{ "count" : 151075, "data" : [ { "id" : "6a2ca53574d8ee00a09b5343", "title" : "Senior Cybersecurity Operations Specialist (Security Services)", "company" : "GovTech", "industry" : "Cybersecurity", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Specialist in Singapore, adjusted for the government industry and a large company size." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "OSCP", "OSWE", "CASE", "GWEB" ], "timestamp" : "2026-06-15T08:28:23.725", "fingerprint" : "5f8d58b9cb5e84d2ada39a619482194a1418c152a9ae83c0c8e9c26725275740", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003983201?gh_jid=4003983201", "externalId" : "4003983201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Jenkins, GitLab CI, GitHub Actions", "professionalSkills" : [ "Risk communication", "Pattern recognition", "Constructive feedback" ], "hardSkillsList" : [ "Vulnerability analysis", "Security testing" ], "softSkillsList" : [ "Influence", "Diplomacy", "Analytical mindset" ], "hardSkills" : [ { "name" : "Vulnerability analysis", "level" : "intermediate" }, { "name" : "Security testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Influence" }, { "name" : "Diplomacy" }, { "name" : "Analytical mindset" } ], "majorSkills" : "Cybersecurity Operations, MITRE ATT&CK, Cloud Security", "majorSkillsList" : [ "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security" ], "coreResponsibilities" : "Perform security testing, Identify code vulnerabilities, Provide constructive feedback", "teamCollaboration" : "Non-technical stakeholders; Agency-level performance", "domainKnowledge" : "MITRE ATT&CK framework; Government Commercial Cloud", "domainList" : [ "mitre-att-ck-framework", "government-commercial-cloud" ], "domainSpecificKnowledge" : [ "MITRE ATT&CK framework", "Government Commercial Cloud" ], "communicationSkills" : "Risk communication", "problemSolvingSkills" : "Pattern recognition; Vulnerability analysis", "outcomesObjectives" : "Improve agency performance", "qualificationsBasic" : "Deep understanding MITRE ATT&CK, Knowledge of common TTPs", "qualificationsPreferred" : "OSCP certification, OSWE certification, CASE certification, GWEB certification", "rawDescription" : "GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT deep understanding of the MITRE ATT&CK framework and common TTPs. Cloud & DevOps: Experience with Government Commercial Cloud (GCC) environments and practical knowledge of Jenkins, GitLab CI, or GitHub Actions. Certifications: Professional certifications such as OSCP, OSWE (Offensive Security Web Expert), CASE (Certified Application Security Engineer), or GWEB are highly desirable. Soft Skills Influence & Diplomacy: Ability to communicate complex technical risks to non-technical stakeholders (CIOs/Project Owners) and influence change without direct reporting lines. Analytical Mindset: Ability to spot patterns in \"bad\" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve agency-level performance.", "summaryDescription" : "Senior Cybersecurity Operations Specialist (Security Services) at GovTech. Skills: Cybersecurity Operations, MITRE ATT&CK, Cloud Security. Perform security testing. Identify code vulnerabilities", "postedDate" : "2026-06-14T02:49:40.729", "createdAt" : "2026-06-14T02:49:40.729", "lastUpdated" : "2026-06-15T08:28:23.725", "ingestTimestamp" : "2026-06-14T02:49:40.729", "mongoId" : "6a2ca53574d8ee00a09b5343", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Vulnerability analysis", "Security testing", "Influence", "Diplomacy", "Analytical mindset", "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security", "Risk communication", "Pattern recognition", "Constructive feedback", "MITRE ATT&CK framework", "Government Commercial Cloud", "OSCP", "OSWE", "CASE", "GWEB" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 2092.8625, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b5342", "title" : "Senior Cybersecurity Operations Specialist", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Specialist in Singapore, adjusted for government industry and seniority." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "GCIH", "GCFA", "CHFI", "CISSP" ], "timestamp" : "2026-06-15T07:31:25.322", "fingerprint" : "5a46f9ec3813e78b26d99b086ce195526712f6e7db47c2983d4dc50090a8fc61", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003979201?gh_jid=4003979201", "externalId" : "4003979201", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Singapore", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cybersecurity, Incident Response, Digital forensics, Malware analysis, Threat Intelligence, MITRE ATT&CK, Vulnerability Management, Exploitation techniques, SIEM, SOAR, XDR, EDR, Cloud Operations, GCC", "professionalSkills" : [ "Crisis Leadership", "Technical Oversight", "Incident Governance", "Operational Readiness", "Resiliency Testing", "Capability Building", "Asset Visibility", "Threat Scenario Guidance", "Vulnerability Assessment", "Attack Surface Scanning", "Stakeholder Education" ], "hardSkillsList" : [ "IR methodologies", "Exploitation mechanics", "Vulnerability prioritization", "Patch validation" ], "softSkillsList" : [ "Command & Control", "Diplomacy", "Strategic Foresight" ], "hardSkills" : [ { "name" : "IR methodologies", "level" : "intermediate" }, { "name" : "Exploitation mechanics", "level" : "intermediate" }, { "name" : "Vulnerability prioritization", "level" : "intermediate" }, { "name" : "Patch validation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Command & Control" }, { "name" : "Diplomacy" }, { "name" : "Strategic Foresight" } ], "majorSkills" : "Incident Response, Operational Resilience, Threat Management, Vulnerability Management", "majorSkillsList" : [ "Incident Response", "Operational Resilience", "Threat Management", "Vulnerability Management" ], "coreResponsibilities" : "Establish IR playbooks, Provide crisis guidance, Oversee incident response, Establish incident governance, Design tabletop exercises, Evaluate external vendors, Drive chaos testing, Assess operational readiness, Onboard systems to monitoring, Maintain IT asset inventory, Guide threat use cases, Build detection capabilities, Establish SOPs for vulnerability management, Oversee scanning tools workflow, Validate patch effectiveness, Educate stakeholders on BCP, Foster 'assumed breach' mindset", "teamCollaboration" : "Work with Agency CIOs; Work with CISOs; Partner with Agency CIOs", "projectManagementSkills" : [ "Incident Management", "Business Continuity Planning" ], "domainKnowledge" : "Cybersecurity Operations; Hybrid environments; Government Commercial Cloud; OT/ICS systems; MITRE ATT&CK framework; CVE system; CVSS scoring; Exploitation techniques; Threat actor TTPs", "domainList" : [ "cybersecurity-operations", "hybrid-environments", "government-commercial-cloud", "ot-ics-systems", "mitre-att-ck-framework", "cve-system", "cvss-scoring", "exploitation-techniques", "threat-actor-ttps" ], "domainSpecificKnowledge" : [ "Cybersecurity Operations", "Hybrid environments", "Government Commercial Cloud", "OT/ICS systems", "MITRE ATT&CK framework", "CVE system", "CVSS scoring", "Exploitation techniques", "Threat actor TTPs" ], "toolProficiency" : [ "SIEM", "SOAR", "XDR", "EDR" ], "communicationSkills" : "Crisis guidance; Technical oversight; Stakeholder education", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "specialRequirements" : "Singaporeans Only", "qualificationsBasic" : "8 to 10 years experience, Cybersecurity Operations experience, SOC Management experience, Incident Response experience, Crisis Management track record, Hybrid environments experience, On-premise environments experience, Cloud environments experience, OT environments experience", "qualificationsPreferred" : "GCIH certification, GCFA certification, CHFI certification, CISSP certification", "rawDescription" : "GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity. At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round. Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today! Learn more about GovTech at tech.gov.sg. [What you will be working on] The Cyber Security Group (CSG) is the cybersecurity arm of GovTech. CSG is committed to create a digital government that is safe and secure. CSG delivers technical and operational capabilities to counteract cyber threats, provides thought leadership on transformative cybersecurity governance and policies and to strengthen the cybersecurity posture of government agencies in a manner that is sustainable, pragmatic, and effective. To enhance infocomm security capabilities in GovTech and the Whole-of-Government (WOG), GovTech appoints Chief Information Security Officer (CISO) teams at the various ministries to oversee infocomm security management. As the Security Operations Specialist within the Ministry CISO (MCISO) Office, you will be the lead architect of the Ministry’s operational resilience. You are responsible for ensuring that the entire Ministry Family, spanning multiple agencies maintains a high state of readiness against cyber threats. You will standardise incident response, oversee comprehensive monitoring, and drive advanced resiliency testing (such as chaos testing) to ensure that the Ministry can withstand and recover from sophisticated attacks. Key Responsibilities Incident Management & Response Standardisation Unified Playbooks: Establish and maintain Ministry-wide Incident Response (IR) playbooks for diverse threat scenarios (e.g., Ransomware, Data Exfiltration, Cloud breaches). Crisis Leadership: Provide direct guidance and technical oversight to agencies during High and Critical severity incidents, ensuring timely reporting and effective containment. Incident Governance: Work with Agency CIOs and CISOs to establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis. Operational Readiness & Resiliency Testing Advanced Exercises: Design and oversee high-quality Tabletop Exercises (TTX) for various stakeholders (system owners, SIROs, CISOs, CIOs). You will evaluate external vendors to ensure these exercises are realistic, comprehensive, and push the Ministry’s limits. Chaos Testing: Drive the adoption of chaos testing across agencies to validate the adequacy of resiliency plans and identify hidden failure points in critical systems. Capability Building: Continuously assess the operational readiness of the Ministry Family and lead initiatives to bridge identified gaps in incident management. Continuous Monitoring & Asset Governance Centralised Monitoring: Ensure all Ministry systems are effectively onboarded to central monitoring services. Work with system owners on overcoming challenges encountered during onboarding. Asset Visibility: Partner with Agency CIOs to maintain a robust and updated IT asset inventory, ensuring that \"you cannot protect what you do not know.\" Custom Threat Scenarios: Provide expert guidance for agencies with unique threat use cases or specialised systems (e.g., OT/ICS) that fall outside standard monitoring coverage, helping them build bespoke detection capabilities. Vulnerability & Attack Surface Management Full-Spectrum SOPs: Establish Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments. Ensure that there are proper procedures for managing unpatched vulnerabilities. Attack Surface Scanning: Ensure agencies deploy adequate internal and external scanning tools. You will oversee the workflow for finding prioritisation and validate that patches are applied and effective. Advocacy & Education Resilience Culture: Educate agency stakeholders on the critical importance of Response and Business Continuity Planning (BCP). Stakeholder Inculcation: Foster a mindset of \"assumed breach,\" ensuring project owners and agency leaders understand their roles in threat monitoring and incident management. Qualifications & Requirements Experience Years of Experience: 8 to 10 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response. Crisis Management: Proven track record of leading or providing technical oversight in high-pressure, high-severity security incidents. Domain Expertise: Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT). Technical Skills Incident Response & Forensics: Mastery of IR methodologies and a strong understanding of digital forensics and malware analysis. Threat Intelligence & TTPs: Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework. Vulnerability & Exploitation Research: Deep understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring. Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors. Ability to assess the \"exploitability\" of a vulnerability within the specific context of the Ministry’s environment to prioritise remediation. Detection Technologies: Proficiency in SIEM, SOAR, XDR, and EDR technologies. Ability to evaluate the relevancy of existing monitoring tools against evolving threats. Cloud Operations: Strong understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments. Certifications: Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP are highly desirable. Soft Skills Command & Control: Ability to remain calm and provide clear, authoritative guidance during high-stakes security crises. Diplomacy & Education: Skill in translating operational needs into strategic priorities for Agency CIOs and CISOs. Strategic Foresight: A strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs. Other Requirements This role is open to Singaporeans Only.", "summaryDescription" : "Senior Cybersecurity Operations Specialist at GovTech. Skills: Incident Response, Operational Resilience, Threat Management, Vulnerability Management. Establish IR playbooks. Provide crisis guidance", "postedDate" : "2026-06-13T21:15:49.365", "createdAt" : "2026-06-13T21:15:49.365", "lastUpdated" : "2026-06-15T07:31:25.322", "ingestTimestamp" : "2026-06-13T21:15:49.365", "mongoId" : "6a2ca53574d8ee00a09b5342", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "IR methodologies", "Exploitation mechanics", "Vulnerability prioritization", "Patch validation", "Command & Control", "Diplomacy", "Strategic Foresight", "Incident Response", "Operational Resilience", "Threat Management", "Vulnerability Management", "Crisis Leadership", "Technical Oversight", "Incident Governance", "Operational Readiness", "Resiliency Testing", "Capability Building", "Asset Visibility", "Threat Scenario Guidance", "Vulnerability Assessment", "Attack Surface Scanning", "Stakeholder Education", "Incident Management", "Business Continuity Planning", "Cybersecurity Operations", "Hybrid environments", "Government Commercial Cloud", "OT/ICS systems", "MITRE ATT&CK framework", "CVE system", "CVSS scoring", "Exploitation techniques", "Threat actor TTPs", "GCIH", "GCFA", "CHFI", "CISSP", "SIEM", "SOAR", "XDR", "EDR" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1379.7562, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c684d74d8ee00a0902f46", "title" : "Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x)", "company" : "Eye Security", "industry" : "Operations", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Specialist in The Hague, Netherlands, adjusted for the cybersecurity industry and company size." }, "location" : "The Hague - hybrid", "locations" : [ "The Hague - hybrid", "Amsterdam - remote" ], "timestamp" : "2026-06-15T08:17:12.112", "fingerprint" : "3ea7af24809c33c41fc6338d0a860f04701084d61789d37a8cee558d13bd518a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/eye-security/e0ac138e-4163-40f7-a34d-05de48fb1aec/application", "externalId" : "e0ac138e-4163-40f7-a34d-05de48fb1aec", "industryFunction" : { }, "structuredLocations" : [ { "city" : "The Hague", "country" : "Netherlands", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.0799838,4.3113461" } ], "locationText" : "The Hague, Netherlands", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft 365, Azure, Windows, EDR, SIEM, Cloud infrastructure", "professionalSkills" : [ "Incident response", "Business email compromise", "Account compromise", "Ransomware", "Threat intelligence", "Operational improvements" ], "hardSkillsList" : [ "Digital forensics", "Threat hunting", "Threat intelligence" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" } ], "majorSkills" : "Security Operations, Incident Response, DFIR, CSIRT", "majorSkillsList" : [ "Security Operations", "Incident Response", "DFIR", "CSIRT" ], "coreResponsibilities" : "Investigate cybersecurity incidents, Respond to cybersecurity incidents, Act as senior escalation point, Take ownership of investigations, Communicate with clients, Guide clients through investigations, Guide clients through remediation, Guide clients through security incidents, Support MDR operations, Participate in on-call rotation, Collaborate with internal teams, Improve internal playbooks, Improve documentation, Improve processes, Improve tooling", "teamCollaboration" : "Security Operations; Customer Success; Support; Product", "domainKnowledge" : "Modern attack techniques; Incident response methodologies; Security operations", "domainList" : [ "modern-attack-techniques", "incident-response-methodologies", "security-operations" ], "domainSpecificKnowledge" : [ "Modern attack techniques", "Incident response methodologies", "Security operations" ], "toolProficiency" : [ "EDR solutions", "SIEM platforms" ], "communicationSkills" : "Client communication; Clear communication; Confident communication", "documentationSkills" : "Documentation improvement", "innovationCreativity" : "Automation initiatives", "problemSolvingSkills" : "Problem-solving skills; Root cause analysis", "specialRequirements" : "24/7 on-call rotation", "qualificationsBasic" : "Proven experience in Security Operations, Experience investigating security incidents, Understanding of attack techniques, Experience with Microsoft 365, Experience with Azure, Experience with Windows environments, Experience with EDR solutions, Experience with SIEM platforms, Experience with cloud infrastructure, Excellent communication skills, Calm and structured during high-pressure situations, Analytical and problem-solving skills, Collaborative mindset, Fluency in Dutch, Fluency in English, Residence in the Netherlands, Availability for 24/7 on-call rotation", "qualificationsPreferred" : "Experience investigating BEC incidents, Experience with digital forensics, Experience with threat hunting, Experience with threat intelligence, Experience creating playbooks, Experience creating documentation, Experience creating operational procedures, Experience mentoring junior analysts, Experience acting as technical escalation point", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Eye Security Eye Security is providing cybersecurity with embedded cyber insurance solutions for organizations in Europe. Headquartered in the Netherlands, we are already over 190 FTEs and continue to grow internationally. We combine cutting-edge technology with hands-on expertise to detect, respond to, and recover from cyber threats in real time. Our team brings together talent from intelligence, military, tech, and consulting backgrounds — all united by a shared mission: to make enterprise-grade cybersecurity accessible to every business, not just the big players. At Eye, you’ll work on projects with an international footprint, solving real-world challenges and helping to build a safer digital future for our clients. About this role We are looking for a Senior Cybersecurity Specialist (f/m/x) to join our Security Operations team and help protect our clients from real-world cyber threats. In this role, you will investigate complex security incidents, support incident response engagements, and act as a senior escalation point within our Security Operations Center (SOC). You will work closely with our Managed Detection & Response (MDR) team, support customers during high-pressure situations, and help improve the processes and playbooks that keep our operations running effectively. This position combines hands-on investigation work, client communication, and operational ownership in a fast-growing cybersecurity company. What you will do • Investigate and respond to cybersecurity incidents, including business email compromise, account compromise, ransomware, and other security threats. • Act as a senior escalation point for complex alerts and investigations within the SOC. • Take ownership of complex investigations, Business Email Compromise (BEC) cases, and other escalated incidents. • Communicate clearly and confidently with clients, guiding them through investigations, remediation activities, and security incidents. • Support MDR operations and participate in a 24/7 on-call rotation. • Collaborate with internal teams including Security Operations, Customer Success, Support, and Product. • Improve internal playbooks, documentation, processes, and tooling to strengthen our security operations. • Contribute to initiatives such as automation, threat intelligence, and operational improvements. What you will need • Proven experience in Security Operations (SOC), Managed Detection & Response (MDR), Incident Response (IR), DFIR, CSIRT, CERT, or similar cybersecurity environments. • Experience investigating and responding to security incidents independently. • Strong understanding of modern attack techniques, incident response methodologies, and security operations. • Experience working with technologies such as Microsoft 365, Azure, Windows environments, EDR solutions, SIEM platforms, and cloud infrastructure. • Excellent communication skills and the ability to remain calm and structured during high-pressure situations. • Strong analytical and problem-solving skills with a natural curiosity to investigate root causes and improve processes. • A collaborative mindset and willingness to support teammates, customers, and internal stakeholders. • Fluency in Dutch and English. • Residence in the Netherlands. • Availability to participate in a 24/7 on-call rotation. Nice-to-have • Experience investigating Business Email Compromise (BEC) incidents. • Experience with digital forensics, threat hunting, or threat intelligence. • Experience creating playbooks, documentation, or operational procedures. • Experience mentoring junior analysts or acting as a technical escalation point. What we offer • A meaningful mission: protect organizations across Europe from real-world cyber threats • Work with top-tier professionals from national CERTs, intelligence agencies, and leading tech backgrounds • A remote-friendly culture with quarterly meetups and annual company retreats (in Spain, Portugal, Italy…) • Thursday socials to stay connected • A generous time-off policy, including wellbeing and volunteering days", "summaryDescription" : "Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x) at Eye Security. Skills: Security Operations, Incident Response, DFIR, CSIRT. Investigate cybersecurity incidents. Respond to cybersecurity incidents", "createdAt" : "2026-06-13T21:56:41.879", "lastUpdated" : "2026-06-15T08:17:12.112", "ingestTimestamp" : "2026-06-13T21:56:41.879", "mongoId" : "6a2c684d74d8ee00a0902f46", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Digital forensics", "Threat hunting", "Threat intelligence", "Security Operations", "Incident Response", "DFIR", "CSIRT", "Incident response", "Business email compromise", "Account compromise", "Ransomware", "Operational improvements", "Modern attack techniques", "Incident response methodologies", "Security operations", "EDR solutions", "SIEM platforms" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1282.271, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca53574d8ee00a09b5341", "title" : "Senior Cybersecurity Governance Specialist", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 125000.0, "max" : 180000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Governance Specialist in Singapore, adjusted for seniority and the government technology industry." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "CISM", "CRISC", "CISSP", "OSCP", "OSWE" ], "timestamp" : "2026-06-16T03:26:02.091", "fingerprint" : "cc278e308ffc3ed3c39373e47c90b3a9b88ad6478552ee25cd6bb7873dfa50ff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003957201?gh_jid=4003957201", "externalId" : "4003957201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust Architecture, Cloud security, Firewalls, EDR, IAM, SIEM, CSPM, CWPP, CASB, Secrets management, MITRE ATT&CK", "professionalSkills" : [ "Risk assessment", "Technical translation" ], "hardSkillsList" : [ "Risk methodologies", "Vulnerability translation", "ZTA components", "Cloud security technologies", "MITRE ATT&CK framework", "Common TTPs" ], "softSkillsList" : [ "Strategic influence", "Critical thinking", "Lifelong learner" ], "hardSkills" : [ { "name" : "Risk methodologies", "level" : "intermediate" }, { "name" : "Vulnerability translation", "level" : "intermediate" }, { "name" : "ZTA components", "level" : "intermediate" }, { "name" : "Cloud security technologies", "level" : "intermediate" }, { "name" : "MITRE ATT&CK framework", "level" : "intermediate" }, { "name" : "Common TTPs", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Strategic influence" }, { "name" : "Critical thinking" }, { "name" : "Lifelong learner" } ], "majorSkills" : "Cybersecurity governance, Risk management, Security technologies", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Security technologies" ], "coreResponsibilities" : "Educate senior stakeholders, Persuade senior stakeholders, Find systemic issues, Fix systemic issues, Stay updated on security technologies, Stay updated on cyber threat landscapes, Translate technical issues into business risk", "teamCollaboration" : "Senior stakeholders; CIOs; Project Owners", "domainKnowledge" : "Singapore Government security policies; NIST; ISO 27001; Zero Trust Architecture; Cloud security; MITRE ATT&CK framework; Zero-day vulnerabilities; Configuration drifts", "domainList" : [ "singapore-government-security-policies", "nist", "iso-27001", "zero-trust-architecture", "cloud-security", "mitre-att-ck-framework", "zero-day-vulnerabilities", "configuration-drifts" ], "domainSpecificKnowledge" : [ "Singapore Government security policies", "NIST", "ISO 27001", "Zero Trust Architecture", "Cloud security", "MITRE ATT&CK framework", "Zero-day vulnerabilities", "Configuration drifts" ], "communicationSkills" : "Risk articulation", "continuousLearning" : "Staying updated on security technologies; Staying updated on cyber threat landscapes", "problemSolvingSkills" : "Critical thinking; Root cause analysis", "qualificationsBasic" : "Mastery of risk assessment methodologies, Translate technical vulnerabilities into business risk, Technical understanding of ZTA components, Technical understanding of cloud security technologies, Map technical controls to MITRE ATT&CK, Deep understanding of MITRE ATT&CK framework, Understand common TTPs", "qualificationsPreferred" : "Exposure to OT systems, CISM, CRISC, CISSP, OSCP, OSWE", "remoteFriendly" : false, "rawDescription" : "[What the role is] GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT exposure to OT (Operational Technology) systems is a significant advantage. Regulatory Knowledge: Deep familiarity with Singapore Government security policies (e.g., Instruction Manual on IT Management) and international standards (e.g., NIST, ISO 27001). Technical Skills Risk Methodologies: Mastery of risk assessment methodologies (e.g., TVRA) and the ability to translate technical vulnerabilities into business risk. Security Technologies: Strong technical understanding of various Zero Trust Architecture (ZTA) components and cloud security technologies. Such as Firewalls, EDR, IAM, SIEM, CSPM, CWPP, CASB and secrets management etc. Threat Awareness: Ability to map technical controls to the MITRE ATT deep understanding of the MITRE ATT&CK framework and common TTPs. Certifications: Professional certifications such as CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CISSP, OSCP or OSWE (Offensive Security Web Expert) are highly preferred. Soft Skills Strategic Influence: Ability to educate and persuade senior stakeholders (CIOs/Project Owners) on the importance of rigorous risk governance. Critical Thinking: Ability to look past surface-level audit compliance to find and fix underlying systemic issues. Lifelong Learner: A genuine passion for staying updated on the latest security technologies and evolving cyber threat landscapes. Risk Articulation: Exceptional ability to \"translate\" deep technical issues (e.g., zero-day vulnerabilities, configuration drifts) into business risk for non-technical senior executives.", "summaryDescription" : "Senior Cybersecurity Governance Specialist at GovTech. Skills: Cybersecurity governance, Risk management, Security technologies. Educate senior stakeholders. Persuade senior stakeholders", "postedDate" : "2026-06-14T20:12:27.993", "createdAt" : "2026-06-14T20:12:27.993", "lastUpdated" : "2026-06-16T03:26:02.091", "ingestTimestamp" : "2026-06-14T20:12:27.993", "mongoId" : "6a2ca53574d8ee00a09b5341", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Risk methodologies", "Vulnerability translation", "ZTA components", "Cloud security technologies", "MITRE ATT&CK framework", "Common TTPs", "Strategic influence", "Critical thinking", "Lifelong learner", "Cybersecurity governance", "Risk management", "Security technologies", "Risk assessment", "Technical translation", "Singapore Government security policies", "NIST", "ISO 27001", "Zero Trust Architecture", "Cloud security", "Zero-day vulnerabilities", "Configuration drifts", "CISM", "CRISC", "CISSP", "OSCP", "OSWE" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1260.1459, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c926c74d8ee00a0985bcd", "title" : "Cybersecurity Specialist", "company" : "New Era Technology", "industry" : "Consulting", "salary" : { "min" : 165000.0, "max" : 220000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Cybersecurity Specialist in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Australia-New Zealand ", "locations" : [ "Australia-New Zealand" ], "certifications" : [ "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "timestamp" : "2026-06-15T05:08:16.844", "fingerprint" : "c1f573db3a3c008744fdf26d82a2848fb9860ac3ebb55e5241c7cfe1f282030f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/neweratechau/jobs/8517622002", "externalId" : "8517622002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" }, { "city" : "Sydney", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" }, { "city" : "Newcastle", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-32.9192953,151.7795348" }, { "city" : "Brisbane", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-27.4689623,153.0235009" } ], "locationText" : "Melbourne, Australia; Sydney, Australia; Newcastle, Australia; Brisbane, Australia", "experienceMinYears" : 5, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cisco, FortiGate, Microsoft, Azure, VMware, Hyper-V, Backup solutions", "professionalSkills" : [ "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising" ], "hardSkillsList" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability assessments", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity solutions, Technical advisory, Security architecture", "majorSkillsList" : [ "Cybersecurity solutions", "Technical advisory", "Security architecture" ], "coreResponsibilities" : "Engage clients, Understand business needs, Understand risks, Understand cybersecurity requirements, Lead solution workshops, Lead technical discussions, Lead client presentations, Design scalable solutions, Design secure solutions, Align solutions to frameworks, Support pre-sales, Scope solutions, Design proposals, Act as trusted advisor, Translate technical concepts, Develop architecture designs, Develop roadmaps, Develop security strategies, Champion cybersecurity awareness, Champion cybersecurity compliance, Champion cybersecurity best practices, Collaborate with engineering teams, Embed security into solutions, Lead incident response, Lead risk assessments, Lead security investigations, Provide technical leadership, Provide escalation support, Mentor engineers, Conduct vulnerability assessments, Conduct threat hunting, Conduct security audits, Maintain knowledge of threats, Maintain knowledge of tools, Maintain knowledge of best practices", "teamCollaboration" : "Solutions Group collaboration; Engineering teams collaboration", "domainKnowledge" : "NIST; ISO 27001; Essential Eight; LAN/WAN; TCP/IP", "domainList" : [ "nist", "iso-27001", "essential-eight", "lan-wan", "tcp-ip" ], "domainSpecificKnowledge" : [ "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP" ], "communicationSkills" : "Client presentations; Technical concepts translation", "documentationSkills" : "Architecture designs; Roadmaps; Security strategies", "continuousLearning" : "Continuous training; Knowledge sharing", "problemSolvingSkills" : "Problem-solving; Logical thinking; Lateral thinking", "qualificationsBasic" : "5+ years experience cybersecurity, Solution design experience, Pre-sales exposure, Client-facing experience, Solid infrastructure knowledge, Solid networking knowledge, Hands-on troubleshooting experience, Written communication skills, Verbal communication skills, Problem-solving skills, Stakeholder engagement skills, Team-oriented mindset, Ability to work under pressure, Excellent interpersonal skills, Logical thinking capacity, Lateral thinking capacity, Passion for cybersecurity, Continuous learning passion, Knowledge sharing passion", "qualificationsPreferred" : "Solutions Architecture experience, Pre-sales experience, Microsoft certification a plus, VMware certification a plus, Veeam certification a plus, Citrix certification a plus", "rawDescription" : "Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale. At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service. If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together What is the role This role is open for candidates based in Melbourne, Sydney, Newcastle, and Brisbane. The Cybersecurity Lead drives the design and delivery of cybersecurity solutions for New Era’s clients, acting as both a technical expert and trusted advisor. The role bridges technical execution and client outcomes, supports pre-sales by shaping solutions and communicating value, and champions cybersecurity awareness, guidance, and compliance alongside the Solutions Group. Other key responsibilities include but may not be limited to following: Engage with clients to understand business needs, risks, and cybersecurity requirements Lead solution workshops, technical discussions, and client presentations Design scalable, secure solutions aligned to frameworks (e. g. NIST, ISO 27001, Essential Eight) Support pre-sales, including scoping, solution design, and proposals Act as a trusted advisor, translating technical concepts into business outcomes Develop architecture designs, roadmaps, and security strategies Champion cybersecurity awareness, compliance, and best practices internally Collaborate with engineering teams to embed security into solutions Lead incident response, risk assessments, and security investigations Provide technical leadership, escalation support, and mentoring engineers Conduct vulnerability assessments, threat hunting, and security audits Maintain up-to-date knowledge of threats, tools, and best practices Who we are looking for Successful candidate must possess: Must have 5+ years’ experience in cybersecurity, including solution design or pre-sales exposure Strong client-facing experience with the ability to lead discussions and influence outcomes Experience working in a Cyber Security team Solid infrastructure and networking knowledge (LAN/WAN, TCP/IP), with hands-on troubleshooting experience Familiarity with key technologies such as Cisco/FortiGate, Microsoft/Azure, VMware/Hyper-V, backup solutions, and security frameworks Experience in incident response, remote support, and working within cybersecurity teams Strong written and verbal communication, problem-solving, and stakeholder engagement skills Team-oriented mindset and ability to work under pressure Excellent interpersonal, problem solving as well as logical and lateral thinking capacity Passion for cybersecurity, continuous learning, and knowledge sharing Relevant tertiary qualification and cybersecurity certifications (Microsoft, VMware, Veeam, Citrix a plus) Solutions Architecture, Pre-sales experience is desirable What we offer A friendly team environment with a strong technical support network Broad range of options for training and developing your IT skills Opportunity to work with the IT industry's latest technologies Internal career growth for high performers and IT super-stars Cost price on products from our suppliers Lunches and snacks provided in our main offices Comprehensive Employer Assistance Program Referral bonus New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”). View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/ We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com .", "summaryDescription" : "Cybersecurity Specialist at New Era Technology. Skills: Cybersecurity solutions, Technical advisory, Security architecture. Engage clients. Understand business needs", "postedDate" : "2026-06-14T09:10:21.227", "createdAt" : "2026-06-14T09:10:21.227", "lastUpdated" : "2026-06-15T05:08:16.844", "ingestTimestamp" : "2026-06-14T09:10:21.227", "mongoId" : "6a2c926c74d8ee00a0985bcd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting", "Mentoring", "Cybersecurity solutions", "Technical advisory", "Security architecture", "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising", "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP", "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 1221.3451, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6a8f74d8ee00a090c9be", "title" : "Senior Cybersecurity Advisor", "company" : "ABACUS", "industry" : "Consulting", "salary" : { "min" : 155000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Advisor in the US Financial Services industry, adjusted for seniority and remote work." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty" ], "timestamp" : "2026-06-16T02:11:43.073", "fingerprint" : "f87551d291104d6efdd9fa5f0e2b1bc8021d4f208ae69c17936f03729cd85931", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7747158003", "externalId" : "7747158003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Azure, AWS, GCP, Privileged Identity Management, Conditional Access, Infrastructure as Code, Compliance as Code, Endpoint Security, EDR, Encryption, Behavior Analysis, Email Security, ProofPoint, Mimecast, Abnormal Security, Anti-virus, HIPS, ID/PS, Full Packet Capture, Forensics", "professionalSkills" : [ "Strategic guidance", "Risk assessment", "Problem-solving" ], "hardSkillsList" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment" ], "softSkillsList" : [ "Leadership", "Mentoring", "Coaching", "Honesty" ], "hardSkills" : [ { "name" : "Cybersecurity strategy", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Email security controls", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Data privacy regulations", "level" : "intermediate" }, { "name" : "Compliance assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Coaching" }, { "name" : "Honesty" } ], "majorSkills" : "Cybersecurity consulting, VCISO, Cloud security, Financial services security", "majorSkillsList" : [ "Cybersecurity consulting", "VCISO", "Cloud security", "Financial services security" ], "coreResponsibilities" : "Act as primary security advisor, Provide strategic guidance, Oversight of cybersecurity programs, Develop security strategies, Implement security strategies, Develop security policies, Implement security policies, Develop security procedures, Implement security procedures, Design secure architectures, Advise on secure architectures, Design secure solutions, Advise on secure solutions, Build client relationships, Maintain client relationships, Understand client security challenges, Provide tailored solutions, Provide subject matter expertise, Review risk assessment reports, Review penetration testing reports, Review cloud vulnerability recommendations, Collaborate with Red Team, Refine remediation recommendations, Improve remediation recommendations, Assess security controls, Evaluate security controls, Make recommendations on security controls, Research compliance regulations, Research data privacy regulations, Serve as senior technical resource, Perform security gap assessment", "teamCollaboration" : "Abacus Group Red Team; Client environments; Colleagues and team members", "projectManagementSkills" : [ "Project completion" ], "domainKnowledge" : "Financial services sector; Investment services; SEC; FTC; FINRA; NYDFS; CCPA; FCA; GDPR; DORA DIFC; ADGM; NIST CSF; CIS CSC v8; HIPAA; PCI-DSS; SOC2; ISO27001", "domainList" : [ "financial-services-sector", "investment-services", "sec", "ftc", "finra", "nydfs", "ccpa", "fca", "gdpr", "dora-difc", "adgm", "nist-csf", "cis-csc-v8", "hipaa", "pci-dss", "soc2", "iso27001" ], "domainSpecificKnowledge" : [ "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001" ], "toolProficiency" : [ "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "communicationSkills" : "Verbal communication; Written communication; Communicating complex concepts", "continuousLearning" : "Continuously learn; Grow; Innovate", "innovationCreativity" : "Innovate", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Occasional travel", "qualificationsBasic" : "5+ years technology leadership, 3+ years experience with major cloud hosting service providers, Azure or AWS automation and problem-solving skills", "qualificationsPreferred" : "Masters' Degree preferred, Ability to travel to client sites on an occasional basis", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Description: We are seeking a highly skilled and experienced Senior Cybersecurity Advisor to join our world-class cybersecurity consulting (vCISO) team at Abacus Group. The ideal candidate will have a deep understanding of information security strategies suitable for small and mid-size businesses within the financial services sector coupled with the technical expertise to guide and advise on implementation efforts. Responsibilities (including but not limited to): Act as the primary security advisor for multiple clients, providing strategic guidance and oversight on all aspects of their cybersecurity programs. Develop and implement security strategies, policies, and procedures for varying client environments. Design and advise on the implementation of secure architectures and solutions tailored to client needs. Build and maintain strong relationships with clients, understanding their unique security challenges and providing tailored solutions. Provide subject matter expertise on network and endpoint security to the Abacus Group Red Team to include reviewing relevant risk assessment and penetration testing reports and recommendations related to cloud vulnerabilities. Collaborate closely with the Red Team to refine and improve remediation recommendations within security testing reports. Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for customer security programs. Researching and keeping up to date with industry compliance and data privacy regulations, most specifically within the investment and financial services space, including SEC, FTC, FINRA, NYDFS, CCPA, FCA, GDPR, DORA DIFC, and ADGM. Serving as a senior technical resource compliance information security gap assessment for various regulations and frameworks. (NIST CSF, CIS CSC v8, HIPAA, PCI-DSS, SOC2, ISO27001, etc.) Ability to travel to client sites on an occasional basis preferred Skills: Proven expertise on the administration, security, and configuration of one major cloud platform (Azure, AWS, or GCP) Proven expertise in the realm of identity and access management (IAM) leveraging solutions such as Privileged Identity Management (PIM) and conditional access policies. Experience working with cloud automation to include infrastructure as code and compliance as code. Experience configuring and supporting endpoint security tools (EDR, Encryption, Behavior Analysis) Experience configuring email security controls (such as Defender for Microsoft 365, ProofPoint, Mimecast, Abnormal Security, etc.) Proficient in various security solutions, including Anti-virus, HIPS, ID/PS, Full Packet Capture, and Forensics. Strong attention to detail and well organized. Excellent verbal communication and written communication skills, especially when communicating complex concepts to non-technical audiences. Highly motivated to continuously learn, grow and innovate. Qualifications: Education: Bachelors’ Degree (Masters’ Preferred) in one of the following areas of concentration: Computer Science, Software Development, Information Technology, Cybersecurity. Experience: 7+ years of progressive technology experience with a blend of technical knowledge and a customer-focused mindset including: 5+ years of technology leadership experience; demonstrated ability to recruit, mentor, coach, and develop individual contributors 3+ years of experience with major cloud hosting service providers, with focus on Azure or AWS Strong automation and problem-solving skills and ability to carry tasks and projects to completion Certifications: Relevant certifications such as CISSP, CISM, CCSP, MS-500, MS-100 or AWS Certified Security Specialty or similar. You'll love this job if you: Value, integrity, and honesty above all else in a non-negotiable way Have a passion for the information security industry and helping people Are capable of managing time efficiently and meeting deadlines with multiple concurrent projects Are able to work within constraints and to challenge the status quo Are able to self-direct work, orient to action, and truly own the position Have a collaborative attitude and mindset with colleagues and team members", "summaryDescription" : "Senior Cybersecurity Advisor at ABACUS. Skills: Cybersecurity consulting, VCISO, Cloud security, Financial services security. Act as primary security advisor. Provide strategic guidance", "postedDate" : "2026-06-14T20:02:24.847", "createdAt" : "2026-06-14T20:02:24.847", "lastUpdated" : "2026-06-16T02:11:43.073", "ingestTimestamp" : "2026-06-14T20:02:24.847", "mongoId" : "6a2c6a8f74d8ee00a090c9be", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment", "Leadership", "Mentoring", "Coaching", "Honesty", "Cybersecurity consulting", "VCISO", "Financial services security", "Strategic guidance", "Risk assessment", "Problem-solving", "Project completion", "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001", "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty", "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "skillCount" : 46, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1173.6772, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b27ff", "title" : "Cybersecurity GRC Specialist", "company" : "Hyundai Capital America", "industry" : "Financial Services", "salary" : { "min" : 115500.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity GRC Specialist in Irvine, CA, adjusted for the Financial Services industry and manager experience level." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL" ], "timestamp" : "2026-06-15T07:26:07.663", "fingerprint" : "028859dc321449421afae6164280d515a7620332b2573dec7f41455905f5c6bc", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=104123", "externalId" : "104123", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity governance, Risk management, Compliance, IT systems", "professionalSkills" : [ "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting" ], "hardSkillsList" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Risk Register management", "level" : "intermediate" }, { "name" : "ISO 27001 standards", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "ISO 31000:2009", "level" : "intermediate" }, { "name" : "ISO 27005:2008", "level" : "intermediate" }, { "name" : "NIST Special Publications", "level" : "intermediate" }, { "name" : "NIST Methodologies", "level" : "intermediate" }, { "name" : "SP800-12", "level" : "intermediate" }, { "name" : "SP800-30", "level" : "intermediate" }, { "name" : "SP800-37", "level" : "intermediate" }, { "name" : "SP800-39", "level" : "intermediate" }, { "name" : "SP800-53", "level" : "intermediate" }, { "name" : "SP800-150", "level" : "intermediate" }, { "name" : "SP800-161", "level" : "intermediate" }, { "name" : "Gramm-Leach-Bliley Act", "level" : "intermediate" }, { "name" : "NYDFS Cybersecurity Regulation", "level" : "intermediate" }, { "name" : "PCI-DSS", "level" : "intermediate" }, { "name" : "FFIEC", "level" : "intermediate" }, { "name" : "SOX", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity governance, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Compliance" ], "coreResponsibilities" : "Manage security policies, Maintain security policies, Enforce security policies, Develop Risk Register, Implement Risk Register, Maintain Risk Register, Execute Risk Register, Develop Policy Risk Exception Process, Implement Policy Risk Exception Process, Maintain Policy Risk Exception Process, Execute Policy Risk Exception Process, Conduct risk assessments, Conduct impact analyses, Identify risks, Manage remediations, Ensure compliance, Perform GSIF assessments, Monitor GSIF assessments, Ensure remediations follow GSIF ISO 27001 standards, Collaborate with Cybersecurity Risk Management, Collaborate with Cybersecurity Engineering Operations, Collaborate with IT, Ensure security best practices are integrated, Develop metrics for senior management, Develop reporting for senior management, Develop metrics for stakeholders, Develop reporting for stakeholders, Identify security risks, Provide actionable insights, Address gaps, Develop governance mechanisms, Maintain governance mechanisms, Develop automation tools, Maintain automation tools, Track Risk Register, Track compliance status, Develop dashboards, Maintain dashboards, Develop regular reporting, Manage management performance metrics, Manage risk metrics", "teamCollaboration" : "Cross-functional departments; Cybersecurity Risk Management; Cybersecurity Engineering Operations; IT; Senior management; Stakeholders", "domainKnowledge" : "Financial services; IT systems; Cybersecurity risk management frameworks; IT general controls; ISO 27001/2; ISO 31000:2009; ISO 27005:2008; NIST Special Publications; NIST Methodologies; California Consumer Privacy Act; Gramm-Leach-Bliley Act; NYDFS Cybersecurity Regulation; PCI-DSS; FFIEC; SOX; Financial regulatory frameworks; Cybersecurity best practices", "domainList" : [ "financial-services", "it-systems", "cybersecurity-risk-management-frameworks", "it-general-controls", "iso-27001-2", "iso-31000-2009", "iso-27005-2008", "nist-special-publications", "nist-methodologies", "california-consumer-privacy-act", "gramm-leach-bliley-act", "nydfs-cybersecurity-regulation", "pci-dss", "ffiec", "sox", "financial-regulatory-frameworks", "cybersecurity-best-practices" ], "domainSpecificKnowledge" : [ "Financial services", "IT systems", "Cybersecurity risk management frameworks", "IT general controls", "ISO 27001/2", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "California Consumer Privacy Act", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Financial regulatory frameworks", "Cybersecurity best practices" ], "toolProficiency" : [ "Governance automation tools" ], "communicationSkills" : "Communicate complex security concepts", "continuousLearning" : "Tuition reimbursement", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5-7 years progressive experience, Bachelor's degree in Cybersecurity, Working knowledge of Cybersecurity risk management frameworks, Working knowledge of Information Security & Risk Frameworks, Working knowledge of CCPA, Working knowledge of GLBA, Working knowledge of NYDFS Cybersecurity Regulation, Working knowledge of PCI-DSS, Working knowledge of FFIEC, Working knowledge of SOX", "qualificationsPreferred" : "Master's degree a plus, CISSP certification highly desirable, CISM certification highly desirable, CRISC certification highly desirable, CGEIT certification highly desirable, CISA certification highly desirable, ITIL certification highly desirable, Basic understanding of financial regulatory frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Cybersecurity Governance Manager plays a critical role in the organization's second line of defense, ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk and compliance across the organization. This role establishes oversight mechanisms, monitors compliance with industry regulations, and ensures access-related risks are effectively managed. In addition, this role ensures governance and compliance strategies are aligned with business objectives and security standards. What You Will Do 1. Cybersecurity Governance and Risk Management · Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes. · Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures. · Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments. 