{ "count" : 158948, "data" : [ { "id" : "6a2ca53574d8ee00a09b5343", "title" : "Senior Cybersecurity Operations Specialist (Security Services)", "company" : "GovTech", "industry" : "Cybersecurity", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Specialist in Singapore, adjusted for the government industry and a large company size." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "OSCP", "OSWE", "CASE", "GWEB" ], "timestamp" : "2026-06-15T08:28:23.725", "fingerprint" : "5f8d58b9cb5e84d2ada39a619482194a1418c152a9ae83c0c8e9c26725275740", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003983201?gh_jid=4003983201", "externalId" : "4003983201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Jenkins, GitLab CI, GitHub Actions", "professionalSkills" : [ "Risk communication", "Pattern recognition", "Constructive feedback" ], "hardSkillsList" : [ "Vulnerability analysis", "Security testing" ], "softSkillsList" : [ "Influence", "Diplomacy", "Analytical mindset" ], "hardSkills" : [ { "name" : "Vulnerability analysis", "level" : "intermediate" }, { "name" : "Security testing", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Influence" }, { "name" : "Diplomacy" }, { "name" : "Analytical mindset" } ], "majorSkills" : "Cybersecurity Operations, MITRE ATT&CK, Cloud Security", "majorSkillsList" : [ "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security" ], "coreResponsibilities" : "Perform security testing, Identify code vulnerabilities, Provide constructive feedback", "teamCollaboration" : "Non-technical stakeholders; Agency-level performance", "domainKnowledge" : "MITRE ATT&CK framework; Government Commercial Cloud", "domainList" : [ "mitre-att-ck-framework", "government-commercial-cloud" ], "domainSpecificKnowledge" : [ "MITRE ATT&CK framework", "Government Commercial Cloud" ], "communicationSkills" : "Risk communication", "problemSolvingSkills" : "Pattern recognition; Vulnerability analysis", "outcomesObjectives" : "Improve agency performance", "qualificationsBasic" : "Deep understanding MITRE ATT&CK, Knowledge of common TTPs", "qualificationsPreferred" : "OSCP certification, OSWE certification, CASE certification, GWEB certification", "rawDescription" : "GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT deep understanding of the MITRE ATT&CK framework and common TTPs. Cloud & DevOps: Experience with Government Commercial Cloud (GCC) environments and practical knowledge of Jenkins, GitLab CI, or GitHub Actions. Certifications: Professional certifications such as OSCP, OSWE (Offensive Security Web Expert), CASE (Certified Application Security Engineer), or GWEB are highly desirable. Soft Skills Influence & Diplomacy: Ability to communicate complex technical risks to non-technical stakeholders (CIOs/Project Owners) and influence change without direct reporting lines. Analytical Mindset: Ability to spot patterns in \"bad\" testing jobs or recurring code vulnerabilities and provide constructive feedback to improve agency-level performance.", "summaryDescription" : "Senior Cybersecurity Operations Specialist (Security Services) at GovTech. Skills: Cybersecurity Operations, MITRE ATT&CK, Cloud Security. Perform security testing. Identify code vulnerabilities", "postedDate" : "2026-06-14T02:49:40.729", "createdAt" : "2026-06-14T02:49:40.729", "lastUpdated" : "2026-06-15T08:28:23.725", "ingestTimestamp" : "2026-06-14T02:49:40.729", "mongoId" : "6a2ca53574d8ee00a09b5343", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Vulnerability analysis", "Security testing", "Influence", "Diplomacy", "Analytical mindset", "Cybersecurity Operations", "MITRE ATT&CK", "Cloud Security", "Risk communication", "Pattern recognition", "Constructive feedback", "MITRE ATT&CK framework", "Government Commercial Cloud", "OSCP", "OSWE", "CASE", "GWEB" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 2055.7812, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a307371f292fd229c00211a", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 105000.0, "max" : 155000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T10:05:41.899", "fingerprint" : "6d596a72f69922c8858a3833af24cb7a198df43530aa1956969029da8294be71", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Independent work" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Firewall management, Cloud networking, Troubleshooting", "majorSkillsList" : [ "Network security", "Firewall management", "Cloud networking", "Troubleshooting" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Resolve connectivity issues, Investigate performance issues, Resolve performance issues, Investigate security issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose security improvements, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network infrastructure; Cloud environments; Network security; Hybrid connectivity; Zero Trust; SASE/SSE; Cloud networking", "domainList" : [ "network-infrastructure", "cloud-environments", "network-security", "hybrid-connectivity", "zero-trust", "sase-sse", "cloud-networking" ], "domainSpecificKnowledge" : [ "Network infrastructure", "Cloud environments", "Network security", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "Cloud networking" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Firewall management, Cloud networking, Troubleshooting. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T01:31:53.743", "lastUpdated" : "2026-06-16T10:05:41.899", "ingestTimestamp" : "2026-06-16T01:31:53.743", "mongoId" : "6a307371f292fd229c00211a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Analytical skills", "Sense of responsibility", "Independent work", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Cloud networking", "Troubleshooting", "Network administration", "Configuration management", "Documentation", "Governance", "Program management", "Network infrastructure", "Cloud environments", "Hybrid connectivity", "Zero Trust", "SASE/SSE", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1352.5161, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a306986f292fd229cfc88fd", "title" : "Cybersecurity Network Security Specialist", "company" : "ARHS", "industry" : "Information Technology And Services", "salary" : { "min" : 100000.0, "max" : 150000.0, "currency" : "PLN", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Network Security Specialist in Warsaw, Poland, adjusted for the Technology industry." }, "location" : "Warsaw, Masovian Voivodeship, Poland", "locations" : [ "Warsaw", "Masovian Voivodeship", "Poland" ], "certifications" : [ "CCNP Security", "CCSP", "AZ-305" ], "timestamp" : "2026-06-16T11:22:30.636", "fingerprint" : "55cff00c6020b96fa74b303d42642034c59187fb924c4a1f4ea7192080a0c5cb", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/ARHS/744000132166709-cybersecurity-network-security-specialist", "externalId" : "744000132166709", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Warsaw", "state" : "Masovian Voivodeship", "country" : "Poland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.2333742,21.0711489" } ], "locationText" : "Warsaw, Masovian Voivodeship, Poland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "TCP/IP, DNS, DHCP, NTP, HTTPS, SSL/TLS, PKI, Cisco, Palo Alto, Panorama, Azure, SASE, SSE, Zero Trust, WAF, Load Balancing, 802.1X, NAC", "professionalSkills" : [ "Network administration", "Network security", "Troubleshooting", "Configuration management", "Documentation", "Governance" ], "hardSkillsList" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration" ], "softSkillsList" : [ "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset" ], "hardSkills" : [ { "name" : "Firewall management", "level" : "intermediate" }, { "name" : "Routing", "level" : "intermediate" }, { "name" : "Switching", "level" : "intermediate" }, { "name" : "VPN management", "level" : "intermediate" }, { "name" : "Packet analysis", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Wireless integration", "level" : "intermediate" }, { "name" : "Wired integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical skills" }, { "name" : "Sense of responsibility" }, { "name" : "Clear communication" }, { "name" : "Structured mindset" }, { "name" : "Team-oriented mindset" } ], "majorSkills" : "Network security, Enterprise network infrastructure, Cloud networking", "majorSkillsList" : [ "Network security", "Enterprise network infrastructure", "Cloud networking" ], "coreResponsibilities" : "Administer network security solutions, Monitor network security solutions, Troubleshoot network security solutions, Manage firewalls, Manage routing, Manage switching, Manage secure access technologies, Ensure stable operation of enterprise network infrastructure, Support hybrid connectivity, Provide 2nd line support, Perform advanced troubleshooting, Investigate connectivity issues, Investigate performance issues, Investigate security issues, Resolve connectivity issues, Resolve performance issues, Resolve security issues, Implement network configurations, Maintain network configurations, Manage VPNs, Manage secure remote access, Manage network segmentation, Support wireless network integrations, Support wired network integrations, Identify gaps in network security controls, Propose improvements to network security, Support Zero Trust initiatives, Support modern security architecture initiatives, Contribute to migration efforts, Create technical documentation, Maintain technical documentation, Create operating procedures, Maintain operating procedures, Ensure adherence to network security policies, Ensure adherence to network security standards", "teamCollaboration" : "Technical stakeholders; Non-technical stakeholders", "projectManagementSkills" : [ "Program management" ], "domainKnowledge" : "Network security; Cloud networking; Zero Trust principles; SASE; SSE; Modern security architecture", "domainList" : [ "network-security", "cloud-networking", "zero-trust-principles", "sase", "sse", "modern-security-architecture" ], "domainSpecificKnowledge" : [ "Network security", "Cloud networking", "Zero Trust principles", "SASE", "SSE", "Modern security architecture" ], "toolProficiency" : [ "Panorama" ], "communicationSkills" : "Technical documentation; Operating procedures", "documentationSkills" : "Technical documentation; Operating procedures", "problemSolvingSkills" : "Troubleshooting; Analytical skills", "specialRequirements" : "Occasional travel within Europe, Driving license Category B", "qualificationsBasic" : "Understanding of TCP/IP, Understanding of routing, Understanding of network security policies, Knowledge of DNS, Knowledge of DHCP, Knowledge of NTP, Knowledge of core network services, Understanding of wired access technologies, Understanding of wireless access technologies, Knowledge of HTTPS, Knowledge of SSL/TLS, Knowledge of PKI, Knowledge of certificate-based authentication, Experience with traffic filtering, Hands-on experience with enterprise network environments, Experience with Cisco, Experience with Palo Alto, Experience with wireless solutions, Familiarity with endpoint network configurations, Azure networking, Network security controls, CCNP Security or equivalent", "qualificationsPreferred" : "CCSP or Azure AZ-305", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development. Arηs Group was acquired by Accenture in July 2024. Role Overview You will manage and secure enterprise network infrastructure across on-prem and cloud environments, ensuring reliable connectivity, strong security posture, and consistent network operations. The role combines hands-on administration, troubleshooting, and continuous improvement of network security capabilities. Responsibilities Network Security & Operations * Administer, monitor, and troubleshoot network security solutions * Manage firewalls, routing, switching, and secure access technologies * Ensure secure and stable operation of enterprise network infrastructure * Support hybrid connectivity (on-prem and cloud environments) Support & Troubleshooting * Provide 2nd line support for network and security-related incidents * Perform advanced troubleshooting (network flows, packet analysis, firewall dataplane) * Investigate and resolve connectivity, performance, and security issues Configuration & Implementation * Implement and maintain network configurations across environments * Manage VPNs, secure remote access, and network segmentation * Support wireless and wired network integrations (e.g. 802.1X, NAC) Security & Continuous Improvement * Identify gaps in network security controls and propose improvements * Support Zero Trust and modern security architecture initiatives * Contribute to migration efforts (e.g. SASE/SSE, cloud networking) Documentation & Governance * Create and maintain technical documentation and operating procedures * Ensure adherence to network security policies and standards ## Qualifications Core Networking * Strong understanding of TCP/IP, routing, and network security policies * Knowledge of DNS, DHCP, NTP and core network services * Understanding of wired and wireless access technologies Security & Encryption * Knowledge of HTTPS, SSL/TLS, PKI, and certificate-based authentication * Experience with traffic filtering (stateful/stateless) Infrastructure & Tools * Hands-on experience with enterprise network environments * Experience with Cisco (routing/switching), Palo Alto (firewalls, Panorama), wireless solutions * Familiarity with endpoint network configurations (Windows, Linux, iOS) Cloud & Modern Networking * Azure networking (VNets, segmentation, private endpoints, hybrid connectivity) * Network security controls (NSGs, routing, isolation) * Experience with SASE/SSE and Zero Trust principles is an advantage * Exposure to WAF and Load Balancing solutions Certifications * CCNP Security or equivalent (required) * CCSP or Azure AZ-305 (nice to have) Key Competencies * Strong analytical and troubleshooting skills * Attention to detail and sense of responsibility * Ability to work independently in complex environments * Clear communication with technical and non-technical stakeholders * Proactive, structured, and team-oriented mindset ## Additional Information * This role requires occasional travel within Europe (up to ~10 times/year) * Driving license (Category B) required", "summaryDescription" : "Cybersecurity Network Security Specialist at ARHS. Skills: Network security, Enterprise network infrastructure, Cloud networking. Administer network security solutions. Monitor network security solutions", "postedDate" : "2026-06-15T10:33:17.000", "createdAt" : "2026-06-16T00:19:01.793", "lastUpdated" : "2026-06-16T11:22:30.636", "ingestTimestamp" : "2026-06-16T00:19:01.793", "mongoId" : "6a306986f292fd229cfc88fd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Firewall management", "Routing", "Switching", "VPN management", "Packet analysis", "Network segmentation", "Wireless integration", "Wired integration", "Analytical skills", "Sense of responsibility", "Clear communication", "Structured mindset", "Team-oriented mindset", "Network security", "Enterprise network infrastructure", "Cloud networking", "Network administration", "Troubleshooting", "Configuration management", "Documentation", "Governance", "Program management", "Zero Trust principles", "SASE", "SSE", "Modern security architecture", "CCNP Security", "CCSP", "AZ-305", "Panorama" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1352.5161, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b5342", "title" : "Senior Cybersecurity Operations Specialist", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 95000.0, "max" : 145000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Specialist in Singapore, adjusted for government industry and seniority." