and incidents to executive leadership and other key stakeholders. Qualification •Technical Skills and Knowledge: -Strong understanding of security operations concepts, incident response methodologies, and vulnerability management principles. Hands-on experience administering and configuring security tools such as SIEM, SOAR, firewalls, intrusion detection/prevention systems, and vulnerability scanners. -Familiarity with scripting languages (e.g., Python, PowerShell) for task automation and tool customization. -Knowledge of cloud platforms such as AWS, Azure, Ali Cloud or other cloud platform. -Strong analytical and troubleshooting skills for rapid issue resolution under pressure. -Excellent communication skills, both written and verbal, for technical and executive audiences. -Adaptability and resilience in the face of evolving cyber threats. •Proficiency in security frameworks and various compliance standards like ISO 27001, SOC, NIST, etc. •Relevant certifications, CISA, CISSP, CISM •> 5 years experience in security operations, incident response, threat detection and analysis, or similar roles •Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "Security Operation at Mercedes-Benz Group China Ltd.. Skills: Security operations, Incident response, Vulnerability management. Safeguard information assets. Manage security risks", "createdAt" : "2026-06-14T21:18:50.139", "lastUpdated" : "2026-06-16T06:35:48.202", "ingestTimestamp" : "2026-06-14T21:18:50.139", "mongoId" : "6a191e7758b93c861e39f6d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security operations", "Incident response", "Vulnerability management", "Threat detection", "Forensic investigation", "Adaptability", "Risk assessment", "Log analysis", "Forensic investigations", "Threat analysis", "Cloud platforms", "ISO 27001", "SOC", "NIST", "CISA", "CISSP", "CISM", "SIEM", "SOAR", "Firewalls", "Intrusion detection", "Vulnerability scanners" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1099.9304, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 205675, "totalPages" : 4114, "hasNext" : true, "hasPrevious" : false } }

Security Engineering Manager Aws Security Corporate Response Jobs in London

Security Engineering Manager (Cloud Security)

Sr. Security Engineer, AWS Cloud Security Response

Security Engineering Manager, AWS Foundational & Hardware Security

Security Engineering Manager (Cloud Security)

Security Incident Response Manager

Security Engineer II, Security Incident Response Team (SIRT)

Senior Security Architect (m/f/d)

Senior Security Engineer, AWS Security Incident Response

Security Engineer, AWS Global Services

Security Software Dev Engineer II, AWS Security Corporate Response

Security Software Dev Engineer II, AWS Security Corporate Response

Security Engineer, Detection and Response

Corporate Security Engineer

Security Software Dev Engineer II, AWS Security Corporate Response

Security Engineer, AWS Security Incident Response

Cloud Security Engineer

Senior Security Engineer

Area Security Manager

AWS Security Operations/Incident Response Engineer

Senior Incident Response Engineer, Devices & Services Security

Security Analyst (Cyber Defense Analyst)

Senior Security Engineer

Security Engineer, Detection and Response

Security Engineer I, Corporate Services Security

Senior Security & Compliance Engineer

Software Engineer II, Security Engineering (Auth0)

Security Engineer - IAM

IT Security Manager

Senior Security Operations Analyst

IT Security Manager

Security Engineer, Corporate Services Security

Director Security Engineering

IT Security Ops Specialist

AWS Security Operations/Incident Response Engineer

Senior Security Engineer

Senior Cyber Security Specialist

Senior Cyber Security Specialist

2026 Security Analyst - Early Career Rotation Program

Security Guard

Security Engineer, Incident Response, CorpSec

Senior Security Incident Response Engineer

Senior Incident Response Specialist, Cyber Security

Security Engineer III

Security Operations and Incident Response Manager

Front-End Engineer, AWS Security Hub

Sr. Security Engineer, Corporate Information Security

Cloud Application Security Engineer

Engineering Manager, Security

Senior Platform & Security Engineer

Security Operation

Common Questions