2. Cybersecurity Risk Assessment · Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments. · Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment. 3. Cybersecurity Governance and Risk Reporting · Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps. · Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization. · Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems. · Bachelor’s degree in Cybersecurity, Information Security, Risk Management or a related field · Master’s degree a plus. · Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable. · Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). · Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161). · Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. · Basic understanding of financial regulatory frameworks and cybersecurity best practices. · Ability to communicate complex security concepts to business leaders and technical teams. Work Environment Employees in this class are subject to extended periods of sitting, standing and walking, and using a computer. Work is performed in an office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity GRC Specialist at Hyundai Capital America. Skills: Cybersecurity governance, Risk management, Compliance. Manage security policies. Maintain security policies", "createdAt" : "2026-06-14T02:33:22.264", "lastUpdated" : "2026-06-15T07:26:07.663", "ingestTimestamp" : "2026-06-14T02:33:22.264", "mongoId" : "694ae6ce70f0b99d589b27ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 154000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Leadership", "Cybersecurity governance", "Risk management", "Compliance", "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting", "Financial services", "IT systems", "Cybersecurity risk management frameworks", "ISO 27001/2", "California Consumer Privacy Act", "Financial regulatory frameworks", "Cybersecurity best practices", "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL", "Governance automation tools" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1119.0587, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ac65274d8ee00a07059ec", "title" : "Senior Security Specialist", "company" : "Capco", "industry" : "Financial Services", "salary" : { "min" : 118000.0, "max" : 152000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada - Toronto", "locations" : [ "Canada - Toronto" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CISA", "CCSP", "CSSLP", "GIAC", "Security+", "Azure Security", "AWS Security", "IAM certifications" ], "timestamp" : "2026-06-14T20:34:38.114", "fingerprint" : "25dab7a17a3f2d85e0c8898ee3c0486b8260f556628fa55eb984cb2cf867a96a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/capco/jobs/7992831", "externalId" : "7992831", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Toronto", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.6534817,-79.3839347" } ], "locationText" : "Toronto, Ontario, Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IAM, Zero Trust, Cloud security, Data protection, Application security, Vulnerability management, Security operations, Third-party cyber risk, Cyber resilience, DevSecOps, Cloud-native security, Security automation, Secure-by-design", "professionalSkills" : [ "Cybersecurity transformation", "Security consulting", "Technology risk", "Risk assessment", "Security architecture", "Secure technology delivery", "Cyber risk lens", "Enterprise risk", "Operating model", "Client relationship management", "Executive communication", "Structured problem solving", "Stakeholder management" ], "hardSkillsList" : [ "Control design", "Remediation planning", "Maturity assessments", "Target operating models", "Business cases", "Transformation plans" ], "hardSkills" : [ { "name" : "Control design", "level" : "intermediate" }, { "name" : "Remediation planning", "level" : "intermediate" }, { "name" : "Maturity assessments", "level" : "intermediate" }, { "name" : "Target operating models", "level" : "intermediate" }, { "name" : "Business cases", "level" : "intermediate" }, { "name" : "Transformation plans", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity transformation, Security consulting, Risk assessment, Cloud security", "majorSkillsList" : [ "Cybersecurity transformation", "Security consulting", "Risk assessment", "Cloud security" ], "coreResponsibilities" : "Lead cybersecurity transformation initiatives, Support cybersecurity transformation initiatives, Assess cybersecurity capabilities, Identify control gaps, Identify technology gaps, Define target-state recommendations, Work across security domains, Partner with security architects, Partner with security engineers, Partner with risk partners, Partner with product owners, Partner with business stakeholders, Define security requirements, Define delivery plans, Define implementation roadmaps, Translate requirements into roadmaps, Translate requirements into control designs, Translate requirements into process flows, Translate requirements into technical considerations, Translate requirements into implementation plans, Translate requirements into client deliverables, Apply cyber risk lens, Identify control gaps, Assess security impacts, Prioritize remediation, Align solutions to risk expectations, Facilitate workshops, Facilitate stakeholder interviews, Facilitate technical working sessions, Facilitate executive discussions, Support cyber capability uplift, Develop client-ready materials, Contribute to Capco cyber offerings, Contribute to thought leadership, Contribute to delivery assets, Contribute to practice capability", "teamCollaboration" : "Security architects; Security engineers; Risk partners; Product owners; Business stakeholders; Technical teams; Non-technical audiences", "projectManagementSkills" : [ "Roadmap planning", "Implementation plans" ], "domainKnowledge" : "Financial services; Banking; Insurance; Capital markets; Regulated industries; IAM; Zero Trust; Cloud security; Data protection; Application security; Vulnerability management; Security operations; Third-party cyber risk; Cyber resilience; Security governance; NIST CSF; NIST 800-53; ISO 27001; CIS Controls; COBIT; PCI-DSS; SOC 2; OSFI guidance; Zero Trust; AI security; Identity threat detection; Attack path management; Ransomware resilience; DevSecOps; Cloud-native security; Security automation; Secure-by-design engineering; IAM; PAM; IGA; CIAM; Authentication; Access governance; Identity lifecycle; Secrets management; Non-human identity; Azure; AWS; GCP; Cloud identity; Secure landing zones; Cloud control frameworks", "domainList" : [ "financial-services", "banking", "insurance", "capital-markets", "regulated-industries", "iam", "zero-trust", "cloud-security", "data-protection", "application-security", "vulnerability-management", "security-operations", "third-party-cyber-risk", "cyber-resilience", "security-governance", "nist-csf", "nist-800-53", "iso-27001", "cis-controls", "cobit", "pci-dss", "soc-2", "osfi-guidance", "ai-security", "identity-threat-detection", "attack-path-management", "ransomware-resilience", "devsecops", "cloud-native-security", "security-automation", "secure-by-design-engineering", "pam", "iga", "ciam", "authentication", "access-governance", "identity-lifecycle", "secrets-management", "non-human-identity", "azure", "aws", "gcp", "cloud-identity", "secure-landing-zones", "cloud-control-frameworks" ], "domainSpecificKnowledge" : [ "Financial services", "Banking", "Insurance", "Capital markets", "Regulated industries", "IAM", "Zero Trust", "Cloud security", "Data protection", "Application security", "Vulnerability management", "Security operations", "Third-party cyber risk", "Cyber resilience", "Security governance", "NIST CSF", "NIST 800-53", "ISO 27001", "CIS Controls", "COBIT", "PCI-DSS", "SOC 2", "OSFI guidance", "Zero Trust", "AI security", "Identity threat detection", "Attack path management", "Ransomware resilience", "DevSecOps", "Cloud-native security", "Security automation", "Secure-by-design engineering", "IAM", "PAM", "IGA", "CIAM", "Authentication", "Access governance", "Identity lifecycle", "Secrets management", "Non-human identity", "Azure", "AWS", "GCP", "Cloud identity", "Secure landing zones", "Cloud control frameworks" ], "toolProficiency" : [ "SailPoint", "CyberArk", "Microsoft Entra ID", "Okta", "Ping Identity", "ForgeRock", "Saviynt", "ServiceNow", "Archer", "Jira", "Confluence" ], "communicationSkills" : "Executive messaging; Client-ready deliverables; Executive presentations", "documentationSkills" : "Process flows; Implementation plans; Maturity assessments; Security roadmaps; Target operating models; Control mappings; Risk summaries", "continuousLearning" : "Professional development; Industry-recognized certifications", "problemSolvingSkills" : "Structured problem-solving", "qualificationsBasic" : "5+ years experience in cybersecurity, 5+ years experience in security consulting, 5+ years experience in security engineering, 5+ years experience in security architecture, 5+ years experience in technology risk, 5+ years experience in IAM, 5+ years experience in cloud security, 5+ years experience in cyber transformation, Cybersecurity foundation, Experience delivering security initiatives, Experience supporting security initiatives, Depth in one or more cybersecurity domains, Experience working with security technologies, Experience working with security controls, Experience working with security platforms, Experience working with architects, Experience working with engineers, Experience working with delivery teams, Understanding of security control design, Understanding of risk reduction, Understanding of remediation planning, Understanding of secure technology delivery, Ability to translate technical concepts, Ability to develop security requirements, Ability to develop control requirements, Ability to develop roadmaps, Ability to develop maturity assessments, Ability to develop process flows, Ability to develop operating models, Ability to develop implementation plans, Consulting acumen, Client relationship management, Executive communication, Facilitation, Structured problem solving, Ability to influence stakeholders", "qualificationsPreferred" : "Previous consulting experience, Experience with Zero Trust, Experience with AI security, Experience with identity threat detection, Experience with attack path management, Experience with ransomware resilience, Experience with DevSecOps, Experience with cloud-native security, Experience with security automation, Experience with secure-by-design engineering, Experience with IAM, Experience with PAM, Experience with IGA, Experience with CIAM, Experience with authentication, Experience with access governance, Experience with identity lifecycle, Experience with secrets management, Experience with non-human identity, Experience with Azure, Experience with AWS, Experience with GCP, Experience with cloud identity, Experience with logging, Experience with monitoring, Experience with encryption, Experience with key management, Experience with secure landing zones, Experience with cloud control frameworks, Knowledge of NIST CSF, Knowledge of NIST 800-53, Knowledge of ISO 27001, Knowledge of CIS Controls, Knowledge of COBIT, Knowledge of PCI-DSS, Knowledge of SOC 2, Knowledge of OSFI guidance, Experience developing executive presentations, Experience developing security roadmaps, Experience developing target operating models, Experience developing maturity assessments, Experience developing business cases, Experience developing transformation plans, CISSP certification, CISM certification, CRISC certification, CISA certification, CCSP certification, CSSLP certification, GIAC certification, Security+ certification, Azure Security certification, AWS Security certification, IAM-related certifications", "workSiteFlexibility" : "Hybrid", "rawDescription" : "Help leading organizations transform cybersecurity from strategy into execution. The Role Capco is expanding its cybersecurity practice to support a range of projects across financial services, banking, insurance, capital markets, and other regulated industries. We are looking for Senior Cybersecurity Consultants who bring technical credibility, consulting acumen, and the ability to help clients move from security strategy to execution. Working closely with CISOs, security leaders, architects, engineers, product owners, risk partners, and business stakeholders, you will help assess cybersecurity capabilities, define practical recommendations, support secure technology delivery, and strengthen cyber programs across complex enterprise environments. This is not a purely policy, compliance, or documentation-focused role. Successful candidates will bring depth in one or more cybersecurity domains, the ability to engage technical teams, and the confidence to translate complex security challenges into clear recommendations, roadmaps, and delivery outcomes. What You’ll Do Lead and support cybersecurity transformation initiatives for leading financial services and enterprise clients Assess current-state cybersecurity capabilities, identify control and technology gaps, and define practical target-state recommendations Work across key security domains including IAM, Zero Trust, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, and cyber resilience Partner with security architects, engineers, risk partners, product owners, and business stakeholders to define security requirements, delivery plans, and implementation roadmaps Translate cybersecurity requirements into actionable roadmaps, control designs, process flows, technical considerations, implementation plans, and client-ready deliverables Apply a cyber risk lens to technical security decisions by identifying control gaps, assessing security impacts, prioritizing remediation, and aligning solutions to enterprise risk expectations Facilitate workshops, stakeholder interviews, technical working sessions, and executive discussions with technical and non-technical audiences Support cyber capability uplift across people, process, technology, governance, and operating model dimensions Develop client-ready materials including maturity assessments, security roadmaps, target operating models, executive presentations, control mappings, risk summaries, and implementation plans Contribute to the growth of Capco cyber offerings, thought leadership, delivery assets, and practice capability What We're Looking For Typically 5+ years of experience in cybersecurity, security consulting, security engineering, security architecture, technology risk, IAM, cloud security, or cyber transformation Strong cybersecurity foundation with experience delivering or supporting security initiatives in complex enterprise environments Depth in one or more cybersecurity domains such as IAM, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, security governance, or cyber resilience Experience working with security technologies, controls, platforms, architects, engineers, or delivery teams to achieve cybersecurity outcomes Understanding of security control design, implementation considerations, risk reduction, remediation planning, and secure technology delivery Ability to translate technical cybersecurity concepts into business language, executive messaging, and practical delivery plans Experience developing security requirements, control requirements, roadmaps, maturity assessments, process flows, operating models, or implementation plans Strong communication, facilitation, structured problem-solving, and stakeholder management skills Experience working within financial services, insurance, banking, capital markets, or other highly regulated environments Bonus Points For Previous consulting experience delivering cybersecurity transformation, security architecture, IAM, cloud security, data protection, security operations, or security modernization programs Experience with modern cyber topics such as Zero Trust, AI security, identity threat detection, attack path management, ransomware resilience, DevSecOps, cloud-native security, security automation, or secure-by-design engineering Experience with IAM, PAM, IGA, CIAM, authentication, access governance, identity lifecycle, secrets management, or non-human identity security Familiarity with platforms such as SailPoint, CyberArk, Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Saviynt, ServiceNow, Archer, Jira, or Confluence Experience with cloud security across Azure, AWS, or GCP, including cloud identity, logging, monitoring, encryption, key management, secure landing zones, or cloud control frameworks Knowledge of security frameworks such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, PCI-DSS, SOC 2, or OSFI guidance Experience developing executive-level presentations, security roadmaps, target operating models, maturity assessments, business cases, or transformation plans Leading certifications such as CISSP, CISM, CRISC, CISA, CCSP, CSSLP, GIAC, Security+, Azure Security, AWS Security, or IAM-related certifications Strong consulting acumen including client relationship management, executive communication, facilitation, structured problem solving, and the ability to influence stakeholders Why Join Capco Deliver high-impact cybersecurity solutions for leading financial institutions and regulated enterprises. Work in a collaborative, flat, and entrepreneurial consulting culture where your ideas can make a real impact. Access continuous learning, professional development, and industry-recognized certifications. Partner with experienced cybersecurity practitioners, architects, and technology leaders across global markets. Help shape the future of cybersecurity transformation across financial services and beyond. Benefits Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment. Retirement Savings Program – RRSP with the option of receiving a matching employer contribution. Virtual Health Care and Employee & Family Assistance Program (EFAP) available to employees and eligible dependents. Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits. Business Coach from Day 1 to support career growth, accelerate development, and help achieve your professional goals at Capco. Why This Role Is Open We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact. Inclusion at Capco We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day. Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination. AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams. Pay Transparency The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment. Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity. Canada Pay Transparency $118,000—$152,000 CAD", "summaryDescription" : "Senior Security Specialist at Capco. Skills: Cybersecurity transformation, Security consulting, Risk assessment, Cloud security. Lead cybersecurity transformation initiatives. Support cybersecurity transformation initiatives", "postedDate" : "2026-06-11T21:21:47.200", "createdAt" : "2026-06-11T21:21:47.200", "lastUpdated" : "2026-06-14T20:34:38.114", "ingestTimestamp" : "2026-06-11T21:21:47.200", "mongoId" : "6a2ac65274d8ee00a07059ec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Control design", "Remediation planning", "Maturity assessments", "Target operating models", "Business cases", "Transformation plans", "Cybersecurity transformation", "Security consulting", "Risk assessment", "Cloud security", "Technology risk", "Security architecture", "Secure technology delivery", "Cyber risk lens", "Enterprise risk", "Operating model", "Client relationship management", "Executive communication", "Structured problem solving", "Stakeholder management", "Roadmap planning", "Implementation plans", "Financial services", "Banking", "Insurance", "Capital markets", "Regulated industries", "IAM", "Zero Trust", "Data protection", "Application security", "Vulnerability management", "Security operations", "Third-party cyber risk", "Cyber resilience", "Security governance", "NIST CSF", "NIST 800-53", "ISO 27001", "CIS Controls", "COBIT", "PCI-DSS", "SOC 2", "OSFI guidance", "AI security", "Identity threat detection", "Attack path management", "Ransomware resilience", "DevSecOps", "Cloud-native security", "Security automation", "Secure-by-design engineering", "PAM", "IGA", "CIAM", "Authentication", "Access governance", "Identity lifecycle", "Secrets management", "Non-human identity", "Azure", "AWS", "GCP", "Cloud identity", "Secure landing zones", "Cloud control frameworks", "CISSP", "CISM", "CRISC", "CISA", "CCSP", "CSSLP", "GIAC", "Security+", "Azure Security", "AWS Security", "IAM certifications", "SailPoint", "CyberArk", "Microsoft Entra ID", "Okta", "Ping Identity", "ForgeRock", "Saviynt", "ServiceNow", "Archer", "Jira", "Confluence" ], "skillCount" : 88, "jobCategory" : "engineering", "jobSubcategory" : "tech-&-engineering", "dataQualityScore" : 0.8888889, "_score" : 1118.266, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a2c77ab74d8ee00a093d097", "title" : "Senior Manager, Cybersecurity", "company" : "HASI", "industry" : "Information Technology", "salary" : { "min" : 165000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Annapolis, MD", "locations" : [ "Annapolis, MD", "New York, New York" ], "certifications" : [ "CISSP", "CISM", "CISA", "CIS Controls Practitioner", "Microsoft Security certifications" ], "timestamp" : "2026-06-15T22:12:30.292", "fingerprint" : "af8b6239f7746d18d6ddae984935144e43ca620b8aef9d4124aca1a5ad01f34f", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/hasi/bc41e72a-8109-432b-9062-35989595eb81/apply", "externalId" : "bc41e72a-8109-432b-9062-35989595eb81", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9786401,-76.4927860" } ], "locationText" : "Annapolis, Maryland, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Microsoft 365, Entra ID, Azure AD, Exchange Online, SharePoint, OneDrive, Teams, Defender, Conditional Access, Identity protection, Zero Trust, MDM, MAM, Microsoft Intune, CIS benchmarks, Azure, AWS, SASE, DLP, IAM, PAM, Endpoint protection, SIEM, Network security", "professionalSkills" : [ "Enterprise strategy", "Security architecture", "Security operations", "Risk reporting", "Control maturity", "Threat detection", "Incident response", "Root cause analysis", "Post-incident remediation", "SOC capabilities", "MSSP management", "Alert validation", "Detection validation", "Response quality", "Mobile Device Management", "Least privilege", "Team leadership", "Mentoring", "Continuous improvement" ], "hardSkillsList" : [ "Vulnerability identification", "Remediation validation", "Security monitoring", "Hardening baselines", "Security GPOs", "Secure workstation configuration", "Secure server configuration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Remediation validation", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Hardening baselines", "level" : "intermediate" }, { "name" : "Security GPOs", "level" : "intermediate" }, { "name" : "Secure workstation configuration", "level" : "intermediate" }, { "name" : "Secure server configuration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Enterprise cybersecurity strategy, Security architecture, Security operations, Microsoft 365 security, Cloud security", "majorSkillsList" : [ "Enterprise cybersecurity strategy", "Security architecture", "Security operations", "Microsoft 365 security", "Cloud security" ], "coreResponsibilities" : "Define enterprise cybersecurity strategy, Execute enterprise cybersecurity strategy, Maintain enterprise cybersecurity strategy, Define security roadmap, Execute security roadmap, Maintain security roadmap, Define target security architecture, Execute target security architecture, Maintain target security architecture, Establish cybersecurity policies, Enforce cybersecurity policies, Establish technical controls, Enforce technical controls, Embed cybersecurity into architecture, Embed cybersecurity into infrastructure, Embed cybersecurity into cloud platforms, Embed cybersecurity into technology initiatives, Provide risk-based reporting, Configure security technologies, Implement security technologies, Tune security technologies, Lead platform implementation, Manage security platforms, Perform vulnerability identification, Oversee vulnerability identification, Perform remediation, Oversee remediation, Perform validation, Oversee validation, Participate in threat detection, Participate in security monitoring, Participate in incident response, Participate in root cause analysis, Participate in post-incident remediation, Manage SOC capabilities, Enhance SOC capabilities, Oversee MSSPs, Validate alerts, Validate detections, Validate response quality, Own Microsoft 365 security, Manage Microsoft 365 security, Design Conditional Access policies, Implement Conditional Access policies, Design identity protection controls, Implement identity protection controls, Design Zero Trust access models, Implement Zero Trust access models, Lead MDM strategy, Implement MDM strategy, Lead MAM strategy, Implement MAM strategy, Develop CIS hardening baselines, Implement CIS hardening baselines, Develop security GPOs, Implement security GPOs, Develop secure workstation images, Implement secure workstation images, Develop secure server images, Implement secure server images, Ensure secure configuration, Ensure continuous hardening, Lead secure cloud design, Implement secure cloud configuration, Implement identity-centric security controls, Implement secure networking, Implement logging, Implement monitoring, Integrate security controls into automation, Integrate security controls into IaC, Integrate security controls into IT delivery, Lead cybersecurity personnel, Mentor cybersecurity personnel, Develop cybersecurity personnel, Drive continuous improvement", "teamCollaboration" : "Peer technology functions; Risk stakeholders; Compliance stakeholders; Legal stakeholders; Business stakeholders", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "NIST CSF; CIS Controls; Zero Trust architecture; Cloud-native environments; Energy transition", "domainList" : [ "nist-csf", "cis-controls", "zero-trust-architecture", "cloud-native-environments", "energy-transition" ], "domainSpecificKnowledge" : [ "NIST CSF", "CIS Controls", "Zero Trust architecture", "Cloud-native environments", "Energy transition" ], "toolProficiency" : [ "Microsoft 365", "Entra ID", "Azure AD", "Exchange Online", "SharePoint", "OneDrive", "Teams", "Defender", "Microsoft Intune", "SASE", "DLP", "IAM", "PAM", "SIEM" ], "communicationSkills" : "Risk reporting", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years cybersecurity experience, Hands-on security leader, Technical execution focus, Microsoft 365 security ownership, Cloud security experience, Develop security policies, Implement security controls, Manage security operations, Vulnerability management experience, Incident response experience, Develop security strategy, Define security architecture, Lead cybersecurity personnel, CIS hardening baselines, Security GPOs, Secure workstation images, Secure server images, Secure cloud environments, Identity-centric security controls, Secure networking, Logging and monitoring, Automation integration, Infrastructure-as-code integration, SASE implementation experience, DLP implementation experience, IAM implementation experience, PAM implementation experience, Endpoint security implementation, SIEM implementation experience, Zero Trust architecture experience, Develop CIS hardening standards, Enforce CIS hardening standards, Develop security baselines, Enforce security baselines, Develop secure images, Enforce secure images, Experience with SOX, Experience with SOC 2, Lead teams technically, Execution-focused leadership", "qualificationsPreferred" : "CISSP certification preferred, CISM certification preferred, CISA certification preferred, CIS Controls Practitioner preferred, Microsoft Security certifications preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description About HASI HASI is an investor in sustainable infrastructure assets advancing the energy transition. With more than $16 billion in managed assets, our investments are diversified across multiple asset classes, including utility-scale solar, storage, and onshore wind; distributed solar and storage; RNG; and energy efficiency. We combine deep expertise in energy markets and financial structuring with long-standing programmatic client partnerships to deliver superior risk-adjusted returns and measurable environmental benefits. HA Sustainable Infrastructure Capital, Inc. is listed on the New York Stock Exchange (Ticker: HASI). For more information, please visit hasi.com. Position Summary The Sr. Manager, Cybersecurity is a hands-on technical leader responsible for defining, leading, and executing the organization’s enterprise cybersecurity strategy, architecture, and daily security operations. This role combines strategic ownership with direct technical execution, requiring active involvement in designing, implementing, configuring, and maintaining security controls across the enterprise. This role operates as a core member within the Digital Technology Organization (DTO), working in close alignment with peer technology functions while engaging collaboratively with risk, compliance, legal, and business stakeholders. The position ensures the confidentiality, integrity, and availability of HASI’s information assets while aligning cybersecurity initiatives with business objectives, regulatory requirements, and industry best practices. Beyond governance and oversight, this role is deeply engaged in security engineering and operations, including tool deployment, control configuration, vulnerability management, and incident response. A strong emphasis is placed on Microsoft 365 and cloud security, with expectations to operate directly within platforms to implement and optimize controls. The Sr. Manager owns the adoption and execution of cybersecurity frameworks, including CIS Controls, leads cybersecurity personnel, and drives continuous improvement across security operations, awareness, and technology platforms. Key Responsibilities Cybersecurity Strategy, Architecture & Governance Define, execute, and maintain HASI’s enterprise cybersecurity strategy, roadmap, and target security architecture. Establish and enforce cybersecurity policies, standards, and technical controls aligned to NIST CSF, CIS Controls, and regulatory requirements. Ensure cybersecurity is embedded into enterprise architecture, infrastructure design, cloud platforms, and technology initiatives from inception. Provide regular, risk-based reporting on cybersecurity posture, control maturity, and emerging threats to executive leadership. Hands-On Security Engineering & Operations Serve as a hands-on security leader, actively configuring, implementing, and tuning security technologies and controls. Lead the implementation and ongoing management of security platforms including SASE, DLP, IAM, PAM, endpoint protection, SIEM, and network security solutions. Perform and oversee vulnerability identification, remediation, and validation across infrastructure, cloud, endpoints, and applications. Actively participate in threat detection, security monitoring, incident response, root cause analysis, and post-incident remediation. Manage and enhance SOC capabilities, including direct oversight of MSSPs and validation of alerts, detections, and response quality. Microsoft 365 & Endpoint Security Ownership Own and manage security across the Microsoft 365 ecosystem, including Entra ID (Azure AD), Exchange Online, SharePoint, OneDrive, Teams, and Defender platforms. Design, implement, and maintain Conditional Access policies, identity protection controls, and Zero Trust access models. Lead Mobile Device Management (MDM/MAM) strategy and implementation using Microsoft Intune, including device compliance, application protection, and data loss prevention controls. Develop, implement, and maintain CIS hardening baselines, security GPOs, and standardized secure workstation and server images. Ensure secure configuration and continuous hardening of Microsoft and endpoint environments in alignment with CIS benchmarks. Cloud & Infrastructure Security Lead secure design and configuration of cloud environments (Azure, AWS), with a strong focus on defense-in-depth and least privilege. Implement identity-centric security controls, secure networking, logging, and monitoring across hybrid and cloud-native environments. Ensure security controls are integrated into automation, infrastructure-as-code, and modern IT delivery practices. Leadership & Team Development Lead, mentor, and develop a team of cybersecurity professionals, while remaining technically engaged and hands-on. Establish clear expectations that balance strategic ownership with operational execution. Foster a culture of accountability, continuous improvement, and strong security engineering discipline. Cross-Functional Collaboration & Awareness Partner with IT, risk, compliance, legal, and business teams to design solutions that are secure, scalable, and compliant Act as a trusted technical advisor on cybersecurity risks, control design, and mitigation strategies Drive organization-wide security awareness and training programs to improve cyber hygiene and reduce human risk Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field 10+ years of progressive experience in cybersecurity or information security, with significant hands-on technical responsibility Demonstrated experience personally implementing and configuring security technologies, not solely managing teams or vendors Deep expertise in Microsoft 365 security, including Conditional Access, Intune (MDM/MAM), Defender, identity protection, and tenant hardening Strong experience implementing SASE, DLP, IAM, PAM, endpoint security, SIEM, vulnerability management, and Zero Trust architectures Proven experience developing and enforcing CIS hardening standards, security baselines, GPOs, and secure images. Experience with regulatory and compliance requirements (e.g., SOX, SOC 2) Ability to lead teams while remaining technically hands-on and execution-focused Excellent communication skills with the ability to translate technical risk into business impact Relevant certifications preferred: CISSP, CISM, CISA, CIS Controls Practitioner, Microsoft Security certifications, or equivalent ## Additional Information WORK AUTHORIZATION HASI is willing to take over sponsorship for existing H1-B visas for exceptional talent. We are unable to provide new H-1B sponsorship at this time. EEO STATEMENT The Company maintains a policy of non-discrimination in employment and complies with and supports all Federal, state, and local laws regarding discrimination in employment. Specifically, the Company does not discriminate in employment opportunities or practices against any employee, intern, or applicant on the basis of race, color, gender, sex, sexual orientation, gender identity, religion, ancestry, national origin, age, citizenship status, marital status, pregnancy (including childbirth, lactation, or related medical conditions), mental or physical disability, veteran status, uniformed servicemember status, genetic information (including testing and characteristics), or any other characteristic to the extent prohibited by federal, state, or local law. Decisions regarding staffing, selection, and promotions are made on the basis of individual qualifications related to the requirements of the position. If you need reasonable accommodation for a job opening, please connect with us at hiring@hasi.com and describe the specific accommodation requested for a disability-related limitation. Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process.", "summaryDescription" : "Senior Manager, Cybersecurity at HASI. Skills: Enterprise cybersecurity strategy, Security architecture, Security operations, Microsoft 365 security, Cloud security. Define enterprise cybersecurity strategy. Execute enterprise cybersecurity strategy", "postedDate" : "2026-06-12T15:17:51.802", "createdAt" : "2026-06-12T15:17:51.802", "lastUpdated" : "2026-06-15T22:12:30.292", "ingestTimestamp" : "2026-06-14T21:44:50.031", "mongoId" : "6a2c77ab74d8ee00a093d097", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 185000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability identification", "Remediation validation", "Security monitoring", "Hardening baselines", "Security GPOs", "Secure workstation configuration", "Secure server configuration", "Leadership", "Enterprise cybersecurity strategy", "Security architecture", "Security operations", "Microsoft 365 security", "Cloud security", "Enterprise strategy", "Risk reporting", "Control maturity", "Threat detection", "Incident response", "Root cause analysis", "Post-incident remediation", "SOC capabilities", "MSSP management", "Alert validation", "Detection validation", "Response quality", "Mobile Device Management", "Least privilege", "Team leadership", "Mentoring", "Continuous improvement", "Roadmap planning", "NIST CSF", "CIS Controls", "Zero Trust architecture", "Cloud-native environments", "Energy transition", "CISSP", "CISM", "CISA", "CIS Controls Practitioner", "Microsoft Security certifications", "Microsoft 365", "Entra ID", "Azure AD", "Exchange Online", "SharePoint", "OneDrive", "Teams", "Defender", "Microsoft Intune", "SASE", "DLP", "IAM", "PAM", "SIEM" ], "skillCount" : 55, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1097.2231, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Finance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cea0374d8ee00a0a6f696", "title" : "Senior Staff Cybersecurity Engineer, Platform Security", "company" : "Shield AI", "industry" : "Cybersecurity", "salary" : { "min" : 160000.0, "max" : 240000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "San Diego, California", "locations" : [ "San Diego, California" ], "timestamp" : "2026-06-16T05:00:21.189", "fingerprint" : "2d53963230691813e0d1a2815b93ccb0bdeab0c94c02686e96a27282d190b5c4", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/shieldai/6504c787-5aff-41ad-9104-2d251bf9eb12/apply", "externalId" : "6504c787-5aff-41ad-9104-2d251bf9eb12", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Diego", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7174202,-117.1627720" } ], "locationText" : "San Diego, California, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description Founded in 2015, Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software and V-BAT and X-BAT aircraft. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI’s technology actively supports operations worldwide. For more information, visit www.shield.ai. Follow Shield AI on LinkedIn, X, Instagram, and YouTube. ## What you'll do Build the secure defaults: Infrastructure-as-Code modules, CI/CD pipeline templates, internal libraries, and golden-path scaffolding that make the secure choice the easy choice. Engineer guardrails as code — policy-as-code (OPA/Conftest), admission controllers, cloud guardrails (SCPs / org policy), and pre-commit and CI checks — so the insecure path is blocked or flagged automatically. Own the platform security tooling that other teams consume, so they don't have to build their own; replace recurring manual work with durable, self-service mechanisms. Embed security into the software and infrastructure supply chain: pipeline security, build/artifact integrity, dependency and container scanning, and secrets management. Engineer workload and service identity controls (least privilege, short-lived credentials, federated trust) so zero-standing-privilege is real and observable. Write and maintain production-quality code and infrastructure that backs these controls. Partner with platform, infrastructure, and product engineering teams early — review high-blast-radius designs against the internal Security Engineering standard while the design can still change, and turn recurring findings into a missing paved road, not just another fix. Set technical direction and standards for secure-by-default; document them so they can be applied without us, and mentor and raise the bar for other engineers. ## Required qualifications Extensive experience in security engineering, platform/infrastructure engineering, DevSecOps, or a closely related field, with a track record of owning complex systems end-to-end. Strong software engineering ability — you write, review, and ship production-quality code (any modern language) and treat infrastructure as software. Hands-on experience building secure-by-default mechanisms: Infrastructure-as-Code, CI/CD pipeline security, and policy/guardrails as code. Deep working knowledge of at least one major cloud provider and its security and identity model. Demonstrated ability to design durable, automated solutions that reduce real risk without becoming a bottleneck — and to make explicit tradeoffs between security and the business. Strong communication: you can explain a security concept to a product engineer in their language and to a leader in business terms, and you write recommendations people can act on. ## Preferred qualifications Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code). Production coding experience in Go, Python, and/or Rust; comfortable with scripting/automation in Bash and PowerShell. Depth in Azure security and identity (Entra ID, Azure Policy, Management Group guardrails). Experience securing AI/ML systems, pipelines, or workloads. Offensive security / red team experience, with the ability to think like an attacker and translate those findings into stronger defaults and guardrails. Experience with supply-chain security (SLSA, sigstore/cosign, SBOMs), container/image hardening, and secrets management. Experience operating security tooling as an internal product consumed self-service by other engineering teams. Bachelor's degree or equivalent professional certification and experience. ## Additional Information Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment) Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information. ### Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know. ", "summaryDescription" : "Senior Staff Cybersecurity Engineer, Platform Security at Shield AI", "postedDate" : "2026-06-12T22:59:31.881", "createdAt" : "2026-06-12T22:59:31.881", "lastUpdated" : "2026-06-16T05:00:21.189", "ingestTimestamp" : "2026-06-15T21:13:52.059", "mongoId" : "6a2cea0374d8ee00a0a6f696", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 160000, "salaryAnnualMax" : 240000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1036.9408, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6af174d8ee00a090f55e", "title" : "Security Senior Specialist", "company" : "Bybit", "industry" : "FinTech", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Specialist in Vienna, Austria, within the FinTech industry, adjusted for seniority and company size." }, "location" : "Vienna", "locations" : [ "Vienna" ], "certifications" : [ "CISSP", "CISM", "CISA", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "PCI DSS QSA", "PCI DSS ISA", "Microsoft Identity", "SailPoint", "Okta" ], "timestamp" : "2026-06-15T09:05:36.877", "fingerprint" : "4c8ae67e8781859334c6fdaf6b87f088ba39f3e797d56b5570a8f90a88f8a1f2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/bybit/jobs/4878926101", "externalId" : "4878926101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vienna", "country" : "Austria", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "48.2083537,16.3725042" } ], "locationText" : "Vienna, Austria", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IAM, Network security", "professionalSkills" : [ "Project management", "Stakeholder management" ], "hardSkillsList" : [ "Access rights management", "Penetration testing", "Gap analyses" ], "hardSkills" : [ { "name" : "Access rights management", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Gap analyses", "level" : "intermediate" } ], "majorSkills" : "Network Security, Compliance & Certification", "majorSkillsList" : [ "Network Security", "Compliance & Certification" ], "coreResponsibilities" : "Design IAM frameworks, Implement IAM frameworks, Maintain IAM frameworks, Oversee access rights management, Lead MFA rollout, Enforce MFA, Ensure least-privilege principles, Audit least-privilege principles, Oversee network security controls, Implement network security controls, Improve network security controls, Monitor security threats, Detect security threats, Respond to security threats, Monitor vulnerabilities, Detect vulnerabilities, Respond to vulnerabilities, Generate security reports, Generate security dashboards, Support audit processes, Coordinate penetration testing, Oversee penetration testing, Track penetration testing findings, Drive remediation, Lead security certification processes, Coordinate security certification processes, Conduct gap analyses, Maintain compliance documentation, Liaise with auditors, Liaise with certification bodies", "teamCollaboration" : "Work with CISO; Global collaboration; International team", "projectManagementSkills" : [ "Security project management" ], "domainKnowledge" : "Cryptocurrency exchange; Digital financial platforms; Web3; Digital finance; Digital asset industry; Regulatory frameworks", "domainList" : [ "cryptocurrency-exchange", "digital-financial-platforms", "web3", "digital-finance", "digital-asset-industry", "regulatory-frameworks" ], "domainSpecificKnowledge" : [ "Cryptocurrency exchange", "Digital financial platforms", "Web3", "Digital finance", "Digital asset industry", "Regulatory frameworks" ], "communicationSkills" : "Stakeholder management", "documentationSkills" : "Compliance documentation", "continuousLearning" : "Study Growth Fund; Professional development; Continuous learning", "problemSolvingSkills" : "Independent problem-solving", "qualificationsBasic" : "Bachelor's degree or above, 3–5 years of hands-on experience, Proven track record in security project implementation, Demonstrated experience in IAM, Demonstrated experience in network security, Demonstrated experience in compliance programs", "qualificationsPreferred" : "CISSP, CISM, CISA, or equivalent, ISO 27001 Lead Implementer / Lead Auditor, PCI DSS QSA or ISA certification, IAM-related certifications", "rawDescription" : "About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Role Overview We are looking for a hands-on Senior Security Specialist to lead and oversee key security initiatives across the organization. You will play a central role in strengthening our security posture, driving compliance certifications, and ensuring robust access governance — working closely with the CISO to protect our infrastructure and data assets. --- Key Responsibilities **Identity & Access Management (IAM)** - Design, implement, and maintain IAM frameworks, policies, and processes across the organization - Oversee access rights management, including provisioning, de-provisioning, and periodic access reviews - Lead the rollout and enforcement of Multi-Factor Authentication (MFA) across all systems and user groups - Ensure least-privilege principles are consistently applied and audited **Network Security** - Oversee the implementation and continuous improvement of network security controls - Monitor, detect, and respond to security threats and vulnerabilities across the network infrastructure **Security Reporting & Audit** - Generate regular security reports and dashboards for the CISO and senior management - Support internal and external audit processes, ensuring timely and accurate documentation - Coordinate and oversee penetration testing engagements, track findings, and drive remediation **Compliance & Certification** - Lead and coordinate security certification processes (e. g. PCI DSS, ISO 27001) in close collaboration with the CISO - Conduct gap analyses, maintain compliance documentation, and liaise with auditors and certification bodies Requirements Bachelor's degree or above in Computer Science, Information Technology, Cybersecurity, or a related field 3–5 years of hands-on experience in information security Proven track record in security project implementation and management Demonstrated experience in IAM, network security, or compliance programs Certifications would be a strong plus - CISSP, CISM, CISA, or equivalent - ISO 27001 Lead Implementer / Lead Auditor - PCI DSS QSA or ISA certification - IAM-related certifications (e. g. Microsoft Identity, SailPoint, Okta) Skills - Solid understanding of IAM principles, network security, and regulatory frameworks - Strong analytical and independent problem-solving abilities - Excellent communication and stakeholder management skills - Ability to manage multiple priorities in a fast-paced environment Can use German and English as working language Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.", "summaryDescription" : "Security Senior Specialist at Bybit. Skills: Network Security, Compliance & Certification. Design IAM frameworks. Implement IAM frameworks", "postedDate" : "2026-06-14T07:58:22.569", "createdAt" : "2026-06-14T07:58:22.569", "lastUpdated" : "2026-06-15T09:05:36.877", "ingestTimestamp" : "2026-06-14T07:58:22.569", "mongoId" : "6a2c6af174d8ee00a090f55e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Access rights management", "Penetration testing", "Gap analyses", "Network Security", "Compliance & Certification", "Project management", "Stakeholder management", "Security project management", "Cryptocurrency exchange", "Digital financial platforms", "Web3", "Digital finance", "Digital asset industry", "Regulatory frameworks", "CISSP", "CISM", "CISA", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "PCI DSS QSA", "PCI DSS ISA", "Microsoft Identity", "SailPoint", "Okta" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1023.074, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca5f474d8ee00a09b8c7e", "title" : "IT & Cybersecurity Manager", "company" : "Nooks", "industry" : "Cybersecurity", "salary" : { "min" : 155000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Colorado Springs, Colorado, United States", "locations" : [ "Colorado Springs", "Colorado", "United States" ], "certifications" : [ "DoD 8570/8140 IAM Level III" ], "timestamp" : "2026-06-15T05:01:45.302", "fingerprint" : "34802dfd1ce43275651ae8eaeb82788c2f3ca85e89600eee1ff97cc21e5c0c3c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nooks/jobs/4274144009", "externalId" : "4274144009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Colorado Springs", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8339578,-104.8253480" } ], "locationText" : "Colorado Springs, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceLevel" : "Manager", "technicalSkills" : "Networking, Cloud infrastructure, IAM, Endpoint security", "professionalSkills" : [ "Risk assessment", "Budget management", "Vendor management", "Technology lifecycle management" ], "hardSkillsList" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation" ], "softSkillsList" : [ "Leadership", "Service-first mindset" ], "hardSkills" : [ { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Service-first mindset" } ], "majorSkills" : "IT operations, Cybersecurity operations, Security protocols, Incident response", "majorSkillsList" : [ "IT operations", "Cybersecurity operations", "Security protocols", "Incident response" ], "coreResponsibilities" : "Foster technical growth, Develop leadership capabilities, Establish security protocols, Enforce security protocols, Develop incident response plans, Oversee hardware lifecycle, Oversee software lifecycle, Oversee networking assets lifecycle, Ensure maximum efficiency, Ensure minimal downtime, Ensure rigorous configuration management, Manage third-party service providers, Oversee IT/Cyber departmental budget, Prioritize security investments, Prioritize tech investments, Lead local response efforts for outages, Lead local response efforts for security events, Maintain clear communication channels, Maintain disciplined communication channels, Provide direct technical assistance, Troubleshoot complex issues, Support peak project demands, Support system migrations", "teamCollaboration" : "Corporate policy alignment; Federal frameworks alignment; Corporate leadership communication", "projectManagementSkills" : [ "Configuration management" ], "domainKnowledge" : "Classified Infrastructure-as-a-Service; NIST; DAAPM; JSIG; ISO 27001; SOC2; ITIL", "domainList" : [ "classified-infrastructure-as-a-service", "nist", "daapm", "jsig", "iso-27001", "soc2", "itil" ], "domainSpecificKnowledge" : [ "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL" ], "toolProficiency" : [ "ITSM tools", "Security monitoring tools" ], "communicationSkills" : "Clear communication; Disciplined communication", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Troubleshooting; Incident response", "specialRequirements" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility", "outcomesObjectives" : "Ensure maximum efficiency; Ensure minimal downtime; Ensure rigorous configuration management", "qualificationsBasic" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility, Bachelor's degree or higher, Active DoD 8570/8140 IAM Level III certification, 10+ years of experience in IT/Cyber operations, 3 years in leadership or management capacity, Implement and enforce enterprise IT and security policies, Experience leading IT and cybersecurity teams, Align operational and security priorities, Working knowledge of compliance frameworks, Broad technical understanding of networking, Broad technical understanding of cloud infrastructure, Broad technical understanding of IAM, Broad technical understanding of endpoint security, Risk assessment and remediation experience, Experience managing budgets, Experience managing vendors, Experience managing technology lifecycles, Proficiency with ITSM tools, Proficiency with security monitoring tools", "qualificationsPreferred" : "Maintain eligibility up to the Top Secret/SCI level within 45 days of hire", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT NOOKS Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset. ABOUT THE ROLE: As the IT foster technical growth and leadership capabilities within your team. Establish and enforce local security protocols and incident response plans in alignment with corporate policy and federal frameworks (NIST, DAAPM, JSIG, ISO 27001, or SOC2). Oversee the lifecycle of site hardware, software, and networking assets to ensure maximum efficiency, minimal downtime, and rigorous configuration management. Manage third-party service providers and oversee the IT/Cyber departmental budget, prioritizing high-ROI security and tech investments. Lead local response efforts for outages or security events while maintaining clear, disciplined communication channels with corporate leadership. Transition seamlessly from strategy to execution, providing direct technical assistance during complex troubleshooting, peak project demands, or system migrations. THE SKILLSET: You must be a US citizen and have an active Top Secret/SCI security clearance. Candidates must be capable of maintaining eligibility up to the Top Secret/SCI level within 45 days of hire. Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, or a related technical field. Active DoD 8570/8140 IAM Level III certification (CISSP, CISM, or GSLC). 10+ years of experience in IT/Cyber operations with at least 3 years in a leadership or management capacity. Proven ability to implement and enforce enterprise IT and security policies in regulated or classified environments. Experience leading IT and cybersecurity teams and aligning operational and security priorities. Working knowledge of compliance frameworks such as NIST, ISO 27001, SOC 2, and ITIL. Broad technical understanding of networking, cloud infrastructure, IAM, and endpoint security. Strong risk assessment and remediation experience aligned with enterprise risk tolerance. Experience managing budgets, vendors, and technology lifecycles within corporate governance models. Proficiency with ITSM and security monitoring tools to report operational health and compliance metrics. Salary Range for all departments Salary Range $155,000—$175,000 USD", "summaryDescription" : "IT & Cybersecurity Manager at Nooks. Skills: IT operations, Cybersecurity operations, Security protocols, Incident response. Foster technical growth. Develop leadership capabilities", "postedDate" : "2026-06-14T04:46:16.678", "createdAt" : "2026-06-14T04:46:16.678", "lastUpdated" : "2026-06-15T05:01:45.302", "ingestTimestamp" : "2026-06-14T04:46:16.678", "mongoId" : "6a2ca5f474d8ee00a09b8c7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 175000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation", "Leadership", "Service-first mindset", "IT operations", "Cybersecurity operations", "Security protocols", "Incident response", "Budget management", "Vendor management", "Technology lifecycle management", "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL", "DoD 8570/8140 IAM Level III", "ITSM tools", "Security monitoring tools" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 977.672, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a477874d8ee00a05da30a", "title" : "Senior Cybersecurity Engineer", "company" : "Similarweb", "industry" : "Technology", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Tel Aviv-Yafo, Israel, adjusted for the technology industry and company size." }, "location" : "Tel Aviv-Yafo, Israel", "locations" : [ "Tel Aviv-Yafo", "Israel" ], "certifications" : [ "CISSP", "CISM", "AWS Security Specialty", "CKS" ], "timestamp" : "2026-06-13T03:31:17.651", "fingerprint" : "1023f2c0f8097bbcbd3a81b6722b9f5767626a8202e77fb0a253fec3d64fff60", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/similarweb/jobs/7992665", "externalId" : "7992665", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv-Yafo", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "hybrid", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv-Yafo, Israel", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, GCP, Azure, EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, Python, Bash, PowerShell, Generative AI, LLM", "professionalSkills" : [ "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Audit support", "Compliance frameworks" ], "hardSkillsList" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion" ], "softSkillsList" : [ "Problem-solving" ], "hardSkills" : [ { "name" : "Security controls implementation", "level" : "intermediate" }, { "name" : "Security technologies administration", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Secure baselines", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "DDQ completion", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" } ], "majorSkills" : "Cloud security, Security technologies, AI security, GRC", "majorSkillsList" : [ "Cloud security", "Security technologies", "AI security", "GRC" ], "coreResponsibilities" : "Implement security controls, Manage security controls, Enhance security controls, Administer security technologies, Optimize security technologies, Maintain security technologies, Lead AI technology security, Assess AI risks, Define AI security controls, Establish AI guardrails, Design security processes, Implement security processes, Automate security processes, Drive security-by-design, Lead vulnerability management, Track remediation, Implement secure baselines, Manage hardening standards, Take role in security operations, Conduct threat detection, Perform IR, Perform security investigations, Monitor security posture, Lead GRC initiatives, Support audits, Complete DDQs", "teamCollaboration" : "Cross-functional teams; IT teams; R&D teams; Product teams; DevOps teams; Engineering teams", "domainKnowledge" : "Generative AI; LLM; AI agents; NIST CSF; ISO/IEC 27000 series; CIS Benchmarks; SOC 2; SOX; OWASP; MITRE ATT&CK", "domainList" : [ "generative-ai", "llm", "ai-agents", "nist-csf", "iso-iec-27000-series", "cis-benchmarks", "soc-2", "sox", "owasp", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK" ], "toolProficiency" : [ "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "communicationSkills" : "Problem-solving skills", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "5+ years Information Security experience, Experience securing cloud environments, Experience implementing security technologies, Experience with vulnerabilities management, Experience working with DevOps teams, Experience with scripting and automation, Experience supporting GRC initiatives, Communication skills, Problem-solving skills, Ability to work independently, Ability to collaborate effectively", "qualificationsPreferred" : "Experience in SaaS company, Experience in global technology company, CISSP certification, CISM certification, AWS Security Specialty certification, CKS certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Similarweb (NYSE: SMWB) is a leading digital intelligence company that empowers businesses with trusted insights into online behavior, market trends, and competitive performance. By analyzing billions of digital interactions every day, Similarweb helps organizations make data-driven decisions and accelerate growth. Why is this role so important at Similarweb? As a Senior Cybersecurity Engineer reporting directly to the Chief Information Security Officer (CISO), you will play a key role within Similarweb’s security team. In this position you will drive impactful security initiatives that support the company’s business objectives, leveraging innovative technologies and practical solutions to strengthen our security posture while enabling the business to operate securely and efficiently. You will collaborate with cross-functional teams across the organization, including IT, R&D, Product, and other stakeholders, to ensure that security is embedded throughout our products, services, and operations. You will help identify and mitigate risks, implement effective security controls, and continuously enhance our security capabilities in a dynamic, fast-growing, technology-driven environment. Responsibilities Implement, manage, and continuously enhance security controls across cloud environments (AWS, GCP, Azure), endpoints, SaaS platforms, and applications. Administer, optimize, and maintain security technologies, including EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, network security solutions, and more. Take a leading role in securing Similarweb's adoption of Generative AI & LLM-based technologies, assessing risks, defining security controls, and establishing guardrails for AI agents, MCP-based integrations, and AI-powered applications across the organization. Design, implement, and automate security processes, workflows, and controls to improve operational efficiency, visibility, and risk reduction across the organization. Partner with IT, DevOps, Engineering, and Product teams to drive security-by-design principles across system architecture, software development and AI lifecycles, cloud infrastructure, and business operations. Lead vulnerability management initiatives, including identification, assessment, prioritization, remediation tracking, validation, and reporting across applications and environments. Implement, manage, and maintain secure configuration baselines, hardening standards, and technical controls aligned with industry frameworks and best practices, including CIS Benchmarks, NIST(CSF), and ISO/IEC 27000 series. Take an active role in security operations activities, including threat detection, IR, security investigations, and continuous monitoring of the organization's security posture. Lead GRC initiatives through control implementation, assessments, audit support, customer security & Due Diligence Questionnaires (DDQs), and remediation efforts related to SOC 2, SOX, ISO 27001, and other compliance frameworks. Qualifications 5+ years of experience in Information Security, Cybersecurity, or a related technical field. Experience securing cloud environments (AWS, GCP, Azure), SaaS platforms, and enterprise applications (APIs and Integrations). Experience implementing and managing security technologies such as EDR/XDR, SIEM, CNAPP, IAM, SSO, MFA, Identity Providers (IdPs), WAF, VPN, DLP, ZTNA, and secure connectivity solutions Strong understanding of security frameworks, standards and best practices, such as NIST CSF, CSA, CIS Controls, MITRE ATT&CK, OWASP, SOC 2, or ISO/IEC 27000 series. Experience with vulnerabilities/CVEs management, assessment, incident response, and security operations processes. Experience working with DevOps, R&D, and IT teams to integrate security into OS, cloud infrastructure, SDLC, applications, and operational processes, including authentication and authorization technologies such as SSO, SAML, OAuth, and OpenID Connect. Experience with scripting and automation using Python, Bash, PowerShell, or similar technologies. Familiarity with AI security concepts, including risks and controls related to Generative AI, LLMs, AI agents, MCP-based integrations, and AI-powered applications. Experience supporting GRC initiatives, audits, compliance programs, and security assurance activities. Strong communication and problem-solving skills, with the ability to work independently and collaborate effectively across technical and business teams. Experience in a SaaS or global technology company - Advantage Security certifications such as CISSP, CISM, AWS Security Specialty, CKS or equivalent - an advantage. —----------------------------------------------------------------------------------------------------------- **At Similarweb, collaborating with our colleagues in-office creates a more connected, unified culture. Our best work is a product of our face-to-face collaboration, with the ability to work partially from home.