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "GCIH", "GCFA", "CHFI", "CISSP" ], "timestamp" : "2026-06-15T07:31:25.322", "fingerprint" : "5a46f9ec3813e78b26d99b086ce195526712f6e7db47c2983d4dc50090a8fc61", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003979201?gh_jid=4003979201", "externalId" : "4003979201", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Singapore", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cybersecurity, Incident Response, Digital forensics, Malware analysis, Threat Intelligence, MITRE ATT&CK, Vulnerability Management, Exploitation techniques, SIEM, SOAR, XDR, EDR, Cloud Operations, GCC", "professionalSkills" : [ "Crisis Leadership", "Technical Oversight", "Incident Governance", "Operational Readiness", "Resiliency Testing", "Capability Building", "Asset Visibility", "Threat Scenario Guidance", "Vulnerability Assessment", "Attack Surface Scanning", "Stakeholder Education" ], "hardSkillsList" : [ "IR methodologies", "Exploitation mechanics", "Vulnerability prioritization", "Patch validation" ], "softSkillsList" : [ "Command & Control", "Diplomacy", "Strategic Foresight" ], "hardSkills" : [ { "name" : "IR methodologies", "level" : "intermediate" }, { "name" : "Exploitation mechanics", "level" : "intermediate" }, { "name" : "Vulnerability prioritization", "level" : "intermediate" }, { "name" : "Patch validation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Command & Control" }, { "name" : "Diplomacy" }, { "name" : "Strategic Foresight" } ], "majorSkills" : "Incident Response, Operational Resilience, Threat Management, Vulnerability Management", "majorSkillsList" : [ "Incident Response", "Operational Resilience", "Threat Management", "Vulnerability Management" ], "coreResponsibilities" : "Establish IR playbooks, Provide crisis guidance, Oversee incident response, Establish incident governance, Design tabletop exercises, Evaluate external vendors, Drive chaos testing, Assess operational readiness, Onboard systems to monitoring, Maintain IT asset inventory, Guide threat use cases, Build detection capabilities, Establish SOPs for vulnerability management, Oversee scanning tools workflow, Validate patch effectiveness, Educate stakeholders on BCP, Foster 'assumed breach' mindset", "teamCollaboration" : "Work with Agency CIOs; Work with CISOs; Partner with Agency CIOs", "projectManagementSkills" : [ "Incident Management", "Business Continuity Planning" ], "domainKnowledge" : "Cybersecurity Operations; Hybrid environments; Government Commercial Cloud; OT/ICS systems; MITRE ATT&CK framework; CVE system; CVSS scoring; Exploitation techniques; Threat actor TTPs", "domainList" : [ "cybersecurity-operations", "hybrid-environments", "government-commercial-cloud", "ot-ics-systems", "mitre-att-ck-framework", "cve-system", "cvss-scoring", "exploitation-techniques", "threat-actor-ttps" ], "domainSpecificKnowledge" : [ "Cybersecurity Operations", "Hybrid environments", "Government Commercial Cloud", "OT/ICS systems", "MITRE ATT&CK framework", "CVE system", "CVSS scoring", "Exploitation techniques", "Threat actor TTPs" ], "toolProficiency" : [ "SIEM", "SOAR", "XDR", "EDR" ], "communicationSkills" : "Crisis guidance; Technical oversight; Stakeholder education", "problemSolvingSkills" : "Root cause analysis; Troubleshooting", "specialRequirements" : "Singaporeans Only", "qualificationsBasic" : "8 to 10 years experience, Cybersecurity Operations experience, SOC Management experience, Incident Response experience, Crisis Management track record, Hybrid environments experience, On-premise environments experience, Cloud environments experience, OT environments experience", "qualificationsPreferred" : "GCIH certification, GCFA certification, CHFI certification, CISSP certification", "rawDescription" : "GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the Singapore Government’s capabilities in Data Science & Artificial Intelligence, Application Development, Smart City Technology, Digital Infrastructure, and Cybersecurity. At GovTech, we offer you a purposeful career to make lives better where we empower our people to master their craft through robust learning and development opportunities all year round. Play a part in Singapore’s vision to build a Smart Nation and embark on your meaningful journey to build tech for public good. Join us to advance our mission and shape your future with us today! Learn more about GovTech at tech.gov.sg. [What you will be working on] The Cyber Security Group (CSG) is the cybersecurity arm of GovTech. CSG is committed to create a digital government that is safe and secure. CSG delivers technical and operational capabilities to counteract cyber threats, provides thought leadership on transformative cybersecurity governance and policies and to strengthen the cybersecurity posture of government agencies in a manner that is sustainable, pragmatic, and effective. To enhance infocomm security capabilities in GovTech and the Whole-of-Government (WOG), GovTech appoints Chief Information Security Officer (CISO) teams at the various ministries to oversee infocomm security management. As the Security Operations Specialist within the Ministry CISO (MCISO) Office, you will be the lead architect of the Ministry’s operational resilience. You are responsible for ensuring that the entire Ministry Family, spanning multiple agencies maintains a high state of readiness against cyber threats. You will standardise incident response, oversee comprehensive monitoring, and drive advanced resiliency testing (such as chaos testing) to ensure that the Ministry can withstand and recover from sophisticated attacks. Key Responsibilities Incident Management & Response Standardisation Unified Playbooks: Establish and maintain Ministry-wide Incident Response (IR) playbooks for diverse threat scenarios (e.g., Ransomware, Data Exfiltration, Cloud breaches). Crisis Leadership: Provide direct guidance and technical oversight to agencies during High and Critical severity incidents, ensuring timely reporting and effective containment. Incident Governance: Work with Agency CIOs and CISOs to establish clear command structures and roles, empowering leaders to make difficult, high-stakes decisions during a crisis. Operational Readiness & Resiliency Testing Advanced Exercises: Design and oversee high-quality Tabletop Exercises (TTX) for various stakeholders (system owners, SIROs, CISOs, CIOs). You will evaluate external vendors to ensure these exercises are realistic, comprehensive, and push the Ministry’s limits. Chaos Testing: Drive the adoption of chaos testing across agencies to validate the adequacy of resiliency plans and identify hidden failure points in critical systems. Capability Building: Continuously assess the operational readiness of the Ministry Family and lead initiatives to bridge identified gaps in incident management. Continuous Monitoring & Asset Governance Centralised Monitoring: Ensure all Ministry systems are effectively onboarded to central monitoring services. Work with system owners on overcoming challenges encountered during onboarding. Asset Visibility: Partner with Agency CIOs to maintain a robust and updated IT asset inventory, ensuring that \"you cannot protect what you do not know.\" Custom Threat Scenarios: Provide expert guidance for agencies with unique threat use cases or specialised systems (e.g., OT/ICS) that fall outside standard monitoring coverage, helping them build bespoke detection capabilities. Vulnerability & Attack Surface Management Full-Spectrum SOPs: Establish Standard Operating Procedures for vulnerability management across on-premises, cloud (GCC), and OT environments. Ensure that there are proper procedures for managing unpatched vulnerabilities. Attack Surface Scanning: Ensure agencies deploy adequate internal and external scanning tools. You will oversee the workflow for finding prioritisation and validate that patches are applied and effective. Advocacy & Education Resilience Culture: Educate agency stakeholders on the critical importance of Response and Business Continuity Planning (BCP). Stakeholder Inculcation: Foster a mindset of \"assumed breach,\" ensuring project owners and agency leaders understand their roles in threat monitoring and incident management. Qualifications & Requirements Experience Years of Experience: 8 to 10 years of deep experience in Cybersecurity Operations, SOC Management, or Incident Response. Crisis Management: Proven track record of leading or providing technical oversight in high-pressure, high-severity security incidents. Domain Expertise: Experience managing security operations across complex hybrid environments (On-premise, Cloud, and OT). Technical Skills Incident Response & Forensics: Mastery of IR methodologies and a strong understanding of digital forensics and malware analysis. Threat Intelligence & TTPs: Deep knowledge of the threat landscape and the ability to map monitoring use cases to the MITRE ATT&CK framework. Vulnerability & Exploitation Research: Deep understanding of the CVE (Common Vulnerabilities and Exposures) system and CVSS scoring. Knowledge of exploitation techniques and the mechanics of how vulnerabilities are weaponised by threat actors. Ability to assess the \"exploitability\" of a vulnerability within the specific context of the Ministry’s environment to prioritise remediation. Detection Technologies: Proficiency in SIEM, SOAR, XDR, and EDR technologies. Ability to evaluate the relevancy of existing monitoring tools against evolving threats. Cloud Operations: Strong understanding of monitoring and responding to incidents within Government Commercial Cloud (GCC) and native cloud environments. Certifications: Professional certifications such as GCIH (GIAC Certified Incident Handler), GCFA (GIAC Certified Forensic Analyst), CHFI, or CISSP are highly desirable. Soft Skills Command & Control: Ability to remain calm and provide clear, authoritative guidance during high-stakes security crises. Diplomacy & Education: Skill in translating operational needs into strategic priorities for Agency CIOs and CISOs. Strategic Foresight: A strong interest in emerging security technologies and the ability to proactively adapt monitoring strategies to counter new actor TTPs. Other Requirements This role is open to Singaporeans Only.", "summaryDescription" : "Senior Cybersecurity Operations Specialist at GovTech. Skills: Incident Response, Operational Resilience, Threat Management, Vulnerability Management. Establish IR playbooks. Provide crisis guidance", "postedDate" : "2026-06-13T21:15:49.365", "createdAt" : "2026-06-13T21:15:49.365", "lastUpdated" : "2026-06-15T07:31:25.322", "ingestTimestamp" : "2026-06-13T21:15:49.365", "mongoId" : "6a2ca53574d8ee00a09b5342", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "IR methodologies", "Exploitation mechanics", "Vulnerability prioritization", "Patch validation", "Command & Control", "Diplomacy", "Strategic Foresight", "Incident Response", "Operational Resilience", "Threat Management", "Vulnerability Management", "Crisis Leadership", "Technical Oversight", "Incident Governance", "Operational Readiness", "Resiliency Testing", "Capability Building", "Asset Visibility", "Threat Scenario Guidance", "Vulnerability Assessment", "Attack Surface Scanning", "Stakeholder Education", "Incident Management", "Business Continuity Planning", "Cybersecurity Operations", "Hybrid environments", "Government Commercial Cloud", "OT/ICS systems", "MITRE ATT&CK framework", "CVE system", "CVSS scoring", "Exploitation techniques", "Threat actor TTPs", "GCIH", "GCFA", "CHFI", "CISSP", "SIEM", "SOAR", "XDR", "EDR" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1349.928, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c684d74d8ee00a0902f46", "title" : "Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x)", "company" : "Eye Security", "industry" : "Operations", "salary" : { "min" : 65000.0, "max" : 95000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Specialist in The Hague, Netherlands, adjusted for the cybersecurity industry and company size." }, "location" : "The Hague - hybrid", "locations" : [ "The Hague - hybrid", "Amsterdam - remote" ], "timestamp" : "2026-06-15T08:17:12.112", "fingerprint" : "3ea7af24809c33c41fc6338d0a860f04701084d61789d37a8cee558d13bd518a", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/eye-security/e0ac138e-4163-40f7-a34d-05de48fb1aec/application", "externalId" : "e0ac138e-4163-40f7-a34d-05de48fb1aec", "industryFunction" : { }, "structuredLocations" : [ { "city" : "The Hague", "country" : "Netherlands", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "52.0799838,4.3113461" } ], "locationText" : "The Hague, Netherlands", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft 365, Azure, Windows, EDR, SIEM, Cloud infrastructure", "professionalSkills" : [ "Incident response", "Business email compromise", "Account compromise", "Ransomware", "Threat intelligence", "Operational improvements" ], "hardSkillsList" : [ "Digital forensics", "Threat hunting", "Threat intelligence" ], "hardSkills" : [ { "name" : "Digital forensics", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Threat intelligence", "level" : "intermediate" } ], "majorSkills" : "Security Operations, Incident Response, DFIR, CSIRT", "majorSkillsList" : [ "Security Operations", "Incident Response", "DFIR", "CSIRT" ], "coreResponsibilities" : "Investigate cybersecurity incidents, Respond to cybersecurity