** Why you’ll love being a Similarwebber: You’ll actually love the product you work with: Our customers aren’t our only raving fans. When we asked our employees why they chose to come work at Similarweb, 99% of them said “the product.” Imagine how exciting your job is when you get to work with the most powerful digital intelligence platform in the world. You’ll find a home for your big ideas: We encourage an open dialogue and empower employees to bring their ideas to the table. You’ll find the resources you need to take initiative and create meaningful change within the organization. We offer competitive perks & benefits: We take your well-being seriously, and offer competitive compensation packages to all employees. We also put a strong emphasis on community, with regular team outings and happy hours. You can grow your career in any direction you choose: Interested in becoming a VP or want to transition into a different department? Whether it’s Career Week, personalized coaching, or our ongoing learning solutions, you’ll find all the tools and opportunities you need to develop your career right here. Diversity isn’t just a buzzword: People want to work in a place where they can be themselves. We strive to create a workplace that is reflective of the communities we serve, where everyone is empowered to bring their full, authentic selves to work. We are committed to inclusivity across race, gender, ethnicity, culture, sexual orientation, age, religion, spirituality, identity and experience. Our culture of equality and mutual respect also helps us better understand and serve our customers in a world that is becoming more global, more diverse, and more digital every day. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here.", "summaryDescription" : "Senior Cybersecurity Engineer at Similarweb. Skills: Cloud security, Security technologies, AI security, GRC. Implement security controls. Manage security controls", "postedDate" : "2026-06-11T17:06:51.871", "createdAt" : "2026-06-11T17:06:51.871", "lastUpdated" : "2026-06-13T03:31:17.651", "ingestTimestamp" : "2026-06-11T17:06:51.871", "mongoId" : "6a2a477874d8ee00a05da30a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion", "Problem-solving", "Cloud security", "Security technologies", "AI security", "GRC", "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Compliance frameworks", "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK", "CISSP", "CISM", "AWS Security Specialty", "CKS", "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "skillCount" : 55, "jobCategory" : "other", "jobSubcategory" : "r&d", "dataQualityScore" : 0.8888889, "_score" : 965.2447, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c6af374d8ee00a090f70e", "title" : "Senior Consultant, Cybersecurity", "company" : "Capco", "industry" : "Consulting", "salary" : { "min" : 120000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "US - New York", "locations" : [ "US - New York" ], "timestamp" : "2026-06-16T05:25:16.734", "fingerprint" : "17124aa5ddfd717d68ab08c6cccf37c31e2d7e0858f0683392917dafb400b9d0", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/capco/jobs/8001376", "externalId" : "8001376", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI, GenAI, Cloud Security", "professionalSkills" : [ "Risk management", "Data protection", "Governance frameworks", "Strategic advisory" ], "hardSkillsList" : [ "Cybersecurity", "Technology risk", "Information security", "Operational Resilience", "Data Security", "IAM", "Application Security", "Digital Trust", "Technology Risk", "AI governance", "Model risk management", "Regulatory compliance", "Responsible AI practices", "Cybersecurity maturity", "Operational effectiveness", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Security Transformation" ], "hardSkills" : [ { "name" : "Cybersecurity", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Information security", "level" : "intermediate" }, { "name" : "Operational Resilience", "level" : "intermediate" }, { "name" : "Data Security", "level" : "intermediate" }, { "name" : "IAM", "level" : "intermediate" }, { "name" : "Application Security", "level" : "intermediate" }, { "name" : "Digital Trust", "level" : "intermediate" }, { "name" : "Technology Risk", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" }, { "name" : "Model risk management", "level" : "intermediate" }, { "name" : "Regulatory compliance", "level" : "intermediate" }, { "name" : "Responsible AI practices", "level" : "intermediate" }, { "name" : "Cybersecurity maturity", "level" : "intermediate" }, { "name" : "Operational effectiveness", "level" : "intermediate" }, { "name" : "Cyber Strategy", "level" : "intermediate" }, { "name" : "Cyber Risk Management", "level" : "intermediate" }, { "name" : "Cyber Regulatory Response", "level" : "intermediate" }, { "name" : "Security Transformation", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, Technology risk, AI adoption", "majorSkillsList" : [ "Cybersecurity", "Technology risk", "AI adoption" ], "coreResponsibilities" : "Design cybersecurity policies, Enhance cybersecurity policies, Design cybersecurity standards, Enhance cybersecurity standards, Design cybersecurity controls, Enhance cybersecurity controls, Design governance frameworks, Enhance governance frameworks, Support clients developing secure AI adoption strategies, Support clients developing secure GenAI adoption strategies, Conduct structured assessments, Conduct data analysis, Conduct control evaluations, Conduct risk reviews, Identify opportunities improving cybersecurity maturity, Identify opportunities improving operational effectiveness, Lead client meetings, Lead workshops, Lead stakeholder discussions, Develop high-quality presentations, Develop reports, Develop executive-level deliverables, Contribute business development efforts, Create innovative cybersecurity service offerings, Create innovative AI service offerings", "teamCollaboration" : "Cross-functional teams; Client stakeholders", "domainKnowledge" : "Financial services; Investment Banking; Retail Banking; Wealth Management; Capital Markets; Insurance; Cyber risk; Governance; Resilience; Data protection; Cloud security; Emerging technologies; Artificial intelligence; AI risk; AI adoption; AI governance; Model risk management; Responsible AI; Cybersecurity frameworks; Cybersecurity standards; Cybersecurity regulations; Privacy requirements; Cyber Risk Management; Threat Management; Operational Resilience; Vulnerability Management; Third-Party Risk; Data Security; Insider Threat; Cloud Security; AI/GenAI governance; AI security; Model risk management; Responsible AI frameworks; Cyber Strategy; Cyber Risk Management; Cyber Regulatory Response; Technology Risk; Security Transformation; Digital transformation; Evolving regulatory expectations", "domainList" : [ "financial-services", "investment-banking", "retail-banking", "wealth-management", "capital-markets", "insurance", "cyber-risk", "governance", "resilience", "data-protection", "cloud-security", "emerging-technologies", "artificial-intelligence", "ai-risk", "ai-adoption", "ai-governance", "model-risk-management", "responsible-ai", "cybersecurity-frameworks", "cybersecurity-standards", "cybersecurity-regulations", "privacy-requirements", "cyber-risk-management", "threat-management", "operational-resilience", "vulnerability-management", "third-party-risk", "data-security", "insider-threat", "ai-genai-governance", "ai-security", "responsible-ai-frameworks", "cyber-strategy", "cyber-regulatory-response", "technology-risk", "security-transformation", "digital-transformation", "evolving-regulatory-expectations" ], "domainSpecificKnowledge" : [ "Financial services", "Investment Banking", "Retail Banking", "Wealth Management", "Capital Markets", "Insurance", "Cyber risk", "Governance", "Resilience", "Data protection", "Cloud security", "Emerging technologies", "Artificial intelligence", "AI risk", "AI adoption", "AI governance", "Model risk management", "Responsible AI", "Cybersecurity frameworks", "Cybersecurity standards", "Cybersecurity regulations", "Privacy requirements", "Cyber Risk Management", "Threat Management", "Operational Resilience", "Vulnerability Management", "Third-Party Risk", "Data Security", "Insider Threat", "Cloud Security", "AI/GenAI governance", "AI security", "Model risk management", "Responsible AI frameworks", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Technology Risk", "Security Transformation", "Digital transformation", "Evolving regulatory expectations" ], "toolProficiency" : [ "PowerPoint", "Excel" ], "communicationSkills" : "Stakeholder discussions; Executive-level deliverables; Writing; Storytelling; Presentation", "documentationSkills" : "Reports", "continuousLearning" : "Tuition reimbursement; Learning", "innovationCreativity" : "Innovative cybersecurity service offerings; Innovative AI service offerings; Innovation", "problemSolvingSkills" : "Problem-solving", "qualificationsBasic" : "4+ years experience cybersecurity consulting, Experience with cybersecurity frameworks, Knowledge across multiple cybersecurity domains, Understanding of emerging technology risks, Analytical skills, Problem-solving skills, Communication skills, Stakeholder management skills, Ability to work across cross-functional teams, Experience supporting Cyber Strategy, Experience supporting Cyber Risk Management, Experience supporting Cyber Regulatory Response, Experience supporting Technology Risk, Experience supporting Security Transformation initiatives, Writing skills, Storytelling skills, Presentation skills, Proficiency in PowerPoint, Proficiency in Excel", "qualificationsPreferred" : "Bachelor's degree or higher in Cybersecurity, Bachelor's degree or higher in Information Security, Bachelor's degree or higher in Computer Science, Bachelor's degree or higher in Information Systems, Bachelor's degree or higher in related discipline", "rawDescription" : "About the Team At Capco, we believe in fostering an inclusive work environment where you can #BeYourselfAtWork. Our Cybersecurity team partners with leading financial institutions to evaluate, design, and implement risk-aware security solutions that enable business growth and resilience. We help organizations navigate an evolving threat landscape by delivering strategic advisory services across cyber risk, governance, resilience, data protection, cloud security, and emerging technologies. As artificial intelligence continues to transform the financial services industry, we work closely with clients to establish secure, responsible, and compliant AI adoption strategies. Our team helps organizations manage AI-related risks, strengthen governance frameworks, secure AI-enabled platforms, and build trust in the use of emerging technologies. We combine deep financial services expertise with cybersecurity, risk management, data, and technology capabilities to advise executive leadership on their most critical security and digital transformation priorities. About the Job As a Senior Consultant within Capco’s Cybersecurity Practice, you will play a key role in delivering complex cybersecurity and technology risk engagements for leading Investment Banking, Retail Banking, Wealth Management, Capital Markets, and Insurance clients. You will work alongside industry experts and client stakeholders to solve challenging business problems, strengthen security capabilities, and support large-scale transformation initiatives. You will also help clients address emerging risks associated with cloud adoption, digital transformation, artificial intelligence, and evolving regulatory expectations. What You'll Get to Do Design and enhance cybersecurity policies, standards, controls, and governance frameworks across domains including Operational Resilience, Data Security, IAM, Cloud Security, Application Security, Digital Trust, and Technology Risk. Support clients in developing secure AI and GenAI adoption strategies, including AI governance, model risk management, data protection, regulatory compliance, and responsible AI practices. Conduct structured assessments, data analysis, control evaluations, and risk reviews to identify opportunities for improving cybersecurity maturity and operational effectiveness. Lead client meetings, workshops, and stakeholder discussions while developing high-quality presentations, reports, and executive-level deliverables. Contribute to business development efforts through thought leadership, whitepapers, points of view (PoVs), market research, and the creation of innovative cybersecurity and AI-related service offerings. What You'll Bring With You 4+ years of experience in cybersecurity consulting, technology risk, information security, or related industry roles. Experience working with cybersecurity frameworks, standards, regulations, and privacy requirements applicable to financial services organizations. Knowledge across multiple cybersecurity domains, including Cyber Risk Management, Threat Management, Operational Resilience, Vulnerability Management, Third-Party Risk, Data Security, Insider Threat, or Cloud Security. Understanding of emerging technology risks, including AI/GenAI governance, AI security considerations, model risk management, and responsible AI frameworks. Strong analytical, problem-solving, communication, and stakeholder management skills with the ability to work effectively across cross-functional teams. Experience supporting Cyber Strategy, Cyber Risk Management, Cyber Regulatory Response, Technology Risk, or Security Transformation initiatives. Strong writing, storytelling, and presentation skills with proficiency in PowerPoint and Excel. Bachelor's degree or higher in Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline preferred. Why Capco? A career at Capco is an opportunity to help reshape the future of financial services. We launch new banks, transform existing institutions, and help clients navigate complex business, technology, and regulatory change. As the world's largest financial services-focused consultancy, we partner with global banks, insurers, asset managers, and fintechs across strategy, digital transformation, data and analytics, cybersecurity, cloud, engineering, and AI-enabled innovation. Our Cybersecurity Practice sits at the forefront of emerging technology transformation, helping clients balance innovation with security and trust. From securing cloud environments and digital platforms to developing governance frameworks for AI adoption, our teams help organizations address some of the industry's most critical challenges. Capco offers an entrepreneurial, collaborative, and inclusive culture with opportunities to work on high-impact engagements, accelerate your professional growth, and contribute to thought leadership in rapidly evolving areas such as cybersecurity, AI, and technology risk. We offer highly competitive benefits, including medical, dental and vision insurance, a 401(k) plan, tuition reimbursement, wellness programs, and a culture focused on innovation, learning, and delivering lasting value for our clients and employees. Ready to Take the Next Step? If you're passionate about cybersecurity, emerging technologies, and helping financial institutions navigate an increasingly complex risk landscape, we'd love to hear from you. Join us and help shape the future of secure digital transformation and responsible AI adoption across the financial services industry. US Pay Range $120,000—$150,000 USD", "summaryDescription" : "Senior Consultant, Cybersecurity at Capco. Skills: Cybersecurity, Technology risk, AI adoption. Design cybersecurity policies. Enhance cybersecurity policies", "postedDate" : "2026-06-14T20:02:26.599", "createdAt" : "2026-06-14T20:02:26.599", "lastUpdated" : "2026-06-16T05:25:16.734", "ingestTimestamp" : "2026-06-14T20:02:26.599", "mongoId" : "6a2c6af374d8ee00a090f70e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Cybersecurity", "Technology risk", "Information security", "Operational Resilience", "Data Security", "IAM", "Application Security", "Digital Trust", "Technology Risk", "AI governance", "Model risk management", "Regulatory compliance", "Responsible AI practices", "Cybersecurity maturity", "Operational effectiveness", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Security Transformation", "AI adoption", "Risk management", "Data protection", "Governance frameworks", "Strategic advisory", "Financial services", "Investment Banking", "Retail Banking", "Wealth Management", "Capital Markets", "Insurance", "Cyber risk", "Governance", "Resilience", "Cloud security", "Emerging technologies", "Artificial intelligence", "AI risk", "Responsible AI", "Cybersecurity frameworks", "Cybersecurity standards", "Cybersecurity regulations", "Privacy requirements", "Threat Management", "Vulnerability Management", "Third-Party Risk", "Insider Threat", "Cloud Security", "AI/GenAI governance", "AI security", "Responsible AI frameworks", "Digital transformation", "Evolving regulatory expectations", "PowerPoint", "Excel" ], "skillCount" : 54, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 961.66205, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "69fe47284c40e2acd1f59727", "title" : "Senior Security Risk Specialist", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Security Industry Specialist, amazonian experience and tech", "salary" : { "min" : 119300.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CISSP", "CISA", "CISM" ], "timestamp" : "2026-06-15T03:31:32.795", "fingerprint" : "f489e2feeebbc7b9592f59b7628690f42f4b0162514adf9449ff469918c07b73", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "externalId" : "99ceaf08-dd0c-49ec-a527-ba856049100b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training" ], "hardSkillsList" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Risk assessment methodologies", "level" : "intermediate" }, { "name" : "Risk frameworks", "level" : "intermediate" }, { "name" : "Quantitative risk models", "level" : "intermediate" }, { "name" : "Vendor risk questionnaires", "level" : "intermediate" }, { "name" : "Continuous monitoring approaches", "level" : "intermediate" }, { "name" : "Remediation plans", "level" : "intermediate" }, { "name" : "Process paths", "level" : "intermediate" }, { "name" : "Workflows", "level" : "intermediate" }, { "name" : "Risk management outcomes", "level" : "intermediate" }, { "name" : "Security control design", "level" : "intermediate" }, { "name" : "Security control testing", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" }, { "name" : "Security control validation", "level" : "intermediate" }, { "name" : "Security controls evaluation", "level" : "intermediate" }, { "name" : "Negotiate remediation timelines", "level" : "intermediate" }, { "name" : "Evaluate security controls", "level" : "intermediate" }, { "name" : "Risk posture communication", "level" : "intermediate" }, { "name" : "Compliance gaps communication", "level" : "intermediate" }, { "name" : "Strategic recommendations communication", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security risk management, Third-party risk, Benefits compliance, Regulatory requirements", "majorSkillsList" : [ "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements" ], "coreResponsibilities" : "Lead third-party vendor risk assessments, Evaluate security posture, Evaluate privacy posture, Evaluate compliance posture, Define risk assessment methodologies, Iterate on risk assessment frameworks, Scale risk management capabilities, Identify long-term risks, Influence business strategy, Make independent decisions, Engage vendors on risk matters, Engage auditors on risk matters, Engage regulators on risk matters, Drive benefits compliance management, Ensure adherence to regulations, Lead risk assessments of vendor processes, Lead control assessments of vendor processes, Determine state of compliance, Analyze risk exposure, Author reports, Own third-party risk review programs, Drive third-party risk review programs, Create predictable process paths, Create repeatable mechanisms, Simplify approaches, Decouple project dependencies, Prevent duplicate effort, Prevent wasted effort, Define business problems, Set objectives, Analyze data, Drive improvements, Influence resource allocation, Develop mechanisms to inspect risk delivery, Develop mechanisms to monitor risk delivery, Develop mechanisms to improve risk delivery, Hold team to high standard, Escalate risks, Escalate blockers, Propose recommendations, Identify correct owners, Track issues to resolution, Develop deep understanding of benefits solutions, Develop deep understanding of third-party vendors, Drive business requirements, Lead collaboration with vendors, Lead collaboration with external teams, Ensure employee-centered experiences, Understand builder experience, Understand stakeholder experience, Align third-party risk processes, Author written narratives, Recommend solutions on third-party risk, Influence the organization, Influence external partners, Drive business discussions, Drive technical discussions, Make decisions on alignment, Advise managers on risk matters, Advise directors on risk matters, Communicate risk posture to leaders, Communicate compliance gaps to leaders, Communicate strategic recommendations to leaders, Write with stakeholders, Speak with stakeholders, Network with stakeholders, Broaden influence on risk management, Develop manager communications, Develop employee communications, Develop FAQs, Develop policy positions, Develop standard operating procedures, Develop strategic narratives, Mentor junior team members, Develop junior team members", "teamCollaboration" : "Across the organization; With US benefits owners; With diverse stakeholders; With vendors; With external teams; With managers and directors; With key internal stakeholders; With key external stakeholders", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Employee benefits; Third-party risk; HIPAA; ERISA; ACA; COBRA; Federal regulations; State regulations; Local regulations; Security compliance regimes; Security compliance frameworks", "domainList" : [ "employee-benefits", "third-party-risk", "hipaa", "erisa", "aca", "cobra", "federal-regulations", "state-regulations", "local-regulations", "security-compliance-regimes", "security-compliance-frameworks" ], "domainSpecificKnowledge" : [ "Employee benefits", "Third-party risk", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks" ], "toolProficiency" : [ "JIRA" ], "communicationSkills" : "Written narratives; Verbal communication; Written communication", "documentationSkills" : "Author reports; Written narratives; Manager communications; Employee communications; FAQs; Policy positions; Standard operating procedures; Strategic narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Mitigate risks; Drive scalable solutions; Achieve risk management outcomes; Resolve issues", "qualificationsBasic" : "Bachelor's degree or equivalent, 7+ years risk management experience, 7+ years audit experience, 7+ years legal experience, 7+ years compliance experience, Engaging with external stakeholders experience, Experience with IT compliance, Experience with risk management requirements", "qualificationsPreferred" : "CISSP certification, CISA certification, CISM certification, Other security certification, Advanced degree in related area, Deep knowledge of federal benefits regulations, Knowledge of state regulations, Knowledge of local regulations, Experience influencing vendor security strategies, Experience influencing vendor compliance strategies, Negotiating remediation timelines, Shaping vendor contractual obligations, Proficiency across security compliance regimes, Proficiency across security compliance frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Benefits Experience and Technology Risk team (BXT Risk) is responsible for managing employee benefits risk activities in countries where we do business. As a Senior Security Risk Specialist on the BXT Risk team, you will serve as a subject matter expert and strategic contributor to our benefits third-party risk ecosystem, working across the organization with US benefits policy, process, and system owners to define strategies, evaluate complex risks, and drive scalable solutions that mitigate risks introduced by third-party vendors and service providers supporting the organization's US health and financial employee benefit programs. This role requires both tactical execution and strategic thinking. You will independently lead complex third-party risk assessments, influence vendor security and compliance strategies across the organization, shape how the team scales its risk management capabilities, and drive alignment across diverse stakeholders with potentially conflicting priorities. You will create predictable process paths and repeatable mechanisms that multiple teams utilize, mentor junior team members, and advise managers and directors on third-party risk matters affecting employee benefits programs. Key job responsibilities Third-Party Risk Strategy and Assessment: - Lead complex third-party vendor risk assessments across multiple benefits programs and vendor relationships, evaluating security, privacy, and compliance posture against federal, state, and local regulatory requirements - Define and iterate on risk assessment methodologies, frameworks, and mechanisms to scale for diverse vendor requirements and evolving regulatory expectations (e.g., quantitative risk models, vendor risk questionnaires, continuous monitoring approaches) - Identify long-term risks associated with third-party vendors and influence business strategy to proactively mitigate them before they materialize into risk events - Make diligent, independent decisions on how to engage vendors, auditors, and regulators on third-party risk matters with minimal oversight - Drive comprehensive benefits compliance management related to third-party service delivery, ensuring adherence to federal, state, and local regulatory requirements including HIPAA, ERISA, ACA, and COBRA - Lead risk and control assessments of vendor-managed processes, determine state of compliance, analyze risk exposure, and author reports detailing methodology, results, and remediation plans Program Leadership and Scalable Solutions: - Own and drive third-party risk review programs associated with benefits program launches, modifications, vendor onboarding, and transitions across the organization - Create predictable process paths, workflows, and repeatable mechanisms (e.g., for vendor security control design, testing, implementation, and validation) that multiple teams utilize to deliver consistent risk management outcomes - Identify opportunities to simplify approaches throughout the organization and across project boundaries; decouple dependencies and prevent duplicate or wasted effort - Define business problems, set objectives, analyze data, drive improvements, and influence resource allocation for third-party risk initiatives - Develop mechanisms to inspect, monitor, and improve third-party risk delivery over time; hold the team to a high standard for both solutions and practices - Escalate when risks or blockers emerge, propose viable recommendations to resolve them, identify the correct owners, and track issues to resolution Vendor Systems, Process, and Compliance Oversight: - Develop deep understanding of the employee benefits solutions utilized by Amazon and the third-party vendors that support them; drive business requirements for vendor system implementations and enhancements - Lead collaboration with vendors and external teams to evaluate security controls, negotiate remediation timelines, and ensure employee-centered benefits experiences are delivered securely - Understand the builder and stakeholder experience with security compliance and proactively seek to align third-party risk processes with existing workflows - Author written narratives to define strategy, evaluate trade-offs, anticipate risks, and recommend solutions on third-party risk that influence the organization and external partners Stakeholder Engagement, Influence, and Communication: - Drive business and technical discussions across the organization to make decisions on how to align with diverse, potentially conflicting, third-party risk and compliance expectations - Advise managers and directors on third-party risk matters; communicate effectively with leaders up to three levels above on risk posture, compliance gaps, and strategic recommendations - Write, speak, and network with key internal and external stakeholders to broaden influence on third-party risk management practices - Develop and deliver documentation such as manager and employee communications, FAQs, policy positions, standard operating procedures, and strategic narratives related to third-party risk - Mentor and develop junior team members in third-party risk assessment methodologies, compliance frameworks, and stakeholder engagement About the team The BXT Risk team is made up of lawyers, risk specialists, data security specialists, automation experts, and privacy specialists with global HR and benefits backgrounds. We are a dedicated collective committed to creating supportive, comprehensive benefits solutions. We provide our benefits stakeholders guidance to help them identify and manage potential risks and improve their team's risk management strategies and compliance posture. The team proactively scans the horizon for new and emerging risks not yet fully developed or understood, and performs inspections to identify compliance gaps and control weaknesses before they materialize into risk events. We provide end-to-end risk management oversight, including risk identification, risk assessments, risk quantification, compliance advisory services, inspection services, control design and testing, compliance solutions, risk monitoring and reporting, issue management, and risk training. We cultivate an environment where every team member feels valued, empowered, and equipped to thrive both professionally and personally. Our work goes beyond benefits operations - we're building experiences that genuinely care for our employees. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - 7+ years of risk management, audit, legal, compliance or related field work including engaging with external stakeholders experience - Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.) Preferred Qualifications: - CISSP, CISA, CISM or other security certification - Advanced degree in a related area (Information Security, Risk Management, MSHR, MBA, JD) - Deep knowledge of federal benefits regulations including ACA, COBRA, ERISA, and HIPAA, as well as state and local regulations including Massachusetts, Vermont, Hawaii, and San Francisco - Experience influencing vendor security and compliance strategies across an organization, including negotiating remediation timelines and shaping vendor contractual obligations - Proficiency across multiple widely adopted security compliance regimes and frameworks (SOC, PCI, NIST, ISO) with ability to apply expertise across diverse regulatory environments Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Senior Security Risk Specialist at Amazon.com Services LLC. Skills: Security risk management, Third-party risk, Benefits compliance, Regulatory requirements. Lead third-party vendor risk assessments. Evaluate security posture", "postedDate" : "2026-06-13T08:17:41.380", "createdAt" : "2026-06-13T08:17:41.380", "lastUpdated" : "2026-06-15T03:31:32.795", "ingestTimestamp" : "2026-06-13T08:17:41.380", "mongoId" : "69fe47284c40e2acd1f59727", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "salaryAnnualMin" : 119300, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication", "Leadership", "Mentoring", "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements", "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training", "Agile", "Employee benefits", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks", "CISSP", "CISA", "CISM", "JIRA" ], "skillCount" : 55, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 949.067, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a25e74674d8ee00a01e2292", "title" : "Cybersecurity Intern, Security Operations", "company" : "BD", "industry" : "Medical Technology", "salary" : { "min" : 26.0, "max" : 33.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States of America", "locations" : [ "United States of America" ], "timestamp" : "2026-06-11T20:08:20.366", "fingerprint" : "b657463d2f285f835f916fd1adc3dea626d0d2ec05dff43a0f7cb90bf3b7a1b5", "source" : "workday", "language" : "en", "applyUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "externalId" : "R-547194", "industryFunction" : { }, "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "city" : "Franklin Lakes", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0167639,-74.2057012" } ], "locationText" : "Franklin Lakes, New Jersey, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Monitor security events, Analyze security events, Monitor security incidents, Analyze security incidents, Hunt for threats, Identify potential security threats, Support incident response efforts, Investigate incidents, Contain incidents, Remediate incidents, Research emerging threats, Research emerging vulnerabilities, Develop security operations policies, Implement security operations policies, Develop security operations procedures, Implement security operations procedures, Collaborate with team members, Improve security posture, Improve incident response capabilities", "teamCollaboration" : "Team-based incident response; Improve security posture", "domainKnowledge" : "Cybersecurity operations", "domainList" : [ "cybersecurity-operations" ], "domainSpecificKnowledge" : [ "Cybersecurity operations" ], "qualificationsBasic" : "High School Diploma or GED, Analyze security data, Conduct basic threat hunting, Research emerging vulnerabilities, Collaboration skills, Communication skills, Support incident response, Contribute to security policies", "qualificationsPreferred" : "Foundational understanding of cybersecurity operations, Security event monitoring, Threat detection, Incident response processes", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "## **We are the people who give possibilities purpose** BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. # Job Description This **role is considering all qualified candidates, including transitioning service members**. The**BD SkillBridge Fellowship Program** provides opportunities for transitioning service members to gain valuable civilian work experience through individual Fellowships during their last 6 months of service, for up to 180 days. **SkillBridge** participants are not eligible for compensation or benefits from BD, as they continue to receive military compensation and benefits as active-duty service members. After successful completion of the program, there may be an opportunity to be considered for a full-time position, depending on business needs. **SkillBridge Requirement:** * Must meet all Department of Defense SkillBridge Eligibility requirements and be approved to participate in the SkillBridge program with your military installation command. **Location requirements:** This is an in-office role based in Franklin Lakes, NJ. SkillBridge participants may work remotely during the fellowship, with the expectation that they can transition to an in-office schedule in Franklin Lakes, NJ if hired full-time. We are seeking a motivated and enthusiastic Cybersecurity Intern to join our Cyber Fusion Center (CFC) team. The intern will assist in threat hunting, incident response (IR), and other cybersecurity activities. This is an excellent opportunity for someone looking to gain hands-on experience in the field of cybersecurity. This role is considering all qualified candidates, including transitioning service members. **Responsibilities** : * Assist in monitoring and analyzing security events and incidents. * Participate in threat hunting activities to identify potential security threats. * Support incident response efforts, including investigation, containment, and remediation. * Conduct research on emerging cybersecurity threats and vulnerabilities. * Assist in the development and implementation of security operations policies and procedures. * Collaborate with other team members to improve security posture and incident response capabilities. **Required Qualification(s):** * High School Diploma or GED * Ability to analyze security data and conduct basic threat hunting and research on emerging vulnerabilities * Strong collaboration and communication skills to support team-based incident response and contribute to security policies and procedures **Preferred Skills/Experience:** * Foundational understanding of cybersecurity operations, including security event monitoring, threat detection, and incident response processes, preferred At BD, we prioritize on-site collaboration because we believe it fosters creativity, innovation, and effective problem-solving, which are essential in the fast-paced healthcare industry. For most roles, we require a minimum of 4 days of in-office presence per week to maintain our culture of excellence and ensure smooth operations, while also recognizing the importance of flexibility and work-life balance. Remote or field-based positions will have different workplace arrangements which will be indicated in the job posting. For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required. Consistent with BD’s Workplace Accommodations Policy, requests for accommodation will be considered pursuant to applicable law. #earlycareer # Why Join Us? To find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of healthcare. At BD, you’ll discover a culture in which you can learn, grow and thrive. We believe that when people connect in person, we learn faster, collaborate more deeply, and build a stronger culture. Join us and enjoy a culture where face-to-face collaboration supports your learning, your progress, and your success. **To learn more about BD visit**[ _https://bd.com/careers_](https://bd.com/careers). Becton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics. Required Skills Optional Skills . # Primary Work Location USA NJ - Franklin Lakes # Additional Locations USA NC - Durham - Roche Drive # Work Shift At BD, we reward, support and develop our associates through our comprehensive Total Rewards program. We are committed to attracting and retaining high quality talent by providing reward and recognition opportunities that promote a performance-based culture, as well as a competitive package of compensation and benefits programs. You can learn more on our career site under \"[_Our Commitment to You_](https://jobs.bd.com/en/your-career-at-BD).\" Our salary or hourly rate ranges reward associates fairly and competitively. We regularly review these ranges and factors, such as location, contribute to the range displayed. Our pay is based on the role and the necessary skills and education to perform it successfully. The salary or hourly rate offered is determined by the role's specific requirements, including any applicable step rate pay system at the work location. Salary or hourly pay ranges are influenced by labor laws and Collective Bargaining Agreement (CBA) requirements applicable to the work location which may also affect the workplace arrangement of the role. **Salary Range Information** $26.00 - $33.00 USD Hourly", "summaryDescription" : "Cybersecurity Intern, Security Operations at BD. Monitor security events. Analyze security events", "postedDate" : "2026-06-09T10:01:54.763", "createdAt" : "2026-06-11T10:01:54.608", "lastUpdated" : "2026-06-11T20:08:20.366", "ingestTimestamp" : "2026-06-11T10:01:54.608", "mongoId" : "6a25e74674d8ee00a01e2292", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "salaryAnnualMin" : 54080, "salaryAnnualMax" : 68640, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Cybersecurity operations" ], "skillCount" : 1, "jobCategory" : "engineering", "seniorityLevel" : "junior", "dataQualityScore" : 1.0, "_score" : 940.4838, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Medical Technology" }, { "id" : "6a2c5fb974d8ee00a08ee12d", "title" : "Cybersecurity Engineer", "company" : "cBEYONData + SMX", "salary" : { "min" : 120000.0, "max" : 200000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "cBEYONData", "locations" : [ "cBEYONData" ], "certifications" : [ "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security" ], "timestamp" : "2026-06-15T00:46:05.169", "fingerprint" : "566bf0810b5188c2c2207ce8b8df4d9f1d2d9b0e9c3f7a6c2d5315fc41183273", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/ess/jobs/7751843003", "externalId" : "7751843003", "structuredLocations" : [ { "city" : "izabelin c", "state" : "mazovia", "country" : "poland", "continent" : "europe", "source" : "city_strategy", "geo" : "52.29929,20.80381" } ], "locationText" : "cBEYONData", "technicalSkills" : "SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, AWS, Azure, Google Cloud", "professionalSkills" : [ "risk management", "network security", "cloud security", "secure system implementation", "vulnerability management", "security assessments", "risk analysis", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "access control", "secure configuration" ], "hardSkillsList" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills" ], "hardSkills" : [ { "name" : "security engineering", "level" : "intermediate" }, { "name" : "security operations", "level" : "intermediate" }, { "name" : "information assurance", "level" : "intermediate" }, { "name" : "vulnerability management", "level" : "intermediate" }, { "name" : "security assessments", "level" : "intermediate" }, { "name" : "risk analysis", "level" : "intermediate" }, { "name" : "remediation support", "level" : "intermediate" }, { "name" : "network security", "level" : "intermediate" }, { "name" : "access control", "level" : "intermediate" }, { "name" : "identity management", "level" : "intermediate" }, { "name" : "encryption", "level" : "intermediate" }, { "name" : "secure configuration", "level" : "intermediate" }, { "name" : "documentation", "level" : "intermediate" }, { "name" : "compliance reporting", "level" : "intermediate" }, { "name" : "audit readiness", "level" : "intermediate" }, { "name" : "troubleshooting", "level" : "intermediate" }, { "name" : "analytical skills", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity Engineering, Security Operations, Risk Management, Compliance", "majorSkillsList" : [ "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance" ], "coreResponsibilities" : "Design security solutions, Implement security solutions, Monitor security solutions, Maintain security solutions, Protect enterprise systems, Protect networks, Protect applications, Protect data, Support security engineering, Support security architecture, Support vulnerability management, Support incident response, Support compliance activities, Assist secure system implementation, Administer cybersecurity tools, Configure cybersecurity tools, Support cybersecurity tools, Conduct vulnerability assessments, Support vulnerability assessments, Conduct security reviews, Conduct risk analysis, Plan remediation, Track POA&M, Ensure systems align with frameworks, Ensure solutions align with policies, Ensure systems align with compliance, Ensure solutions align with compliance, Collaborate with teams, Support secure solution delivery, Develop security documentation, Maintain security documentation, Develop reports, Maintain reports, Develop technical artifacts, Maintain technical artifacts, Develop audit readiness materials, Maintain audit readiness materials, Support continuous monitoring, Support system hardening, Support access control, Support secure configuration, Help maintain secure systems, Help maintain compliant systems, Help maintain resilient systems, Support mission-focused modernization", "teamCollaboration" : "infrastructure teams; network teams; cloud teams; data teams; application teams; customer teams; engineering teams", "domainKnowledge" : "NIST; RMF; FedRAMP; FISMA; DoD 8570/8140; network security; cloud security; Zero Trust architectures; Zero Trust methodologies", "domainList" : [ "nist", "rmf", "fedramp", "fisma", "dod-8570-8140", "network-security", "cloud-security", "zero-trust-architectures", "zero-trust-methodologies" ], "domainSpecificKnowledge" : [ "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "network security", "cloud security", "Zero Trust architectures", "Zero Trust methodologies" ], "toolProficiency" : [ "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "communicationSkills" : "documentation; analytical; communication", "documentationSkills" : "security documentation; technical artifacts; audit readiness", "problemSolvingSkills" : "troubleshooting; analytical; risk analysis; vulnerability management", "specialRequirements" : "Active DoD security clearance, DoD 8570/8140", "qualificationsBasic" : "cybersecurity engineering experience, security operations experience, information assurance activities experience, enterprise federal DoD environments experience, NIST RMF FedRAMP FISMA knowledge, DoD 8570/8140 guidance knowledge, vulnerability management experience, security assessments experience, POA&M tracking experience, risk analysis experience, remediation support experience, network security understanding, access control understanding, identity management understanding, encryption understanding, secure configuration practices understanding, support security documentation, support compliance reporting, support audit readiness, troubleshooting skills, analytical skills, documentation skills, collaborate with engineering teams, collaborate with infrastructure teams, collaborate with cloud teams, collaborate with data teams, collaborate with customer teams", "qualificationsPreferred" : "Active DoD security clearance, federal DoD environments experience, mission-critical environments experience, AWS cloud security experience, Azure cloud security experience, Google Cloud security experience, Zero Trust architectures experience, Zero Trust methodologies experience, security architecture experience, system hardening experience, incident response experience, continuous monitoring experience, Security+ certification, CySA+ certification, CISSP certification, CASP+ certification, CEH certification, CISM certification, AWS Security certification, Azure Security certification", "rawDescription" : "cBEYONData + SMX is seeking Cybersecurity Engineers to support federal customers with cybersecurity operations, security engineering, compliance, risk management, network security, cloud security, and mission-focused modernization initiatives. Responsibilities Design, implement, monitor, and maintain security solutions that protect enterprise systems, networks, applications, and data Support security engineering, security architecture, vulnerability management, incident response, and compliance activities Assist with secure system implementation across federal, DoD, or enterprise technology environments Administer, configure, and support cybersecurity tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, and related platforms Conduct or support vulnerability assessments, security reviews, risk analysis, remediation planning, and POA&M tracking Help ensure systems and solutions align with applicable security frameworks, policies, and compliance requirements Collaborate with infrastructure, network, cloud, data, application, and customer teams to support secure solution delivery Develop and maintain security documentation, reports, technical artifacts, and audit readiness materials Support continuous monitoring, system hardening, access control, and secure configuration activities Help maintain secure, compliant, and resilient systems in support of mission-focused modernization efforts Required Skills and Experience Experience supporting cybersecurity engineering, security operations, or information assurance activities in enterprise, federal, or DoD environments Knowledge of cybersecurity frameworks, policies, and standards such as NIST, RMF, FedRAMP, FISMA, DoD 8570/8140, or related guidance Experience with vulnerability management, security assessments, POA&M tracking, risk analysis, and remediation support Familiarity with security tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, or similar technologies Understanding of network security, access control, identity management, encryption, and secure configuration practices Ability to support security documentation, compliance reporting, and audit readiness activities Strong troubleshooting, analytical, communication, and documentation skills Ability to collaborate with engineering, infrastructure, cloud, data, and customer teams to support secure solution delivery Desired Skills and Experience Active or current DoD security clearance Experience supporting federal, DoD, or mission-critical environments Familiarity with cloud security concepts across AWS, Azure, Google Cloud, or similar platforms Experience with Zero Trust architectures and methodologies Experience supporting security architecture, system hardening, incident response, or continuous monitoring Relevant certifications such as Security+, CySA+, CISSP, CASP+, CEH, CISM, AWS Security, Azure Security, or similar Application Deadline: 7/31/26 # LI-SA1 The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $120,000—$200,000 USD SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i. e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).", "summaryDescription" : "Cybersecurity Engineer at cBEYONData + SMX. Skills: Cybersecurity Engineering, Security Operations, Risk Management, Compliance. Design security solutions. Implement security solutions", "postedDate" : "2026-06-12T22:24:44.083", "createdAt" : "2026-06-12T22:24:44.083", "lastUpdated" : "2026-06-15T00:46:05.169", "ingestTimestamp" : "2026-06-12T22:24:44.083", "mongoId" : "6a2c5fb974d8ee00a08ee12d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 200000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills", "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance", "risk management", "cloud security", "secure system implementation", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "Zero Trust architectures", "Zero Trust methodologies", "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security", "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "skillCount" : 48, "jobCategory" : "other", "jobSubcategory" : "mission-intelligence&analytics", "dataQualityScore" : 0.7777778, "_score" : 935.5192, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2d149174d8ee00a0ae7b6b", "title" : "Cybersecurity Analyst, IT Operations", "company" : "Fors Marsh", "industry" : "Cybersecurity", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in the Technology industry in the United States, adjusted for remote work and company size." }, "location" : "United States", "locations" : [ "Arlington", "VA", "United States" ], "timestamp" : "2026-06-15T08:39:13.122", "fingerprint" : "a6836faf2cfae74b0ac49670ad0ff5e634257163183beb15a764ef30b890be9a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://fors-marsh-group.breezy.hr/p/3f533063ebac-cybersecurity-analyst-it-operations", "externalId" : "3f533063ebac", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "rawDescription" : "WHO WE ARE: At Fors Marsh, we take on issues that matter. We are a team of researchers, strategists, and communicators working together to drive lasting change. We look at human behavior from all angles with a deep understanding of people and context to design solutions that influence decision-mak", "summaryDescription" : "Cybersecurity Analyst, IT Operations at Fors Marsh", "createdAt" : "2026-06-14T07:04:33.457", "lastUpdated" : "2026-06-15T08:39:13.122", "ingestTimestamp" : "2026-06-14T07:04:33.457", "mongoId" : "6a2d149174d8ee00a0ae7b6b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 931.4649, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6ae374d8ee00a090ee1a", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T09:39:27.679", "fingerprint" : "01d7824291008376c7b6e17f1602e170a7f25cac0134b1861071c3308ed3b798", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=5154663008", "externalId" : "5154663008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Network security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Lead Zero Trust implementation, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Perform technical design reviews, Triage security bugs, Recommend solutions for security bugs, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Support RFI's, Evaluate new security solutions, Conduct POCs", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "domainKnowledge" : "Cyber Security; Infrastructure security; AI risk assessments; Emerging threat landscapes; Network protocols; Networking concepts; Security engineering; System security; Network security; Authentication protocols; Security protocols; Application security; Cloud Concepts; AI threat modeling; LLM components; Public cloud; Private cloud; On-prem infrastructure; Abuse risks", "domainList" : [ "cyber-security", "infrastructure-security", "ai-risk-assessments", "emerging-threat-landscapes", "network-protocols", "networking-concepts", "security-engineering", "system-security", "network-security", "authentication-protocols", "security-protocols", "application-security", "cloud-concepts", "ai-threat-modeling", "llm-components", "public-cloud", "private-cloud", "on-prem-infrastructure", "abuse-risks" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "System security", "Network security", "Authentication protocols", "Security protocols", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "communicationSkills" : "Articulate security concepts; Technical stakeholders", "continuousLearning" : "Learning new security products; Learning new security features; Learning new security strategies", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Assess complex security risks; Mitigate complex security risks", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Lead Zero Trust implementation", "postedDate" : "2026-06-14T08:55:22.103", "createdAt" : "2026-06-14T08:55:22.103", "lastUpdated" : "2026-06-15T09:39:27.679", "ingestTimestamp" : "2026-06-14T08:55:22.103", "mongoId" : "6a2c6ae374d8ee00a090ee1a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Cyber Security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 930.0443, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6ae374d8ee00a090ee19", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T11:31:26.144", "fingerprint" : "036fe461d5c32bde966d19674ee2896db18ea68e5c02dfd07b4ff5eed08ab41f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=4994052008", "externalId" : "4994052008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Implement Zero Trust, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture proactively, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Review technical designs, Triage security bugs, Recommend solutions for security bugs, Participate in Red-Teaming exercises, Participate in Blue Teaming exercises, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Participate in RFI's, Evaluate new security solutions, Conduct POCs, Demonstrate POVs, Implement anti-abuse solutions, Apply AI tools for anomaly detection, Apply AI tools for insider threat detection, Apply AI tools for incident response", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Cyber Security; Infrastructure security; Network security; Endpoint security; Zero Trust; Cloud security; AI risk; AI threat modeling; LLM components", "domainList" : [ "cyber-security", "infrastructure-security", "network-security", "endpoint-security", "zero-trust", "cloud-security", "ai-risk", "ai-threat-modeling", "llm-components" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "Network security", "Endpoint security", "Zero Trust", "Cloud security", "AI risk", "AI threat modeling", "LLM components" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "communicationSkills" : "Articulate security concepts", "continuousLearning" : "Learning about new security products; Learning about new security features; Learning about new security strategies", "innovationCreativity" : "Hackathon", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Root cause analysis", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Implement Zero Trust", "postedDate" : "2026-06-14T03:22:32.536", "createdAt" : "2026-06-14T03:22:32.536", "lastUpdated" : "2026-06-15T11:31:26.144", "ingestTimestamp" : "2026-06-14T03:22:32.536", "mongoId" : "6a2c6ae374d8ee00a090ee19", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Agile", "Cyber Security", "AI risk", "AI threat modeling", "LLM components", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 928.68176, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2a8a7474d8ee00a0681f5a", "title" : "Senior Information Security Compliance Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 233450.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-13T15:36:31.211", "fingerprint" : "aa4f9c9a30a4b784c68792ba54c62e4cbc1fc81e4ccc08326b131d0e1ada8a1f", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "externalId" : "JR2026513178", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" }, { "city" : "Huntsville", "state" : "Alabama", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.7298470,-86.5859011" }, { "city" : "Mesa", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4151005,-111.8314550" }, { "city" : "Oklahoma City", "state" : "Oklahoma", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.4729886,-97.5170536" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" }, { "city" : "Berkeley", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7544952,-90.3312256" } ], "locationText" : "Arlington, Virginia, United States; El Segundo, California, United States; Huntsville, Alabama, United States; Mesa, Arizona, United States; Oklahoma City, Oklahoma, United States; Orlando, Florida, United States; San Antonio, Texas, United States; Seattle, Washington, United States; Berkeley, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Cybersecurity", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training" ], "hardSkillsList" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management" ], "hardSkills" : [ { "name" : "Compliance assessment reviews", "level" : "intermediate" }, { "name" : "Self-inspections", "level" : "intermediate" }, { "name" : "Corrective action development", "level" : "intermediate" }, { "name" : "Administrative inquiries", "level" : "intermediate" }, { "name" : "Inventory management", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" }, { "name" : "Security procedure administration", "level" : "intermediate" }, { "name" : "Sub-contractor management", "level" : "intermediate" } ], "majorSkills" : "Information Security Compliance, Cybersecurity, Government Security Programs", "majorSkillsList" : [ "Information Security Compliance", "Cybersecurity", "Government Security Programs" ], "coreResponsibilities" : "Execute internal security controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Conduct COMSEC duties, Protect government information, Protect intellectual information, Protect third party information, Protect company information, Develop security education, Implement security education, Administer security education, Develop physical controls, Implement physical controls, Administer physical controls, Contribute to enterprise IPT, Participate in review cycle, Participate in decision making, Provide innovation into Personnel Security, Provide creativity into Personnel Security, Obtain security clearances, Obtain security accesses, Provide innovation into security awareness training, Provide creativity into security awareness training, Educate personnel, Refresh personnel, Motivate personnel, Complete tasks toward long-range goals, Complete tasks toward objectives, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Classified environments; Information System Security; Communication Security (COMSEC); Personnel Security; Sensitive Compartmented Information (SCI); Special Access Program (SAP)", "domainList" : [ "classified-environments", "information-system-security", "communication-security-comsec", "personnel-security", "sensitive-compartmented-information-sci", "special-access-program-sap" ], "domainSpecificKnowledge" : [ "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)" ], "toolProficiency" : [ "MS Office", "Word", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Oral communication; Written communication", "innovationCreativity" : "Innovation into Personnel Security; Creativity into Personnel Security; Innovation into security awareness training; Creativity into security awareness training", "specialRequirements" : "Maintain access to SCI/SAP, U.S. Person required", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years implementing information security policies, 10+ years SAP Security/GRC, 5+ years government security programs, Maintain SCI/SAP access, Active U.S. Top Secret/SCI Security Clearance, U.S. Citizenship required", "qualificationsPreferred" : "MS Office experience, Oral and written communications skills, Obtain successful US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Information Security Compliance Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Information Security Compliance Specialist** to join the team in **Arlington, VA****; El Segundo, CA; Huntsville, AL; Mesa, AZ; Oklahoma City, OK; Orlando, FL; San Antonio, TX; Seattle, WA;** or **Berkeley, MO.** The selected candidates will apply advanced expertise in cybersecurity, Information Assurance (IA), and technical instruction to assess the security posture of classified environments, support enterprise compliance activities, and strengthen the cybersecurity readiness of Boeing personnel and program stakeholders. The assessor will be responsible for conducting internal evaluations, providing expert guidance on security requirements, and helping shape and sustain the implementation of Information System Security policies, standards, and directives to ensure the inspection readiness of information systems processing classified information. **Position Responsibilities:** * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Conducts Communication Security (COMSEC) duties and responsibilities (to include inventory, distribution and destruction), in compliance with government regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Develops, implements and administers security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience implementing information security policies and procedures * 10+ years of experience with SAP Security and/or SAP GRC * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict Of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $233,450 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Information Security Compliance Specialist at Boeing. Skills: Information Security Compliance, Cybersecurity, Government Security Programs. Execute internal security controls. Perform compliance assessment reviews", "postedDate" : "2026-06-11T19:50:43.714", "createdAt" : "2026-06-11T19:50:42.038", "lastUpdated" : "2026-06-13T15:36:31.211", "ingestTimestamp" : "2026-06-11T19:50:42.038", "mongoId" : "6a2a8a7474d8ee00a0681f5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 233450, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management", "Information Security Compliance", "Cybersecurity", "Government Security Programs", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training", "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "MS Office", "Word", "Excel", "Teams", "Outlook" ], "skillCount" : 35, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 912.1728, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69e1043f2beec4dd3def2489", "title" : "Security Compliance Specialist, Devices & Services Security Compliance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:29:41.932", "fingerprint" : "7cc0bf45d0a25eeeab0562af9b3c7ffbfdf42825d62d49d4d7c4862889d6453d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387917/apply", "externalId" : "ef7d0e34-03d9-48c4-9693-d204970ee7c5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Redshift, S3, EC2, Glue", "professionalSkills" : [ "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security" ], "hardSkillsList" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography" ], "softSkillsList" : [ "Problem solving" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Data encryption", "level" : "intermediate" }, { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Logging", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem solving" } ], "majorSkills" : "Security compliance, Risk management, Governance", "majorSkillsList" : [ "Security compliance", "Risk management", "Governance" ], "coreResponsibilities" : "Understand compliance requirements, Rationalize compliance requirements, Provide business specific interpretations, Support automation opportunities, Review security controls, Engage with Business, Engage with SMEs, Define information security policies, Ensure compliance to policies, Maintain control libraries, Maintain compliance requirements, Maintain guidance materials", "teamCollaboration" : "Business and SMEs; Security and engineering teams", "domainKnowledge" : "Service security; Device security; ISO 27001/2; HIPAA; NIST 800-53; NIST CSF; Access-control system; Access-control methodology; Network security; Application security; System-development security; Security architecture; Security models; Cryptography; Operations security; Medical devices; Medical software; HITRUST; Hardware development; Software development; Product launches; Device lifecycles; Service lifecycles", "domainList" : [ "service-security", "device-security", "iso-27001-2", "hipaa", "nist-800-53", "nist-csf", "access-control-system", "access-control-methodology", "network-security", "application-security", "system-development-security", "security-architecture", "security-models", "cryptography", "operations-security", "medical-devices", "medical-software", "hitrust", "hardware-development", "software-development", "product-launches", "device-lifecycles", "service-lifecycles" ], "domainSpecificKnowledge" : [ "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Network security", "Application security", "System-development security", "Security architecture", "Security models", "Cryptography", "Operations security", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "communicationSkills" : "Written communications; Oral communications", "documentationSkills" : "Policies; Supporting documentation", "innovationCreativity" : "Innovative process changes", "problemSolvingSkills" : "Problem solving abilities", "qualificationsBasic" : "Bachelor's degree or equivalent, Experience developing policies, 3+ years information security experience, 3+ years compliance experience, Experience with multiple security frameworks, Experience with multiple regulations", "qualificationsPreferred" : "Experience working with security teams, Experience working with engineering teams, Experience implementing repeatable processes, Experience driving automation, Experience driving standardization, Experience handling ambiguous challenges, Experience creating written communications, Experience delivering written communications, Experience creating oral communications, Experience delivering oral communications, Experience supporting security compliance medical devices, Experience supporting security compliance medical software, Experience with hardware development processes, Experience with software development processes, Experience with product launches, Experience with lifecycles of devices, Experience with lifecycles of services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon’s Devices & Services Security Compliance team is growing and looking for a highly motivated security compliance specialist to help us enhance and integrate our governance and compliance programs. You will help to determine the high security bar we hold for our products, analyze regulatory and certification requirements, and ensure we have sufficient enforcement mechanisms to keep our products and services safe for our customers. You should be a technically experienced and innovative security governance, risk, and compliance professional who has the ability to understand systems, security, and privacy processes, communicate to customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities * Understand and rationalize compliance requirements for service and device security. * Provide business specific interpretations and support automation opportunities * Review security controls that are technical in nature, such as access controls, data encryption in transit and at rest, and auditing and logging user activity * Engage with the Business and SMEs to define and ensure compliance to information security policies * Maintain control libraries and compliance requirements and guidance materials for various security standards and regulations About the team The Devices & Services Security Compliance Team work across products like Alexa, FireTV, Echo, Kindle, and others to ensure the safety and security of our customers and their data. We support Amazon Devices by defining the security bar for our products and services, ensuring regulatory compliance, and obtaining and maintaining industry certifications and standards. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - Experience developing policies and supporting documentation - 3+ years of information security and compliance experience - Experience working with multiple security frameworks and regulations like ISO 27001/2, HIPAA, NIST 800-53, NIST CSF Preferred Qualifications: - Experience working directly with security and engineering teams - Knowledge of AWS tech stack (e.g., AWS Redshift, S3, EC2, Glue) - Experience implementing repeatable processes and driving automation or standardization - Experience handling ambiguous or undefined challenges through strong problem solving abilities - Experience creating and delivering written and oral communications for technical and non-technical audiences - Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - Experience supporting security compliance for medical devices or software (e.g. HIPAA, HITRUST) - Experience with hardware and software development processes, products launches and lifecycles of devices and/or services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist, Devices & Services Security Compliance at Amazon.com Services LLC. Skills: Security compliance, Risk management, Governance. Understand compliance requirements. Rationalize compliance requirements", "postedDate" : "2026-06-13T07:59:22.647", "createdAt" : "2026-06-13T07:59:22.647", "lastUpdated" : "2026-06-15T03:29:41.932", "ingestTimestamp" : "2026-06-13T07:59:22.647", "mongoId" : "69e1043f2beec4dd3def2489", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387917/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography", "Problem solving", "Security compliance", "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security", "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Application security", "System-development security", "Security models", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "skillCount" : 33, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 910.1775, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2a7ffb74d8ee00a066c5ac", "title" : "Cybersecurity Manager (Incident Response & Security Operations)", "company" : "Match Group", "industry" : "Security", "salary" : { "min" : 170000.0, "max" : 190000.0, "currency" : "CAD", "frequency" : "yearly" }, "location" : "Vancouver, British Columbia", "locations" : [ "Vancouver, British Columbia" ], "certifications" : [ "GCIH", "GCFA", "GCIA", "GSOM", "CISSP" ], "timestamp" : "2026-06-15T00:05:27.519", "fingerprint" : "6dcc57fb7b8160bc9400f872d1609fde7a4e6117091effb646a4513f2120db6b", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/matchgroup/70690017-f01c-446e-93e5-eca0e8d8aba3/apply", "externalId" : "70690017-f01c-446e-93e5-eca0e8d8aba3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, GCP, Kubernetes, CrowdStrike, Okta, Python", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing" ], "hardSkillsList" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Detection engineering framework", "level" : "intermediate" }, { "name" : "Detections-as-code", "level" : "intermediate" }, { "name" : "GitOps", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "SIEM platform", "level" : "intermediate" }, { "name" : "Log source integration", "level" : "intermediate" }, { "name" : "SOC metrics", "level" : "intermediate" }, { "name" : "SLAs", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Network forensics", "level" : "intermediate" }, { "name" : "Threat hunting techniques", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Datacenter security", "level" : "intermediate" }, { "name" : "Container orchestration security", "level" : "intermediate" }, { "name" : "Access security monitoring", "level" : "intermediate" }, { "name" : "Threat intelligence workflows", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Operations, Detection Engineering, AI-augmented SOC", "majorSkillsList" : [ "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC" ], "coreResponsibilities" : "Lead integrated team, Drive strategic vision, Maximize threat response capabilities, Integrate core functions, Leverage AI innovation, Own detection lifecycle, Build AI-augmented SOC model, Develop high-performing team, Operate across time zones, Provide 24/7 coverage, Develop detection engineering framework, Contribute to detections-as-code, Drive AI Agentic SOC adoption, Evaluate AI tooling, Select AI tooling, Implement AI tooling, Manage full incident lifecycle, Partner with Legal, Partner with Communications, Partner with Privacy, Partner with Engineering, Build detection content, Integrate log sources, Establish SOC metrics, Track SOC metrics, Establish SOC SLAs, Track SOC SLAs, Create dashboards, Visualize performance, Visualize alert fidelity, Visualize response effectiveness, Coordinate IR tabletop exercises, Execute IR tabletop exercises, Validate readiness, Improve playbooks, Partner with Red Team, Validate detection capabilities, Collaborate with Platform Security, Collaborate with InfraSec, Collaborate with AppSec, Identify detection gaps, Close detection gaps, Integrate threat intelligence, Anticipate emerging threats, Proactively defend threats, Use automation, Improve detection times, Improve response times, Mitigate incident impact", "teamCollaboration" : "Cross-functional stakeholders; External incident response teams; Law enforcement; Platform Security teams; InfraSec teams; AppSec teams; Legal teams; Communications teams; Privacy teams; Engineering teams; Red Team", "projectManagementSkills" : [ "Detections-as-code", "GitOps", "CI/CD pipelines" ], "domainKnowledge" : "Attacker TTPs; MITRE ATT&CK; Cloud-native environments; Hybrid environments; Datacenter infrastructure; Endpoint security; Network security; Identity and access security; SaaS security; Application security; Threat intelligence", "domainList" : [ "attacker-ttps", "mitre-att-ck", "cloud-native-environments", "hybrid-environments", "datacenter-infrastructure", "endpoint-security", "network-security", "identity-and-access-security", "saas-security", "application-security", "threat-intelligence" ], "domainSpecificKnowledge" : [ "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence" ], "toolProficiency" : [ "SIEM", "SOAR", "Git", "GitOps", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "communicationSkills" : "Verbal communication; Written communication; Post-incident reports", "continuousLearning" : "Annual training allowance", "innovationCreativity" : "AI-driven innovation; AI-augmented SOC model; AI Agentic SOC adoption", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Alert tuning; Investigation; Incident resolution", "specialRequirements" : "24/7 coverage", "outcomesObjectives" : "Maximize rapid threat response; Maximize accurate threat response; Reduce noise; Accelerate response; Scale across portfolio; Reduce false positives; Accelerate initial response speed; Validate detection capabilities; Improve playbooks; Close detection gaps; Improve detection times; Improve response times; Mitigate incident impact", "qualificationsBasic" : "5+ years security operations, 5+ years incident response, 5+ years detection engineering, 5+ years threat hunting, 2+ years team leadership, 2+ years management role, Build and operate modern SOC, Experience with SIEM platforms, Experience with SOAR tools, Understanding AI/ML applications, Manage full incident lifecycle, Experience with cloud security monitoring, Experience with datacenter security, Experience with container orchestration security, Familiarity with identity access security monitoring, Experience coordinating external IR teams, Experience coordinating with law enforcement, Experience coordinating with cross-functional stakeholders, Polished verbal communication skills, Polished written communication skills", "qualificationsPreferred" : "Python-based detections experience, Log analysis experience, Background consumer internet industry, Background dating industry, Background high-scale B2C platforms, Cloudflare experience, CrowdStrike experience, SaaS security monitoring experience, Obsidian experience, Experience building Blue Team program, Experience leading Blue Team program, Experience building cross-functional security team, Experience leading cross-functional security team", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. ## What You'll Do Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats Use automation to improve detection and response times and mitigate incident impact ## What You'll Bring 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) Familiarity with identity and access security monitoring (Okta, SSO, MFA events) Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent ## Nice to Have Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms Background in the consumer internet/dating industry or other high-scale B2C platforms Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) Experience building or leading a Blue Team volunteer program or cross-functional security response team ## Additional Information Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG", "summaryDescription" : "Cybersecurity Manager (Incident Response & Security Operations) at Match Group. Skills: Incident Response, Security Operations, Detection Engineering, AI-augmented SOC. Lead integrated team. Drive strategic vision", "postedDate" : "2026-06-10T16:28:32.723", "createdAt" : "2026-06-10T16:28:32.723", "lastUpdated" : "2026-06-15T00:05:27.519", "ingestTimestamp" : "2026-06-12T07:31:26.388", "mongoId" : "6a2a7ffb74d8ee00a066c5ac", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows", "Leadership", "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC", "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing", "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence", "GCIH", "GCFA", "GCIA", "GSOM", "CISSP", "SIEM", "SOAR", "Git", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "skillCount" : 58, "jobCategory" : "other", "dataQualityScore" : 1.0, "_score" : 909.03107, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2ca13274d8ee00a09a4b5f", "title" : "Cybersecurity Analyst", "company" : "Level", "industry" : "Corporate", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Austin, United States, adjusted for the Education industry and company size." }, "location" : "Austin", "locations" : [ "Austin" ], "certifications" : [ "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH" ], "timestamp" : "2026-06-15T05:23:45.000", "fingerprint" : "c34b92369538dc90b549740abdc4c0b596f06d245e039dd634669205c40fec2e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/level/b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9/application", "externalId" : "b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "technicalSkills" : "SIEM, EDR, Network monitoring, TCP/IP, Firewalls, DNS, VPNs, IDS/IPS, MDM, RBAC, IAM, Zero Trust, Azure, AWS, GCP, DevSecOps, CI/CD", "professionalSkills" : [ "Threat hunting", "Incident response", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits" ], "hardSkillsList" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" } ], "majorSkills" : "Security monitoring, Threat detection, Incident response, Endpoint security", "majorSkillsList" : [ "Security monitoring", "Threat detection", "Incident response", "Endpoint security" ], "coreResponsibilities" : "Monitor security alerts, Analyze security events, Investigate security incidents, Investigate anomalies, Investigate potential threats, Tune detection rules, Maintain detection rules, Tune alerts, Maintain alerts, Tune dashboards, Maintain dashboards, Conduct threat hunting, Identify indicators of compromise, Identify attacker TTPs, Participate incident response, Contain incidents, Eradicate incidents, Document timelines, Document remediation actions, Administer endpoint security tools, Support MDM operations, Manage identity controls, Manage access controls, Enforce RBAC policies, Conduct access reviews, Monitor network traffic, Monitor logs, Assist maintaining firewall rules, Assist maintaining network segmentation, Support Zero Trust implementation, Support least-privilege enforcement, Monitor cloud environments, Identify misconfigurations, Identify policy violations, Assist vulnerability scans, Assist remediation tracking, Assist compliance assessments, Collaborate development teams, Collaborate IT ops teams, Integrate security CI/CD pipelines", "teamCollaboration" : "Security team; Development teams; IT ops teams", "domainKnowledge" : "Network security fundamentals; Zero Trust concepts; DevSecOps principles; NIST CSF; SOC 2; CIS Controls", "domainList" : [ "network-security-fundamentals", "zero-trust-concepts", "devsecops-principles", "nist-csf", "soc-2", "cis-controls" ], "domainSpecificKnowledge" : [ "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "documentationSkills" : "IR playbooks; Runbooks; Escalation procedures", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "Based in Austin, TX, Willing to relocate", "qualificationsBasic" : "3-5 years cybersecurity analyst experience, Solid security monitoring knowledge, Solid log analysis knowledge, Solid SIEM platforms knowledge, Experience incident response, Working knowledge network security, Hands-on endpoint security experience, Hands-on EDR tools experience, Experience MDM platforms, Understanding RBAC principles, Understanding IAM principles, Familiarity Zero Trust concepts, Basic cloud security knowledge, Familiarity DevSecOps principles, Familiarity secure SDLC practices, Analytical skills, Problem-solving skills, Exceptional attention to detail", "qualificationsPreferred" : "CompTIA Security+ certification, CySA+ certification, Microsoft Certified: Security Operations Analyst Associate, Azure Security Engineer Associate, CEH certification, GIAC GSEC certification, GIAC GCIA certification, GIAC GCIH certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning. That's why we're building: For students: Rewarding and motivating learning experiences that meet students where they are to build real academic proficiency. For educators: Tools that fit naturally into instruction and help students stay engaged while reducing teacher workload. For parents: Activities that help your kid catch up or get ahead, build confidence, and minimize homework battles, whether learning at school or at home. We are committed to helping every person maximize their potential and live a life of meaning. It's a difficult problem that requires brilliant people and tremendous effort over time. Level is looking for a skilled and motivated Cybersecurity Analyst to join our security team and help protect the organization's systems, networks, and data from evolving cyber threats. This is a hands-on technical role that requires a strong foundation in security monitoring, threat detection, incident response, and endpoint security. Reporting to the Director of Cybersecurity, this analyst will be a key contributor to day-to-day security operations, working across network security, cloud environments, and endpoint management tools to identify risks, respond to incidents, and continuously improve the organization's security posture. What You Will Do: - Monitor and analyze security alerts and events across SIEM, EDR, and network monitoring platforms - Investigate security incidents, anomalies, and potential threats to determine scope and impact - Tune and maintain detection rules, alerts, and dashboards to reduce noise and improve fidelity - Conduct threat hunting to proactively identify indicators of compromise (IOCs) and attacker TTPs - Participate in incident response including containment, eradication, and recovery; document timelines and remediation actions - Assist in developing and maintaining IR playbooks, runbooks, and escalation procedures - Administer endpoint security tools including EDR/antivirus platforms and support MDM operations - Manage identity and access controls, enforce RBAC policies, and conduct access reviews - Monitor network traffic and logs for suspicious activity; assist in maintaining firewall rules and network segmentation - Support Zero Trust implementation efforts and least-privilege enforcement - Monitor cloud environments (Azure, AWS, or GCP) for misconfigurations and policy violations - Assist with vulnerability scans, remediation tracking, and compliance assessments (NIST CSF, SOC 2, CIS Controls) - Collaborate with development and IT ops teams to integrate security into CI/CD pipelines (DevSecOps) - Assist with third-party risk management and security audits Qualifications Need to Have: - 3-5 years of hands-on experience in a cybersecurity analyst, SOC analyst, or related technical security role - Solid understanding of security monitoring, log analysis, and SIEM platforms - Experience participating in incident response activities, including investigation and remediation - Working knowledge of network security fundamentals: TCP/IP, firewalls, DNS, VPNs, IDS/IPS - Hands-on experience with endpoint security platforms and EDR tools - Experience with MDM platforms for device management and policy enforcement - Understanding of RBAC and IAM principles in enterprise environments - Familiarity with Zero Trust concepts and practical enterprise application - Basic cloud security knowledge in at least one of Azure, AWS, or GCP - Familiarity with DevSecOps principles and secure SDLC practices - Strong analytical and problem-solving skills with exceptional attention to detail - Based in Austin, TX or willing to relocate prior to start date Nice to Have: - CompTIA Security+ (strongly preferred), CySA+, or equivalent certification - Microsoft Certified: Security Operations Analyst Associate (SC-200) or Azure Security Engineer Associate (AZ-500) - CEH, GIAC GSEC, GCIA, or GCIH", "summaryDescription" : "Cybersecurity Analyst at Level. Skills: Security monitoring, Threat detection, Incident response, Endpoint security. Monitor security alerts. Analyze security events", "createdAt" : "2026-06-14T04:08:21.356", "lastUpdated" : "2026-06-15T05:23:45.000", "ingestTimestamp" : "2026-06-14T04:08:21.356", "mongoId" : "6a2ca13274d8ee00a09a4b5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking", "Incident response", "Threat hunting", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits", "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls", "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH", "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 908.6371, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6ac174d8ee00a090db9b", "title" : "Sr. Cybersecurity Operations Analyst", "company" : "Atlas Air", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Analyst in White Plains, NY, adjusted for industry and company size." }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "timestamp" : "2026-06-15T22:36:57.018", "fingerprint" : "b22b12aba85b1209b9458c38499c58725ca1486cec8d9c90b54b808147e3e7ca", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4267649009", "externalId" : "4267649009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" } ], "locationText" : "White Plains, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. This position is responsible for cybersecurity operations and defense including threat assessment, incident handling, and managing vulnerabilities against Atlas Air Global Technology environment. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure. Major Job Responsibilities: This position will be responsible for security event monitoring, vulnerability assessments, web application penetration tests, integrity checking, and maintaining necessary standards we lift ambition.", "summaryDescription" : "Sr. Cybersecurity Operations Analyst at Atlas Air", "postedDate" : "2026-06-14T19:15:37.345", "createdAt" : "2026-06-14T19:15:37.345", "lastUpdated" : "2026-06-15T22:36:57.018", "ingestTimestamp" : "2026-06-14T19:15:37.345", "mongoId" : "6a2c6ac174d8ee00a090db9b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 905.99054, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a1663ec58b93c861ea61720", "title" : "Senior Security Operations Engineer", "company" : "Bitdeer Technologies Group", "industry" : "Cybersecurity", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Operations Engineer in Singapore, adjusted for seniority and the technology industry." }, "location" : "Singapore, SG", "locations" : [ "Singapore", "SG", "Penang", "MY", "Cyberjaya", "MY" ], "timestamp" : "2026-06-15T07:09:56.617", "fingerprint" : "87d7984444f9fccf8d9c6c2ff99f7fad474ba564ed7be5935eab2bb6caa92f83", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://bitdeer.breezy.hr/p/b66174ea0d40-senior-security-operations-engineer-aidc", "externalId" : "b66174ea0d40", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "state" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2959845,103.7766186" } ], "locationText" : "Singapore, Singapore, Singapore", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Senior Security Operations Engineer at Bitdeer Technologies Group", "createdAt" : "2026-06-14T05:44:08.731", "lastUpdated" : "2026-06-15T07:09:56.617", "ingestTimestamp" : "2026-06-14T05:44:08.731", "mongoId" : "6a1663ec58b93c861ea61720", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 905.3214, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b531e", "title" : "Principal / Lead Software Engineer (Cybersecurity Specialist)", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Lead Software Engineers in Singapore, adjusted for the cybersecurity specialization and GovTech's industry position." }, "location" : "DEP Digital Economy Products", "locations" : [ "DEP Digital Economy Products" ], "timestamp" : "2026-06-16T05:07:33.247", "fingerprint" : "2e7bfa353428202c6e448987bdc4b0b5bdc0686c6f5916d2cdd151d21bbc7715", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4001907201?gh_jid=4001907201", "externalId" : "4001907201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud security, Platform security, Identity, Encryption, Key management, Segmentation, Zero-trust, Secure SDLC, Policy-as-code, MITRE ATT", "professionalSkills" : [ "Systems thinking", "Architecture security", "Architecture resilience" ], "hardSkillsList" : [ "Security architecture", "Resilience engineering", "Threat modeling", "Vulnerability assessment", "Policy-as-code" ], "softSkillsList" : [ "Leadership", "Mentorship" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Resilience engineering", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentorship" } ], "majorSkills" : "Cybersecurity architecture, Resilience engineering, Secure SDLC", "majorSkillsList" : [ "Cybersecurity architecture", "Resilience engineering", "Secure SDLC" ], "coreResponsibilities" : "Design and embed security controls, Embed resilience controls, Decide inherited security tech stack, Build owned security tech stack, Design defensive terrain, Own reference security architecture, Define trust boundaries, Define identity architecture, Define segmentation strategy, Define trust-zone strategy, Define east-west controls, Define encryption key management, Define blast-radius containment, Embed secure-by-design controls, Maintain living threat model, Provide engineering guidance, Provide incident-response support, Scope external VAPT, Engineer external VAPT, Validate vulnerability closure", "teamCollaboration" : "Product and engineering teams; Singapore Customs Agency CISO; SIRO; ACISO; GCSOC", "domainKnowledge" : "Critical Information Infrastructure; TradeNet platform; CSA CCoP v2; WOG IM8; National trade-continuity; Cloud-native architecture", "domainList" : [ "critical-information-infrastructure", "tradenet-platform", "csa-ccop-v2", "wog-im8", "national-trade-continuity", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Critical Information Infrastructure", "TradeNet platform", "CSA CCoP v2", "WOG IM8", "National trade-continuity", "Cloud-native architecture" ], "documentationSkills" : "Document conformance basis", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "TradeNet security architecture conformant; Documented defensible conformance basis; Coherent evidenced security architecture; Engineered national trade-continuity posture; Recoverability designed property; Degraded-mode operation designed property; Containment blast radius designed property; Explicit control boundary; Security control intent expressed code; Continuously monitored controls; Culture of security", "qualificationsBasic" : "10+ years Cybersecurity Software Engineer, Design security architecture, Implement security architecture, Coach engineering teams, Understand cybersecurity tooling, Design security into regulated systems, Implement security into regulated systems, Working command Singapore regulatory frameworks, Translate obligation into architecture, Delineate control inheritance, Systems thinking, Depth cloud platform security architecture, Depth identity, Depth encryption key management, Depth segmentation zero-trust, Depth secure SDLC policy-as-code, Fluency architectural adversary frameworks", "qualificationsPreferred" : "MITRE ATT framework", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "About GovTech The Government Technology Agency (GovTech) transforms the delivery of Government digital services by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We build the Smart Nation infrastructure and the platforms the public sector runs on, and we partner agencies to engineer trustworthy, resilient digital services at national scale. What is this role? TradeNet is Singapore's national single-window trade platform and a legislated Critical Information Infrastructure (CII). Its availability and integrity underpin national trade continuity; disruption is an economic event, not a system outage. We are seeking a Principal / Lead level Software Engineer (Cybersecurity Specialist) to be the technical design authority for the modernised TradeNet CII rebuild, focusing on architecture security and resilience. This is an architect-and-build mandate, not an assurance or operations role. As a first-line engineering role, you will Design and embed security and resilience controls into the platform starting from the architecture and down to the implementation details. Decide what is inherited from the GovTech security tech stack versus built and owned by the product team. Design the defensive terrain jointly with the Singapore Customs Agency CISO (ACISO) so that the agency can defensibly discharge its CII regulatory accountability to Cyber Security Agency (CSA). You will be measured on the delivery of TradeNet CII that is secure and resilient by design and construction — not on the volume of findings triaged or evidence produced after the fact. Impact and outcomes You will be successful when: TradeNet's security architecture is conformant with CSA CCoP v2 and WOG IM8 by design, not by downstream remediation, and the conformance basis is clearly documented and defensible to CSA. The Customs ACISO can stand behind a coherent, evidenced security and resilience architecture for the CII without reconstructing it from operational artefacts. The platform has an engineered national trade-continuity posture — recoverability, degraded-mode operation, and containment of blast radius are designed properties, not aspirations. The boundary between controls inherited from the GovTech security tech stack and controls owned by the TradeNet product is explicit, maintained, and used to scope CII audit and attestation. Security control intent is expressed as code and continuously monitored, reducing reliance on point-in-time attestation. There is a strong culture of security in the organization through your leadership, mentorship and coaching. What you will be working on Secure and resilient architecture (core mandate) Own the reference security architecture for the TradeNet CII: trust boundaries, identity architecture, segmentation and trust-zone strategy, east-west controls, encryption and key management, and blast-radius containment for the CII boundary. Embed secure-by-design controls by working inside product and engineering teams through the delivery lifecycle — at design, solutioning and implementation time, not as post-build validation. Maintain a living threat model per system and trust boundary, referenced to MITRE ATT the CLE provides engineering guidance, not self-validation: Advisory and incident-response engineering support in coordination with SIRO, ACISO, and GCSOC. Scoping and engineering guidance for external VAPT and vulnerability assessment, with closure validation performed independently. What we are looking for 10+ years in Cybersecurity as a Software Engineer and not just in the capacity of auditing, pen-testing, operational triage, etc…. We need someone that is hands on where the ideal candidate is someone that can design systems to be secure and can sit down to write code if they need to, someone that can coach our engineering teams on how to write better and more secure code, and someone that understands the cybersecurity tooling landscape to help us choose the right tools, we are not looking for a high level theorist / academic. Demonstrated experience with designing security architecture into regulated / critical systems and platforms at the national or whole enterprise level, not just providing testing and assurance but actually designing and implementing. Working command of Singapore regulatory frameworks for critical systems: CSA CCoP v2 for CII and WOG IM8 (Reform), with the ability to translate obligation into architecture and to delineate control inheritance for audit scoping. Strong systems thinking: able to reason about a national platform as an interdependent whole — boundaries, failure modes, recoverability, and concentration risk — not as a checklist of controls. Depth across cloud and platform security architecture (IaaS/PaaS/SaaS), identity, encryption and key management, segmentation and zero-trust patterns, and secure SDLC / policy-as-code. Fluency with architectural and adversary frameworks (MITRE ATT an independent assurance function validates and attests. The CLE provides the engineering and architectural substance both rely on, and does not validate or attest to the controls it designs. This separation is deliberate and protects the integrity of the CII assurance chain. --- Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes. We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you. Learn more about life inside GovTech at go.gov.sg/GovTechCareers. Stay connected with us on social media at go.gov.sg/ConnectWithGovTech", "summaryDescription" : "Principal / Lead Software Engineer (Cybersecurity Specialist) at GovTech. Skills: Cybersecurity architecture, Resilience engineering, Secure SDLC. Design and embed security controls. Embed resilience controls", "postedDate" : "2026-06-14T20:48:48.391", "createdAt" : "2026-06-14T20:48:48.391", "lastUpdated" : "2026-06-16T05:07:33.247", "ingestTimestamp" : "2026-06-14T20:48:48.391", "mongoId" : "6a2ca53574d8ee00a09b531e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Security architecture", "Resilience engineering", "Threat modeling", "Vulnerability assessment", "Policy-as-code", "Leadership", "Mentorship", "Cybersecurity architecture", "Secure SDLC", "Systems thinking", "Architecture security", "Architecture resilience", "Critical Information Infrastructure", "TradeNet platform", "CSA CCoP v2", "WOG IM8", "National trade-continuity", "Cloud-native architecture" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 904.1143, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c995a74d8ee00a0995afb", "title" : "Senior Cybersecurity Engineer", "industry" : "Government", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Fort Belvoir, United States, adjusted for seniority and industry." }, "location" : "Fort Belvoir, VA", "locations" : [ "Fort Belvoir, VA" ], "timestamp" : "2026-06-16T02:45:54.816", "fingerprint" : "0fcc6494f0fb5ef6fd070e7625f3e2bcf3e81d641573a89c614911e5c4df1b71", "source" : "jazzhr", "language" : "en", "externalId" : "W9SDPvZCnz", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Fort Belvoir", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7107970,-77.1436907" } ], "locationText" : "Fort Belvoir, Virginia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "summaryDescription" : "Senior Cybersecurity Engineer", "createdAt" : "2026-06-14T19:49:49.915", "lastUpdated" : "2026-06-16T02:45:54.816", "ingestTimestamp" : "2026-06-14T19:49:49.915", "mongoId" : "6a2c995a74d8ee00a0995afb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.44444445, "_score" : 898.9834, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ec02074d8ee00a0e9d50c", "title" : "Technology Operations & Cybersecurity Analyst", "company" : "Gap International", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Technology Operations & Cybersecurity Analyst in Springfield, United States, adjusted for mid-seniority and full-time employment." }, "location" : "Springfield, Pennsylvania, United States", "locations" : [ "Springfield", "Pennsylvania", "United States" ], "timestamp" : "2026-06-16T03:49:12.895", "fingerprint" : "92e0559efb8376bffed4005889dceb687f20ea2d415667580f3406edc230fcba", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/gapinternational/jobs/6029338004", "externalId" : "6029338004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Springfield", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.9306677,-75.3201879" } ], "locationText" : "Springfield, Pennsylvania, United States", "experienceMinYears" : 3, "experienceMaxYears" : 6, "rawDescription" : "The Opportunity Gap International is seeking a Technology Operations & Cybersecurity Analyst to help power a high-performing, secure, and forward-looking technology environment. This is a hands-on, high-exposure role across IT operations, cybersecurity, and emerging technologies. You’ll keep the business running smoothly while helping us evolve how we leverage technology, especially through automation and AI. It’s ideal for someone who enjoys solving complex problems, takes ownership, and wants to build broad capability across systems, security, and innovation. RESPONSIBILITIES Technology Operations Support day-to-day performance of networks, systems, and endpoints Troubleshoot issues and escalate when needed Configure and maintain Windows and macOS devices Manage identity and access (Entra ID, Active Directory) Maintain documentation, inventory, and asset lifecycle End-User Experience Provide responsive, high-quality support to employees Support core tools (Microsoft 365, Zoom, VPN, endpoint/security platforms) Own onboarding/offboarding setup and readiness Help employees get the most out of workplace technologies, including AI tools Cybersecurity Monitor and respond to security alerts across systems and endpoints Investigate incidents (phishing, suspicious activity) Support patching, vulnerability management, and system hardening Maintain access controls and identity security practices Contribute to improving security operations and response readiness Automation, AI & Improvement Identify and implement opportunities to automate repetitive work Leverage AI to improve troubleshooting, response, and efficiency Stay current on emerging tech and bring forward practical ideas Contribute to improving overall performance, scalability, and user experience What We're Looking For 3–6 years of experience in IT operations, systems, or cybersecurity Strong troubleshooting and hands-on problem-solving ability Working knowledge of networking fundamentals (TCP/IP, DNS, VPNs, etc.) Experience with Windows and/or macOS environments Familiarity with Microsoft 365, Entra ID (Azure AD), and identity management Foundational understanding of cybersecurity principles and tools Strong communication skills and a service-oriented mindset Curiosity and interest in automation, AI, and improving how things work Why This Role Broad exposure across IT, security, and emerging tech Opportunity to build capability, not just maintain systems Real ownership in a high-performing environment Direct impact on how the company operates and evolves LOCATION Gap International associates are based out of our corporate office in the Philadelphia metropolitan area. In order to be considered for this role, applicants should be legally authorized to work in the US. Gap International is an equal opportunity employer and values diversity. All employment is decided on the basis of qualifications, merit and business need, and all qualified candidates will receive consideration.", "summaryDescription" : "Technology Operations & Cybersecurity Analyst at Gap International", "postedDate" : "2026-06-14T20:04:04.627", "createdAt" : "2026-06-14T20:04:04.627", "lastUpdated" : "2026-06-16T03:49:12.895", "ingestTimestamp" : "2026-06-14T20:04:04.627", "mongoId" : "6a2ec02074d8ee00a0e9d50c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 892.7428, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.92 }, { "id" : "6a25145b74d8ee00a00bb585", "title" : "Security & LP Specialist, Worldwide Operations", "company" : "ASSPL", "industry" : "Investigation Loss Prevention, Fulfillment Center, Logistics", "salary" : { "min" : 850000.0, "max" : 1400000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security & LP Specialist in Logistics in Thane, India, adjusted for company size and industry." }, "location" : "Thane, Maharashtra, IND", "locations" : [ "Thane, Maharashtra, IND" ], "timestamp" : "2026-06-15T03:07:55.677", "fingerprint" : "a50b70f6d78455374f2fb47435395177510c49a955faa5f3bcb1763fab56a865", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10440724/apply", "externalId" : "33dc6d6b-2d04-4842-a67f-291ffba6a2a8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Thane", "state" : "Maharashtra", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "19.3653598,73.3685437" } ], "locationText" : "Thane, Maharashtra, India", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Loss prevention", "Security operations", "Risk management", "Crisis planning", "Process improvement", "Supply chain security" ], "hardSkillsList" : [ "Physical security checks", "Data analysis", "Investigation techniques", "Security audits", "Policy violation investigation", "Loss event investigation", "Interviewing", "Security incident response", "Vulnerability assessment", "System health monitoring" ], "hardSkills" : [ { "name" : "Physical security checks", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Policy violation investigation", "level" : "intermediate" }, { "name" : "Loss event investigation", "level" : "intermediate" }, { "name" : "Interviewing", "level" : "intermediate" }, { "name" : "Security incident response", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "System health monitoring", "level" : "intermediate" } ], "majorSkills" : "Security operations, Loss prevention, Risk management, Physical security", "majorSkillsList" : [ "Security operations", "Loss prevention", "Risk management", "Physical security" ], "coreResponsibilities" : "Execute day-to-day security operations, Conduct regular physical security checks, Support business operations resilience, Contribute to emergency planning, Contribute to crisis planning, Identify vulnerabilities, Define mitigating actions, Ensure compliance with standards, Serve as point of contact, Coordinate risk management measures, Manage risk with local management, Manage risk with external parties, Conduct physical security rounds, Monitor CCTV systems, Respond to security concerns, Perform physical security audits, Investigate policy violations, Investigate security incidents, Investigate loss events, Collect information by monitoring systems, Analyze data reports, Conduct interviews, Execute procedures to address incidents, Implement solutions for vulnerabilities, Identify vulnerabilities in processes, Develop mitigating measures, Maintain physical integrity of sites, Audit system health status, Monitor system health status, Maintain system functionality, Interact with external security providers, Ensure delivery of security services, Act as point of contact for departments, Deliver loss prevention education, Deliver loss prevention awareness programs, Liaise with stakeholders on policy, Liaise with stakeholders on procedure", "teamCollaboration" : "Local management; External parties; Law enforcement agencies; Industry associations; Business customers; Multiple business units; Subject matter experts; External suppliers; Internal departments; External departments; Security service providers; Other teams; Various stakeholders; Management levels", "domainKnowledge" : "Supply chain; Loss prevention; Physical security; Security standards", "domainList" : [ "supply-chain", "loss-prevention", "physical-security", "security-standards" ], "domainSpecificKnowledge" : [ "Supply chain", "Loss prevention", "Physical security", "Security standards" ], "toolProficiency" : [ "Microsoft Excel", "CCTV systems" ], "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "qualificationsBasic" : "Experience in security and loss prevention, Experience with MS Office Professional Suite, Microsoft Excel to manipulate and analyze data, Speak, write, and read fluently in English", "qualificationsPreferred" : "Relevant degree or industry certification, Experience with physical security systems, Experience with investigation techniques, Management of contract security officers, Experience with retail, warehouse, distribution centre services, or supply chain, Experience in working with data, Driver's license", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Our operations network, known for our speed, accuracy, and exceptional service, delivers millions of packages and smiles to Amazon customers every day. To keep our operations network secure and assure operational continuity, we are looking for a hands-on and detail-oriented professional who wants to join our team as Security and Loss Prevention (SLP) Specialist. In this key role, you will be responsible for the day-to-day execution of security operations, delivering concrete on-the-ground contributions through direct operational support to our sites. You will deliver security as a service to our operational sites across the end-to-end supply chain to protect our people and prevent loss. Key job responsibilities • Execute day-to-day security operations and conduct regular physical security checks at assigned sites • Support resilience of our business operations by contributing to emergency and crisis planning for sites within your area of responsibility • Contribute to the identification of vulnerabilities (e.g., loss, associate experience, process improvement) and define appropriate mitigating actions while ensuring compliance with legal and ethical standards • Serve as point of contact for and coordinate measures to manage risk with local management and external parties (e.g., law enforcement agencies and industry associations) on all security-related matters • Ensure compliance of your assigned sites with Amazon global security standards A day in the life As an SLP Specialist, you will join a team of Security and Loss Prevention professionals providing security as a service to business customers across multiple business units within a dedicated geographical area. Your daily focus will be on hands-on execution of security operations, including conducting physical security rounds, monitoring CCTV systems, and responding to immediate security concerns. You perform regular physical security audits and investigate policy violations, security-related incidents, and loss events. During your investigations, you collect information by monitoring systems and tools, analysing data reports, and