incidents, Act as senior escalation point, Take ownership of investigations, Communicate with clients, Guide clients through investigations, Guide clients through remediation, Guide clients through security incidents, Support MDR operations, Participate in on-call rotation, Collaborate with internal teams, Improve internal playbooks, Improve documentation, Improve processes, Improve tooling", "teamCollaboration" : "Security Operations; Customer Success; Support; Product", "domainKnowledge" : "Modern attack techniques; Incident response methodologies; Security operations", "domainList" : [ "modern-attack-techniques", "incident-response-methodologies", "security-operations" ], "domainSpecificKnowledge" : [ "Modern attack techniques", "Incident response methodologies", "Security operations" ], "toolProficiency" : [ "EDR solutions", "SIEM platforms" ], "communicationSkills" : "Client communication; Clear communication; Confident communication", "documentationSkills" : "Documentation improvement", "innovationCreativity" : "Automation initiatives", "problemSolvingSkills" : "Problem-solving skills; Root cause analysis", "specialRequirements" : "24/7 on-call rotation", "qualificationsBasic" : "Proven experience in Security Operations, Experience investigating security incidents, Understanding of attack techniques, Experience with Microsoft 365, Experience with Azure, Experience with Windows environments, Experience with EDR solutions, Experience with SIEM platforms, Experience with cloud infrastructure, Excellent communication skills, Calm and structured during high-pressure situations, Analytical and problem-solving skills, Collaborative mindset, Fluency in Dutch, Fluency in English, Residence in the Netherlands, Availability for 24/7 on-call rotation", "qualificationsPreferred" : "Experience investigating BEC incidents, Experience with digital forensics, Experience with threat hunting, Experience with threat intelligence, Experience creating playbooks, Experience creating documentation, Experience creating operational procedures, Experience mentoring junior analysts, Experience acting as technical escalation point", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "About Eye Security Eye Security is providing cybersecurity with embedded cyber insurance solutions for organizations in Europe. Headquartered in the Netherlands, we are already over 190 FTEs and continue to grow internationally. We combine cutting-edge technology with hands-on expertise to detect, respond to, and recover from cyber threats in real time. Our team brings together talent from intelligence, military, tech, and consulting backgrounds — all united by a shared mission: to make enterprise-grade cybersecurity accessible to every business, not just the big players. At Eye, you’ll work on projects with an international footprint, solving real-world challenges and helping to build a safer digital future for our clients. About this role We are looking for a Senior Cybersecurity Specialist (f/m/x) to join our Security Operations team and help protect our clients from real-world cyber threats. In this role, you will investigate complex security incidents, support incident response engagements, and act as a senior escalation point within our Security Operations Center (SOC). You will work closely with our Managed Detection & Response (MDR) team, support customers during high-pressure situations, and help improve the processes and playbooks that keep our operations running effectively. This position combines hands-on investigation work, client communication, and operational ownership in a fast-growing cybersecurity company. What you will do • Investigate and respond to cybersecurity incidents, including business email compromise, account compromise, ransomware, and other security threats. • Act as a senior escalation point for complex alerts and investigations within the SOC. • Take ownership of complex investigations, Business Email Compromise (BEC) cases, and other escalated incidents. • Communicate clearly and confidently with clients, guiding them through investigations, remediation activities, and security incidents. • Support MDR operations and participate in a 24/7 on-call rotation. • Collaborate with internal teams including Security Operations, Customer Success, Support, and Product. • Improve internal playbooks, documentation, processes, and tooling to strengthen our security operations. • Contribute to initiatives such as automation, threat intelligence, and operational improvements. What you will need • Proven experience in Security Operations (SOC), Managed Detection & Response (MDR), Incident Response (IR), DFIR, CSIRT, CERT, or similar cybersecurity environments. • Experience investigating and responding to security incidents independently. • Strong understanding of modern attack techniques, incident response methodologies, and security operations. • Experience working with technologies such as Microsoft 365, Azure, Windows environments, EDR solutions, SIEM platforms, and cloud infrastructure. • Excellent communication skills and the ability to remain calm and structured during high-pressure situations. • Strong analytical and problem-solving skills with a natural curiosity to investigate root causes and improve processes. • A collaborative mindset and willingness to support teammates, customers, and internal stakeholders. • Fluency in Dutch and English. • Residence in the Netherlands. • Availability to participate in a 24/7 on-call rotation. Nice-to-have • Experience investigating Business Email Compromise (BEC) incidents. • Experience with digital forensics, threat hunting, or threat intelligence. • Experience creating playbooks, documentation, or operational procedures. • Experience mentoring junior analysts or acting as a technical escalation point. What we offer • A meaningful mission: protect organizations across Europe from real-world cyber threats • Work with top-tier professionals from national CERTs, intelligence agencies, and leading tech backgrounds • A remote-friendly culture with quarterly meetups and annual company retreats (in Spain, Portugal, Italy…) • Thursday socials to stay connected • A generous time-off policy, including wellbeing and volunteering days", "summaryDescription" : "Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x) at Eye Security. Skills: Security Operations, Incident Response, DFIR, CSIRT. Investigate cybersecurity incidents. Respond to cybersecurity incidents", "createdAt" : "2026-06-13T21:56:41.879", "lastUpdated" : "2026-06-15T08:17:12.112", "ingestTimestamp" : "2026-06-13T21:56:41.879", "mongoId" : "6a2c684d74d8ee00a0902f46", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Digital forensics", "Threat hunting", "Threat intelligence", "Security Operations", "Incident Response", "DFIR", "CSIRT", "Incident response", "Business email compromise", "Account compromise", "Ransomware", "Operational improvements", "Modern attack techniques", "Incident response methodologies", "Security operations", "EDR solutions", "SIEM platforms" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1255.485, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca53574d8ee00a09b5341", "title" : "Senior Cybersecurity Governance Specialist", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 125000.0, "max" : 180000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Governance Specialist in Singapore, adjusted for seniority and the government technology industry." }, "location" : "Cybersecurity", "locations" : [ "Cybersecurity" ], "certifications" : [ "CISM", "CRISC", "CISSP", "OSCP", "OSWE" ], "timestamp" : "2026-06-16T03:26:02.091", "fingerprint" : "cc278e308ffc3ed3c39373e47c90b3a9b88ad6478552ee25cd6bb7873dfa50ff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4003957201?gh_jid=4003957201", "externalId" : "4003957201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust Architecture, Cloud security, Firewalls, EDR, IAM, SIEM, CSPM, CWPP, CASB, Secrets management, MITRE ATT&CK", "professionalSkills" : [ "Risk assessment", "Technical translation" ], "hardSkillsList" : [ "Risk methodologies", "Vulnerability translation", "ZTA components", "Cloud security technologies", "MITRE ATT&CK framework", "Common TTPs" ], "softSkillsList" : [ "Strategic influence", "Critical thinking", "Lifelong learner" ], "hardSkills" : [ { "name" : "Risk methodologies", "level" : "intermediate" }, { "name" : "Vulnerability translation", "level" : "intermediate" }, { "name" : "ZTA components", "level" : "intermediate" }, { "name" : "Cloud security technologies", "level" : "intermediate" }, { "name" : "MITRE ATT&CK framework", "level" : "intermediate" }, { "name" : "Common TTPs", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Strategic influence" }, { "name" : "Critical thinking" }, { "name" : "Lifelong learner" } ], "majorSkills" : "Cybersecurity governance, Risk management, Security technologies", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Security technologies" ], "coreResponsibilities" : "Educate senior stakeholders, Persuade senior stakeholders, Find systemic issues, Fix systemic issues, Stay updated on security technologies, Stay updated on cyber threat landscapes, Translate technical issues into business risk", "teamCollaboration" : "Senior stakeholders; CIOs; Project Owners", "domainKnowledge" : "Singapore Government security policies; NIST; ISO 27001; Zero Trust Architecture; Cloud security; MITRE ATT&CK framework; Zero-day vulnerabilities; Configuration drifts", "domainList" : [ "singapore-government-security-policies", "nist", "iso-27001", "zero-trust-architecture", "cloud-security", "mitre-att-ck-framework", "zero-day-vulnerabilities", "configuration-drifts" ], "domainSpecificKnowledge" : [ "Singapore Government security policies", "NIST", "ISO 27001", "Zero Trust Architecture", "Cloud security", "MITRE ATT&CK framework", "Zero-day vulnerabilities", "Configuration drifts" ], "communicationSkills" : "Risk articulation", "continuousLearning" : "Staying updated on security technologies; Staying updated on cyber threat landscapes", "problemSolvingSkills" : "Critical thinking; Root cause analysis", "qualificationsBasic" : "Mastery of risk assessment methodologies, Translate technical vulnerabilities into business risk, Technical understanding of ZTA components, Technical understanding of cloud security technologies, Map technical controls to MITRE ATT&CK, Deep understanding of MITRE ATT&CK framework, Understand common TTPs", "qualificationsPreferred" : "Exposure to OT systems, CISM, CRISC, CISSP, OSCP, OSWE", "remoteFriendly" : false, "rawDescription" : "[What the role is] GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT exposure to OT (Operational Technology) systems is a significant advantage. Regulatory Knowledge: Deep familiarity with Singapore Government security policies (e.g., Instruction Manual on IT Management) and international standards (e.g., NIST, ISO 27001). Technical Skills Risk Methodologies: Mastery of risk assessment methodologies (e.g., TVRA) and the ability to translate technical vulnerabilities into business risk. Security Technologies: Strong technical understanding of various Zero Trust Architecture (ZTA) components and cloud security technologies. Such as Firewalls, EDR, IAM, SIEM, CSPM, CWPP, CASB and secrets management etc. Threat Awareness: Ability to map technical controls to the MITRE ATT deep understanding of the MITRE ATT&CK framework and common TTPs. Certifications: Professional certifications such as CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), CISSP, OSCP or OSWE (Offensive Security Web Expert) are highly preferred. Soft Skills Strategic Influence: Ability to educate and persuade senior stakeholders (CIOs/Project Owners) on the importance of rigorous risk governance. Critical Thinking: Ability to look past surface-level audit compliance to find and fix underlying systemic issues. Lifelong Learner: A genuine passion for staying updated on the latest security technologies and evolving cyber threat landscapes. Risk Articulation: Exceptional ability to \"translate\" deep technical issues (e.g., zero-day vulnerabilities, configuration drifts) into business risk for non-technical senior executives.", "summaryDescription" : "Senior Cybersecurity Governance Specialist at GovTech. Skills: Cybersecurity governance, Risk management, Security technologies. Educate senior stakeholders. Persuade senior stakeholders", "postedDate" : "2026-06-14T20:12:27.993", "createdAt" : "2026-06-14T20:12:27.993", "lastUpdated" : "2026-06-16T03:26:02.091", "ingestTimestamp" : "2026-06-14T20:12:27.993", "mongoId" : "6a2ca53574d8ee00a09b5341", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Risk methodologies", "Vulnerability translation", "ZTA components", "Cloud security technologies", "MITRE ATT&CK framework", "Common TTPs", "Strategic influence", "Critical thinking", "Lifelong learner", "Cybersecurity governance", "Risk management", "Security technologies", "Risk assessment", "Technical translation", "Singapore Government security policies", "NIST", "ISO 27001", "Zero Trust Architecture", "Cloud security", "Zero-day vulnerabilities", "Configuration drifts", "CISM", "CRISC", "CISSP", "OSCP", "OSWE" ], "skillCount" : 26, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1249.1437, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c926c74d8ee00a0985bcd", "title" : "Cybersecurity Specialist", "company" : "New Era Technology", "industry" : "Consulting", "salary" : { "min" : 165000.0, "max" : 220000.0, "currency" : "AUD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Cybersecurity Specialist in Melbourne, Australia, adjusted for the technology industry and company size." }, "location" : "Australia-New Zealand ", "locations" : [ "Australia-New Zealand" ], "certifications" : [ "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "timestamp" : "2026-06-15T05:08:16.844", "fingerprint" : "c1f573db3a3c008744fdf26d82a2848fb9860ac3ebb55e5241c7cfe1f282030f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/neweratechau/jobs/8517622002", "externalId" : "8517622002", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Melbourne", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-37.8142454,144.9631732" }, { "city" : "Sydney", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-33.8698439,151.2082848" }, { "city" : "Newcastle", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-32.9192953,151.7795348" }, { "city" : "Brisbane", "country" : "Australia", "continent" : "oc", "source" : "llm", "workMode" : "onsite", "geo" : "-27.4689623,153.0235009" } ], "locationText" : "Melbourne, Australia; Sydney, Australia; Newcastle, Australia; Brisbane, Australia", "experienceMinYears" : 5, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cisco, FortiGate, Microsoft, Azure, VMware, Hyper-V, Backup solutions", "professionalSkills" : [ "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising" ], "hardSkillsList" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Vulnerability assessments", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Network troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity solutions, Technical advisory, Security architecture", "majorSkillsList" : [ "Cybersecurity solutions", "Technical advisory", "Security architecture" ], "coreResponsibilities" : "Engage clients, Understand business needs, Understand risks, Understand cybersecurity requirements, Lead solution workshops, Lead technical discussions, Lead client presentations, Design scalable solutions, Design secure solutions, Align solutions to frameworks, Support pre-sales, Scope solutions, Design proposals, Act as trusted advisor, Translate technical concepts, Develop architecture designs, Develop roadmaps, Develop security strategies, Champion cybersecurity awareness, Champion cybersecurity compliance, Champion cybersecurity best practices, Collaborate with engineering teams, Embed security into solutions, Lead incident response, Lead risk assessments, Lead security investigations, Provide technical leadership, Provide escalation support, Mentor engineers, Conduct vulnerability assessments, Conduct threat hunting, Conduct security audits, Maintain knowledge of threats, Maintain knowledge of tools, Maintain knowledge of best practices", "teamCollaboration" : "Solutions Group collaboration; Engineering teams collaboration", "domainKnowledge" : "NIST; ISO 27001; Essential Eight; LAN/WAN; TCP/IP", "domainList" : [ "nist", "iso-27001", "essential-eight", "lan-wan", "tcp-ip" ], "domainSpecificKnowledge" : [ "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP" ], "communicationSkills" : "Client presentations; Technical concepts translation", "documentationSkills" : "Architecture designs; Roadmaps; Security strategies", "continuousLearning" : "Continuous training; Knowledge sharing", "problemSolvingSkills" : "Problem-solving; Logical thinking; Lateral thinking", "qualificationsBasic" : "5+ years experience cybersecurity, Solution design experience, Pre-sales exposure, Client-facing experience, Solid infrastructure knowledge, Solid networking knowledge, Hands-on troubleshooting experience, Written communication skills, Verbal communication skills, Problem-solving skills, Stakeholder engagement skills, Team-oriented mindset, Ability to work under pressure, Excellent interpersonal skills, Logical thinking capacity, Lateral thinking capacity, Passion for cybersecurity, Continuous learning passion, Knowledge sharing passion", "qualificationsPreferred" : "Solutions Architecture experience, Pre-sales experience, Microsoft certification a plus, VMware certification a plus, Veeam certification a plus, Citrix certification a plus", "rawDescription" : "Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we're committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale. At New Era, you'll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service. If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together What is the role This role is open for candidates based in Melbourne, Sydney, Newcastle, and Brisbane. The Cybersecurity Lead drives the design and delivery of cybersecurity solutions for New Era’s clients, acting as both a technical expert and trusted advisor. The role bridges technical execution and client outcomes, supports pre-sales by shaping solutions and communicating value, and champions cybersecurity awareness, guidance, and compliance alongside the Solutions Group. Other key responsibilities include but may not be limited to following: Engage with clients to understand business needs, risks, and cybersecurity requirements Lead solution workshops, technical discussions, and client presentations Design scalable, secure solutions aligned to frameworks (e. g. NIST, ISO 27001, Essential Eight) Support pre-sales, including scoping, solution design, and proposals Act as a trusted advisor, translating technical concepts into business outcomes Develop architecture designs, roadmaps, and security strategies Champion cybersecurity awareness, compliance, and best practices internally Collaborate with engineering teams to embed security into solutions Lead incident response, risk assessments, and security investigations Provide technical leadership, escalation support, and mentoring engineers Conduct vulnerability assessments, threat hunting, and security audits Maintain up-to-date knowledge of threats, tools, and best practices Who we are looking for Successful candidate must possess: Must have 5+ years’ experience in cybersecurity, including solution design or pre-sales exposure Strong client-facing experience with the ability to lead discussions and influence outcomes Experience working in a Cyber Security team Solid infrastructure and networking knowledge (LAN/WAN, TCP/IP), with hands-on troubleshooting experience Familiarity with key technologies such as Cisco/FortiGate, Microsoft/Azure, VMware/Hyper-V, backup solutions, and security frameworks Experience in incident response, remote support, and working within cybersecurity teams Strong written and verbal communication, problem-solving, and stakeholder engagement skills Team-oriented mindset and ability to work under pressure Excellent interpersonal, problem solving as well as logical and lateral thinking capacity Passion for cybersecurity, continuous learning, and knowledge sharing Relevant tertiary qualification and cybersecurity certifications (Microsoft, VMware, Veeam, Citrix a plus) Solutions Architecture, Pre-sales experience is desirable What we offer A friendly team environment with a strong technical support network Broad range of options for training and developing your IT skills Opportunity to work with the IT industry's latest technologies Internal career growth for high performers and IT super-stars Cost price on products from our suppliers Lunches and snacks provided in our main offices Comprehensive Employer Assistance Program Referral bonus New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”). View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/ We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com .", "summaryDescription" : "Cybersecurity Specialist at New Era Technology. Skills: Cybersecurity solutions, Technical advisory, Security architecture. Engage clients. Understand business needs", "postedDate" : "2026-06-14T09:10:21.227", "createdAt" : "2026-06-14T09:10:21.227", "lastUpdated" : "2026-06-15T05:08:16.844", "ingestTimestamp" : "2026-06-14T09:10:21.227", "mongoId" : "6a2c926c74d8ee00a0985bcd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Incident response", "Vulnerability assessments", "Threat hunting", "Security audits", "Network troubleshooting", "Mentoring", "Cybersecurity solutions", "Technical advisory", "Security architecture", "Technical leadership", "Risk assessment", "Security investigations", "Solution design", "Client advising", "NIST", "ISO 27001", "Essential Eight", "LAN/WAN", "TCP/IP", "Microsoft certification", "VMware certification", "Veeam certification", "Citrix certification" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 1202.7106, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6a8f74d8ee00a090c9be", "title" : "Senior Cybersecurity Advisor", "company" : "ABACUS", "industry" : "Consulting", "salary" : { "min" : 155000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Advisor in the US Financial Services industry, adjusted for seniority and remote work." }, "location" : "Remote in US", "locations" : [ "Remote in US" ], "certifications" : [ "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty" ], "timestamp" : "2026-06-16T02:11:43.073", "fingerprint" : "f87551d291104d6efdd9fa5f0e2b1bc8021d4f208ae69c17936f03729cd85931", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://abacustechnology.com/about/careers/current-vacancies/?gh_jid=7747158003", "externalId" : "7747158003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 7, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Azure, AWS, GCP, Privileged Identity Management, Conditional Access, Infrastructure as Code, Compliance as Code, Endpoint Security, EDR, Encryption, Behavior Analysis, Email Security, ProofPoint, Mimecast, Abnormal Security, Anti-virus, HIPS, ID/PS, Full Packet Capture, Forensics", "professionalSkills" : [ "Strategic guidance", "Risk assessment", "Problem-solving" ], "hardSkillsList" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment" ], "softSkillsList" : [ "Leadership", "Mentoring", "Coaching", "Honesty" ], "hardSkills" : [ { "name" : "Cybersecurity strategy", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Email security controls", "level" : "intermediate" }, { "name" : "Cloud security", "level" : "intermediate" }, { "name" : "Data privacy regulations", "level" : "intermediate" }, { "name" : "Compliance assessment", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Coaching" }, { "name" : "Honesty" } ], "majorSkills" : "Cybersecurity consulting, VCISO, Cloud security, Financial services security", "majorSkillsList" : [ "Cybersecurity consulting", "VCISO", "Cloud security", "Financial services security" ], "coreResponsibilities" : "Act as primary security advisor, Provide strategic guidance, Oversight of cybersecurity programs, Develop security strategies, Implement security strategies, Develop security policies, Implement security policies, Develop security procedures, Implement security procedures, Design secure architectures, Advise on secure architectures, Design secure solutions, Advise on secure solutions, Build client relationships, Maintain client relationships, Understand client security challenges, Provide tailored solutions, Provide subject matter expertise, Review risk assessment reports, Review penetration testing reports, Review cloud vulnerability recommendations, Collaborate with Red Team, Refine remediation recommendations, Improve remediation recommendations, Assess security controls, Evaluate security controls, Make recommendations on security controls, Research compliance regulations, Research data privacy regulations, Serve as senior technical resource, Perform security gap assessment", "teamCollaboration" : "Abacus Group Red Team; Client environments; Colleagues and team members", "projectManagementSkills" : [ "Project completion" ], "domainKnowledge" : "Financial services sector; Investment services; SEC; FTC; FINRA; NYDFS; CCPA; FCA; GDPR; DORA DIFC; ADGM; NIST CSF; CIS CSC v8; HIPAA; PCI-DSS; SOC2; ISO27001", "domainList" : [ "financial-services-sector", "investment-services", "sec", "ftc", "finra", "nydfs", "ccpa", "fca", "gdpr", "dora-difc", "adgm", "nist-csf", "cis-csc-v8", "hipaa", "pci-dss", "soc2", "iso27001" ], "domainSpecificKnowledge" : [ "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001" ], "toolProficiency" : [ "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "communicationSkills" : "Verbal communication; Written communication; Communicating complex concepts", "continuousLearning" : "Continuously learn; Grow; Innovate", "innovationCreativity" : "Innovate", "problemSolvingSkills" : "Problem-solving", "specialRequirements" : "Occasional travel", "qualificationsBasic" : "5+ years technology leadership, 3+ years experience with major cloud hosting service providers, Azure or AWS automation and problem-solving skills", "qualificationsPreferred" : "Masters' Degree preferred, Ability to travel to client sites on an occasional basis", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Job Description: We are seeking a highly skilled and experienced Senior Cybersecurity Advisor to join our world-class cybersecurity consulting (vCISO) team at Abacus Group. The ideal candidate will have a deep understanding of information security strategies suitable for small and mid-size businesses within the financial services sector coupled with the technical expertise to guide and advise on implementation efforts. Responsibilities (including but not limited to): Act as the primary security advisor for multiple clients, providing strategic guidance and oversight on all aspects of their cybersecurity programs. Develop and implement security strategies, policies, and procedures for varying client environments. Design and advise on the implementation of secure architectures and solutions tailored to client needs. Build and maintain strong relationships with clients, understanding their unique security challenges and providing tailored solutions. Provide subject matter expertise on network and endpoint security to the Abacus Group Red Team to include reviewing relevant risk assessment and penetration testing reports and recommendations related to cloud vulnerabilities. Collaborate closely with the Red Team to refine and improve remediation recommendations within security testing reports. Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for customer security programs. Researching and keeping up to date with industry compliance and data privacy regulations, most specifically within the investment and financial services space, including SEC, FTC, FINRA, NYDFS, CCPA, FCA, GDPR, DORA DIFC, and ADGM. Serving as a senior technical resource compliance information security gap assessment for various regulations and frameworks. (NIST CSF, CIS CSC v8, HIPAA, PCI-DSS, SOC2, ISO27001, etc.) Ability to travel to client sites on an occasional basis preferred Skills: Proven expertise on the administration, security, and configuration of one major cloud platform (Azure, AWS, or GCP) Proven expertise in the realm of identity and access management (IAM) leveraging solutions such as Privileged Identity Management (PIM) and conditional access policies. Experience working with cloud automation to include infrastructure as code and compliance as code. Experience configuring and supporting endpoint security tools (EDR, Encryption, Behavior Analysis) Experience configuring email security controls (such as Defender for Microsoft 365, ProofPoint, Mimecast, Abnormal Security, etc.) Proficient in various security solutions, including Anti-virus, HIPS, ID/PS, Full Packet Capture, and Forensics. Strong attention to detail and well organized. Excellent verbal communication and written communication skills, especially when communicating complex concepts to non-technical audiences. Highly motivated to continuously learn, grow and innovate. Qualifications: Education: Bachelors’ Degree (Masters’ Preferred) in one of the following areas of concentration: Computer Science, Software Development, Information Technology, Cybersecurity. Experience: 7+ years of progressive technology experience with a blend of technical knowledge and a customer-focused mindset including: 5+ years of technology leadership experience; demonstrated ability to recruit, mentor, coach, and develop individual contributors 3+ years of experience with major cloud hosting service providers, with focus on Azure or AWS Strong automation and problem-solving skills and ability to carry tasks and projects to completion Certifications: Relevant certifications such as CISSP, CISM, CCSP, MS-500, MS-100 or AWS Certified Security Specialty or similar. You'll love this job if you: Value, integrity, and honesty above all else in a non-negotiable way Have a passion for the information security industry and helping people Are capable of managing time efficiently and meeting deadlines with multiple concurrent projects Are able to work within constraints and to challenge the status quo Are able to self-direct work, orient to action, and truly own the position Have a collaborative attitude and mindset with colleagues and team members", "summaryDescription" : "Senior Cybersecurity Advisor at ABACUS. Skills: Cybersecurity consulting, VCISO, Cloud security, Financial services security. Act as primary security advisor. Provide strategic guidance", "postedDate" : "2026-06-14T20:02:24.847", "createdAt" : "2026-06-14T20:02:24.847", "lastUpdated" : "2026-06-16T02:11:43.073", "ingestTimestamp" : "2026-06-14T20:02:24.847", "mongoId" : "6a2c6a8f74d8ee00a090c9be", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cybersecurity strategy", "Security architecture", "Network security", "Endpoint security", "Email security controls", "Cloud security", "Data privacy regulations", "Compliance assessment", "Leadership", "Mentoring", "Coaching", "Honesty", "Cybersecurity consulting", "VCISO", "Financial services security", "Strategic guidance", "Risk assessment", "Problem-solving", "Project completion", "Financial services sector", "Investment services", "SEC", "FTC", "FINRA", "NYDFS", "CCPA", "FCA", "GDPR", "DORA DIFC", "ADGM", "NIST CSF", "CIS CSC v8", "HIPAA", "PCI-DSS", "SOC2", "ISO27001", "CISSP", "CISM", "CCSP", "MS-500", "MS-100", "AWS Certified Security Specialty", "Microsoft 365", "ProofPoint", "Mimecast", "Abnormal Security" ], "skillCount" : 46, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1162.0125, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "694ae6ce70f0b99d589b27ff", "title" : "Cybersecurity GRC Specialist", "company" : "Hyundai Capital America", "industry" : "Financial Services", "salary" : { "min" : 115500.0, "max" : 154000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity GRC Specialist in Irvine, CA, adjusted for the Financial Services industry and manager experience level." }, "location" : "United States-California-Irvine", "locations" : [ "United States-California-Irvine", "
Headquarters 1 (HCA_HQ1)
3161 Michelson Dr. Ste 1900
Irvine, 92612

" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL" ], "timestamp" : "2026-06-15T07:26:07.663", "fingerprint" : "028859dc321449421afae6164280d515a7620332b2573dec7f41455905f5c6bc", "source" : "taleo", "language" : "en", "applyUrl" : "https://hyundaicapital.taleo.net/careersection/ex/jobdetail.ftl?job=104123", "externalId" : "104123", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Irvine", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.6856969,-117.8259810" } ], "locationText" : "Irvine, California, United States", "experienceLevel" : "Manager", "technicalSkills" : "Cybersecurity governance, Risk management, Compliance, IT systems", "professionalSkills" : [ "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting" ], "hardSkillsList" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Risk Register management", "level" : "intermediate" }, { "name" : "ISO 27001 standards", "level" : "intermediate" }, { "name" : "ISO 27001", "level" : "intermediate" }, { "name" : "ISO 31000:2009", "level" : "intermediate" }, { "name" : "ISO 27005:2008", "level" : "intermediate" }, { "name" : "NIST Special Publications", "level" : "intermediate" }, { "name" : "NIST Methodologies", "level" : "intermediate" }, { "name" : "SP800-12", "level" : "intermediate" }, { "name" : "SP800-30", "level" : "intermediate" }, { "name" : "SP800-37", "level" : "intermediate" }, { "name" : "SP800-39", "level" : "intermediate" }, { "name" : "SP800-53", "level" : "intermediate" }, { "name" : "SP800-150", "level" : "intermediate" }, { "name" : "SP800-161", "level" : "intermediate" }, { "name" : "Gramm-Leach-Bliley Act", "level" : "intermediate" }, { "name" : "NYDFS Cybersecurity Regulation", "level" : "intermediate" }, { "name" : "PCI-DSS", "level" : "intermediate" }, { "name" : "FFIEC", "level" : "intermediate" }, { "name" : "SOX", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Cybersecurity governance, Risk management, Compliance", "majorSkillsList" : [ "Cybersecurity governance", "Risk management", "Compliance" ], "coreResponsibilities" : "Manage security policies, Maintain security policies, Enforce security policies, Develop Risk Register, Implement Risk Register, Maintain Risk Register, Execute Risk Register, Develop Policy Risk Exception Process, Implement Policy Risk Exception Process, Maintain Policy Risk Exception Process, Execute Policy Risk Exception Process, Conduct risk assessments, Conduct impact analyses, Identify risks, Manage remediations, Ensure compliance, Perform GSIF assessments, Monitor GSIF assessments, Ensure remediations follow GSIF ISO 27001 standards, Collaborate with Cybersecurity Risk Management, Collaborate with Cybersecurity Engineering Operations, Collaborate with IT, Ensure security best practices are integrated, Develop metrics for senior management, Develop reporting for senior management, Develop metrics for stakeholders, Develop reporting for stakeholders, Identify security risks, Provide actionable insights, Address gaps, Develop governance mechanisms, Maintain governance mechanisms, Develop automation tools, Maintain automation tools, Track Risk Register, Track compliance status, Develop dashboards, Maintain dashboards, Develop regular reporting, Manage management performance metrics, Manage risk metrics", "teamCollaboration" : "Cross-functional departments; Cybersecurity Risk Management; Cybersecurity Engineering Operations; IT; Senior management; Stakeholders", "domainKnowledge" : "Financial services; IT systems; Cybersecurity risk management frameworks; IT general controls; ISO 27001/2; ISO 31000:2009; ISO 27005:2008; NIST Special Publications; NIST Methodologies; California Consumer Privacy Act; Gramm-Leach-Bliley Act; NYDFS Cybersecurity Regulation; PCI-DSS; FFIEC; SOX; Financial regulatory frameworks; Cybersecurity best practices", "domainList" : [ "financial-services", "it-systems", "cybersecurity-risk-management-frameworks", "it-general-controls", "iso-27001-2", "iso-31000-2009", "iso-27005-2008", "nist-special-publications", "nist-methodologies", "california-consumer-privacy-act", "gramm-leach-bliley-act", "nydfs-cybersecurity-regulation", "pci-dss", "ffiec", "sox", "financial-regulatory-frameworks", "cybersecurity-best-practices" ], "domainSpecificKnowledge" : [ "Financial services", "IT systems", "Cybersecurity risk management frameworks", "IT general controls", "ISO 27001/2", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "California Consumer Privacy Act", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Financial regulatory frameworks", "Cybersecurity best practices" ], "toolProficiency" : [ "Governance automation tools" ], "communicationSkills" : "Communicate complex security concepts", "continuousLearning" : "Tuition reimbursement", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5-7 years progressive experience, Bachelor's degree in Cybersecurity, Working knowledge of Cybersecurity risk management frameworks, Working knowledge of Information Security & Risk Frameworks, Working knowledge of CCPA, Working knowledge of GLBA, Working knowledge of NYDFS Cybersecurity Regulation, Working knowledge of PCI-DSS, Working knowledge of FFIEC, Working knowledge of SOX", "qualificationsPreferred" : "Master's degree a plus, CISSP certification highly desirable, CISM certification highly desirable, CRISC certification highly desirable, CGEIT certification highly desirable, CISA certification highly desirable, ITIL certification highly desirable, Basic understanding of financial regulatory frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Who We Are Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Embodying our commitment to grow, innovate, and diversify, we strive to reimagine the customer and dealer experience and launch innovative new products that broaden our market reach. We believe that success comes from within and are proud to support our team members through skill development and career advancement. Hyundai Capital America is an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce. We are a values-driven company dedicated to supporting both internal and external communities through volunteering, philanthropy, and the empowerment of our Employee Resource Groups. Together, we strive to be the leader in financing freedom of movement. We Take Care of Our People Along with competitive pay, as an employee of HCA, you are eligible for the following benefits: · Medical, Dental and Vision plans that include no-cost and low-cost plan options · Immediate 401(k) matching and vesting · Vehicle purchase and lease discounts plus monthly vehicle allowances · Paid Volunteer Time Off with company donation to a charity of your choice · Tuition reimbursement What to Expect The Cybersecurity Governance Manager plays a critical role in the organization's second line of defense, ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk and compliance across the organization. This role establishes oversight mechanisms, monitors compliance with industry regulations, and ensures access-related risks are effectively managed. In addition, this role ensures governance and compliance strategies are aligned with business objectives and security standards. What You Will Do 1. Cybersecurity Governance and Risk Management · Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes. · Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures. · Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments. 2. Cybersecurity Risk Assessment · Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments. · Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment. 3. Cybersecurity Governance and Risk Reporting · Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps. · Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization. · Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics. What You Will Bring · Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems. · Bachelor’s degree in Cybersecurity, Information Security, Risk Management or a related field · Master’s degree a plus. · Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable. · Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting). · Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161). · Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations. · Basic understanding of financial regulatory frameworks and cybersecurity best practices. · Ability to communicate complex security concepts to business leaders and technical teams. Work Environment Employees in this class are subject to extended periods of sitting, standing and walking, and using a computer. Work is performed in an office environment. The posted salary range for this job takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; geographic location, and other business and organizational needs. Successful candidates may be hired anywhere in the salary range based on these factors. It is uncommon to hire candidates at or near the top of the range. California Privacy Notice This notice only applies to our applicants who reside in the State of California. The latest version of our Privacy Policy can be found here . This Privacy Policy provides you with notice, at or before the point of collection, about the categories of personal information to be collected from you, the purposes for which your personal information is collected or used, and whether that information is sold or shared, so that you can exercise meaningful control over our use of your personal information. We are providing this notice to comply with the California Consumer Privacy Act of 2018, as amended as amended by the California Privacy Rights Act of 2020 (“CCPA”). If you have any questions about CCPA regarding California residents or HCA team members, please contact the Privacy Team at Privacy2@hcs.com . United States-California-Irvine", "summaryDescription" : "Cybersecurity GRC Specialist at Hyundai Capital America. Skills: Cybersecurity governance, Risk management, Compliance. Manage security policies. Maintain security policies", "createdAt" : "2026-06-14T02:33:22.264", "lastUpdated" : "2026-06-15T07:26:07.663", "ingestTimestamp" : "2026-06-14T02:33:22.264", "mongoId" : "694ae6ce70f0b99d589b27ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 115500, "salaryAnnualMax" : 154000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Policy enforcement", "Risk Register management", "ISO 27001 standards", "ISO 27001", "ISO 31000:2009", "ISO 27005:2008", "NIST Special Publications", "NIST Methodologies", "SP800-12", "SP800-30", "SP800-37", "SP800-39", "SP800-53", "SP800-150", "SP800-161", "Gramm-Leach-Bliley Act", "NYDFS Cybersecurity Regulation", "PCI-DSS", "FFIEC", "SOX", "Leadership", "Cybersecurity governance", "Risk management", "Compliance", "Risk assessments", "Impact analyses", "Remediations", "IT general controls", "Vulnerability analysis", "Threat analysis", "Risk treatment", "Audit controls", "Vendor risk management", "IT risk management", "Reporting", "Financial services", "IT systems", "Cybersecurity risk management frameworks", "ISO 27001/2", "California Consumer Privacy Act", "Financial regulatory frameworks", "Cybersecurity best practices", "CISSP", "CISM", "CRISC", "CGEIT", "CISA", "ITIL", "Governance automation tools" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1097.7194, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ac65274d8ee00a07059ec", "title" : "Senior