conducting interviews. You execute established procedures to address security incidents and implement approved solutions for identified vulnerabilities. Your findings help to identify vulnerabilities in our processes, for which you contribute to the development of mitigating measures. You play a key role in maintaining the physical integrity of our sites by auditing and monitoring the health status of our systems and, jointly with subject matter experts and external suppliers, maintain their functionality. You interact on a daily basis with our external security service providers to ensure delivery of high-quality security services and a smooth customer experience. You also act as point of contact for multiple internal and external departments (e.g., legal, HR, security service providers, local law enforcement) and subject matter expert in Security and Loss Prevention-related matters. Finally, you deliver loss prevention-related education and awareness programs to other teams and liaise with various stakeholders on policy and procedure across all management levels. About the team Sitting within the Worldwide Operations Security organisation, Security and Loss Prevention supports the accomplishment of Amazon´s business targets and the strengthening of our brand by effectively protecting against relevant threats and by managing security and loss prevention risks that could: • Put our associates and customers under jeopardy • Disrupt the continuity of our business operations • Inflict damage to our assets • Have adverse impact on our brand reputation Working in partnership with our stakeholders, we secure the Amazon supply chain end-to-end and promote security during business conversations. We do this by preventing security and loss prevention-related risks and vulnerabilities as early as possible, intervening in unfolding incidents to minimize any negative impact as well as thoroughly investigating security-related incidents to identify and remove root causes, preventing reoccurrence. Basic Qualifications: - Experience in security and loss prevention - Experience with MS Office Professional Suite, including Microsoft Excel to manipulate and analyze data - Speak, write, and read fluently in English Preferred Qualifications: - A relevant degree, degree equivalent, or industry certification - Relevant experience with physical security systems, investigation techniques, and/or management of contract security officers - Relevant experience with retail, warehouse, distribution centre services, delivery service, or supply chain - Relevant experience in working with data - Driver’s license Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security & LP Specialist, Worldwide Operations at ASSPL. Skills: Security operations, Loss prevention, Risk management, Physical security. Execute day-to-day security operations. Conduct regular physical security checks", "postedDate" : "2026-06-13T04:35:37.434", "createdAt" : "2026-06-13T04:35:37.434", "lastUpdated" : "2026-06-15T03:07:55.677", "ingestTimestamp" : "2026-06-13T04:35:37.434", "mongoId" : "6a25145b74d8ee00a00bb585", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10440724/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Physical security checks", "Data analysis", "Investigation techniques", "Security audits", "Policy violation investigation", "Loss event investigation", "Interviewing", "Security incident response", "Vulnerability assessment", "System health monitoring", "Security operations", "Loss prevention", "Risk management", "Physical security", "Crisis planning", "Process improvement", "Supply chain security", "Supply chain", "Security standards", "Microsoft Excel", "CCTV systems" ], "skillCount" : 21, "jobCategory" : "marketing", "dataQualityScore" : 0.8888889, "_score" : 878.37646, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2adaa374d8ee00a071c590", "title" : "Senior Securities Operations Specialist", "company" : "Wells Fargo", "industry" : "Financial Services", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for a Senior Securities Operations Specialist in Charlotte, United States, adjusted for seniority, company size, and industry." }, "location" : "CHARLOTTE, NC", "locations" : [ "CHARLOTTE, NC", "United States of America" ], "timestamp" : "2026-06-14T23:00:01.169", "fingerprint" : "a9946af65e7b250a103708d3eb336c7c15e53e74747c7b8b4906bdabd971410b", "source" : "workday", "language" : "en", "applyUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/CHARLOTTE-NC/Senior-Securities-Operations-Specialist---Wealth-Client-Performance-Analytics_R-540356-1", "externalId" : "R-540356", "industryFunction" : { }, "locationPoint" : "44.30977,-73.26096", "structuredLocations" : [ { "city" : "Charlotte", "state" : "North Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "35.2272086,-80.8430827" } ], "locationText" : "Charlotte, North Carolina, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SQL", "professionalSkills" : [ "Securities Operations", "Client onboarding", "Cash payments", "Customer service", "Funding operations", "Custodial operations", "Securities settlement", "Structured loan operations", "General ledger reconciliation", "Trade settlement", "Portfolio performance analytics", "Data management audits", "Risk management", "Compliance controls" ], "hardSkillsList" : [ "Root cause analysis", "Performance analysis", "Data reconciliation" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Performance analysis", "level" : "intermediate" }, { "name" : "Data reconciliation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Securities Operations, Performance Analytics, Data Integrity", "majorSkillsList" : [ "Securities Operations", "Performance Analytics", "Data Integrity" ], "coreResponsibilities" : "Lead lifecycle initiatives, Support lifecycle tasks, Participate in large-scale planning, Identify process improvements, Review operational tasks, Analyze operational challenges, Evaluate variable factors, Resolve operational issues, Understand function policies, Understand function procedures, Understand compliance, Meet deliverables, Collaborate with peers, Consult with colleagues, Consult with managers, Resolve escalated issues, Manage expertise in operational processes, Research business risks, Influence policies, Enhance customer satisfaction, Review time sensitive documents, Review transaction requests, Exercise independent judgment, Understand trade settlement controls, Minimize operational breakdowns, Monitor daily securities production, Monitor daily cash production, Lead project implementation, Contribute to project implementation, Implement new processes, Implement revised procedures, Coordinate among operation teams, Perform analysis for initiatives, Support business strategies, Make decisions on financial matters, Make decisions on risk matters", "teamCollaboration" : "Partner with peers; Partner with cross-functional teams", "projectManagementSkills" : [ "Lifecycle initiatives" ], "domainKnowledge" : "Marketable securities; Alternative assets; Private capital assets; Investment performance; Compliance controls; Risk management; Loss prevention", "domainList" : [ "marketable-securities", "alternative-assets", "private-capital-assets", "investment-performance", "compliance-controls", "risk-management", "loss-prevention" ], "domainSpecificKnowledge" : [ "Marketable securities", "Alternative assets", "Private capital assets", "Investment performance", "Compliance controls", "Risk management", "Loss prevention" ], "toolProficiency" : [ "Black Diamond", "Zephyr", "Addepar", "PARis", "SEI/Trust 3000", "BETA", "Alteryx", "Tableau", "Power BI", "SQL Co-Pilot", "Microsoft Excel", "Microsoft Word", "Microsoft Outlook", "Microsoft PowerPoint" ], "communicationSkills" : "Verbal communication; Written communication; Interpersonal communication", "continuousLearning" : "Process improvement skills; Product knowledge skills", "problemSolvingSkills" : "Root cause analysis; Research", "specialRequirements" : "Work hybrid schedule, Work on-site", "outcomesObjectives" : "Ensure accuracy of client data; Ensure integrity of client data; Resolve issues impacting client reporting; Resolve issues impacting financial results; Resolve issues impacting risk exposure; Strengthen operational controls; Mitigate operational risk", "qualificationsBasic" : "4+ years Securities Operations experience", "qualificationsPreferred" : "4+ years client data reconcilement, 2+ years portfolio performance analysis, 2+ years portfolio performance systems, 2+ years data management audits, Knowledge of complex asset groups, Ability to identify performance issues, Experience with SEI/Trust 3000, Experience with BETA, Experience driving transformational change, Knowledge of compliance controls, Knowledge of risk management, Knowledge of loss prevention, High motivation, Ability to influence stakeholders, Build relationships skills, Process improvement skills, Product knowledge skills, Advanced Microsoft Office skills", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**About this role:** Wells Fargo is seeking a Senior Securities Operations Specialist as part of the Wealth Client Performance Analytics group within Wealth and Investment Management Operations. This team is responsible for ensuring the accuracy and integrity of client portfolio and performance data across Wealth and Investment Management. This role focuses on reconciling client data between books and records systems, analyzing portfolio performance returns, identifying discrepancies, and performing root cause analysis to resolve issues that may impact client reporting, financial results, or risk exposure. Learn more about the career areas and lines of business at [wellsfargojobs.com](https://www.wellsfargojobs.com/career-areas/) _._ In this role, you will work with marketable securities as well as alternative and private capital assets, leveraging enterprise systems and data tool to support data management audits, strengthen operational controls, and partner with peers and cross‑functional teams to resolve escalations, improve processes, and mitigate operational risk in a highly regulated, fast‑paced environment. **In this role, you will:** * Lead or participate in moderately complex lifecycle initiatives and support tasks and act as a participant in large-scale planning and deliverables; identify opportunity for process improvements within Securities Operations * Review and analyze moderately complex operational tasks or challenges that require an in-depth evaluation of variable factors * Independently resolve moderately complex issues on a full process within a trade environment while leveraging solid understanding of the function, policies, procedures, and compliance requirements; may lead team to meet deliverables * Collaborate and consult with peers, colleagues and mid-level managers to resolve issues and achieve goals; may lead projects, teams or serve as a mentor for lower level staff * Manage expertise in the following operational processes including client account onboarding, cash payments, customer service, funding operations, custodial operations, securities settlement services, structured loan operations, and general ledger reconciliation * Resolve moderately complex escalated issues within the scope of responsibility in Security Operations * Research moderately complex business risks, influence policies, enhance customer satisfaction, and review time sensitive documents and transaction requests * Exercise independent judgment in understanding trade settlement workflow controls to minimalize the effects of operational breakdowns * Contribute to overall effectiveness of the team according to plans; monitor daily securities and cash related production work * Lead or contribute to implementation of projects and new or revised processes and procedures that require coordination among operation teams and perform analysis for initiatives that support business strategies making decisions on matters with financial impact and risk **Required Qualifications:** * 4+ years of Securities Operations experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education **Desired Qualifications:** * 4+ years of experience performing client data reconcilement functions between books and records system * 2+ years of experience completing portfolio performance return analysis, detecting issues, and completing root cause analysis * 2+ years of experience with portfolio performance systems like Black Diamond, Zephyr, Addepar, PARis, etc. * 2+ years of experience developing and/or completing data management audits * Strong knowledge of investments including complex asset groups (Alternatives, Real Assets, and Options) and understanding of impact to investment performance * Ability to identify performance calculation issues and execute independent research * Demonstrated experience with SEI/Trust 3000 and/or BETA * Demonstrated experience driving transformational change across operational functions while fulfilling the complex and sensitive needs of the client population * Knowledge and understanding of compliance controls, risk management, and loss prevention * High motivation with ability to successfully meet team objectives while maintaining personal performance * Ability to influence and build relationships across the Line of Business stakeholders * Strong verbal, written, and interpersonal communication skills * Continued drive to build process improvement and product knowledge skills * Experience using tools like Alteryx, Tableau, Power BI, and SQL Co-Pilot * Advanced Microsoft Office (Excel, Word, Outlook, PowerPoint) skills **Job Expectations:** * Ability to work a hybrid in-office schedule * Willingness to work on-site at stated location * This position is not eligible for Visa sponsorship **Posting Location** * Charlotte, North Carolina **Posting End Date:** 16 Jun 2026 _***Job posting may come down early due to volume of applicants.**_ **We Value Equal Opportunity** Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements. Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process. **Applicants with Disabilities** To request a medical accommodation during the application or interview process, visit [Disability Inclusion at Wells Fargo](https://www.wellsfargojobs.com/en/diversity/disability-inclusion/). **Drug and Alcohol Policy** **** Wells Fargo maintains a drug free workplace. Please see our [Drug and Alcohol Policy](https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more. **Wells Fargo Recruitment and Hiring Requirements:** a. Third-Party recordings are prohibited unless authorized by Wells Fargo. b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.", "summaryDescription" : "Senior Securities Operations Specialist at Wells Fargo. Skills: Securities Operations, Performance Analytics, Data Integrity. Lead lifecycle initiatives. Support lifecycle tasks", "postedDate" : "2026-06-11T01:19:21.087", "createdAt" : "2026-06-12T01:19:21.064", "lastUpdated" : "2026-06-14T23:00:01.169", "ingestTimestamp" : "2026-06-12T01:19:21.064", "mongoId" : "6a2adaa374d8ee00a071c590", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/CHARLOTTE-NC/Senior-Securities-Operations-Specialist---Wealth-Client-Performance-Analytics_R-540356-1", "salaryAnnualMin" : 95000, "salaryAnnualMax" : 145000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Root cause analysis", "Performance analysis", "Data reconciliation", "Leadership", "Securities Operations", "Performance Analytics", "Data Integrity", "Client onboarding", "Cash payments", "Customer service", "Funding operations", "Custodial operations", "Securities settlement", "Structured loan operations", "General ledger reconciliation", "Trade settlement", "Portfolio performance analytics", "Data management audits", "Risk management", "Compliance controls", "Lifecycle initiatives", "Marketable securities", "Alternative assets", "Private capital assets", "Investment performance", "Loss prevention", "Black Diamond", "Zephyr", "Addepar", "PARis", "SEI/Trust 3000", "BETA", "Alteryx", "Tableau", "Power BI", "SQL Co-Pilot", "Microsoft Excel", "Microsoft Word", "Microsoft Outlook", "Microsoft PowerPoint" ], "skillCount" : 40, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 872.83344, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a2c790f74d8ee00a0940b2a", "title" : "Senior Cybersecurity Engineer", "company" : "Redhorse Corporation", "industry" : "Cyber Analytics", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Chantilly, United States, adjusted for seniority and industry." }, "location" : "Chantilly, VA", "locations" : [ "Chantilly, VA" ], "timestamp" : "2026-06-16T03:07:31.093", "fingerprint" : "e998cd3d7760090df626abf1828fb72c863b795917a4be4626b9c5e4e5d16a14", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/redhorsecorp/6b1fdcb9-1a74-4fe2-a684-276afe9e8d33/apply", "externalId" : "6b1fdcb9-1a74-4fe2-a684-276afe9e8d33", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chantilly", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8852190,-77.4486772" } ], "locationText" : "Chantilly, Virginia, United States", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "qualificationsBasic" : "10+ years experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description About the Organization Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets. ## Key Responsibilities Secure enterprise and mission IT infrastructures across diverse operating systems, networks, and web/database applications. Manage and harden storage, boundary/perimeter devices, and logging/monitoring solutions within cloud environments (e.g., C2S) and classified enclaves. Implement policy-based protections for data flows and network boundaries across complex, multi-classification architectures. Support security certification and accreditation activities (RMF) and lead the development of required security documentation. Perform ad-hoc penetration testing, formal red/blue team exercises, and compliance assessments of classified Federal systems. Identify innovative protection strategies that align with budget and infrastructure constraints. Communicate and brief technical risks and mitigation options to both technical and non-technical stakeholders. Prioritize and coordinate cybersecurity workflows in fast-paced, high-stakes environments. ## Required Experience/Clearance Active TS/SCI security clearance. 10+ years of experience in cybersecurity engineering or information assurance. Proven experience securing cloud environments (AWS/C2S/Azure) and classified enclaves. Demonstrated expertise in network boundary protection and policy-based data flow implementation. Experience with the Risk Management Framework (RMF) and the security accreditation process. Hands-on experience with penetration testing tools and red/blue team methodologies. Must possess and maintain relevant cybersecurity professional certification(s) (e.g., CISSP, CEH, Security+, or equivalent DoD 8140/8570.01-M certification). ## Desired Experience Familiarity with DataBricks, GitLab, or Jira for managing security workflows. Experience with advanced logging and monitoring solutions like Splunk or ELK stack. Knowledge of Spark or other big data technologies within a secure environment. Advanced degree in Cybersecurity, Computer Science, or a related technical field. Previous experience supporting Intelligence Community (IC) or Department of Defense (DoD) customers. ## Additional Information Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class. Accommodations: If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at Talent-Acquisition@redhorsecorp.com Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.", "summaryDescription" : "Senior Cybersecurity Engineer at Redhorse Corporation", "postedDate" : "2026-06-12T15:48:39.670", "createdAt" : "2026-06-12T15:48:39.670", "lastUpdated" : "2026-06-16T03:07:31.093", "ingestTimestamp" : "2026-06-14T21:31:30.533", "mongoId" : "6a2c790f74d8ee00a0940b2a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 872.24396, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 863.27386, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb21074d8ee00a09dfac0", "title" : "Senior Cloud Cybersecurity Specialist (AWS/FedRAMP)", "industry" : "IT", "salary" : { "min" : 85000.0, "max" : 130000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Bulgaria, adjusted for senior Cloud Cybersecurity Specialist role with AWS/FedRAMP experience in the technology industry." }, "location" : "US", "locations" : [ "US" ], "certifications" : [ "CISSP", "AWS Certified Security Specialty", "CCSP", "CISM" ], "timestamp" : "2026-06-16T02:27:41.813", "fingerprint" : "62d6c52f3d33b63ec23c74948541fd60eb33c060ea6256d5c4cd0dfae6ad5b95", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/0cc0bd00-3d92-4953-9301-d0d179d1b54e/apply", "externalId" : "0cc0bd00-3d92-4953-9301-d0d179d1b54e", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Databricks, IAM, RBAC", "professionalSkills" : [ "Risk remediation", "Audit readiness" ], "hardSkillsList" : [ "Cloud security controls", "Secure architecture", "Hardened configurations", "Role-based access control", "Least privilege policies", "Secure authentication mechanisms", "Security assessments", "Vulnerability analysis", "Risk remediation planning", "Continuous monitoring", "Security event detection", "Incident response" ], "hardSkills" : [ { "name" : "Cloud security controls", "level" : "intermediate" }, { "name" : "Secure architecture", "level" : "intermediate" }, { "name" : "Hardened configurations", "level" : "intermediate" }, { "name" : "Role-based access control", "level" : "intermediate" }, { "name" : "Least privilege policies", "level" : "intermediate" }, { "name" : "Secure authentication mechanisms", "level" : "intermediate" }, { "name" : "Security assessments", "level" : "intermediate" }, { "name" : "Vulnerability analysis", "level" : "intermediate" }, { "name" : "Risk remediation planning", "level" : "intermediate" }, { "name" : "Continuous monitoring", "level" : "intermediate" }, { "name" : "Security event detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, FedRAMP, AWS, GRC", "majorSkillsList" : [ "Cloud Security", "FedRAMP", "AWS", "GRC" ], "coreResponsibilities" : "Design cloud security controls, Implement cloud security controls, Maintain cloud security controls, Lead governance activities, Lead risk activities, Lead compliance activities, Align with FedRAMP High, Align with FISMA, Align with NIST 800-53, Implement IAM, Manage IAM, Implement RBAC, Manage RBAC, Implement least privilege policies, Manage least privilege policies, Implement secure authentication mechanisms, Manage secure authentication mechanisms, Conduct security assessments, Conduct vulnerability analysis, Conduct risk remediation planning, Support continuous monitoring, Support security event detection, Support incident response, Support audit readiness, Collaborate with engineering stakeholders, Collaborate with compliance stakeholders, Ensure secure cloud operations, Improve security posture", "teamCollaboration" : "Engineering stakeholders; Compliance stakeholders", "domainKnowledge" : "FedRAMP High; FISMA; NIST 800-53; Federal compliance requirements; Regulated environments; Zero Trust architecture; Cloud security models", "domainList" : [ "fedramp-high", "fisma", "nist-800-53", "federal-compliance-requirements", "regulated-environments", "zero-trust-architecture", "cloud-security-models" ], "domainSpecificKnowledge" : [ "FedRAMP High", "FISMA", "NIST 800-53", "Federal compliance requirements", "Regulated environments", "Zero Trust architecture", "Cloud security models" ], "continuousLearning" : "Certification development opportunities", "qualificationsBasic" : "Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline, 5+ years hands-on experience implementing cloud security controls, 5+ years experience working within FedRAMP High-authorized environments, Knowledge of cloud security principles, Knowledge of native AWS security services, Proven experience applying security frameworks such as NIST 800-53, Proven experience with federal compliance requirements, Experience supporting governance, risk, compliance, and security operations in regulated environments", "qualificationsPreferred" : "CISSP certification, AWS Certified Security Specialty certification, CCSP certification, CISM certification, Familiarity with Zero Trust architecture principles, Familiarity with modern cloud security models", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and maintain cloud security controls across enterprise platforms built on Amazon Web Services (AWS) and Databricks, ensuring secure architecture and hardened configurations aligned with federal requirements. Lead governance, risk, and compliance (GRC) activities, including alignment with FedRAMP High, FISMA, and NIST 800-53 security controls. Implement and manage Identity and Access Management (IAM), role-based access control (RBAC), least privilege policies, and secure authentication mechanisms across cloud environments. Conduct security assessments, vulnerability analysis, and risk remediation planning to proactively reduce exposure and strengthen system resilience. Support continuous monitoring, security event detection, incident response, and audit readiness for federal compliance reviews. Collaborate with engineering and compliance stakeholders to ensure secure cloud operations and continuous improvement of security posture. Requirements: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline. Minimum of 5 years of hands-on experience implementing cloud security controls in enterprise environments. At least 5 years of experience working within FedRAMP High-authorized environments. Strong knowledge of cloud security principles and native AWS security services. Proven experience applying security frameworks such as NIST 800-53 and federal compliance requirements. Experience supporting governance, risk, compliance, and security operations in regulated environments. Preferred certifications: CISSP, AWS Certified Security Specialty, CCSP, or CISM. Familiarity with Zero Trust architecture principles and modern cloud security models. Benefits: Competitive compensation aligned with senior-level federal cybersecurity roles. Remote work flexibility within the United States. Opportunity to support high-impact federal modernization and national-scale data initiatives. Exposure to advanced cloud-native security environments and cutting-edge compliance frameworks. Professional growth in highly regulated, mission-critical cybersecurity operations. Access to ongoing learning and certification development opportunities. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Senior Cloud Cybersecurity Specialist (AWS/FedRAMP). Skills: Cloud Security, FedRAMP, AWS, GRC. Design cloud security controls. Implement cloud security controls", "postedDate" : "2026-06-10T10:06:33.245", "createdAt" : "2026-06-10T10:06:33.245", "lastUpdated" : "2026-06-16T02:27:41.813", "ingestTimestamp" : "2026-06-14T21:23:08.444", "mongoId" : "6a2cb21074d8ee00a09dfac0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Cloud security controls", "Secure architecture", "Hardened configurations", "Role-based access control", "Least privilege policies", "Secure authentication mechanisms", "Security assessments", "Vulnerability analysis", "Risk remediation planning", "Continuous monitoring", "Security event detection", "Incident response", "Cloud Security", "FedRAMP", "AWS", "GRC", "Risk remediation", "Audit readiness", "FedRAMP High", "FISMA", "NIST 800-53", "Federal compliance requirements", "Regulated environments", "Zero Trust architecture", "Cloud security models", "CISSP", "AWS Certified Security Specialty", "CCSP", "CISM" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 858.82983, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2abe2074d8ee00a06eca54", "title" : "Senior Information Security Compliance Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 233450.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-14T23:29:48.256", "fingerprint" : "b684311f241735626660b1c9ce339f6752e64b4d7496df8c57318ea1580ff825", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178", "externalId" : "JR2026513178", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" }, { "city" : "Huntsville", "state" : "Alabama", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.7298470,-86.5859011" }, { "city" : "Mesa", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4151005,-111.8314550" }, { "city" : "Oklahoma City", "state" : "Oklahoma", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.4729886,-97.5170536" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" }, { "city" : "Berkeley", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7544952,-90.3312256" } ], "locationText" : "Arlington, Virginia, United States; El Segundo, California, United States; Huntsville, Alabama, United States; Mesa, Arizona, United States; Oklahoma City, Oklahoma, United States; Orlando, Florida, United States; San Antonio, Texas, United States; Seattle, Washington, United States; Berkeley, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Cybersecurity", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training" ], "hardSkillsList" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedures", "Sub-contractor management" ], "hardSkills" : [ { "name" : "Compliance assessment reviews", "level" : "intermediate" }, { "name" : "Self-inspections", "level" : "intermediate" }, { "name" : "Corrective action development", "level" : "intermediate" }, { "name" : "Administrative inquiries", "level" : "intermediate" }, { "name" : "Inventory management", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" }, { "name" : "Security procedures", "level" : "intermediate" }, { "name" : "Sub-contractor management", "level" : "intermediate" } ], "majorSkills" : "Information Security Compliance, Cybersecurity, Government Security Programs", "majorSkillsList" : [ "Information Security Compliance", "Cybersecurity", "Government Security Programs" ], "coreResponsibilities" : "Execute internal security controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Conduct COMSEC duties, Protect government information, Develop security education, Implement security education, Administer security education, Develop physical controls, Implement physical controls, Administer physical controls, Contribute to enterprise IPT, Provide innovation into Personnel Security, Provide innovation into security awareness training, Complete tasks toward long-range goals, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Classified environments; Information Assurance; SAP Security; SAP GRC; Government security programs; COMSEC; Sensitive Compartmented Information (SCI); Special Access Program (SAP); Export compliance; Personnel Security; U.S. export control compliance", "domainList" : [ "classified-environments", "information-assurance", "sap-security", "sap-grc", "government-security-programs", "comsec", "sensitive-compartmented-information-sci", "special-access-program-sap", "export-compliance", "personnel-security", "u-s-export-control-compliance" ], "domainSpecificKnowledge" : [ "Classified environments", "Information Assurance", "SAP Security", "SAP GRC", "Government security programs", "COMSEC", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "Export compliance", "Personnel Security", "U.S. export control compliance" ], "toolProficiency" : [ "MS Office", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Written communications; Oral communications", "innovationCreativity" : "Innovation into Personnel Security; Innovation into security awareness training", "specialRequirements" : "Maintain SCI/SAP access, U.S. Citizenship required, U.S. Person required", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years implementing information security policies, 10+ years SAP Security/GRC, 5+ years government security programs, Maintain SCI/SAP access, Active U.S. Top Secret/SCI Security Clearance, U.S. Citizenship required", "qualificationsPreferred" : "MS Office experience, Oral and written communications skills, Obtain successful US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Information Security Compliance Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Information Security Compliance Specialist** to join the team in **Arlington, VA****; El Segundo, CA; Huntsville, AL; Mesa, AZ; Oklahoma City, OK; Orlando, FL; San Antonio, TX; Seattle, WA;** or **Berkeley, MO.** The selected candidates will apply advanced expertise in cybersecurity, Information Assurance (IA), and technical instruction to assess the security posture of classified environments, support enterprise compliance activities, and strengthen the cybersecurity readiness of Boeing personnel and program stakeholders. The assessor will be responsible for conducting internal evaluations, providing expert guidance on security requirements, and helping shape and sustain the implementation of Information System Security policies, standards, and directives to ensure the inspection readiness of information systems processing classified information. **Position Responsibilities:** * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Conducts Communication Security (COMSEC) duties and responsibilities (to include inventory, distribution and destruction), in compliance with government regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Develops, implements and administers security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience implementing information security policies and procedures * 10+ years of experience with SAP Security and/or SAP GRC * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict Of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $233,450 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Information Security Compliance Specialist at Boeing. Skills: Information Security Compliance, Cybersecurity, Government Security Programs. Execute internal security controls. Perform compliance assessment reviews", "postedDate" : "2026-06-11T02:38:57.862", "createdAt" : "2026-06-12T02:38:57.826", "lastUpdated" : "2026-06-14T23:29:48.256", "ingestTimestamp" : "2026-06-12T02:38:57.826", "mongoId" : "6a2abe2074d8ee00a06eca54", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/external_subsidiary/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 233450, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedures", "Sub-contractor management", "Information Security Compliance", "Cybersecurity", "Government Security Programs", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training", "Classified environments", "SAP Security", "SAP GRC", "Government security programs", "COMSEC", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "Personnel Security", "U.S. export control compliance", "MS Office", "Excel", "Teams", "Outlook" ], "skillCount" : 37, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 858.7264, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c5dc974d8ee00a08de8b8", "title" : "Cybersecurity Analyst", "company" : "SkyePoint Decisions", "industry" : "IT service provider", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Arlington, United States, adjusted for industry and contract employment type." }, "location" : "1801 North Lynn St, Arlington, VA 22209", "locations" : [ "1801 North Lynn St", "Arlington", "VA 22209" ], "certifications" : [ "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "Agile IC", "SNOW App Dev" ], "timestamp" : "2026-06-15T00:47:32.599", "fingerprint" : "ac1a419fb03473c9fa3f06eee0d53bbb3539addd4fcad99688fd84023b604265", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4273942009", "externalId" : "4273942009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "technicalSkills" : "Windows Server, Active Directory, SQL, Oracle, Azure AD", "professionalSkills" : [ "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen" ], "hardSkillsList" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution" ], "hardSkills" : [ { "name" : "FISMA compliance", "level" : "intermediate" }, { "name" : "NIST SP 800-53", "level" : "intermediate" }, { "name" : "CIS Benchmarks", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "Research plans execution", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, NIST SP 800-53, FISMA compliance", "majorSkillsList" : [ "Cybersecurity", "NIST SP 800-53", "FISMA compliance" ], "coreResponsibilities" : "Support Security Standards HS, Provide cyber and technology security experience, Enable innovative business processes, Enable effective business processes, Enable secure business processes, Develop research plans, Execute research plans, Work with Windows Server, Manage Active Directory, Work with enterprise application virtualization, Work with server virtualization", "projectManagementSkills" : [ "Agile IC" ], "domainKnowledge" : "Cybersecurity domains; Enterprise application security; CIS Benchmarks; DISA STIGs; Cloud identity services", "domainList" : [ "cybersecurity-domains", "enterprise-application-security", "cis-benchmarks", "disa-stigs", "cloud-identity-services" ], "domainSpecificKnowledge" : [ "Cybersecurity domains", "Enterprise application security", "CIS Benchmarks", "DISA STIGs", "Cloud identity services" ], "documentationSkills" : "Technical writing skills", "continuousLearning" : "Certification incentive program", "specialRequirements" : "U. S. citizenship required, Onsite 5 days a week", "qualificationsBasic" : "4 years experience in lieu of degree, Active Secret clearance, Ability to obtain Top Secret clearance", "qualificationsPreferred" : "Process automation experience, AI tools and automation platforms, Virtualized IT systems development, Enterprise mobile device deployments, Red Hat Enterprise Linux systems, Networking technologies expertise", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon customer approval. SkyePoint Decisions is seeking a Cybersecurity Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. Responsibilities: Support the Security Standards HS and an additional 4 years may be considered in lieu of bachelors degree. Must possess, or obtain prior to start date, at least one of the following certifications (continued certification is required as a condition of employment): CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev. Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs. Experience developing and executing research plans. Experience working with Windows Server in an enterprise environment. Experience managing Active Directory in a multi-domain environment. Experience with enterprise application or server virtualization. Demonstrated customer service excellence and strong business acumen. U. S. citizenship required. Active Secret clearance with the ability to obtain a final Top Secret security clearance. Preferred Qualifications: Experience with process automation - strongly desired. Demonstrated use of AI tools and automation platforms to enhance workflows, analysis, and documentation efficiency. Strong technical writing skills. Experience engineering or maintaining database infrastructure (SQL, Oracle). Experience with Active Directory Federation Services (ADFS), Azure AD, or cloud identity services. Experience developing or managing virtualized IT systems. Networking technologies expertise. Experience configuring or administering enterprise mobile device deployments. Experience working with Red Hat Enterprise Linux systems in an enterprise environment. Compensation: Salary Range: $90,000-$103,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Cybersecurity Analyst at SkyePoint Decisions. Skills: Cybersecurity, NIST SP 800-53, FISMA compliance. Support Security Standards HS. Provide cyber and technology security experience", "postedDate" : "2026-06-12T21:39:27.187", "createdAt" : "2026-06-12T21:39:27.187", "lastUpdated" : "2026-06-15T00:47:32.599", "ingestTimestamp" : "2026-06-12T21:39:27.187", "mongoId" : "6a2c5dc974d8ee00a08de8b8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution", "Cybersecurity", "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen", "Agile IC", "Cybersecurity domains", "Cloud identity services", "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "SNOW App Dev" ], "skillCount" : 23, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 0.8888889, "_score" : 858.0026, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "IT service provider" }, { "id" : "6a2a660774d8ee00a062b94f", "title" : "Security Assurance Specialist (Regulatory Operations Center)", "company" : "Amazon Web Services EMEA SARL (Irish Branch)", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 58000.0, "max" : 82000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Assurance Specialist in Dublin, Ireland, adjusted for the Technology industry." }, "location" : "Dublin, IRL", "locations" : [ "Dublin, IRL" ], "timestamp" : "2026-06-15T02:53:40.233", "fingerprint" : "99782e801ea496f51f4822d6c4dffecec0db33639be8903f0d3b4b589a9fcf08", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443534/apply", "externalId" : "e82ec408-f8eb-453a-9674-da1742b81c58", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Risk assessment", "Process improvement", "Security posture" ], "hardSkillsList" : [ "Control implementation", "Regulatory compliance" ], "hardSkills" : [ { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Regulatory compliance", "level" : "intermediate" } ], "majorSkills" : "Security assurance, Regulatory operations", "majorSkillsList" : [ "Security assurance", "Regulatory operations" ], "coreResponsibilities" : "Develop understanding of operational services, Understand Risk and Control Library, Perform service assessment work, Develop and deliver tooling, Identify process improvement opportunities, Develop solutions to technical challenges, Manage build and deployment of tooling, Support process improvement projects, Manage communications to stakeholders, Develop technical understanding of control implementation, Articulate compliance implications, Set strategic direction, Improve documentation, Track progress, Coordinate improvement efforts, Monitor process improvement effectiveness, Develop domain and technical knowledge, Monitor, evaluate, and improve organization, Develop and share program frameworks, Liaise with auditors, Articulate control implementation, Establish considerations for security concepts, Communicate compliance program results", "teamCollaboration" : "Work with service owners; Coordinate with service teams; Communicate to service teams; Communicate to stakeholders; Liaise with auditors", "projectManagementSkills" : [ "Roadmap strategy", "Prioritizing deliverables" ], "domainKnowledge" : "AWS security solutions; AWS compliance programs; Security concepts; Privacy concepts; Compliance concepts; Cloud environment", "domainList" : [ "aws-security-solutions", "aws-compliance-programs", "security-concepts", "privacy-concepts", "compliance-concepts", "cloud-environment" ], "domainSpecificKnowledge" : [ "AWS security solutions", "AWS compliance programs", "Security concepts", "Privacy concepts", "Compliance concepts", "Cloud environment" ], "communicationSkills" : "Articulate compliance implications; Communicate program results", "documentationSkills" : "Improve documentation", "innovationCreativity" : "Develop innovative solutions", "problemSolvingSkills" : "Creative problem solver", "qualificationsBasic" : "Experience in security or compliance consulting, Experience performing technical audits/assessments, Bachelor's degree or above", "qualificationsPreferred" : "Experience with audit or risk program design, Experience communicating with customers, Experience defining roadmap strategy, Experience designing and implementing controls", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At AWS, Security is priority zero. As part of the Amazon Web Services (AWS) Security team, we are looking for a technically deep Industry Specialist who is passionate about owning far-reaching projects to drive continuous improvement across AWS at unparalleled scale. As a part of AWS Compliance and Security Assurance you’ll have an opportunity to operate in a constantly changing environment, working with AWS business and engineering teams on business-critical, security projects and programs. We work across AWS to drive strategic security initiatives, design and deliver tooling and automation, and continue to raise the bar on security at AWS. Our team also drives programs to enable customers that operate in regulated markets, such as Healthcare, Finance, Government, etc. Key job responsibilities In this role, you will: - Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture. - Understand our Risk and Control Library and how it relates to our assessment processes. - Perform service, feature, and other related assessment work for customer and audit requirements. - Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture. - Identify process improvement opportunities and high risk areas. - Work with service owners to develop innovative solutions to complex technical challenges. - Manage the build and deployment of new tooling to streamline and automate security-related initiatives. - Support process improvement and security-related projects in coordination with service teams. - Manage communications to service teams and stakeholders. A day in the life - Dive deep into the AWS control environment to develop technical understanding of control implementation, and articulate compliance implications to internal and external audit functions. - Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness. - Develop broad domain and technical knowledge in AWS security solutions including the operational processes and controls in place that support AWS compliance programs. - Monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver. - Develop and share program/project process frameworks, tools, and best practices that can be adopted throughout the organization. - Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment. - Effectively communicate compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in security or compliance consulting or advisory work in support of a highly technical environment - Experience performing technical audits/assessments in direct support of a major compliance effort (e.g., ISO, NIST, SOX, PCI, HIPAA, GDPR and other regulatory/industry certifications) - Bachelor's degree or above in accounting, information systems, finance, or equivalent Preferred Qualifications: - Experience with audit or risk program design, control environment process documentation, and control mapping - Experience communicating with customers, technical, regulatory, business teams, and management to collect requirements, describe product features, and technical designs - Experience defining roadmap strategy and prioritizing deliverables for your team products - Experience designing and implementing controls or experience performing audits over financial reporting environment, or experience working with stakeholders Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Assurance Specialist (Regulatory Operations Center) at Amazon Web Services EMEA SARL (Irish Branch). Skills: Security assurance, Regulatory operations. Develop understanding of operational services. Understand Risk and Control Library", "postedDate" : "2026-06-13T05:25:49.893", "createdAt" : "2026-06-13T05:25:49.893", "lastUpdated" : "2026-06-15T02:53:40.233", "ingestTimestamp" : "2026-06-13T05:25:49.893", "mongoId" : "6a2a660774d8ee00a062b94f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443534/apply", "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Control implementation", "Regulatory compliance", "Security assurance", "Regulatory operations", "Risk assessment", "Process improvement", "Security posture", "Roadmap strategy", "Prioritizing deliverables", "AWS security solutions", "AWS compliance programs", "Security concepts", "Privacy concepts", "Compliance concepts", "Cloud environment" ], "skillCount" : 15, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 856.7792, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c799774d8ee00a0941f9d", "title" : "Senior Solutions Architect - Security Specialist", "company" : "Elastic", "industry" : "Cybersecurity", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Solutions Architect - Security Specialist in Germany, adjusted for seniority, technology industry, and company size." }, "location" : "Germany", "locations" : [ "Germany" ], "certifications" : [ "CISSP", "CEH", "GIAC" ], "timestamp" : "2026-06-15T09:35:43.764", "fingerprint" : "cbb809d2a43ae403361a22b18562f972c6bc87cd3279dfeb56707add2d0c44af", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.elastic.co/jobs?gh_jid=7995039&gh_jid=7995039", "externalId" : "7995039", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Germany", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, AI, Analytics, Machine Learning", "professionalSkills" : [ "Consultative selling", "Vendor ecosystems", "Operational processes", "Use case requirements", "Incident response", "Threat mitigation" ], "hardSkillsList" : [ "Forensic analysis", "Troubleshooting", "Behavioral analytics", "Machine learning" ], "softSkillsList" : [ "Knowledge sharing", "Continuous learning" ], "hardSkills" : [ { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "Behavioral analytics", "level" : "intermediate" }, { "name" : "Machine learning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Knowledge sharing" }, { "name" : "Continuous learning" } ], "majorSkills" : "SIEM solutions, Security architectures, Incident response, AI in security", "majorSkillsList" : [ "SIEM solutions", "Security architectures", "Incident response", "AI in security" ], "coreResponsibilities" : "Architect security solutions, Design cutting-edge solutions, Implement AI advancements, Improve incident response, Harness Elastic Security Solution, Achieve use case requirements, Improve operational efficiency, Deliver proof-of-value projects, Showcase detection capabilities, Showcase AI capabilities, Showcase Incident Response capabilities, Improve analyst experience, Shorten analyst decision time, Be a thought leader, Evangelize vision, Share expertise, Position Elastic as leader, Foster collaboration, Share knowledge, Drive continuous improvement, Learn evolving landscapes, Explore SIEM landscape, Explore Analytics landscape, Ensure solutions are forefront", "teamCollaboration" : "Solutions Architecture team; Across departments", "projectManagementSkills" : [ "RFI/RFP responses" ], "domainKnowledge" : "SIEM; Security technologies; Security architectures; SOC workflows; Behavioral Analytics; Machine Learning", "domainList" : [ "siem", "security-technologies", "security-architectures", "soc-workflows", "behavioral-analytics", "machine-learning" ], "domainSpecificKnowledge" : [ "SIEM", "Security technologies", "Security architectures", "SOC workflows", "Behavioral Analytics", "Machine Learning" ], "toolProficiency" : [ "Elastic Security Solution" ], "communicationSkills" : "Presentations; Blog posts; Customer presentations; Technical audiences; Non-technical audiences", "continuousLearning" : "Continuous learning; Staying ahead of curve", "innovationCreativity" : "Cutting-edge solutions; AI advancements; Forefront of innovation", "problemSolvingSkills" : "Solve complex challenges; Troubleshooting; Threat mitigation", "specialRequirements" : "30-50% travel", "outcomesObjectives" : "Improve incident response; Achieve use case requirements; Improve operational efficiency; Improve analyst experience; Shorten analyst decision time", "qualificationsBasic" : "5+ years enterprise PreSales, Extensive SIEM platforms experience, Deep AI understanding, SOC workflows knowledge, Security solutions knowledge, Forensic analysis background, Behavioral Analytics experience, Machine Learning techniques experience, Ability to work independently, Proven consultative selling success, RFI/RFP responses experience, Customer presentations experience", "qualificationsPreferred" : "CISSP certification, CEH certification, GIAC certification", "workSiteFlexibility" : "Flexible", "rawDescription" : "Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role As a Security Specialist Solutions Architect, you will bring deep expertise in SIEM solutions, security technologies, and consultative selling to support customers in securing their data and infrastructure. You will leverage your knowledge of vendor ecosystems, security architectures, and operational processes to help customers solve complex challenges, enhance incident response, and build modern, scalable security solutions. What You Will Be Doing Architect next-generation security solutions: Design and implement cutting-edge solutions utilizing Elastic's latest advancements in AI, to help improve incident response Harness the power of the Elastic Security Solution to enable organizations to achieve their use case requirements and improve overall operational efficiency Deliver compelling proof-of-value (POV) projects: Showcase the value of Elastic Security’s detection, AI, and Incident Response capabilities, demonstrating the potential to improve the analyst experience and shorten the time it takes for an analyst to make an informed decision. Be a thought leader and evangelize our vision: Share your expertise through presentations, blog posts, and other channels, positioning Elastic as the leader in SIEM and Analytics Foster collaboration and knowledge sharing: Cultivate a collaborative environment within the Solutions Architecture team and across departments, promoting knowledge sharing and driving continuous improvement. Stay ahead of the curve: Continuously learn and explore the ever-evolving landscapes of SIEM and Analytics and related technologies, ensuring our solutions are always at the forefront of innovation. What You Bring 5+ years of experience in enterprise PreSales. Extensive experience with SIEM platforms and vendor solutions in enterprise environments. Deep understanding of AI and its impact on SIEM and Analytics solutions. Strong understanding of SOC workflows, processes, and operational challenges. Knowledge of a wide range of security solutions, the type of data they produce and build content to satisfy Use Case Requirements Background that includes forensic analysis, troubleshooting, and threat mitigation. Experience with Behavioral Analytics, and Machine Learning techniques. Ability to work independently and thrive in fast-paced environments. Proven success in consultative selling, RFI/RFP responses, and customer presentations. Excellent communication and presentation skills, able to engage both technical and non-technical audiences Collaborative spirit and a passion for sharing knowledge and expertise. Unwavering commitment to continuous learning and staying ahead of the curve in technology and emerging trends Certifications such as CISSP, CEH, or GIAC are a plus Willingness to travel 30-50% of the time Additional Information - We Take Care of Our People As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do. We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do. Competitive pay based on the work you do here and not your previous salary Health coverage for you and your family in many locations Ability to craft your calendar with flexible locations and schedules for many roles Generous number of vacation days each year Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service Up to 40 hours each year to use toward volunteer projects you love Embracing parenthood with minimum of 16 weeks of parental leave Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation. We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email candidate_accessibility@elastic.co. We will reply to your request within 24 business hours of submission. Applicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster) Elasticsearch develops and distributes technology and information that is subject to U. S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic. Please see here for our Privacy Statement.", "summaryDescription" : "Senior Solutions Architect - Security Specialist at Elastic. Skills: SIEM solutions, Security architectures, Incident response, AI in security. Architect security solutions. Design cutting-edge solutions", "postedDate" : "2026-06-13T20:19:08.265", "createdAt" : "2026-06-13T20:19:08.265", "lastUpdated" : "2026-06-15T09:35:43.764", "ingestTimestamp" : "2026-06-13T20:19:08.265", "mongoId" : "6a2c799774d8ee00a0941f9d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Forensic analysis", "Troubleshooting", "Behavioral analytics", "Machine learning", "Knowledge sharing", "Continuous learning", "SIEM solutions", "Security architectures", "Incident response", "AI in security", "Consultative selling", "Vendor ecosystems", "Operational processes", "Use case requirements", "Threat mitigation", "RFI/RFP responses", "SIEM", "Security technologies", "SOC workflows", "Behavioral Analytics", "Machine Learning", "CISSP", "CEH", "GIAC", "Elastic Security Solution" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 856.5001, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69f9b8104c40e2acd11146b9", "title" : "Manager, Security Services Management, Worldwide Operations Security (WWOS)", "company" : "Amazon.com Services LLC", "industry" : "Investigation Loss Prevention, Program Management, Logistics", "salary" : { "min" : 127200.0, "max" : 172100.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "certifications" : [ "PMP certificate" ], "timestamp" : "2026-06-15T01:38:52.778", "fingerprint" : "fd0fb01325d75d1011d5a15a73254c8ab6db30a601625581aa6781b23ecedaaa", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386978/apply", "externalId" : "878d1fd2-c223-4721-9d86-862bb53ece0a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceLevel" : "Manager", "professionalSkills" : [ "Portfolio management", "Risk management", "Crisis management", "Security services" ], "hardSkillsList" : [ "Performance metrics", "Process improvement", "Lean techniques", "Automation", "Standardization" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Performance metrics", "level" : "intermediate" }, { "name" : "Process improvement", "level" : "intermediate" }, { "name" : "Lean techniques", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Standardization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security services management, Program management, Cross-functional leadership", "majorSkillsList" : [ "Security services management", "Program management", "Cross-functional leadership" ], "coreResponsibilities" : "Lead the AMER region’s Security Services Management (SSM), Manage an annual budget in excess of $700MM, Oversee 16 million guarding hours, Manage security service provider administration for North America, Set a strategic vision, Establish organizational framework to facilitate daily operations, Contribute to global security strategies, Create OP1/OP2/3YP plans, Create roadmaps, Collaborate with cross-functional stakeholders, Develop security service programs, Develop effective mechanisms to meet long-term business goals, Present strategies to senior business leaders, Develop unique security service solutions, Support multiple verticals across 750+ AMER sites", "teamCollaboration" : "Cross-functional stakeholder collaboration; AMER Physical Security leadership team; AMER S&LP leadership teams; Partners in WWOS; Partners in Operations; Partners in Category Management; Partners in Finance; Partners in Legal; Partners in PXT", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap creation" ], "domainKnowledge" : "Physical security; Security services management; North America remit", "domainList" : [ "physical-security", "security-services-management", "north-america-remit" ], "domainSpecificKnowledge" : [ "Physical security", "Security services management", "North America remit" ], "communicationSkills" : "Verbal communication; Written communication; Present strategies", "problemSolvingSkills" : "Data-driven improvements", "qualificationsBasic" : "5+ years of working cross functionally with tech and non-tech teams, 5+ years of team management, 5+ years of cross functional project delivery, 5+ years of program or project management, Experience defining program requirements, Experience using data and metrics to determine improvements, Experience with performance metrics, Experience with process improvement, Experience with Lean techniques, Experience delivering cross functional projects, Experience implementing repeatable processes, Experience driving automation or standardization, Bachelor's degree", "qualificationsPreferred" : "Experience managing, analyzing and communicating results to senior leadership, PMP certificate, Master's degree", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Manager, Security Services Management leads the AMER region’s Security Services Management (SSM) team, comprised of 6 performance and program managers. This leader is responsible for an annual budget in excess of $700MM, which represents approximately 16 million guarding hours. The role consists of portfolio management, execution of a region-wide support strategy, and Security Service Provider (SSP) administration for the North America remit. The Manager, Security Services Management sets a strategic vision, and organizational framework, to facilitate daily operations. They contribute to global security strategies through OP1/OP2/3YP planning, roadmap creation, and cross-functional stakeholder collaboration. The Manager, Security Services Management is a critical member of the AMER Physical Security and AMER S&LP leadership teams. They collaborate with partners in WWOS, Operations, Category Management, Finance, Legal, and PXT to develop security service programs that meet critical business objectives. The role requires technical expertise in physical security, risk management, crisis management, and the aptitude to develop effective mechanisms to meet long-term business goals. This role requires an experienced leader, proficient in verbal and written communication, who can present strategies to senior business leaders. The Manager, Security Services Management is accountable for developing and implementing unique security service solutions that support multiple verticals, across 750+ AMER sites. These include Fulfillment Centers, Sort Centers, Amazon Logistics Delivery Stations, Amazon XL Delivery Stations, Global Specialty Fulfillment, Reverse Logistics, Amazon Air, Retail, and Amazon Pharmacy. Basic Qualifications: - 5+ years of working cross functionally with tech and non-tech teams experience - 5+ years of team management experience - 5+ years of cross functional project delivery experience - 5+ years of program or project management experience - Experience defining program requirements and using data and metrics to determine improvements - Experience with performance metrics and process improvement and Lean techniques - Experience delivering cross functional projects - Experience implementing repeatable processes and driving automation or standardization - Bachelor's degree Preferred Qualifications: - Experience managing, analyzing and communicating results to senior leadership - PMP certificate - Master's degree Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, IL, Chicago - 127,200.00 - 172,100.00 USD annually USA, MI, Birmingham - 127,200.00 - 172,100.00 USD annually USA, TN, Nashville - 114,500.00 - 160,000.00 USD annually USA, VA, Arlington - 127,200.00 - 172,100.00 USD annually USA, WA, Seattle - 127,200.00 - 172,100.00 USD annually", "summaryDescription" : "Manager, Security Services Management, Worldwide Operations Security (WWOS) at Amazon.com Services LLC. Skills: Security services management, Program management, Cross-functional leadership. Lead the AMER region’s Security Services Management (SSM). Manage an annual budget in excess of $700MM", "postedDate" : "2026-06-13T03:51:12.592", "createdAt" : "2026-06-13T03:51:12.592", "lastUpdated" : "2026-06-15T01:38:52.778", "ingestTimestamp" : "2026-06-13T03:51:12.592", "mongoId" : "69f9b8104c40e2acd11146b9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386978/apply", "salaryAnnualMin" : 127200, "salaryAnnualMax" : 172100, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Performance metrics", "Process improvement", "Lean techniques", "Automation", "Standardization", "Leadership", "Security services management", "Program management", "Cross-functional leadership", "Portfolio management", "Risk management", "Crisis management", "Security services", "Project management", "Roadmap creation", "Physical security", "North America remit", "PMP certificate" ], "skillCount" : 18, "jobCategory" : "marketing", "dataQualityScore" : 1.0, "_score" : 850.7705, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "693c2b8b70f0b99d5843fd66", "title" : "Senior Manager - Devices & Services Security", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Systems Security Engineering, amazon security", "salary" : { "min" : 187500.0, "max" : 324100.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "San Francisco, California, USA", "locations" : [ "San Francisco, California, USA" ], "timestamp" : "2026-06-15T00:51:40.115", "fingerprint" : "bc6650e718214df2fb73a09ff1f813ad71e950dc9f3d1eb0e01b2525487a73cc", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3138991/apply", "externalId" : "44f82d3a-6e19-47e6-b607-49bfae5bedf7", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Francisco", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.7879363,-122.4075201" } ], "locationText" : "San Francisco, California, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS", "professionalSkills" : [ "Risk assessment", "Security decisions", "Team management", "Technical concepts" ], "hardSkillsList" : [ "Security engineering", "Risk assessment", "Team building", "Coaching", "Mentoring" ], "softSkillsList" : [ "Leadership", "Innovation" ], "hardSkills" : [ { "name" : "Security engineering", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Team building", "level" : "intermediate" }, { "name" : "Coaching", "level" : "intermediate" }, { "name" : "Mentoring", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Innovation" } ], "majorSkills" : "Security engineering, Risk assessment, Team management", "majorSkillsList" : [ "Security engineering", "Risk assessment", "Team management" ], "coreResponsibilities" : "Lead security team, Develop security team, Define security requirements, Build security processes, Develop scalable solutions, Set security strategic direction, Execute security strategies, Lead diverse team, Partner with engineering teams, Integrate security tools, Integrate security controls, Envision programs, Drive programs, Scale programs, Engage technical people, Engage non-technical people, Partner across disciplines, Work across executives, Uphold customer trust, Analyze application code, Build security tools, Build security frameworks, Help developers work securely, Help developers work efficiently, Partner with engineering teams, Integrate security into architectures, Conduct security reviews, Collaborate with product managers, Balance security requirements, Coach team members, Develop team members, Guide careers", "teamCollaboration" : "Cross-functional teams; Engineering teams; Product management; Legal; Business", "domainKnowledge" : "Consumer devices; Consumer products; Connected home; Home WiFi; Information security", "domainList" : [ "consumer-devices", "consumer-products", "connected-home", "home-wifi", "information-security" ], "domainSpecificKnowledge" : [ "Consumer devices", "Consumer products", "Connected home", "Home WiFi", "Information security" ], "communicationSkills" : "Technical concepts", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Security challenges", "qualificationsBasic" : "10+ years industry work, 10+ years security engineering, 10+ years risk assessment, 10+ years enabling security decisions, 10+ years team management, 10+ years building teams, 10+ years coaching, 10+ years mentoring, 10+ years communicating technical concepts, Bachelor's degree Computer Science, Experience communicating technical concepts, Experience hands-on security engineering, Experience risk assessment, Experience enabling security decisions, Experience team management, Experience building teams, Experience coaching, Experience mentoring", "qualificationsPreferred" : "Knowledge information security risk prioritization, Knowledge information security technologies, Security design review, Threat modeling, Risk analysis, Software testing techniques, Experience applying threat modeling, Experience architecting AWS, Experience securing AWS, Experience operating AWS", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are open to hiring candidates to work out of one of the following locations: San Francisco, CA, USA The Amazon Devices and Services team designs and engineers high-profile consumer electronics, including the best-selling Eero products. We have also produced devices like Fire tablets, Fire TV, Amazon Dash, Ring, and Amazon Echo. With eero, our mission is to serve as the central nervous system of the home. While we began by revolutionizing home WiFi, we now create comprehensive and secure solutions that serve both wireless and wired connectivity needs for customers and businesses worldwide. Our team builds products that customers love - from mesh routers to high-performance wired networking devices - and we're looking for you to join us in shaping the future of the connected home. What will you help us create? Are you interested in building and leading a focused top-notch security team responsible for securing consumer devices and information? Do you want to solve new security challenges and build solutions at scale? If so, we have the job for you! Amazon’s Devices and Services Security team is looking for a senior leader who will be responsible for leading, developing and taking the Eero Security team to the next level. You will be responsible for the security risk posture for the full Eero product line, while enabling the organization to deliver great and secure experiences for our customers. In this role, you will define security requirements, build processes and mechanisms that continue to raise the security bar for Amazon’s consumer products, and develop scalable solutions that meet the business and customer needs. This role will require innovation, as well as the ability to perform security at scale while leading and motivating a team of skilled security engineers. Key job responsibilities As the leader of the Devices and Services Security Eero team, you will be tasked in setting and executing the security strategic direction for various consumer services, and device security strategies. You will be responsible for leading a multi-functionally diverse team. You will partner with engineering teams to integrate scalable security tools and controls into everyday work for the entire organization. You will help envision, drive, and scale the programs through innovative process changes across multiple organizations and teams, engaging technical and non-technical people throughout the organization. You will partner and work across disciplines and executives including engineering, marketing, product management, legal, and business. Above all, you feel strongly about protecting customers. Your focus will be to help teams design their systems and customer experiences in a manner that upholds our high bar for customer trust. A day in the life Your work will be dynamic and impactful. Day-to-day, you might find yourself analyzing application code for security vulnerabilities, building tools and frameworks that help developers work more securely and efficiently, or partnering with engineering teams to integrate security into new service architectures. You'll conduct comprehensive security reviews, and collaborate with product managers to balance security requirements with exceptional user experiences. You will coach and develop the members of your team and guide them in their career About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - 10+ years of industry work with hands-on security engineering experience - 10+ years of risk assessment and enabling organizations making security decisions experience - 10+ years of team management and building (including coaching and mentoring) experience - 10+ years of communicating technical concepts to a non-technical audience experience - Bachelor's degree in Computer Science or a related field - Experience communicating technical concepts to a non-technical audience - Experience with hands-on security engineering - Experience in risk assessment and enabling organizations to make security decisions - Experience in team management and building (including coaching and mentoring) Preferred Qualifications: - Knowledge of information security risk-based prioritization - Knowledge of information security technologies such as security design review, threat modeling, risk analysis, and software testing techniques - Experience applying threat modeling or other risk identification techniques or equivalent - Experience architecting, securing, and operating Amazon Web Services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $187,500/year in our lowest geographic market up to $324,100/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.", "summaryDescription" : "Senior Manager - Devices & Services Security at Amazon.com Services LLC. Skills: Security engineering, Risk assessment, Team management. Lead security team. Develop security team", "postedDate" : "2026-06-12T23:48:14.607", "createdAt" : "2026-06-12T23:48:14.607", "lastUpdated" : "2026-06-15T00:51:40.115", "ingestTimestamp" : "2026-06-12T23:48:14.607", "mongoId" : "693c2b8b70f0b99d5843fd66", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3138991/apply", "salaryAnnualMin" : 187500, "salaryAnnualMax" : 324100, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security engineering", "Risk assessment", "Team building", "Coaching", "Mentoring", "Leadership", "Innovation", "Team management", "Security decisions", "Technical concepts", "Consumer devices", "Consumer products", "Connected home", "Home WiFi", "Information security" ], "skillCount" : 15, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 838.629, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consumer Electronics" }, { "id" : "6a2c91cb74d8ee00a09841a3", "title" : "Security Specialist II", "company" : "Redwood Materials", "industry" : "Manufacturing", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Specialist in McCarran, Nevada, adjusted for the manufacturing industry and company size." }, "location" : "McCarran, NV", "locations" : [ "McCarran", "NV" ], "timestamp" : "2026-06-16T04:40:11.602", "fingerprint" : "ebe1e091a2bce01fd670a5ae114af4c4b574e0b9da2e18e3b01a1d3a661f8497", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/redwoodmaterials/jobs/6019247004?gh_jid=6019247004", "externalId" : "6019247004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "McCarran", "state" : "Nevada", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "36.0861034,-115.1611002" } ], "locationText" : "McCarran, Nevada, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "professionalSkills" : [ "Incident response", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response" ], "hardSkillsList" : [ "First aid" ], "hardSkills" : [ { "name" : "First aid", "level" : "intermediate" } ], "majorSkills" : "Security operations, Incident response, Patrol procedures", "majorSkillsList" : [ "Security operations", "Incident response", "Patrol procedures" ], "coreResponsibilities" : "Perform assigned security duties, Patrol facilities and grounds, Monitor security systems, Respond to incidents, Serve as on-site responder, Follow response procedures, Follow escalation protocols, Notify supervisors of incidents, Conduct routine patrols, Conduct random patrols, Identify hazards, Identify security risks, Identify policy violations, Monitor CCTV systems, Operate CCTV systems, Monitor access control systems, Operate access control systems, Monitor alarm systems, Operate alarm systems, Monitor life-safety systems, Operate life-safety systems, Report system irregularities, Control site access, Document site access, Process visitors, Verify contractor credentials, Respond to alarms, Assess incident conditions, Escalate incidents to supervisors, Escalate incidents to emergency services, Provide initial emergency response, Provide basic first aid, Assist with evacuations, Control incident scenes, Complete incident reports, Complete daily activity logs, Complete shift documentation, Maintain accountability of issued equipment, Report equipment deficiencies, Support site operations, Support special events, Support high-visibility activities, Follow company policies, Follow post orders, Follow safety procedures, Report policy deviations, Communicate with supervisors, Communicate with team members, Ensure continuity between shifts", "teamCollaboration" : "Continuity between shifts", "domainKnowledge" : "Security operations; Patrol procedures; Access control systems; CCTV monitoring; Alarm systems; Emergency response protocols", "domainList" : [ "security-operations", "patrol-procedures", "access-control-systems", "cctv-monitoring", "alarm-systems", "emergency-response-protocols" ], "domainSpecificKnowledge" : [ "Security operations", "Patrol procedures", "Access control systems", "CCTV monitoring", "Alarm systems", "Emergency response protocols" ], "toolProficiency" : [ "CCTV", "Access control systems", "Alarms", "Life-safety systems" ], "communicationSkills" : "Complete accurate reports; Maintain shift continuity; Communicate professionally", "documentationSkills" : "Incident reports; Daily activity logs; Shift documentation", "problemSolvingSkills" : "Assess situations; Make sound decisions", "specialRequirements" : "Work rotating shifts, Work nights, Work weekends, Work holidays, Work overtime, Work extended hours, Stand for extended periods, Walk for extended periods, Patrol for extended periods, Respond to incidents for extended periods", "outcomesObjectives" : "Adherence to procedures; Response effectiveness; Completion of assigned tasks", "qualificationsBasic" : "High school diploma or equivalent, Prior security experience, Prior military experience, Prior law enforcement experience, Prior emergency response experience, Prior industrial security experience", "qualificationsPreferred" : "Working knowledge of security operations, Working knowledge of patrol procedures, Working knowledge of access control systems, Working knowledge of CCTV monitoring, Working knowledge of alarm systems, Working knowledge of emergency response protocols", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Redwood Materials Redwood is localizing a global battery supply chain that seamlessly integrates recovery, reuse, and recycling — keeping critical minerals in circulation and driving the energy transition. Founded in 2017, we’re delivering low-cost and large-scale energy storage and producing battery materials in the U. S. for the first time, all from batteries we already have. Security Specialist Security Specialists operate under direct or general supervision during assigned shifts. Work is performed in accordance with established procedures, post orders, and supervisor direction. Personnel are expected to carry out assigned duties, follow escalation protocols, and notify supervisors of incidents requiring higher-level decision-making. Performance is evaluated based on adherence to procedures, response effectiveness, and completion of assigned tasks. Responsibilities will include: Perform assigned security duties during scheduled shifts, including patrols, monitoring systems, and incident response. Serve as an on-site responder to security, safety, and medical incidents, following established response procedures and escalation protocols. Conduct routine and random patrols of facilities and grounds to identify hazards, security risks, or policy violations. Monitor and operate CCTV, access control systems, alarms, and life-safety systems, reporting irregularities to supervision. Control and document site access, including visitor processing, credential checks, and contractor verification. Respond to alarms and incidents, assess conditions, and escalate to supervisors or emergency services as required. Provide initial emergency response support, including basic first aid, evacuation assistance, and scene control until relieved. Complete incident reports, daily activity logs, and shift documentation accurately and before the end of each shift. Maintain accountability of issued equipment, ensuring readiness and reporting deficiencies. Support site operations, special events, and high-visibility activities as directed by supervision. Follow all company policies, post orders, and safety procedures, reporting any deviations. Communicate effectively with supervisors and team members to ensure continuity between shifts. All other duties as assigned. Desired Qualifications High school diploma or equivalent required; prior security, military, law enforcement, emergency response, or industrial security experience preferred Working knowledge of security operations, patrol procedures, access control systems, CCTV monitoring, alarm systems, and emergency response protocols Ability to follow and apply established procedures, post orders, safety requirements, and escalation protocols in a fast-paced operational environment Ability to work rotating shifts, including nights, weekends, holidays, overtime, and extended hours as operationally required Effective verbal and written communication skills, including the ability to complete accurate reports, maintain shift continuity, and communicate professionally with employees, contractors, visitors, and emergency responders Ability to assess situations, remain calm under pressure, and make sound decisions during security, safety, medical, or operational incidents Ability to stand, walk, patrol, and respond to incidents for extended periods while maintaining situational awareness and operational readiness The position is full-time. Compensation will be commensurate with experience. We collect personal information (PI) from you in connection with your application for employment with Redwood Materials, including the following categories of PI: identifiers, personal records, professional or employment information, and inferences drawn from your PI. We collect your PI for our purposes, including performing services and operations related to your potential employment. If you have additional privacy-related questions, please contact us at privacy@redwoodmaterials.com.", "summaryDescription" : "Security Specialist II at Redwood Materials. Skills: Security operations, Incident response, Patrol procedures. Perform assigned security duties. Patrol facilities and grounds", "postedDate" : "2026-06-14T21:48:11.737", "createdAt" : "2026-06-14T21:48:11.737", "lastUpdated" : "2026-06-16T04:40:11.602", "ingestTimestamp" : "2026-06-14T21:48:11.737", "mongoId" : "6a2c91cb74d8ee00a09841a3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "First aid", "Security operations", "Incident response", "Patrol procedures", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response", "Access control systems", "Emergency response protocols", "CCTV", "Alarms", "Life-safety systems" ], "skillCount" : 13, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 837.28937, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7d6374d8ee00a094fb43", "title" : "Spécialiste en cybersécurité - Cyber Security Specialist", "company" : "TobogganLabs", "industry" : "Consulting", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cyber Security Specialist in Bulgaria, adjusted for the technology industry and remote work." }, "location" : "Montréal, Quebec, Canada", "locations" : [ "Montréal", "Quebec", "Canada" ], "certifications" : [ "AWS Security Specialty", "CISSP" ], "timestamp" : "2026-06-16T02:56:36.669", "fingerprint" : "d967d0dde2b524b450eb68bc9662ab703c28e4a08377e764c77aba8d6a6e3a95", "source" : "greenhouse", "language" : "fr", "applyUrl" : "https://job-boards.greenhouse.io/tobogganlabs/jobs/7767641003", "externalId" : "7767641003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Azure, Terraform, CloudFormation, Okta, Azure AD, Google Workspace, Python, Bash, Kubernetes, Cloud-native security", "professionalSkills" : [ "Security architecture", "Security automation", "Technical leadership", "Strategic decision making", "Risk translation" ], "hardSkillsList" : [ "Network segmentation", "Encryption", "System hardening", "Vulnerability management", "Zero Trust", "Security pipelines", "Detection rules", "Response playbooks", "Audit evidence collection", "Threat modeling", "Compliance frameworks" ], "softSkillsList" : [ "Self-directed", "Autonomous" ], "hardSkills" : [ { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Encryption", "level" : "intermediate" }, { "name" : "System hardening", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Zero Trust", "level" : "intermediate" }, { "name" : "Security pipelines", "level" : "intermediate" }, { "name" : "Detection rules", "level" : "intermediate" }, { "name" : "Response playbooks", "level" : "intermediate" }, { "name" : "Audit evidence collection", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Compliance frameworks", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Self-directed" }, { "name" : "Autonomous" } ], "majorSkills" : "Cybersecurity, Cloud security, Identity management, Security automation", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Identity management", "Security automation" ], "coreResponsibilities" : "Design security controls in cloud environments, Implement security controls in cloud environments, Maintain security controls in cloud environments, Architect identity and access solutions, Administer identity and access solutions, Design security automation pipelines, Support continuous compliance monitoring, Collect audit evidence, Lead security aspects of projects, Guide client architectural decisions, Define strategic security directions, Mentor colleagues on security best practices, Contribute to internal security tools, Contribute to internal security standards, Participate in interviews, Make internal presentations", "teamCollaboration" : "Client teams; Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "AI; Health sector; Regulated industries; Cloud-native architecture; Zero Trust model; Compliance frameworks", "domainList" : [ "ai", "health-sector", "regulated-industries", "cloud-native-architecture", "zero-trust-model", "compliance-frameworks" ], "domainSpecificKnowledge" : [ "AI", "Health sector", "Regulated industries", "Cloud-native architecture", "Zero Trust model", "Compliance frameworks" ], "toolProficiency" : [ "AWS", "Azure", "Terraform", "CloudFormation", "Okta", "Azure AD", "Google Workspace", "GitHub Actions", "CI/CD tools", "Okta Workflows", "Tray.io", "Workato" ], "communicationSkills" : "Explain complex concepts; Connect security to business", "continuousLearning" : "Professional development", "problemSolvingSkills" : "Translate technical risks", "qualificationsBasic" : "5+ years infrastructure, DevOps, or security engineering, Practical experience with AWS or Azure, Experience with Terraform, CloudFormation, or equivalents, Deployed and administered Okta or similar identity providers, Experience with SSO, MFA, SCIM provisioning, Experience with MDM / endpoint management, Familiar with SOC 2, HIPAA, ISO 27001, Participated in audit processes, Explain complex security and infrastructure concepts", "qualificationsPreferred" : "Client-facing roles experience, Healthcare or regulated industries experience, Software development beyond scripting, Container security, Kubernetes, or cloud-native security, Automating security with Python or Bash, Okta Workflows, Tray.io, or Workato experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "La version anglaise suivra - English version will follow Spécialiste en cybersécurité À propos de nous Toboggan Labs est une firme-conseil boutique qui œuvre à l'intersection de l'IA et de la santé. Nous résolvons des problèmes humains complexes en appliquant des technologies de pointe combinées à une solide compréhension du domaine. À propos du poste Nous sommes à la recherche d'un·e spécialiste en cybersécurité pour joindre notre équipe en tant que ressource senior en sécurité intégrée chez nos clients. Dans ce rôle, vous concevrez et mettrez en œuvre des programmes de sécurité complets dans des environnements infonuagiques et d'entreprise. Vous travaillerez directement avec les équipes clients pour intégrer la sécurité dans leur infrastructure, leur gestion des identités et leurs opérations, et agirez en tant que conseiller·ère de confiance capable de traduire les risques techniques en décisions stratégiques. Veuillez noter que, bien que nous soyons spécialisés dans le secteur de la santé et les industries réglementées, tous nos projets ne relèvent pas de ces domaines. Vous pourriez donc être amené·e à travailler sur des projets variés dans différents secteurs, selon les besoins. Vos responsabilités quotidiennes Sécurité de l'infrastructure — Concevoir, implanter et maintenir des contrôles de sécurité dans les environnements infonuagiques (AWS, Azure), incluant la segmentation réseau, le chiffrement, le durcissement des systèmes et la gestion des vulnérabilité s. Gestion des identités et des accès — Architecturer et administrer des solutions d'identité et d'accès, incluant le SSO, le MFA, le provisionnement SCIM, la gestion des accès privilégiés et les approches Zero Trust. Automatisation et opérations de sécurité — Concevoir des pipelines d'automatisation de la sécurité, des règles de détection et des playbooks de réponse aux incidents; soutenir la surveillance continue de la conformité et la collecte de preuves d'audit. Sur certains mandats, leadership technique — Piloter l'ensemble du volet sécurité, guider les équipes clients dans leurs décisions architecturales et définir les orientations stratégiques de sécurité. Soutien à l'équipe — Mentorer des collègues sur les meilleures pratiques en sécurité, contribuer aux outils et standards de sécurité internes, participer aux entrevues et faire des présentations internes. À propos de vous Nous recherchons des personnes ayant un solide historique dans la conception et l'implantation de solutions de sécurité en environnements de production. La majorité de nos clients utilisent AWS, Terraform, GitHub Actions ou des outils CI/CD similaires, ainsi que des fournisseurs d'identité modernes. Vous devez être à l'aise pour naviguer entre la stratégie de sécurité et l'exécution technique, et communiquer efficacement avec des parties prenantes tant techniques que non techniques. Quand nous parlons de sécurité des infrastructures, nous cherchons quelqu'un capable de lire un modèle de menaces et un module Terraform dans le même après-midi — quelqu'un qui comprend que la sécurité n'est pas une liste de vérification de conformité, mais une discipline à intégrer dans chaque couche de la technologie et des processus d'une organisation. Nous vous encourageons à postuler si vous : Avez 5 ans ou plus d'expérience en infrastructure, DevOps ou ingénierie de la sécurité; Avez une expérience pratique avec des infrastructures AWS ou Azure et des outils d'infrastructure-as-code (Terraform, CloudFormation ou équivalents); Avez déployé et administré Okta ou des fournisseurs d'identité similaires (Azure AD, Google Workspace), incluant le SSO, le MFA, le provisionnement SCIM et la gouvernance des accès; Avez de l'expérience avec des solutions MDM / de gestion des postes de travail et des politiques de sécurité des appareils; Êtes familier·ère avec des cadres de conformité tels que SOC 2, HIPAA, ISO 27001 ou équivalents, et avez participé à des processus d'audit; Possédez d'excellentes compétences en communication et êtes capable d'expliquer des concepts complexes en sécurité et en infrastructure de façon claire et accessible; Êtes adaptable, autonome et à l'aise dans des environnements clients dynamiques; Savez expliquer les compromis en matière de sécurité et les relier aux besoins d'affaires. Atouts supplémentaires Expérience dans des rôles orientés client (consultation, ingénierie d'implantation, services-conseils); Expérience dans le secteur de la santé ou d'autres industries fortement réglementées; Expérience en développement logiciel au-delà du simple scripting (développement de fonctionnalités, d'API ou d'applications); Expérience avec la sécurité des conteneurs, Kubernetes ou des outils de sécurité cloud-native; Expérience en automatisation de la sécurité à l'aide de scripts (Python, Bash) ou d'outils de workflow (Okta Workflows, Tray.io, Workato); Détention de certifications pertinentes (AWS Security Specialty, CISSP ou équivalentes). Toutes nos offres d'emploi décrivent un peu une licorne. Si vous êtes plutôt un « narval », postulez quand même ! Il n'est pas nécessaire de répondre à toutes les exigences, ni aux critères bonus. L'expérience et les compétences sont importantes, mais le potentiel de croissance et l'attitude le sont tout autant. Nous sommes généralement flexibles quant aux niveaux ou pouvons vous orienter vers une offre plus appropriée lorsqu'elle sera ouverte. Ce que nous offrons Nous sommes une entreprise en télétravail d'abord, avec un espace de bureau à Montréal. Nous privilégions l'embauche au Québec, mais sommes ouverts aux candidatures partout au Canada dans les fuseaux horaires EST ±2. Toboggan Labs valorise la diversité des personnes qu'elle embauche et qu'elle sert. Pour nous, la diversité signifie créer un milieu de travail où les différences de chacun·e sont reconnues, appréciées, respectées et prises en compte afin de développer et de mettre à profit les talents et les forces de chaque personne. En plus : Budget pour le bureau à domicile et la technologie; Budget annuel de développement professionnel; REER avec contribution de l'employeur après 1 an; Dès le premier jour : Assurance santé et dentaire payée à 100 % par l'employeur, incluant un montant annuel pour les soins complémentaires (acupuncture, ostéopathie, massothérapie, naturopathie, psychologie, etc.); Assurance vie et assurance invalidité de courte et de longue durée; Complément de congé parental (8 semaines), disponible pour les employés ayant plus d'un an d'ancienneté, quel que soit le chemin vers la parentalité. Cyber Security Specialist About Us Toboggan Labs is a boutique consultancy building at the intersection of AI and healthcare. We solve challenging human problems by applying cutting-edge technology and domain understanding. About the role We're seeking a Cybersecurity Specialist to join our team as a senior security resource embedded in client engagements. In this role, you will design and implement comprehensive security programs across cloud and enterprise environments, working directly with client teams to embed security into their infrastructure, identity management, and operations. You will serve as a trusted security advisor, translating technical risk into actionable strategy. Note that while we specialize in healthcare and regulated industries, not all our projects are in these fields, so you may work across different domains from time to time. Your work will consist of: Infrastructure security engineering — Design, implement, and maintain security controls across cloud environments (AWS, Azure), including network segmentation, encryption, system hardening, and vulnerability management. Identity and access management — Architect and administer identity and access solutions including SSO, MFA, SCIM provisioning, privileged access management, and Zero Trust frameworks. Security automation and operations — Build security automation pipelines, detection rules, and incident response playbooks; support continuous compliance monitoring and audit evidence collection. On some projects, technical leadership — Own the security workstream end-to-end, guide client teams on architectural decisions, and shape strategic security direction. Supporting the team — Mentor colleagues on security best practices, contribute to internal security tools and standards, participate in interviews and internal presentations. About you We are seeking individuals with a proven track record designing and implementing security solutions in production environments. Most of our clients run AWS, Terraform, GitHub Actions or similar CI/CD tooling, and modern identity providers. You should be comfortable moving between security strategy and hands-on execution, and communicating effectively with both technical and non-technical stakeholders. When we say Security we mean someone who can read a threat model and a Terraform module in the same afternoon — someone who understands that security is not a compliance checkbox but a discipline that must be woven into every layer of an organization's technology and processes. We want you to apply if you: Have 5+ years of experience in infrastructure, DevOps, or security engineering; Have hands-on experience with AWS or Azure infrastructure and infrastructure-as-code tools (Terraform, CloudFormation, or equivalents); Have deployed and administered Okta or similar identity providers (Azure AD, Google Workspace), including SSO, MFA, SCIM provisioning, and access governance; Have experience with MDM / endpoint management solutions and device security policies; Are familiar with compliance frameworks such as SOC 2, HIPAA, ISO 27001, or equivalents, and have participated in audit processes; Have excellent communication skills and can explain complex security and infrastructure concepts clearly and accessibly; Are adaptable, self-directed, and comfortable in dynamic client environments; Can explain security trade-offs and connect them to business needs. Bonus points if you: Experience in client-facing roles (consulting, implementation engineering, advisory services); Experience in healthcare or other heavily regulated industries; Experience in software development beyond basic scripting (feature, API, or application development); Experience with container security, Kubernetes, or cloud-native security tools; Experience automating security processes using scripts (Python, Bash) or workflow tools (Okta Workflows, Tray.io, Workato); Relevant certifications (AWS Security Specialty, CISSP, or equivalents). All of our job postings describe a bit of a unicorn. If you're kind of a \"narwhal,\" please apply anyway. You don't need to meet all the requirements, let alone the bonus criteria. While experience and skill sets are valuable, growth potential and attitudes are equally important. We are usually flexible on levels or can advise you when a more relevant posting opens. What we offer We are a remote-first company with office space in Montreal. We prefer to hire in Quebec, but we are open to candidates anywhere in the EST±2 time zone in Canada. Toboggan Labs values the diversity of the people it hires and serves. Diversity, for us, means fostering a workplace in which a person's differences are recognized, appreciated, respected and responded to in ways that fully develop and utilize their talents and strengths. In addition: Home office/technology budget; Yearly professional development budget; Company matching RRSP after 1 year; From Day 1: 100% employer-paid health Life, long Parental leave top-up (8 weeks), available to employees with 1+ year of tenure, regardless of path to parenthood.", "summaryDescription" : "Spécialiste en cybersécurité - Cyber Security Specialist at TobogganLabs. Skills: Cybersecurity, Cloud security, Identity management, Security automation. Design security controls in cloud environments. Implement security controls in cloud environments", "postedDate" : "2026-06-14T21:47:47.747", "createdAt" : "2026-06-14T21:47:47.747", "lastUpdated" : "2026-06-16T02:56:36.669", "ingestTimestamp" : "2026-06-14T21:47:47.747", "mongoId" : "6a2c7d6374d8ee00a094fb43", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Network segmentation", "Encryption", "System hardening", "Vulnerability management", "Zero Trust", "Security pipelines", "Detection rules", "Response playbooks", "Audit evidence collection", "Threat modeling", "Compliance frameworks", "Self-directed", "Autonomous", "Cybersecurity", "Cloud security", "Identity management", "Security automation", "Security architecture", "Technical leadership", "Strategic decision making", "Risk translation", "AI", "Health sector", "Regulated industries", "Cloud-native architecture", "Zero Trust model", "AWS Security Specialty", "CISSP", "AWS", "Azure", "Terraform", "CloudFormation", "Okta", "Azure AD", "Google Workspace", "GitHub Actions", "CI/CD tools", "Okta Workflows", "Tray.io", "Workato" ], "skillCount" : 40, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 835.96124, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6b6d74d8ee00a0912540", "title" : "Security Specialist", "company" : "EquipmentShare", "industry" : "Technology", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Specialist in Columbia, United States, adjusted for the technology industry and company size." }, "location" : "Corporate", "locations" : [ "Corporate" ], "timestamp" : "2026-06-15T10:14:19.611", "fingerprint" : "f0d3d23f0c9f0867a5badc63c7d8a1c3fcf83e3393f45b2acb4a2fafa56b15c4", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.equipmentshare.com/careers/openings/?gh_jid=8003302", "externalId" : "8003302", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Columbia", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9518830,-92.3337366" } ], "locationText" : "Columbia, Missouri, United States", "employmentType" : "FULL_TIME", "coreResponsibilities" : "Monitor locations and job-sites, Monitor live camera feeds, Monitor system alerts, Identify suspicious activity, Verify incidents, Follow escalation protocols, Coordinate response with customers, Coordinate response with internal teams, Coordinate response with law enforcement, Create incident documentation, Track camera/connection health, Escalate technical issues, Maintain confidentiality, Maintain professionalism, Contribute to improving playbooks, Contribute to improving procedures, Contribute to improving training, Provide back-up service", "teamCollaboration" : "Coordinate response with customers; Coordinate response with internal teams; Coordinate response with law enforcement", "documentationSkills" : "Create incident documentation", "problemSolvingSkills" : "Identify suspicious activity; Verify incidents; Troubleshoot technical issues", "specialRequirements" : "Passing a background check, Passing a drug test", "qualificationsBasic" : "Night shift (7pm-7am)", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Build the Future with Us — EquipmentShare is Hiring a Security Specialist At EquipmentShare, we’re not just filling a role — we’re assembling the best team on the planet to build something that’s never been built before. We’re on a mission to transform an industry that’s been stuck in the past by empowering contractors and communities through innovative technology, real-time support, and a team that truly cares. EquipmentShare is searching for a night shift (7pm-7am) Security Specialist for our corporate office in Columbia, MO to help us keep our rental facilities secure. Primary Responsibilities Monitor both EquipmentShare locations and customer job-sites by monitoring live camera feeds and system alert Identify suspicious activity, verify incidents, and follow established escalation protocols Coordinate response with customers, internal teams, and local law enforcement when appropriate Create clear, accurate incident documentation (time, location, actions taken, outcomes) Track camera/connection health indicators and escalate technical issues to the appropriate team Maintain confidentiality and professionalism while handling sensitive customer information Contribute to improving monitoring playbooks, procedures, and training as the program scales Provide back-up service to the Customer Experience team Why EquipmentShare? Because we do things differently — and we think you’ll feel it from day one. We’re a people-first company powered by cutting-edge technology. That means our proprietary T3 platform doesn’t just run our business — it also makes your job easier, safer, and more connected. Whether you’re behind the wheel, under the hood, leading a branch, or closing deals — tech supports you, and you drive us forward. We’re a team of problem-solvers, go-getters, and builders. And we’re looking for teammates who take pride in doing meaningful work and want to be part of building something special. Perks ability to remain alert and focused throughout the shift EquipmentShare is committed to a diverse and inclusive workplace. EquipmentShare is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation,protected veteran status, disability, age, or other legally protected status. A Workplace For All At EquipmentShare, we believe the best solutions come from a team that reflects the world around us. Our initiative — A Workplace For All — is rooted in the belief that we must work together to solve some of the toughest problems in construction. That means attracting, developing, and retaining great people from all walks of life. We value different backgrounds, talents, and perspectives. We want you to feel like you belong here — because you do. EquipmentShare is an EOE M/F/D/ V. Employment is contingent on passing a background check. Additionally, some roles require passing a drug test, depending on the job responsibilities.", "summaryDescription" : "Security Specialist at EquipmentShare. Monitor locations and job-sites. Monitor live camera feeds", "postedDate" : "2026-06-13T20:49:26.057", "createdAt" : "2026-06-13T20:49:26.057", "lastUpdated" : "2026-06-15T10:14:19.611", "ingestTimestamp" : "2026-06-13T20:49:26.057", "mongoId" : "6a2c6b6d74d8ee00a0912540", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 832.3261, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69fda4e34c40e2acd1b9975a", "title" : "Worldwide Security Specialist", "company" : "Amazon Web Services, Inc.", "industry" : "Business Merchant Development, Business/Merchant Development, Cloud Computing", "salary" : { "min" : 176100.0, "max" : 238200.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T05:35:21.387", "fingerprint" : "9393dfa957673ffc70c13da5b406caf6988b9118a5208498bbb69262018b43a7", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10413631/apply", "externalId" : "9d79007d-1bf4-4092-ad88-fa6e15f8f0f5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Amazon GuardDuty, AWS Security Hub, Amazon Macie, AWS WAF, AWS Shield, AWS Network Firewall, AWS Secrets Manager", "professionalSkills" : [ "Go-to-market strategy", "Business development", "Sales", "Consulting", "Partner enablement", "Demand generation", "Pipeline reporting", "Solution building", "Product roadmaps", "Service launch strategy" ], "hardSkillsList" : [ "Business agreements execution", "Partner segmentation", "Customer propensity analysis", "Enablement integration", "Seller awareness", "Pipeline tracking", "Deal velocity acceleration", "Threat detection", "Identity management", "Data protection", "Network security" ], "softSkillsList" : [ "Customer-obsessed", "Entrepreneurial-minded", "Mentoring" ], "hardSkills" : [ { "name" : "Business agreements execution", "level" : "intermediate" }, { "name" : "Partner segmentation", "level" : "intermediate" }, { "name" : "Customer propensity analysis", "level" : "intermediate" }, { "name" : "Enablement integration", "level" : "intermediate" }, { "name" : "Seller awareness", "level" : "intermediate" }, { "name" : "Pipeline tracking", "level" : "intermediate" }, { "name" : "Deal velocity acceleration", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Data protection", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer-obsessed" }, { "name" : "Entrepreneurial-minded" }, { "name" : "Mentoring" } ], "majorSkills" : "Security services GTM, Partner-led motions, Security services adoption", "majorSkillsList" : [ "Security services GTM", "Partner-led motions", "Security services adoption" ], "coreResponsibilities" : "Lead GTM orchestrate sales motions, Develop GTM plans, Drive partner enablement, Create demand generation campaigns, Own pipeline and revenue reporting, Support field teams solution building, Bring market signals back, Support service launch partner strategies, Own reporting and planning cadences, Demonstrate thought leadership, Represent AWS Security", "teamCollaboration" : "Sales teams; Marketing teams; Partner teams; Product teams; Professional services teams; Field teams; Partner capabilities", "projectManagementSkills" : [ "GTM strategy execution" ], "domainKnowledge" : "AI Security; Network Security; Identity; Data Protection; Threat Detection; Governance; Cloud computing; Security services", "domainList" : [ "ai-security", "network-security", "identity", "data-protection", "threat-detection", "governance", "cloud-computing", "security-services" ], "domainSpecificKnowledge" : [ "AI Security", "Network Security", "Identity", "Data Protection", "Threat Detection", "Governance", "Cloud computing", "Security services" ], "toolProficiency" : [ "ACE" ], "communicationSkills" : "Executive presentations", "continuousLearning" : "Mentorship programme; Knowledge sharing", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Accelerate adoption of AWS Security services; Create and convert pipeline into revenue; Deliver exceptional security outcomes; Drive adoption of services", "qualificationsBasic" : "7+ years Go-To-Market experience, 7+ years business agreements experience, 5+ years Core Cloud Technology Services experience, Bachelor's degree", "qualificationsPreferred" : "Founder or executive experience, Practice leader or business unit owner experience, Experience selling to Fortune 1000, Experience selling to Global 2000", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon Web Services (AWS) is one of Amazon’s fastest growing businesses. We are passionate about thinking big, innovating on behalf of our customers, and tackling problems at scale. Cloud computing is disrupting industries everywhere, and we are eagerly seeking talented, entrepreneurial-minded individuals to join us as we continue to build on the AWS platform. Are you a customer-obsessed builder with a passion for helping customers achieve their full potential? Do you have the business savvy, security industry background, and sales skills necessary to help position AWS as the cloud provider of choice for customers? Do you love building new strategic and data-driven businesses? Join the Worldwide Specialist Organization (WWSO) Security GTM team as a WW Security Specialist. The Worldwide Specialist Organization (WWSO) is part of AWS Specialists and Partners (ASP) organization and is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. We work backwards from our customer's most complex and business critical problems to build and execute go-to-market plans that turn AWS ideas into multi-billion-dollar businesses. WWSO teams include business development, specialist and technical solutions architecture. As part of WWSO, you'll provide expertise across the entire life cycle of an AWS customer initiative, from developing ideas for new services to accelerating the adoption of established businesses. We pride ourselves on thinking big, delivering exceptional results for our customers, and working across AWS as #OneTeam. Within WWSO, this position is part of the Security, Identity & Governance (SIG) Specialist team, where you will help drive global go-to-market strategy and execution for AWS Security services through partner-led motions. The team builds and scales mechanisms that enable AWS partners to deliver exceptional security outcomes for customers, driving adoption of services including Amazon GuardDuty, AWS Security Hub and Security Hub Extended, AWS IAM Identity Center, Amazon Macie, AWS WAF, AWS Shield, AWS Network Firewall, and AWS Secrets Manager. As a Senior WW Security GTM Specialist, you will develop and execute partner GTM strategies across one or more SIG domains (AI Security, Network Security, Identity, Data Protection, Threat Detection, Governance), working with ISVs, system integrators, and managed security service providers to create and convert pipeline into revenue for AWS Security services. Key job responsibilities - Lead GTM to orchestrate sales motions for sales, marketing, partner, product, training, and professional services teams to accelerate adoption of AWS Security services through partner channels, thinking through challenges on a 1-3+ year time scale. - Develop and execute domain-specific partner GTM plans including partner segmentation and tiering (Tier 1 GSIs, Tier 2 Regional/Specialty SIs, Tier 3 ISV co-sell candidates), customer propensity analysis by segment and geography, and a three-pillar execution framework covering enablement, integration, and seller awareness. - Drive partner enablement and capability building through programs such as AWS PartnerEquip: Live, ensuring partners can effectively position, sell, and deliver AWS Security services. - Create and execute demand generation campaigns with partners targeting specific customer segments, coordinating with marketing resources to fund and scale activities including customer meetings, qualified pipeline targets, and conversion tracking. - Own pipeline and revenue reporting for assigned domains, tracking partner-attributed SIG pipeline and revenue through ACE, identifying gaps by service and geography, and intervening to accelerate deal velocity. - Support field teams in solution building for high-priority customer opportunities where partner capabilities complement AWS Security specialist expertise. - Bring market signals back to product teams to drive innovation on AWS Security service roadmaps, leveraging partner and customer feedback on threat detection, identity management, data protection, and network security use cases. - Support service launch partner strategies for new AWS Security services, ensuring partner readiness and go-to-market alignment for strategic launches. - Own reporting and planning cadences to AWS executives on GTM plan execution, including monthly business reviews (MBRs) and 2x2 domain reviews. - Demonstrate thought leadership and credibly represent AWS Security at industry events, conferences, partner summits, and customer engagements. About the team Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, annual reviews. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded employee and enable them to take on more complex tasks in the future. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications: - 7+ years of Go-To-Market, Business Development, Sales, or Consulting experience - 7+ years of developing, negotiating and executing business agreements experience - 5+ years of working with Core Cloud Technology Services, including, but not limited to Compute, Edge, Hybrid, Security, and/or Networking experience - Bachelor's degree - Experience developing strategies that influence leadership decisions at the organizational level Preferred Qualifications: - Experience as a founder or executive focused on related segments, or as a practice leader or business unit owner - Experience selling to Fortune 1000 or Global 2000 organizations Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, VA, Arlington - 176,100.00 - 238,200.00 USD annually USA, WA, Seattle - 176,100.00 - 238,200.00 USD annually", "summaryDescription" : "Worldwide Security Specialist at Amazon Web Services, Inc.. Skills: Security services GTM, Partner-led motions, Security services adoption. Lead GTM orchestrate sales motions. Develop GTM plans", "postedDate" : "2026-06-13T13:45:13.421", "createdAt" : "2026-06-13T13:45:13.421", "lastUpdated" : "2026-06-15T05:35:21.387", "ingestTimestamp" : "2026-06-13T13:45:13.421", "mongoId" : "69fda4e34c40e2acd1b9975a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10413631/apply", "salaryAnnualMin" : 176100, "salaryAnnualMax" : 238200, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Business agreements execution", "Partner segmentation", "Customer propensity analysis", "Enablement integration", "Seller awareness", "Pipeline tracking", "Deal velocity acceleration", "Threat detection", "Identity management", "Data protection", "Network security", "Customer-obsessed", "Entrepreneurial-minded", "Mentoring", "Security services GTM", "Partner-led motions", "Security services adoption", "Go-to-market strategy", "Business development", "Sales", "Consulting", "Partner enablement", "Demand generation", "Pipeline reporting", "Solution building", "Product roadmaps", "Service launch strategy", "GTM strategy execution", "AI Security", "Network Security", "Identity", "Data Protection", "Threat Detection", "Governance", "Cloud computing", "Security services", "ACE" ], "skillCount" : 37, "jobCategory" : "other", "dataQualityScore" : 1.0, "_score" : 832.0481, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "69e104402beec4dd3def251c", "title" : "Security Assurance Specialist", "company" : "Amazon Web Services, Inc.", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "timestamp" : "2026-06-15T01:33:16.258", "fingerprint" : "3924a81605c95fa247dd2c4fe58cdb80d5164203cebd14ba6704c9b245967dd7", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387235/apply", "externalId" : "c3086952-2a32-46c2-b8a0-b2d79faf46db", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "AI platforms", "professionalSkills" : [ "Risk assessment", "Control assessments", "Security posture", "Process improvement", "Technical challenges", "Security initiatives", "Compliance programs", "Risk decision making" ], "hardSkillsList" : [ "Control implementation", "Risk profile analysis" ], "hardSkills" : [ { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Risk profile analysis", "level" : "intermediate" } ], "majorSkills" : "Security assurance, Compliance, Risk management", "majorSkillsList" : [ "Security assurance", "Compliance", "Risk management" ], "coreResponsibilities" : "Develop understanding of operational services, Develop understanding of processes, Develop understanding of controls, Understand internal security control framework, Understand compliance assessment processes, Understand risk profile of AI platforms, Integrate AI platforms into assessment process, Perform service assessment work, Perform feature assessment work, Perform related assessment work, Develop tooling for security posture, Deliver tooling for security posture, Identify process improvement opportunities, Identify high-risk areas, Develop solutions to technical challenges, Manage build of new tooling, Manage deployment of new tooling, Streamline security-related initiatives, Automate security-related initiatives, Support process improvement projects, Support security-related projects, Manage communications to service teams, Manage communications to stakeholders, Develop technical understanding of control implementation, Articulate compliance implications, Set strategic direction, Improve documentation, Track progress, Coordinate improvement efforts, Monitor process improvement effectiveness, Develop domain knowledge, Develop technical knowledge, Monitor organization, Evaluate organization, Improve organization, Liaise with auditors, Articulate control implementation, Articulate control impact, Establish considerations for security concepts, Establish considerations for privacy concepts, Establish considerations for compliance concepts, Communicate compliance program results, Communicate assessment status, Communicate workflow, Communicate remediation, Communicate reporting", "teamCollaboration" : "Work with engineering teams; Work with business teams; Work with service teams; Work with service owners; Coordinate with service teams; Communicate to stakeholders", "projectManagementSkills" : [ "Program management", "Project management" ], "domainKnowledge" : "AWS security solutions; Regulated markets; Healthcare; Finance; Government; AI technologies", "domainList" : [ "aws-security-solutions", "regulated-markets", "healthcare", "finance", "government", "ai-technologies" ], "domainSpecificKnowledge" : [ "AWS security solutions", "Regulated markets", "Healthcare", "Finance", "Government", "AI technologies" ], "communicationSkills" : "Manage communications; Communicate results", "documentationSkills" : "Improve documentation", "continuousLearning" : "Training; Career growth; Knowledge sharing", "innovationCreativity" : "Innovative solutions", "problemSolvingSkills" : "Creative problem solver", "qualificationsBasic" : "Bachelor's Degree in Computer Science or equivalent, 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments, 3+ years of experience assessing complex technical processes", "qualificationsPreferred" : "Experience with audit or risk program design, Experience with control environment process documentation, Experience with control mapping, Experience with monitoring and automating security controls, Experience in third-party audit examinations, Experience in internal audit examinations, Experience performing technical assessments, Experience documenting network security, Experience documenting operating systems security, Experience documenting application security, Experience auditing IT processes, Working knowledge of key controls, Experience understanding AI technologies risk profile", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At AWS, Security is priority zero. As part of the Amazon Web Services (AWS) Security team, we are looking for a technically deep Industry Specialist who is passionate about owning far-reaching projects to drive continuous improvement across AWS at unparalleled scale. As a part of AWS Compliance and Security Assurance you’ll have an opportunity to operate in a constantly changing environment, working with AWS business and engineering teams on business-critical, security projects and programs. We work across AWS to drive strategic security initiatives, design and deliver tooling and automation, and continue to raise the bar on security at AWS. Our team also drives programs to enable customers that operate in regulated markets, such as Healthcare, Finance, Government, etc. Key job responsibilities In this role, you will: · Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture. · Understand our internal security control framework and how it relates to our compliance assessment processes. · Understand the risk profile of emerging AI platforms and integrate them into our assessment process. · Perform service, feature, and other related assessment work for customer and audit requirements. · Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture. · Identify process improvement opportunities and high-risk areas. · Work with service owners to develop innovative solutions to complex technical challenges. · Manage the build and deployment of new tooling to streamline and automate security-related initiatives. · Support process improvement and security-related projects in coordination with service teams. · Manage communications to service teams and stakeholders. A day in the life · Dive deep into the AWS control environment to develop technical understanding of control implementation, and articulate compliance implications to internal and external audit functions. · Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness. · Develop broad domain and technical knowledge in AWS security solutions including the operational processes and controls in place that support AWS compliance programs. · Monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver. · Develop and share program/project process frameworks, tools, and best practices that can be adopted throughout the organization. · Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment. · Effectively communicate compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Bachelor’s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or other related fields or equivalent practical experience. - 5+ years of experience in security, audits, customer trust, control assessments, or risk assessments. - 3+ years of experience assessing complex technical processes Preferred Qualifications: - Experience with audit or risk program design, control environment process documentation, and control mapping - Experience with monitoring and automating security controls. - Experience in third-party and/or internal audit examinations. - Demonstrates high judgement and risk decision making abilities. - Have experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices - Experience understanding the risk profile of emerging AI technologies Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 112,200.00 - 196,300.00 USD annually USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually USA, VA, Herndon - 102,000.00 - 178,400.00 USD annually USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Assurance Specialist at Amazon Web Services, Inc.. Skills: Security assurance, Compliance, Risk management. Develop understanding of operational services. Develop understanding of processes", "postedDate" : "2026-06-13T01:42:57.263", "createdAt" : "2026-06-13T01:42:57.263", "lastUpdated" : "2026-06-15T01:33:16.258", "ingestTimestamp" : "2026-06-13T01:42:57.263", "mongoId" : "69e104402beec4dd3def251c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387235/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Control implementation", "Risk profile analysis", "Security assurance", "Compliance", "Risk management", "Risk assessment", "Control assessments", "Security posture", "Process improvement", "Technical challenges", "Security initiatives", "Compliance programs", "Risk decision making", "Program management", "Project management", "AWS security solutions", "Regulated markets", "Healthcare", "Finance", "Government", "AI technologies" ], "skillCount" : 21, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 830.4932, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2ca39874d8ee00a09ac77e", "title" : "Security Operations Manager", "company" : "Titan Security Group", "salary" : { "min" : 75000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Wisconsin", "locations" : [ "Wisconsin" ], "timestamp" : "2026-06-16T04:21:43.191", "fingerprint" : "a635f18b35b851fefc388a8692376659242bdf706966b4b9b35cc3436ad2b723", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/tsg/jobs/4285198009", "externalId" : "4285198009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Green Bay", "state" : "Wisconsin", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "44.5126379,-88.0125794" } ], "locationText" : "Green Bay, Wisconsin, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceLevel" : "Manager", "technicalSkills" : "Microsoft Office", "professionalSkills" : [ "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement" ], "hardSkillsList" : [ "Workforce management", "Personnel file integrity", "Recruitment", "Sourcing activities", "Performance appraisal", "Disciplinary actions", "Exit interviews", "Unemployment claims", "Union grievances", "Appeals" ], "hardSkills" : [ { "name" : "Workforce management", "level" : "intermediate" }, { "name" : "Personnel file integrity", "level" : "intermediate" }, { "name" : "Recruitment", "level" : "intermediate" }, { "name" : "Sourcing activities", "level" : "intermediate" }, { "name" : "Performance appraisal", "level" : "intermediate" }, { "name" : "Disciplinary actions", "level" : "intermediate" }, { "name" : "Exit interviews", "level" : "intermediate" }, { "name" : "Unemployment claims", "level" : "intermediate" }, { "name" : "Union grievances", "level" : "intermediate" }, { "name" : "Appeals", "level" : "intermediate" } ], "majorSkills" : "Security operations, Supervisory capacity, Customer service", "majorSkillsList" : [ "Security operations", "Supervisory capacity", "Customer service" ], "coreResponsibilities" : "Supervise day to day security operations, Build effective relationships with clients, Build effective relationships with employees, Improve effective relationships with clients, Improve effective relationships with employees, Maintain effective relationships with clients, Maintain effective relationships with employees, Report operational matters, Establish schedules, Maintain schedules, Review schedules, Recruit workforce, Develop workforce, Perform recruiting activities, Perform sourcing activities, Assist with annual training requirements, Coordinate support services, Manage client sites, Handle escalated security issues, Handle emergency situations, Conduct annual reviews, Monitor staff performance quality, Review disciplinary actions, Recommend suspension, Recommend termination, Ensure performance appraisal program, Record reported data, Document performance tracking, Maintain personnel files, Ensure personnel file integrity, Support HR department, Review involuntary terminations, Coordinate exit interviews, Conduct exit interviews, Assist with unemployment claims, Assist with union grievances, Assist with appeals, Support hiring, Support training, Support on-boarding, Explain company personnel policies, Explain company benefits, Explain company procedures, Compile reports, Prepare reports, Compile documents, Prepare documents, Track company equipment, Ensure equipment utilization, Stay current on federal guidelines, Stay current on state guidelines, Support organization's culture, Support organization's processes, Support organization's practices, Support organization's systems, Meet needs of the business", "teamCollaboration" : "Work with HR department; Work with Account Managers", "domainKnowledge" : "Security operations; Physical security needs; Wisconsin Private Security License", "domainList" : [ "security-operations", "physical-security-needs", "wisconsin-private-security-license" ], "domainSpecificKnowledge" : [ "Security operations", "Physical security needs", "Wisconsin Private Security License" ], "toolProficiency" : [ "WinTeam" ], "communicationSkills" : "Read English; Write English; Speak English; Understand English", "documentationSkills" : "Record reported data; Compile reports; Prepare reports; Compile documents; Prepare documents; Prepare correspondence; Prepare memos", "continuousLearning" : "Skills-enhancing training; Opportunities for career growth; Opportunities for promotion", "specialRequirements" : "Flexible schedule, Weekends, Evenings, Pass pre-employment drug screen, Pass criminal background check, Maintain working telephone number", "outcomesObjectives" : "Meet or exceed financial goals; Meet or exceed operational goals; Provide quality customer service", "qualificationsBasic" : "Must be at least 21 years of age, Ability to acquire and maintain a Wisconsin Private Security License, Ability to pass pre-employment drug screen, Ability to pass criminal background check, Must maintain a working telephone number", "qualificationsPreferred" : "Bachelor's Degree Preferred, 2 years prior satisfactory employment as a security officer, 2 years prior satisfactory employment in a customer service position, Experience in a heavy volume call center preferred, Bi-lingual considered a plus, Scheduling software a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Titan Security is built on serving our clients and building careers – just like yours. We are trusted by some of the most well-known companies and properties in the country while remaining dedicated to building personalized security solutions that solve the needs of every customer we support. Named as a nationally recognized Top Workplace in 2024 and 2025 by USA Today, Titan's customized approach to security services will provide you with the opportunity to learn, grow and succeed. Our core values of being Unified, Transparent, Innovative, Committed and Accountable help us in providing unparalleled service and support in all that we do. If you are looking for a meaningful career, a culture of excellence, and the ability to make a difference, we want to talk to you! The Operations Manager reports to the VP Of Operations and is primarily responsible for supervising the day to day security operations out of the Titan Green Bay/ Sheboygan area. Additionally, the Operations Manager will work directly the HR department to ensure Titan Security provides “Best-In-Class service” to our clients and our staff. Responsibilities include but are not limited to: Build, improve, and maintain effective relationships with both client and employees. Report all operational matters directly to the Portfolio Manager and/or members of senior management. Responsible for establishing, maintaining and reviewing schedules to minimize company overtime within WinTeam. Responsible for the recruitment and ongoing development of the workforce. Perform direct recruiting and sourcing activities for open positions. Assist Director of Portfolio Management with annual training requirements for all staff. Build, improve and maintain effective relationships with both client and employees. Report all operational matters directly to the Director of Portfolio Management and/or members of senior management. Coordinate necessary support services to effectively manage client sites to meet or exceed financial and operational goals and provide quality customer service Handle any escalated security issues or emergency situations appropriately Conduct annual reviews on site staff and Field Supervisors. Monitors the quality of staff performance including review of disciplinary actions, recommendations for suspension or termination as well as ensuring a regular performance appraisal program for all staff Clearly and accurately record reported data such as call-offs, tardies, emergencies, unusual occurrences, and malfunctioning of equipment. Coordinates and documents performance tracking of all staff personnel Maintain and ensure the integrity of personnel files and workforce management systems working with Account Managers and HR department, as necessary Support HR department in review of involuntary terminations including coordinating and conducting exit interviews, assisting with unemployment claims, union grievances and appeals Supports Director of Portfolio Management and HR in hiring, training and on-boarding Explain company personnel policies, benefits, and procedures to all staff and job applicants Compile and prepare reports and documents pertaining to personnel activities and account trends Prepare correspondence and memos as needed Responsible for tracking company equipment in the field including technology, vehicles, etc. and ensuring company equipment is utilized in accordance with applicable policies Stays current on federal, state guidelines relative our services Supports the organization’s culture, processes, practices and systems to ensure that all employees are given the opportunity to contribute to the business goals of the company and its clients Flexible schedule to meet the needs of the business which includes weekends and evenings. Other duties as assigned Due to the nature of this assignment, special attention is paid to those candidates that are able to successfully demonstrate: A work history illustrating a progressively increasing security/customer service related skill sets and responsibilities with an emphasis in a supervisory capacity work, communication center protocol, knowledge of security operations, in addition to an advanced level computer proficiency/technological skills, specifically as it relates to established physical security needs. Having any, or a combination of the above listed attributes may increase your chances of selection Qualifications: Education and/or Experience: Bachelor’s Degree Preferred and 2 years prior satisfactory employment as a security officer or in a customer service position. Experience in a heavy volume call center preferred. Must be at least 21 years of age. Certificates, Licenses, Registrations: Ability to acquire and maintain a Wisconsin Private Security License, including state accredited training requirements. Language Skills: Must have the ability to read, write, speak, and understand English. Bi-lingual considered a plus. Computer Skills: Proficiency with Microsoft Office software, scheduling software a plus. Other Qualifications: Ability to pass pre-employment drug screen and criminal background check. Must maintain a working telephone number though which we can contact you. Physical Demands: Standard office environment. Salary & Benefits: Salaried role starting at $75,000 per year, plus paid time off, medical insurance, dental insurance, paid holidays, and pension/retirement benefits. Skills-enhancing training and opportunities for career growth and promotion EOE/M/F/D/V #HP", "summaryDescription" : "Security Operations Manager at Titan Security Group. Skills: Security operations, Supervisory capacity, Customer service. Supervise day to day security operations. Build effective relationships with clients", "postedDate" : "2026-06-14T20:11:15.902", "createdAt" : "2026-06-14T20:11:15.902", "lastUpdated" : "2026-06-16T04:21:43.191", "ingestTimestamp" : "2026-06-14T20:11:15.902", "mongoId" : "6a2ca39874d8ee00a09ac77e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Workforce management", "Personnel file integrity", "Recruitment", "Sourcing activities", "Performance appraisal", "Disciplinary actions", "Exit interviews", "Unemployment claims", "Union grievances", "Appeals", "Security operations", "Supervisory capacity", "Customer service", "Process management", "Cross-functional coordination", "Vendor management", "Stakeholder management", "Operational metrics", "Resource planning", "Continuous improvement", "Physical security needs", "Wisconsin Private Security License", "WinTeam" ], "skillCount" : 23, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 830.11115, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Security", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a8a7474d8ee00a0681f51", "title" : "Senior Industrial Security Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 203550.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-13T02:17:48.545", "fingerprint" : "d8e4d67d080964a404a5acd3e63bf68ca9e8da4e3227b401a25d459a1517df58", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Industrial-Security-Specialist_JR2026513180-1", "externalId" : "JR2026513180", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Governance", "Export compliance" ], "hardSkillsList" : [ "Personnel security administration", "Physical security", "Communications security", "Programmatic security" ], "hardSkills" : [ { "name" : "Personnel security administration", "level" : "intermediate" }, { "name" : "Physical security", "level" : "intermediate" }, { "name" : "Communications security", "level" : "intermediate" }, { "name" : "Programmatic security", "level" : "intermediate" } ], "majorSkills" : "Industrial Security, Risk management, Security programs", "majorSkillsList" : [ "Industrial Security", "Risk management", "Security programs" ], "coreResponsibilities" : "Develop enterprise risk management program, Implement enterprise risk management program, Administer enterprise risk management program, Develop security education, Implement security education, Administer security education, Develop security policy, Implement security policy, Administer security policy, Develop security procedures, Implement security procedures, Administer security procedures, Execute Internal Security Controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Protect government information, Protect intellectual information, Protect third party information, Protect company information, Contribute to enterprise IPT, Participate in review cycle, Participate in decision-making process, Provide innovation into Personnel Security, Provide creativity into Personnel Security, Reduce cycle time for clearances, Assist in obtaining security clearances, Assist in obtaining accesses, Provide innovation into security awareness training, Provide creativity into security awareness training, Provide innovation into education program, Provide creativity into education program, Educate personnel, Refresh personnel, Motivate personnel, Oversee Physical Security duties, Oversee Physical Security responsibilities, Complete fixed facility checklists, Complete closed facility checklists, Complete survey areas, Review facility drawings, Approve facility drawings, Complete tasks toward long-range goals, Complete tasks toward objectives, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Government regulations; Company regulations; Export compliance; Personnel Security; Physical Security; Communications Security; Programmatic Security; SCI; SAP", "domainList" : [ "government-regulations", "company-regulations", "export-compliance", "personnel-security", "physical-security", "communications-security", "programmatic-security", "sci", "sap" ], "domainSpecificKnowledge" : [ "Government regulations", "Company regulations", "Export compliance", "Personnel Security", "Physical Security", "Communications Security", "Programmatic Security", "SCI", "SAP" ], "toolProficiency" : [ "MS Office", "Word", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Oral communications; Written communications", "innovationCreativity" : "Innovation into Personnel Security; Creativity into Personnel Security; Innovation into security awareness training; Creativity into security awareness training; Innovation into education program; Creativity into education program", "problemSolvingSkills" : "Identify deficiencies; Develop corrective action; Implement corrective action; Conduct administrative inquiries", "specialRequirements" : "Obtain SCI/SAP access, U. S. Citizenship Required, US Top Secret/SCI Security Clearance", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years Industrial Security experience, 10+ years personnel security administration experience, 10+ years physical security experience, 10+ years communications security experience, 10+ years programmatic security experience, 5+ years government security programs experience, Ability to obtain SCI/SAP access", "qualificationsPreferred" : "Experience with MS Office, Experience with oral communications skills, Experience with written communications skills, Ability to obtain US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Industrial Security Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Industrial Security Specialist** to join the team in **Arlington, VA****.** The candidate will support ECS governance and risk management initiatives aimed at strengthening the security of classified programs. They will be responsible for establishing an enterprise risk management framework to evaluate the effectiveness of security programs across ECS, as well as broader Boeing risk management efforts designed to reduce security risk. In addition, the candidate will facilitate governance for risk management initiatives and develop policies, procedures, and awareness materials to help mitigate risk. **Position Responsibilities:** * Develops, implements and administers an enterprise risk management program, security education, policy and procedures to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision-making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Oversees Physical Security duties and responsibilities within Boeing facilities (e.g., complete fixed/closed facility checklists/survey areas, review and approve facility drawings for new or remodeled classified areas) to ensure compliance with company and government regulations/requirements * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience in Industrial Security * 10+ years of experience in personnel security administration, physical security, communications security and/or other programmatic security-related fields * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria are met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $203,550 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Industrial Security Specialist at Boeing. Skills: Industrial Security, Risk management, Security programs. Develop enterprise risk management program. Implement enterprise risk management program", "postedDate" : "2026-06-11T16:40:46.083", "createdAt" : "2026-06-11T16:40:46.064", "lastUpdated" : "2026-06-13T02:17:48.545", "ingestTimestamp" : "2026-06-11T16:40:46.064", "mongoId" : "6a2a8a7474d8ee00a0681f51", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Industrial-Security-Specialist_JR2026513180-1", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 203550, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Personnel security administration", "Physical security", "Communications security", "Programmatic security", "Industrial Security", "Risk management", "Security programs", "Governance", "Export compliance", "Government regulations", "Company regulations", "Personnel Security", "Physical Security", "Communications Security", "Programmatic Security", "SCI", "SAP", "MS Office", "Word", "Excel", "Teams", "Outlook" ], "skillCount" : 22, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 829.77155, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2af57374d8ee00a073a34c", "title" : "Cybersecurity Transition Manager", "company" : "Guidehouse", "industry" : "Cyber Consulting", "salary" : { "min" : 149000.0, "max" : 248000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "US - MD, Hanover", "locations" : [ "US - MD, Hanover", "United States of America" ], "certifications" : [ "CISSP", "CISM", "CRISC", "PMP" ], "timestamp" : "2026-06-14T23:04:09.827", "fingerprint" : "111bd9914521dfe413bd8d6a1c80f494d3a9d9ba16be1382f4429bc41bfc69f9", "source" : "workday", "language" : "en", "applyUrl" : "https://guidehouse.wd1.myworkdayjobs.com/External/job/US---MD-Hanover/Cybersecurity-Transition-Manager_38451", "externalId" : "38451", "industryFunction" : { }, "locationPoint" : "-32.81899,27.4806", "structuredLocations" : [ { "city" : "Hanover", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.1928853,-76.7241371" } ], "locationText" : "Hanover, Maryland, United States", "employmentType" : "PART_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceLevel" : "Manager", "technicalSkills" : "AWS, Azure, DevSecOps", "professionalSkills" : [ "Program delivery", "Stakeholder experience", "Change management", "Knowledge transfer", "Vendor management" ], "hardSkillsList" : [ "Security frameworks", "Regulatory requirements", "Security operations", "Vulnerability management", "Cloud security concepts", "Secure cloud migration", "Secure cloud operations" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Security frameworks", "level" : "intermediate" }, { "name" : "Regulatory requirements", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Cloud security concepts", "level" : "intermediate" }, { "name" : "Secure cloud migration", "level" : "intermediate" }, { "name" : "Secure cloud operations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity transition, Program management, Security operations", "majorSkillsList" : [ "Cybersecurity transition", "Program management", "Security operations" ], "coreResponsibilities" : "Lead cybersecurity transition programs, Manage cybersecurity transition programs, Develop transition plans, Execute transition plans, Coordinate cross-functional teams, Validate security requirements, Perform security acceptance testing, Ensure remediation of vulnerabilities, Define metrics, Track KPIs, Provide status reporting, Provide risk reporting, Provide issue reporting, Oversee change management, Oversee knowledge transfer, Oversee training activities, Manage third-party vendors, Ensure adherence to security policies, Ensure adherence to contractual requirements, Ensure adherence to applicable regulations", "teamCollaboration" : "Cross-functional teams; Engineering teams; Operations teams; Business stakeholders; External vendors", "projectManagementSkills" : [ "Program management", "Risk logs", "Schedules" ], "domainKnowledge" : "NIST CSF; CIS controls; Healthcare environments; Cloud platforms; DevSecOps practices; CI/CD pipelines; Infrastructure as Code", "domainList" : [ "nist-csf", "cis-controls", "healthcare-environments", "cloud-platforms", "devsecops-practices", "ci-cd-pipelines", "infrastructure-as-code" ], "domainSpecificKnowledge" : [ "NIST CSF", "CIS controls", "Healthcare environments", "Cloud platforms", "DevSecOps practices", "CI/CD pipelines", "Infrastructure as Code" ], "toolProficiency" : [ "Project management tools" ], "communicationSkills" : "Verbal communication; Written communication; Status reporting; Risk reporting; Issue reporting", "documentationSkills" : "Support documentation; Runbook handoffs", "continuousLearning" : "Skills Development; Certifications; Tuition Reimbursement; Personal Development; Learning Opportunities", "problemSolvingSkills" : "Remediation of vulnerabilities", "specialRequirements" : "Up to 10% travel, Ability to Obtain Public Trust", "outcomesObjectives" : "Maintain organization's security posture; Measure transition readiness", "qualificationsBasic" : "Bachelor's degree in Computer Science, 7 years of experience in cybersecurity, 3 years leading transitions, OBTAIN and MAINTAIN a Federal or DoD \"PUBLIC TRUST\", Proven knowledge of security frameworks, Familiarity with regulatory requirements, Project and program management skills, Excellent written communication skills, Excellent verbal communication skills, Hands-on understanding of security operations, Hands-on understanding of vulnerability management, Hands-on understanding of identity and access management, Hands-on understanding of cloud security concepts", "qualificationsPreferred" : "Candidates with an ACTIVE PUBLIC TRUST, Candidates with SUITABILITY, Experience supporting cybersecurity transitions, Experience in large enterprise healthcare organizations, Experience in health-tech environments, Experience with cloud platforms, Experience with secure cloud migration, Experience with secure cloud operations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "**_Job Family_ :** Cyber Consulting ** _Travel Required_ :** Up to 10% **_Clearance Required_ :** Ability to Obtain Public Trust ** _What You Will Do:_** * Lead and manage end-to-end cybersecurity transition programs, taking services and capabilities from project delivery into steady-state operations while maintaining the organization’s security posture. * Develop and execute detailed transition plans, schedules, risk registers, and runbooks in coordination with engineering, operations, vendors, and business stakeholders. * Coordinate cross-functional teams to validate security requirements, perform security acceptance testing, and ensure remediation of vulnerabilities prior to handover. * Define and track metrics and KPIs to measure transition readiness and success; provide regular status, risk, and issue reporting to senior leadership and governance forums. * Design and oversee change management, knowledge transfer, and training activities including operational procedures, support documentation, and runbook handoffs for operations teams. * Manage third-party vendors during transition activities and ensure adherence to organizational security policies, contractual requirements, and applicable regulations. **_What You Will Need:_** * Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience. * Minimum of SEVEN (7) years of experience in cybersecurity with demonstrated experience leading transitions, program delivery, or large cross-functional initiatives (minimum THREE (3) years leading transitions or similar programs). * Must be able to OBTAIN and MAINTAIN a Federal or DoD \"PUBLIC TRUST\"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred. * Proven knowledge of security frameworks and controls (for example NIST CSF, CIS controls) and familiarity with regulatory requirements relevant to healthcare environments (e.g., HIPAA). * Strong project and program management skills: ability to create and manage plans, schedules, risk logs, and stakeholder communications; experience using project management tools. * Excellent written and verbal communication skills and the ability to work effectively with technical teams, business stakeholders, and external vendors. * Hands-on understanding of security operations, vulnerability management, identity and access management, and cloud security concepts. **_What Would Be Nice To Have:_** * Professional certifications such as CISSP, CISM, CRISC, or PMP. * Experience supporting cybersecurity transitions within large enterprise healthcare organizations or health-tech environments. * Experience with cloud platforms (AWS, Azure) and secure cloud migration or operations. * Familiarity with automation and DevSecOps practices, CI/CD pipelines, and Infrastructure as Code as they relate to secure operations. The annual salary range for this position is $149,000.00-$248,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs. **_What We Offer_ :** Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace. Benefits include: * Medical, Rx, Dental & Vision Insurance * Personal and Family Sick Time & Company Paid Holidays * Position may be eligible for a discretionary variable incentive bonus * Parental Leave and Adoption Assistance * 401(k) Retirement Plan * Basic Life & Supplemental Life * Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts * Short-Term & Long-Term Disability * Student Loan PayDown * Tuition Reimbursement, Personal Development & Learning Opportunities * Skills Development & Certifications * Employee Referral Program * Corporate Sponsored Events & Community Outreach * Emergency Back-Up Childcare Program * Mobility Stipend _**About Guidehouse**_ Guidehouse is an Equal Opportunity Employer–Protected Veterans, Individuals with Disabilities or any other basis protected by law, ordinance, or regulation. Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco. If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at [RecruitingAccommodation@guidehouse.com](mailto:RecruitingAccommodation@guidehouse.com). All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation. All communication regarding recruitment for a Guidehouse position will be sent from Guidehouse email domains including @guidehouse.com or [guidehouse@myworkday.com](mailto:guidehouse@myworkday.com). Correspondence received by an applicant from any other domain should be considered unauthorized and will not be honored by Guidehouse. Note that Guidehouse will never charge a fee or require a money transfer at any stage of the recruitment process and does not collect fees from educational institutions for participation in a recruitment event. Never provide your banking information to a third party purporting to need that information to proceed in the hiring process. If any person or organization demands money related to a job opportunity with Guidehouse, please report the matter to Guidehouse’s Ethics Hotline. If you want to check the validity of correspondence you have received, please contact [recruiting@guidehouse.com](mailto:recruiting@guidehouse.com). Guidehouse is not responsible for losses incurred (monetary or otherwise) from an applicant’s dealings with unauthorized third parties. _Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee._", "summaryDescription" : "Cybersecurity Transition Manager at Guidehouse. Skills: Cybersecurity transition, Program management, Security operations. Lead cybersecurity transition programs. Manage cybersecurity transition programs", "postedDate" : "2026-06-11T02:48:39.082", "createdAt" : "2026-06-12T02:48:38.955", "lastUpdated" : "2026-06-14T23:04:09.827", "ingestTimestamp" : "2026-06-12T02:48:38.955", "mongoId" : "6a2af57374d8ee00a073a34c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://guidehouse.wd1.myworkdayjobs.com/External/job/US---MD-Hanover/Cybersecurity-Transition-Manager_38451", "salaryAnnualMin" : 149000, "salaryAnnualMax" : 248000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security frameworks", "Regulatory requirements", "Security operations", "Vulnerability management", "Cloud security concepts", "Secure cloud migration", "Secure cloud operations", "Leadership", "Cybersecurity transition", "Program management", "Program delivery", "Stakeholder experience", "Change management", "Knowledge transfer", "Vendor management", "Risk logs", "Schedules", "NIST CSF", "CIS controls", "Healthcare environments", "Cloud platforms", "DevSecOps practices", "CI/CD pipelines", "Infrastructure as Code", "CISSP", "CISM", "CRISC", "PMP", "Project management tools" ], "skillCount" : 29, "jobCategory" : "engineering", "seniorityLevel" : "manager", "dataQualityScore" : 1.0, "_score" : 829.7072, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cyber Consulting" }, { "id" : "6a2a8fb174d8ee00a0689ba6", "title" : "Director, Cybersecurity", "company" : "Radiant", "industry" : "Engineering", "salary" : { "min" : 186000.0, "max" : 258300.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "El Segundo, CA", "locations" : [ "El Segundo, CA" ], "certifications" : [ "CPP", "PSP", "PCI" ], "timestamp" : "2026-06-14T22:22:14.326", "fingerprint" : "78274d3d0e968936c46044b76fe8cc1a2b0d943a5d956b0e7a2ae514b489f946", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/radiant-industries/8ea841fd-4a73-4632-bb2c-56a65689082d/application", "externalId" : "8ea841fd-4a73-4632-bb2c-56a65689082d", "industryFunction" : { }, "structuredLocations" : [ { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" } ], "locationText" : "El Segundo, California, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 7, "experienceLevel" : "Director", "technicalSkills" : "Application security", "professionalSkills" : [ "Risk management framework", "Security policies", "Security procedures", "Regulatory requirements" ], "hardSkillsList" : [ "Cybersecurity audits", "Control testing", "Information protection" ], "softSkillsList" : [ "Creativity", "Innovation" ], "hardSkills" : [ { "name" : "Cybersecurity audits", "level" : "intermediate" }, { "name" : "Control testing", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Creativity" }, { "name" : "Innovation" } ], "majorSkills" : "Cybersecurity strategy, Security controls, Information protection", "majorSkillsList" : [ "Cybersecurity strategy", "Security controls", "Information protection" ], "coreResponsibilities" : "Lead development and implementation of security strategies, Lead development and implementation of security policies, Manage budget for security infrastructure, Manage resources for security infrastructure, Lead cybersecurity audits, Lead cybersecurity assessments, Lead control testing, Review regulatory requirements, Provide solutions meeting regulatory intent, Provide rationale meeting regulatory intent, Review operational requirements, Review system specification documents, Ensure security requirements are addressed, Ensure security requirements are incorporated, Educate stakeholders on protecting material, Educate stakeholders on protecting information, Serve as liaison with regulators, Serve as liaison with auditors, Serve as liaison with government stakeholders", "teamCollaboration" : "Partnering with engineering; Partnering with IT", "domainKnowledge" : "Nuclear industry security; Defense industry security; Export control regulations; ICS/OT cybersecurity; Nuclear security regulations; COMSEC; Insider threat programs; Physical-cyber integration", "domainList" : [ "nuclear-industry-security", "defense-industry-security", "export-control-regulations", "ics-ot-cybersecurity", "nuclear-security-regulations", "comsec", "insider-threat-programs", "physical-cyber-integration" ], "domainSpecificKnowledge" : [ "Nuclear industry security", "Defense industry security", "Export control regulations", "ICS/OT cybersecurity", "Nuclear security regulations", "COMSEC", "Insider threat programs", "Physical-cyber integration" ], "communicationSkills" : "Educate stakeholders", "innovationCreativity" : "Drive innovation; Advocate for controls; Advocate for access solutions", "problemSolvingSkills" : "Provide solutions", "specialRequirements" : "Work extended hours, Work weekends, 100% onsite, Export controls compliance", "qualificationsBasic" : "7+ years cybersecurity experience, Defense or high-assurance environment experience, Understanding of application security, Performing assessments utilizing risk management framework, Proven track record of developing and implementing security policies and procedures, Knowledge of relevant federal and state regulations, Bachelor's degree in Computer Science, Engineering, or related field", "qualificationsPreferred" : "Direct experience with nuclear security regulations, Experience interfacing with executive leadership, Experience interfacing with external regulators, Familiarity with ICS/OT cybersecurity, Prior work with COMSEC, Prior work with insider threat programs, Prior work with physical-cyber integration, Previous experience working with defense contracts, Understanding of relevant export control regulations", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT RADIANT Radiant is an El Segundo, CA-based startup building the world’s first mass-produced, portable nuclear microreactors. The company’s first reactor, Kaleidos, is a 1-megawatt, fail-safe microreactor that can be transported anywhere power is needed and run for up to 5 years without refueling. Portable nuclear power with rapid-deploy capability can replace similar-sized diesel generators and provide critical asset support for hospitals, data centers, remote sites, and military bases. Radiant’s unique, practical approach to nuclear development leverages modern software engineering to rapidly deliver safe, factory-built microreactors that use existing, well-qualified materials. Founded in 2020, Radiant is on track to test its first reactor at the Idaho National Laboratory this summer, with initial customer deliveries beginning in 2028. About the Role Radiant is seeking a Director, Cybersecurity to implement the controls and protection necessary for safeguarding our sensitive information and technology. You will be responsible for cybersecurity, partnering with our engineering and IT departments to implement security controls, as well as developing and managing information protection programs. You will drive innovation across the nuclear industry by advocating for controls and access solutions that have not been previously deployed. A successful candidate will leveragetheir experience on DoD and IC programs and bring those same designs to the nuclear space. Creativity and a passion for challenging the status quo are a must. Responsibilities & Duties: - Lead the development and implementation of comprehensive security strategies and policies. - Manage budget and resources for security infrastructure. - Lead cybersecurity audits, assessments, and control testing. - Review regulatory requirements and provide solutions and rationale that meet the intent of those requirements with modern tools. - Review operational requirements and system specification documents to ensure applicable security requirements are addressed and incorporated into security processes. - Educate stakeholders on modern and efficient means for protecting material and information. - Serve as our liaison with regulators, auditors, and government stakeholders. Required Qualifications & Skills: - 7+ years of experience in cybersecurity, preferably in a defense or high-assurance environment. - Strong understanding of application security and performing assessments utilizing a risk management framework. - Proven track record of developing and implementing security policies and procedures. - Knowledge of relevant federal and state regulations affecting nuclear and defense industry security. - Bachelor's degree in Computer Science, Engineering, or a related field. Desired Qualifications & Skills: - Direct experience with nuclear security regulations (NRC 10 CFR 73). - Experience interfacing with executive leadership and external regulators. - Familiarity with ICS/OT cybersecurity in energy or defense environments. - Prior work with COMSEC, insider threat programs, or physical-cyber integration. - Professional certifications (e.g., CPP, PSP, PCI from ASIS International). - Previous experience working with defense contracts and understanding of relevant export control regulations (Part 810, Pat 110, EAR, ITAR). Additional Requirements: - Must be willing to work extended hours and weekends as necessary to accomplish our mission. - Must work 100% onsite at El Segundo HQ. BENEFITS AND PERKS - Stock: Substantial incentive stock plan for all full-time employees. - Medical: 100% up to base silver level plan for employee + 50% dependents, offers up to Platinum plans. - One Medical: Sponsored memberships for employees and their dependents. - Vision: 100% top tier plan coverage + 50% for dependents. - Dental: 100% top tier plan coverage, orthodontia extra, 50% for dependents. - Voluntary life, accident, hospital, critical illness, commuter and FSA/HSA are offered as employee contributed benefits. - 8-weeks of paid parental leave for all parents. Additional paid pregnancy leave for CA employees. - Daily catered lunch. Free snacks and drinks. - Flexible PTO policy. Remote workday allocation. - Company and team-bonding events, happy hours and in-person camaraderie. - Beautiful El Segundo headquarters close to the Pacific Ocean. Total Compensation and Benefits Radiant compensates people for impact and invests in those who continue to raise the bar. Radiant’s new hire compensation package includes base salary, substantial equity grants, and comprehensive health benefits. Total compensation and level are determined through a rigorous evaluation of interview performance, experience, education, and qualifications, and are designed to support continued growth as scope, responsibility, and impact expand at Radiant. The best of today’s advanced reactor builders don’t wait for job postings. They join the winning team. If that’s you, contact us directly for immediate opportunities: recruiting@radiantnuclear.com. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Unfortunately, we are unable to provide visa sponsorship at this time. This position involves access to technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.", "summaryDescription" : "Director, Cybersecurity at Radiant. Skills: Cybersecurity strategy, Security controls, Information protection. Lead development and implementation of security strategies. Lead development and implementation of security policies", "postedDate" : "2026-06-11T17:28:57.136", "createdAt" : "2026-06-11T17:28:57.136", "lastUpdated" : "2026-06-14T22:22:14.326", "ingestTimestamp" : "2026-06-11T17:28:57.136", "mongoId" : "6a2a8fb174d8ee00a0689ba6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 186000, "salaryAnnualMax" : 258300, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cybersecurity audits", "Control testing", "Information protection", "Creativity", "Innovation", "Cybersecurity strategy", "Security controls", "Risk management framework", "Security policies", "Security procedures", "Regulatory requirements", "Nuclear industry security", "Defense industry security", "Export control regulations", "ICS/OT cybersecurity", "Nuclear security regulations", "COMSEC", "Insider threat programs", "Physical-cyber integration", "CPP", "PSP", "PCI" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "security", "dataQualityScore" : 1.0, "_score" : 819.6314, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Nuclear" }, { "id" : "6a191e7758b93c861e39f85d", "title" : "IT Security Specialist", "company" : "Mercedes-Benz Group China Ltd.", "industry" : "Cybersecurity", "salary" : { "min" : 450000.0, "max" : 750000.0, "currency" : "CNY", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Specialist in Beijing, China, adjusted for senior seniority, technology industry, and large company size." }, "location" : "China (Mainland)-Beijing-Beijing", "locations" : [ "China (Mainland)-Beijing-Beijing", "Daimler Tower 8, Wangjing Street Chaoyang District, , Beijing" ], "certifications" : [ "CISA", "CISSP" ], "timestamp" : "2026-06-16T03:17:27.188", "fingerprint" : "f88e6418966a5cbadef6ca9c8dc0b0b4830962fbf3e9d6df64d84b4b71bf818b", "source" : "taleo", "language" : "en", "applyUrl" : "https://tas-daimler.taleo.net/careersection/ex/jobdetail.ftl?job=879640", "externalId" : "879640", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Beijing", "country" : "China", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "39.9057136,116.3912972" } ], "locationText" : "Beijing, China", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud Security, Network, Web Technologies, Database, Operating Systems", "professionalSkills" : [ "Risk Management", "Compliance", "Security Standards", "Data Protection", "IT operations", "ITIL" ], "hardSkillsList" : [ "Penetration testing", "Vulnerability assessment", "Threat assessment", "Information classification", "Incident response", "Disaster recovery", "Application recovery" ], "hardSkills" : [ { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Threat assessment", "level" : "intermediate" }, { "name" : "Information classification", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Application recovery", "level" : "intermediate" } ], "majorSkills" : "IT Security, Risk Management, Compliance, Security Governance", "majorSkillsList" : [ "IT Security", "Risk Management", "Compliance", "Security Governance" ], "coreResponsibilities" : "Ensure security standard adherence, Monitor system vulnerabilities, Identify threats, Identify issues, Document vulnerabilities, Track remediation, Develop cloud security strategies, Implement cloud security strategies, Govern policy compliance, Govern process compliance, Protect confidentiality, Protect integrity, Protect availability, Manage organizational controls, Manage technical controls, Support risk assessment, Support risk analysis, Monitor risk control implementation, Monitor risk minimization implementation, Identify service vulnerabilities, Identify application vulnerabilities, Order penetration services, Order assessment services, Monitor penetration services, Monitor assessment services, Document assessment results, Ensure mitigation, Ensure minimization, Assess threats, Develop security measures, Assess measure effectiveness, Assist business partners, Classify information, Coordinate security incidents, Participate in incident response, Develop mitigation strategies, Develop remediation strategies, Maintain disaster recovery plans, Maintain application recovery plans, Develop awareness campaigns, Conduct awareness campaigns, Define security controls, Ensure Information Security Management, Support R&D system implementation, Support R&D process implementation, Implement R&D systems, Implement R&D processes", "teamCollaboration" : "Business partners; Incident response teams", "domainKnowledge" : "NIST; ISO 27001; RD China systems; RD China processes", "domainList" : [ "nist", "iso-27001", "rd-china-systems", "rd-china-processes" ], "domainSpecificKnowledge" : [ "NIST", "ISO 27001", "RD China systems", "RD China processes" ], "communicationSkills" : "Awareness campaigns", "documentationSkills" : "Document results; Document vulnerabilities", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "qualificationsBasic" : "5+ years experience in security governance, 5+ years experience in security operations, Bachelor's degree in Computer Science, Information Security focus", "qualificationsPreferred" : "CISA certification, CISSP certification", "remoteFriendly" : false, "rawDescription" : "Ensure that the organization and IT assets follow the security standard and governance especially for RD China. Monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. - Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. - Responsible for organizational and technical controls - Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures - Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization - Assessing threats and developing appropriate security measures and assessing their effectiveness - Assist businesspartners in information classification - Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies - Take care of actuality of disaster or application recovery plans - Develop and conduct target group orientated awareness campaigns - Define security controls derived from policies - Ensure Information Security Management at RD China Support Implementation and development of R&D systems and processes from security perspective Professional Skills: Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) Experience with security frameworks, such as NIST, and ISO 27001. Relevant certifications, CISA, CISSP > 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security Mercedes-Benz Group China Ltd.", "summaryDescription" : "IT Security Specialist at Mercedes-Benz Group China Ltd.. Skills: IT Security, Risk Management, Compliance, Security Governance. Ensure security standard adherence. Monitor system vulnerabilities", "createdAt" : "2026-06-14T19:58:40.242", "lastUpdated" : "2026-06-16T03:17:27.188", "ingestTimestamp" : "2026-06-14T19:58:40.242", "mongoId" : "6a191e7758b93c861e39f85d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Penetration testing", "Vulnerability assessment", "Threat assessment", "Information classification", "Incident response", "Disaster recovery", "Application recovery", "IT Security", "Risk Management", "Compliance", "Security Governance", "Security Standards", "Data Protection", "IT operations", "ITIL", "NIST", "ISO 27001", "RD China systems", "RD China processes", "CISA", "CISSP" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 818.2226, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 151075, "totalPages" : 3022, "hasNext" : true, "hasPrevious" : false } }