Security Specialist", "company" : "Capco", "industry" : "Financial Services", "salary" : { "min" : 118000.0, "max" : 152000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Canada - Toronto", "locations" : [ "Canada - Toronto" ], "certifications" : [ "CISSP", "CISM", "CRISC", "CISA", "CCSP", "CSSLP", "GIAC", "Security+", "Azure Security", "AWS Security", "IAM certifications" ], "timestamp" : "2026-06-14T20:34:38.114", "fingerprint" : "25dab7a17a3f2d85e0c8898ee3c0486b8260f556628fa55eb984cb2cf867a96a", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/capco/jobs/7992831", "externalId" : "7992831", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Toronto", "state" : "Ontario", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.6534817,-79.3839347" } ], "locationText" : "Toronto, Ontario, Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IAM, Zero Trust, Cloud security, Data protection, Application security, Vulnerability management, Security operations, Third-party cyber risk, Cyber resilience, DevSecOps, Cloud-native security, Security automation, Secure-by-design", "professionalSkills" : [ "Cybersecurity transformation", "Security consulting", "Technology risk", "Risk assessment", "Security architecture", "Secure technology delivery", "Cyber risk lens", "Enterprise risk", "Operating model", "Client relationship management", "Executive communication", "Structured problem solving", "Stakeholder management" ], "hardSkillsList" : [ "Control design", "Remediation planning", "Maturity assessments", "Target operating models", "Business cases", "Transformation plans" ], "hardSkills" : [ { "name" : "Control design", "level" : "intermediate" }, { "name" : "Remediation planning", "level" : "intermediate" }, { "name" : "Maturity assessments", "level" : "intermediate" }, { "name" : "Target operating models", "level" : "intermediate" }, { "name" : "Business cases", "level" : "intermediate" }, { "name" : "Transformation plans", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity transformation, Security consulting, Risk assessment, Cloud security", "majorSkillsList" : [ "Cybersecurity transformation", "Security consulting", "Risk assessment", "Cloud security" ], "coreResponsibilities" : "Lead cybersecurity transformation initiatives, Support cybersecurity transformation initiatives, Assess cybersecurity capabilities, Identify control gaps, Identify technology gaps, Define target-state recommendations, Work across security domains, Partner with security architects, Partner with security engineers, Partner with risk partners, Partner with product owners, Partner with business stakeholders, Define security requirements, Define delivery plans, Define implementation roadmaps, Translate requirements into roadmaps, Translate requirements into control designs, Translate requirements into process flows, Translate requirements into technical considerations, Translate requirements into implementation plans, Translate requirements into client deliverables, Apply cyber risk lens, Identify control gaps, Assess security impacts, Prioritize remediation, Align solutions to risk expectations, Facilitate workshops, Facilitate stakeholder interviews, Facilitate technical working sessions, Facilitate executive discussions, Support cyber capability uplift, Develop client-ready materials, Contribute to Capco cyber offerings, Contribute to thought leadership, Contribute to delivery assets, Contribute to practice capability", "teamCollaboration" : "Security architects; Security engineers; Risk partners; Product owners; Business stakeholders; Technical teams; Non-technical audiences", "projectManagementSkills" : [ "Roadmap planning", "Implementation plans" ], "domainKnowledge" : "Financial services; Banking; Insurance; Capital markets; Regulated industries; IAM; Zero Trust; Cloud security; Data protection; Application security; Vulnerability management; Security operations; Third-party cyber risk; Cyber resilience; Security governance; NIST CSF; NIST 800-53; ISO 27001; CIS Controls; COBIT; PCI-DSS; SOC 2; OSFI guidance; Zero Trust; AI security; Identity threat detection; Attack path management; Ransomware resilience; DevSecOps; Cloud-native security; Security automation; Secure-by-design engineering; IAM; PAM; IGA; CIAM; Authentication; Access governance; Identity lifecycle; Secrets management; Non-human identity; Azure; AWS; GCP; Cloud identity; Secure landing zones; Cloud control frameworks", "domainList" : [ "financial-services", "banking", "insurance", "capital-markets", "regulated-industries", "iam", "zero-trust", "cloud-security", "data-protection", "application-security", "vulnerability-management", "security-operations", "third-party-cyber-risk", "cyber-resilience", "security-governance", "nist-csf", "nist-800-53", "iso-27001", "cis-controls", "cobit", "pci-dss", "soc-2", "osfi-guidance", "ai-security", "identity-threat-detection", "attack-path-management", "ransomware-resilience", "devsecops", "cloud-native-security", "security-automation", "secure-by-design-engineering", "pam", "iga", "ciam", "authentication", "access-governance", "identity-lifecycle", "secrets-management", "non-human-identity", "azure", "aws", "gcp", "cloud-identity", "secure-landing-zones", "cloud-control-frameworks" ], "domainSpecificKnowledge" : [ "Financial services", "Banking", "Insurance", "Capital markets", "Regulated industries", "IAM", "Zero Trust", "Cloud security", "Data protection", "Application security", "Vulnerability management", "Security operations", "Third-party cyber risk", "Cyber resilience", "Security governance", "NIST CSF", "NIST 800-53", "ISO 27001", "CIS Controls", "COBIT", "PCI-DSS", "SOC 2", "OSFI guidance", "Zero Trust", "AI security", "Identity threat detection", "Attack path management", "Ransomware resilience", "DevSecOps", "Cloud-native security", "Security automation", "Secure-by-design engineering", "IAM", "PAM", "IGA", "CIAM", "Authentication", "Access governance", "Identity lifecycle", "Secrets management", "Non-human identity", "Azure", "AWS", "GCP", "Cloud identity", "Secure landing zones", "Cloud control frameworks" ], "toolProficiency" : [ "SailPoint", "CyberArk", "Microsoft Entra ID", "Okta", "Ping Identity", "ForgeRock", "Saviynt", "ServiceNow", "Archer", "Jira", "Confluence" ], "communicationSkills" : "Executive messaging; Client-ready deliverables; Executive presentations", "documentationSkills" : "Process flows; Implementation plans; Maturity assessments; Security roadmaps; Target operating models; Control mappings; Risk summaries", "continuousLearning" : "Professional development; Industry-recognized certifications", "problemSolvingSkills" : "Structured problem-solving", "qualificationsBasic" : "5+ years experience in cybersecurity, 5+ years experience in security consulting, 5+ years experience in security engineering, 5+ years experience in security architecture, 5+ years experience in technology risk, 5+ years experience in IAM, 5+ years experience in cloud security, 5+ years experience in cyber transformation, Cybersecurity foundation, Experience delivering security initiatives, Experience supporting security initiatives, Depth in one or more cybersecurity domains, Experience working with security technologies, Experience working with security controls, Experience working with security platforms, Experience working with architects, Experience working with engineers, Experience working with delivery teams, Understanding of security control design, Understanding of risk reduction, Understanding of remediation planning, Understanding of secure technology delivery, Ability to translate technical concepts, Ability to develop security requirements, Ability to develop control requirements, Ability to develop roadmaps, Ability to develop maturity assessments, Ability to develop process flows, Ability to develop operating models, Ability to develop implementation plans, Consulting acumen, Client relationship management, Executive communication, Facilitation, Structured problem solving, Ability to influence stakeholders", "qualificationsPreferred" : "Previous consulting experience, Experience with Zero Trust, Experience with AI security, Experience with identity threat detection, Experience with attack path management, Experience with ransomware resilience, Experience with DevSecOps, Experience with cloud-native security, Experience with security automation, Experience with secure-by-design engineering, Experience with IAM, Experience with PAM, Experience with IGA, Experience with CIAM, Experience with authentication, Experience with access governance, Experience with identity lifecycle, Experience with secrets management, Experience with non-human identity, Experience with Azure, Experience with AWS, Experience with GCP, Experience with cloud identity, Experience with logging, Experience with monitoring, Experience with encryption, Experience with key management, Experience with secure landing zones, Experience with cloud control frameworks, Knowledge of NIST CSF, Knowledge of NIST 800-53, Knowledge of ISO 27001, Knowledge of CIS Controls, Knowledge of COBIT, Knowledge of PCI-DSS, Knowledge of SOC 2, Knowledge of OSFI guidance, Experience developing executive presentations, Experience developing security roadmaps, Experience developing target operating models, Experience developing maturity assessments, Experience developing business cases, Experience developing transformation plans, CISSP certification, CISM certification, CRISC certification, CISA certification, CCSP certification, CSSLP certification, GIAC certification, Security+ certification, Azure Security certification, AWS Security certification, IAM-related certifications", "workSiteFlexibility" : "Hybrid", "rawDescription" : "Help leading organizations transform cybersecurity from strategy into execution. The Role Capco is expanding its cybersecurity practice to support a range of projects across financial services, banking, insurance, capital markets, and other regulated industries. We are looking for Senior Cybersecurity Consultants who bring technical credibility, consulting acumen, and the ability to help clients move from security strategy to execution. Working closely with CISOs, security leaders, architects, engineers, product owners, risk partners, and business stakeholders, you will help assess cybersecurity capabilities, define practical recommendations, support secure technology delivery, and strengthen cyber programs across complex enterprise environments. This is not a purely policy, compliance, or documentation-focused role. Successful candidates will bring depth in one or more cybersecurity domains, the ability to engage technical teams, and the confidence to translate complex security challenges into clear recommendations, roadmaps, and delivery outcomes. What You’ll Do Lead and support cybersecurity transformation initiatives for leading financial services and enterprise clients Assess current-state cybersecurity capabilities, identify control and technology gaps, and define practical target-state recommendations Work across key security domains including IAM, Zero Trust, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, and cyber resilience Partner with security architects, engineers, risk partners, product owners, and business stakeholders to define security requirements, delivery plans, and implementation roadmaps Translate cybersecurity requirements into actionable roadmaps, control designs, process flows, technical considerations, implementation plans, and client-ready deliverables Apply a cyber risk lens to technical security decisions by identifying control gaps, assessing security impacts, prioritizing remediation, and aligning solutions to enterprise risk expectations Facilitate workshops, stakeholder interviews, technical working sessions, and executive discussions with technical and non-technical audiences Support cyber capability uplift across people, process, technology, governance, and operating model dimensions Develop client-ready materials including maturity assessments, security roadmaps, target operating models, executive presentations, control mappings, risk summaries, and implementation plans Contribute to the growth of Capco cyber offerings, thought leadership, delivery assets, and practice capability What We're Looking For Typically 5+ years of experience in cybersecurity, security consulting, security engineering, security architecture, technology risk, IAM, cloud security, or cyber transformation Strong cybersecurity foundation with experience delivering or supporting security initiatives in complex enterprise environments Depth in one or more cybersecurity domains such as IAM, cloud security, data protection, application security, vulnerability management, security operations, third-party cyber risk, security governance, or cyber resilience Experience working with security technologies, controls, platforms, architects, engineers, or delivery teams to achieve cybersecurity outcomes Understanding of security control design, implementation considerations, risk reduction, remediation planning, and secure technology delivery Ability to translate technical cybersecurity concepts into business language, executive messaging, and practical delivery plans Experience developing security requirements, control requirements, roadmaps, maturity assessments, process flows, operating models, or implementation plans Strong communication, facilitation, structured problem-solving, and stakeholder management skills Experience working within financial services, insurance, banking, capital markets, or other highly regulated environments Bonus Points For Previous consulting experience delivering cybersecurity transformation, security architecture, IAM, cloud security, data protection, security operations, or security modernization programs Experience with modern cyber topics such as Zero Trust, AI security, identity threat detection, attack path management, ransomware resilience, DevSecOps, cloud-native security, security automation, or secure-by-design engineering Experience with IAM, PAM, IGA, CIAM, authentication, access governance, identity lifecycle, secrets management, or non-human identity security Familiarity with platforms such as SailPoint, CyberArk, Microsoft Entra ID, Okta, Ping Identity, ForgeRock, Saviynt, ServiceNow, Archer, Jira, or Confluence Experience with cloud security across Azure, AWS, or GCP, including cloud identity, logging, monitoring, encryption, key management, secure landing zones, or cloud control frameworks Knowledge of security