Senior Cybersecurity Operations Specialist Security Services Jobs in Austin

Senior Cybersecurity Operations Specialist (Security Services)

Senior Cybersecurity Operations Specialist

Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x)

Senior Cybersecurity Governance Specialist

Cybersecurity Specialist

Senior Cybersecurity Advisor

Cybersecurity GRC Specialist

Senior Security Specialist

Senior Manager, Cybersecurity

Senior Staff Cybersecurity Engineer, Platform Security

Security Senior Specialist

IT & Cybersecurity Manager

Senior Cybersecurity Engineer

Senior Consultant, Cybersecurity

Senior Security Risk Specialist

Cybersecurity Intern, Security Operations

Cybersecurity Engineer

Cybersecurity Analyst, IT Operations

Senior Security Engineer

Senior Security Engineer

Senior Information Security Compliance Specialist

Security Compliance Specialist, Devices & Services Security Compliance

Cybersecurity Manager (Incident Response & Security Operations)

Cybersecurity Analyst

Sr. Cybersecurity Operations Analyst

Senior Security Operations Engineer

Principal / Lead Software Engineer (Cybersecurity Specialist)

Senior Cybersecurity Engineer

Technology Operations & Cybersecurity Analyst

Security & LP Specialist, Worldwide Operations

Senior Securities Operations Specialist

Senior Cybersecurity Engineer

Cybersecurity Analyst

Senior Cloud Cybersecurity Specialist (AWS/FedRAMP)

Senior Information Security Compliance Specialist

Cybersecurity Analyst

Security Assurance Specialist (Regulatory Operations Center)

Senior Solutions Architect - Security Specialist

Manager, Security Services Management, Worldwide Operations Security (WWOS)

Senior Manager - Devices & Services Security

Security Specialist II

Spécialiste en cybersécurité - Cyber Security Specialist

Security Specialist

Worldwide Security Specialist

Security Assurance Specialist

Security Operations Manager

Senior Industrial Security Specialist

Cybersecurity Transition Manager

Director, Cybersecurity

IT Security Specialist

Common Questions