frameworks such as NIST CSF, NIST 800-53, ISO 27001, CIS Controls, COBIT, PCI-DSS, SOC 2, or OSFI guidance Experience developing executive-level presentations, security roadmaps, target operating models, maturity assessments, business cases, or transformation plans Leading certifications such as CISSP, CISM, CRISC, CISA, CCSP, CSSLP, GIAC, Security+, Azure Security, AWS Security, or IAM-related certifications Strong consulting acumen including client relationship management, executive communication, facilitation, structured problem solving, and the ability to influence stakeholders Why Join Capco Deliver high-impact cybersecurity solutions for leading financial institutions and regulated enterprises. Work in a collaborative, flat, and entrepreneurial consulting culture where your ideas can make a real impact. Access continuous learning, professional development, and industry-recognized certifications. Partner with experienced cybersecurity practitioners, architects, and technology leaders across global markets. Help shape the future of cybersecurity transformation across financial services and beyond. Benefits Comprehensive Benefits Coverage – 100% company-paid health, life, and disability insurance effective from Day 1 of employment. Retirement Savings Program – RRSP with the option of receiving a matching employer contribution. Virtual Health Care and Employee & Family Assistance Program (EFAP) available to employees and eligible dependents. Enhanced parental leave top-up, new parent gift, and wellness reimbursement benefits. Business Coach from Day 1 to support career growth, accelerate development, and help achieve your professional goals at Capco. Why This Role Is Open We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact. Inclusion at Capco We’re committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we’ll be happy to help. We value each person’s unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day. Use of Artificial Intelligence in Talent Acquisition At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination. AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams. Pay Transparency The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment. Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity. Canada Pay Transparency $118,000—$152,000 CAD", "summaryDescription" : "Senior Security Specialist at Capco. Skills: Cybersecurity transformation, Security consulting, Risk assessment, Cloud security. Lead cybersecurity transformation initiatives. Support cybersecurity transformation initiatives", "postedDate" : "2026-06-11T21:21:47.200", "createdAt" : "2026-06-11T21:21:47.200", "lastUpdated" : "2026-06-14T20:34:38.114", "ingestTimestamp" : "2026-06-11T21:21:47.200", "mongoId" : "6a2ac65274d8ee00a07059ec", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Control design", "Remediation planning", "Maturity assessments", "Target operating models", "Business cases", "Transformation plans", "Cybersecurity transformation", "Security consulting", "Risk assessment", "Cloud security", "Technology risk", "Security architecture", "Secure technology delivery", "Cyber risk lens", "Enterprise risk", "Operating model", "Client relationship management", "Executive communication", "Structured problem solving", "Stakeholder management", "Roadmap planning", "Implementation plans", "Financial services", "Banking", "Insurance", "Capital markets", "Regulated industries", "IAM", "Zero Trust", "Data protection", "Application security", "Vulnerability management", "Security operations", "Third-party cyber risk", "Cyber resilience", "Security governance", "NIST CSF", "NIST 800-53", "ISO 27001", "CIS Controls", "COBIT", "PCI-DSS", "SOC 2", "OSFI guidance", "AI security", "Identity threat detection", "Attack path management", "Ransomware resilience", "DevSecOps", "Cloud-native security", "Security automation", "Secure-by-design engineering", "PAM", "IGA", "CIAM", "Authentication", "Access governance", "Identity lifecycle", "Secrets management", "Non-human identity", "Azure", "AWS", "GCP", "Cloud identity", "Secure landing zones", "Cloud control frameworks", "CISSP", "CISM", "CRISC", "CISA", "CCSP", "CSSLP", "GIAC", "Security+", "Azure Security", "AWS Security", "IAM certifications", "SailPoint", "CyberArk", "Microsoft Entra ID", "Okta", "Ping Identity", "ForgeRock", "Saviynt", "ServiceNow", "Archer", "Jira", "Confluence" ], "skillCount" : 88, "jobCategory" : "engineering", "jobSubcategory" : "tech-&-engineering", "dataQualityScore" : 0.8888889, "_score" : 1066.4749, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a306007f292fd229cf84717", "title" : "Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations", "company" : "West Monroe", "industry" : "Consulting", "salary" : { "min" : 175000.0, "max" : 235000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Cybersecurity Architect in Chicago, adjusted for consulting industry and company size." }, "location" : "Chicago", "locations" : [ "Chicago" ], "timestamp" : "2026-06-16T07:56:39.509", "fingerprint" : "ab387c4d64a3ce082a317119b2be3b51c9ac3e53ea31f335784ed94a6321331b", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://westmonroe.com/careers/job-details-experienced-professionals?gh_jid=6018677004", "externalId" : "6018677004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" } ], "locationText" : "Chicago, Illinois, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cybersecurity, Cloud security, Security operations, AI, Machine Learning", "professionalSkills" : [ "Architecture design", "Solution development", "Technical leadership", "Stakeholder management" ], "hardSkillsList" : [ "Security architecture", "Security operations", "AI implementation" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "AI implementation", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity architecture, Agentic SOC, AI-enabled security", "majorSkillsList" : [ "Cybersecurity architecture", "Agentic SOC", "AI-enabled security" ], "coreResponsibilities" : "Design and implement agentic SOC modernization strategies, Develop and deploy AI-enabled security operations capabilities, Provide technical leadership for security modernization initiatives, Collaborate with clients to understand their security challenges, Develop architectural blueprints for next-generation security operations, Evaluate and integrate emerging security technologies, Ensure security solutions align with business objectives, Mentor junior security architects and engineers", "teamCollaboration" : "Cross-functional teams; Client stakeholders", "domainKnowledge" : "Agentic SOC; AI-enabled security; Security modernization; Cloud security architecture", "domainList" : [ "agentic-soc", "ai-enabled-security", "security-modernization", "cloud-security-architecture" ], "domainSpecificKnowledge" : [ "Agentic SOC", "AI-enabled security", "Security modernization", "Cloud security architecture" ], "communicationSkills" : "Client presentations; Technical documentation", "documentationSkills" : "Architecture diagrams; Technical specifications", "innovationCreativity" : "Develop innovative solutions; Explore new technologies", "problemSolvingSkills" : "Complex problem solving; Root cause analysis", "outcomesObjectives" : "Modernize SOC capabilities; Enhance security operations efficiency; Implement AI-driven security solutions", "qualificationsBasic" : "5+ years of experience in cybersecurity architecture, Experience with cloud security, Experience with security operations, Experience with agentic security solutions, Experience with AI-enabled security operations", "qualificationsPreferred" : "Experience with large-scale enterprise environments, Experience with modernization initiatives", "workSiteFlexibility" : "Remote", "rawDescription" : "Are you ready to make an impact? West Monroe is seeking a Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations to join our Cybersecurity & Enterprise Technology practice. This role is focused on helping clients modernize security operations by designing next-generation SOC capabilities that leverage automation, AI-enabled workflows, agentic security operations, advanced analytics, SIEM/SOAR platforms, threat intelligence, and scalable detection and response processes. You will help clients move beyond traditional, manually intensive SOC models toward more intelligent, automated, and resilient security operations. This includes assessing current-state SOC capabilities, rationalizing fragmented tooling, designing future-state operating models, defining agent-assisted workflows, improving detection engineering, automating investigation and response processes, and enabling measurable improvements in analyst productivity, detection coverage, and response effectiveness. You will serve as a trusted advisor to CIOs, CISOs, security operations leaders, technology executives, and cyber defense teams as they transform fragmented security operations into scalable, intelligence-driven, AI-enabled, and human-governed SOC capabilities. While this role will support clients across industries, there is a strong preference for candidates with experience modernizing SOC capabilities for Energy & Utilities clients, including electric, gas, water, and other critical infrastructure environments. Experience supporting Financial Services, Healthcare, Private Equity, and other highly regulated sectors is also valuable where security operations, regulatory requirements, operational resilience, and risk reduction are critical. Experience with Google Security Operations / Google SecOps is a plus, but this role is intended to be broader than any single platform. The ideal candidate understands how to design modern SOC capabilities across people, process, data, governance, automation, AI, and technology. What You’ll Do Lead Agentic SOC Modernization Strategy Assess current-state security operations capabilities across people, process, technology, data, governance, automation, and operating model dimensions. Define future-state SOC operating models that incorporate AI-assisted investigation, agentic workflows, automated enrichment, response orchestration, human-in-the-loop decisioning, and continuous improvement. Develop SOC modernization roadmaps aligned to business risk, cyber maturity, regulatory obligations, operational resilience goals, staffing models, and technology investments. Identify opportunities to reduce alert fatigue, improve analyst efficiency, accelerate investigation and response, increase detection coverage, and improve the quality of security outcomes. Evaluate where AI agents, automation, analytics, and orchestration can improve SOC workflows without introducing unacceptable operational, privacy, security, or governance risk. Facilitate executive workshops and working sessions with security leadership, infrastructure, cloud, data, application, compliance, risk, and operations stakeholders. Design AI-Enabled and Agentic SOC Capabilities Architect AI-enabled SOC capabilities that support alert triage, evidence gathering, enrichment, summarization, detection authoring, threat hunting, response recommendation, case management, and executive reporting. Define agentic SOC use cases that improve security operations outcomes, including autonomous or semi-autonomous investigation support, alert correlation, threat intelligence enrichment, detection tuning, playbook execution, and analyst decision support. Design human-in-the-loop controls, escalation points, approval gates, logging, monitoring, and quality assurance processes for agentic security operations. Develop operating models for how analysts, engineers, incident responders, threat hunters, SOC managers, and AI-enabled tools work together across the detection and response lifecycle. Advise clients on responsible and secure use of AI in security operations, including access control, data protection, model governance, prompt security, output validation, auditability, and operational risk management. Help clients define practical AI-enabled SOC use cases that improve detection, response, analyst productivity, cyber resilience, and executive visibility. Modernize SIEM, SOAR & Detection Engineering Architect and improve SIEM, SOAR, security analytics, and case management capabilities across platforms such as Splunk, Microsoft Sentinel, Google SecOps, Palo Alto Cortex, ServiceNow SecOps, CrowdStrike, and similar technologies. Build detection engineering strategies aligned to MITRE ATT&CK, threat intelligence, business-critical assets, regulatory priorities, OT/ICS risk scenarios, and client-specific threat models. Design alert triage, enrichment, escalation, case management, automated response, and incident workflow capabilities. Define threat hunting, detection lifecycle management, detection-as-code, tuning, content governance, and use-case performance measurement practices. Establish SOC metrics and KPIs, including mean time to detect, mean time to respond, alert quality, false positive reduction, automation rates, detection coverage, analyst productivity, and operational resilience. Develop implementation roadmaps that sequence telemetry onboarding, detection use cases, automation opportunities, workflow changes, analyst enablement, and operational adoption. Rationalize Security Tooling, Telemetry & Data Sources Evaluate security tool portfolios to identify overlapping capabilities, integration gaps, consolidation opportunities, and replace/retain decisions. Assess SIEM, SOAR, XDR, EDR, threat intelligence, vulnerability management, cloud security, identity, ticketing, and workflow platforms to determine how they support future-state SOC capabilities. Define ingestion strategies for enterprise telemetry, cloud logs, endpoint data, identity data, network data, SaaS platforms, vulnerability data, application logs, OT/ICS data, and third-party security sources. Design normalized data models, parsing strategies, correlation logic, enrichment pipelines, analytics workflows, reporting capabilities, and evidence collection processes. Develop cost, capability, integration, and operational impact analyses to support security tool modernization decisions. Partner with technology, procurement, finance, security, and risk stakeholders to build actionable tooling roadmaps aligned to renewal windows, architecture dependencies, budget constraints, and business priorities. Integrate enterprise and OT telemetry into unified SOC monitoring and response environments where applicable. Strengthen SOC Governance, Risk & Compliance Alignment Align SOC modernization efforts to frameworks and regulatory requirements such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, and other industry-specific obligations. Design control validation, audit readiness, evidence collection, logging, monitoring, and reporting capabilities within security operations workflows. Ensure security monitoring, detection, response, and logging strategies support compliance, resilience, cyber risk management, and executive reporting objectives. Define governance models for detection content ownership, playbook approval, automation changes, AI-enabled workflows, exception management, escalation paths, and continuous improvement. Translate complex technical recommendations into executive-level narratives focused on business risk, operational resilience, investment priorities, and measurable outcomes. Support Google SecOps and Other Modern SOC Platforms Support clients evaluating, designing, or implementing modern SOC platforms, including Google Security Operations / Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, and comparable technologies. Conduct capability assessments, platform fit analyses, and replacement/retain evaluations for legacy SIEM/SOAR and adjacent security tools. Advise clients on migration considerations from legacy SIEM/SOAR platforms to modern SOC platforms while managing continuity, regulatory requirements, operational risk, and analyst adoption. Where applicable, design Google SecOps-enabled capabilities for SIEM, SOAR, threat detection, investigation, response, security analytics, and data ingestion. Define platform implementation roadmaps, including onboarding waves, integration priorities, detection sequencing, automation opportunities, reporting requirements, and operational adoption plans. Drive Client & Practice Impact Serve as a trusted advisor to client executives, security operations leaders, SOC managers, security engineers, and technology stakeholders. Lead architecture workshops, SOC maturity assessments, platform assessments, operating model design, tooling rationalization, and modernization planning engagements. Support proposal development, solution design, estimation, delivery planning, and client presentations. Contribute to West Monroe thought leadership, reference architectures, accelerators, and delivery methods for Agentic SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, and cyber defense modernization. Mentor team members and help grow West Monroe’s capabilities in modern security operations, AI-enabled cyber defense, SOC transformation, and security platform modernization. Leverage AI tools to accelerate analysis, synthesize compleec information and support date-driven recommendations for clients, exercising sound judgment of client outcomes . What You Bring 7–10+ years of experience in security architecture, security operations, SOC modernization, SIEM/SOAR engineering, detection engineering, incident response, security automation, or cybersecurity consulting. Experience designing, implementing, or modernizing SOC capabilities in enterprise, regulated, or critical infrastructure environments. Strong understanding of modern SOC operating models, including detection engineering, alert triage, investigation workflows, threat hunting, incident response, case management, escalation processes, and security operations governance. Experience designing AI-enabled or automation-enabled security operations capabilities, including analyst assist, enrichment, alert summarization, workflow orchestration, response automation, or agentic SOC use cases. Strong understanding of SIEM, SOAR, XDR, security telemetry, log ingestion, data normalization, correlation, enrichment, detection content, case management, and incident response workflows. Experience assessing, rationalizing, and consolidating enterprise cybersecurity tools and developing actionable modernization roadmaps. Familiarity with enterprise security technologies such as EDR/XDR, IAM, PAM, cloud security, network security, vulnerability management, threat intelligence, DLP, ITSM, and SecOps workflow platforms. Experience integrating security data from cloud, endpoint, identity, network, application, SaaS, infrastructure, and third-party sources. Ability to design SOC operating models, analyst workflows, escalation paths, governance processes, control points, and performance metrics. Familiarity with AI-enabled security operations, automation, analytics, responsible AI, and operational governance considerations. Experience with governance, risk, and compliance frameworks such as NIST CSF, NIST 800-53, ISO 27001, NERC CIP, IEC 62443, HIPAA, GLBA, PCI DSS, or related standards. Strong executive communication, stakeholder engagement, facilitation, and consulting skills. Ability to translate business risk and operational objectives into secure, scalable, and practical security operations architectures. Willingness to travel for client engagements. Experience integration AI tools(e.g.,ChatGPT) into day to day workflows to enhance productivity and insight generation, coupled with strong critical thinking to acesss accuracy, mitigate bias, and ensure high-quality outputs. Must be eligible to work in the United States without the need for sponsorship now or in the future Preferred / Plus Qualifications Prior consulting experience in a client-facing advisory or delivery leadership role. Experience with Google Security Operations / Google SecOps, Chronicle SIEM, Chronicle SOAR, Google Cloud security services, BigQuery, data pipelines, or security analytics architectures. Google Security Operations, Google Cloud, or related security certifications. Experience migrating from legacy SIEM/SOAR platforms to Google SecOps, Splunk, Microsoft Sentinel, Palo Alto Cortex, ServiceNow SecOps, or other modern SOC platforms. Experience with platforms such as Splunk, Microsoft Sentinel, Google SecOps, ServiceNow SecOps, Palo Alto Cortex, CrowdStrike, Okta, SailPoint, Mandiant, VirusTotal, Wiz, Prisma Cloud, or similar enterprise security tools. Experience leading or supporting SOC modernization, AI-enabled security operations, SIEM/SOAR transformation, detection engineering, security automation, or security operations improvement programs. Experience supporting Energy & Utilities clients, including electric, gas, water, critical infrastructure environments, or other highly regulated industries such as Financial Services or Healthcare. Experience integrating OT/ICS telemetry or operational security monitoring into enterprise SOC environments. Familiarity with threat intelligence, MITRE ATT&CK, detection-as-code, YARA-L, Sigma, SOAR playbooks, and detection lifecycle management. Familiarity with agentic AI design patterns, autonomous workflow orchestration, AI governance, responsible AI, model risk management, and security controls for AI-enabled cyber defense. Relevant certifications such as CISSP, CISM, CCSP, GSEC, GCIA, GCIH, GCFA, Google Cloud security certifications, or similar credentials. Candidate Profile Summary The ideal candidate is a security operations architect who can operate at both the executive advisory and technical architecture levels. They understand how to assess SOC maturity, rationalize legacy tooling, modernize detection and response capabilities, and design AI-enabled, agent-assisted, and automation-driven security operations. This person should be comfortable helping clients move from fragmented, manual, and platform-centric SOC models toward integrated, intelligence-driven, human-governed, and agentic SOC capabilities. They can define practical use cases, design operating models, guide platform modernization, improve detection engineering, and translate technical security operations improvements into measurable business risk reduction. Experience with Google SecOps is valuable and preferred, but the broader need is for someone who can design and lead SOC modernization across platforms, operating models, telemetry strategies, automation, AI-enabled workflows, governance, and client-specific risk priorities. job description here Based on pay transparency guidelines, the salary range for this role can vary based on your proximity to one of our West Monroe offices (see table below). Information on our competitive total rewards package, including our bonus structure and benefits is here. Individual salaries are determined by evaluating a variety of factors including geography, experience, skills, education, and internal equity. Employees (and their families) are covered by medical, dental, vision, and basic life insurance. Employees are able to enroll in our company’s 401k plan, purchase shares from our employee stock ownership program and be eligible to receive annual bonuses. Employees will also receive unlimited flexible time off and ten paid holidays throughout the calendar year. Eligibility for ten weeks of paid parental leave will also be available upon hire date. Seattle or Washington, D. C. $203,200—$239,100 USD Los Angeles $212,900—$250,500 USD New York City or San Francisco $222,500—$261,900 USD A location not listed above $193,500—$227,700 USD Other consultancies talk at you. At West Monroe, we work with you. We’re a global business and technology consulting firm passionate about creating measurable value for our clients, delivering real-world solutions. The combination of business and technology is not new, but how we bring them together is unique. We’re fluent in both. We know that technology alone is not the answer, but how we apply it is. We rely on data to constantly adapt and solve new challenges. Actions that work today with outcomes that generate value for years to come. At West Monroe, we zero in on the heart of the opportunity, getting to results faster and preparing people for what’s next. You’ll feel the difference in how we work. We show up personally. We’re right there in the room with you, co-creating through the challenges. With West Monroe, collaboration isn’t a lofty promise, but a daily action. We work together with you to turn vision into clear action with lasting impact. West Monroe is an Equal Employment Opportunity Employer  We believe in treating each employee and applicant for employment fairly and with dignity. We base our employment decisions on merit, experience, and potential, without regard to race, color, national origin, sex, sexual orientation, gender identity, marital status, age, religion, disability, veteran status, or any other characteristic prohibited by federal, state or local law. To learn more about diversity, equity and inclusion at West Monroe, visit www.westmonroe.com/inclusion. If you require a reasonable accommodation to participate in our recruiting process, please inquire by sending an email to recruiting@westmonroe.com. Please review our current policy regarding use of generative artificial intelligence during the application process. If you are based in California, we encourage you to read West Monroe’s Notice at Collection for California residents, provided pursuant to the California Consumer Privacy Act (CCPA) and linked here. ", "summaryDescription" : "Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations at West Monroe. Skills: Cybersecurity architecture, Agentic SOC, AI-enabled security. Design and implement agentic SOC modernization strategies. Develop and deploy AI-enabled security operations capabilities", "postedDate" : "2026-06-15T23:21:54.794", "createdAt" : "2026-06-15T23:21:54.794", "lastUpdated" : "2026-06-16T07:56:39.509", "ingestTimestamp" : "2026-06-15T23:21:54.794", "mongoId" : "6a306007f292fd229cf84717", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 235000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Security architecture", "Security operations", "AI implementation", "Cybersecurity architecture", "Agentic SOC", "AI-enabled security", "Architecture design", "Solution development", "Technical leadership", "Stakeholder management", "Security modernization", "Cloud security architecture" ], "skillCount" : 12, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1057.639, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Consulting", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2c77ab74d8ee00a093d097", "title" : "Senior Manager, Cybersecurity", "company" : "HASI", "industry" : "Information Technology", "salary" : { "min" : 165000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Annapolis, MD", "locations" : [ "Annapolis, MD", "New York, New York" ], "certifications" : [ "CISSP", "CISM", "CISA", "CIS Controls Practitioner", "Microsoft Security certifications" ], "timestamp" : "2026-06-15T22:12:30.292", "fingerprint" : "af8b6239f7746d18d6ddae984935144e43ca620b8aef9d4124aca1a5ad01f34f", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/hasi/bc41e72a-8109-432b-9062-35989595eb81/apply", "externalId" : "bc41e72a-8109-432b-9062-35989595eb81", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Annapolis", "state" : "Maryland", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.9786401,-76.4927860" } ], "locationText" : "Annapolis, Maryland, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "Microsoft 365, Entra ID, Azure AD, Exchange Online, SharePoint, OneDrive, Teams, Defender, Conditional Access, Identity protection, Zero Trust, MDM, MAM, Microsoft Intune, CIS benchmarks, Azure, AWS, SASE, DLP, IAM, PAM, Endpoint protection, SIEM, Network security", "professionalSkills" : [ "Enterprise strategy", "Security architecture", "Security operations", "Risk reporting", "Control maturity", "Threat detection", "Incident response", "Root cause analysis", "Post-incident remediation", "SOC capabilities", "MSSP management", "Alert validation", "Detection validation", "Response quality", "Mobile Device Management", "Least privilege", "Team leadership", "Mentoring", "Continuous improvement" ], "hardSkillsList" : [ "Vulnerability identification", "Remediation validation", "Security monitoring", "Hardening baselines", "Security GPOs", "Secure workstation configuration", "Secure server configuration" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Vulnerability identification", "level" : "intermediate" }, { "name" : "Remediation validation", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Hardening baselines", "level" : "intermediate" }, { "name" : "Security GPOs", "level" : "intermediate" }, { "name" : "Secure workstation configuration", "level" : "intermediate" }, { "name" : "Secure server configuration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Enterprise cybersecurity strategy, Security architecture, Security operations, Microsoft 365 security, Cloud security", "majorSkillsList" : [ "Enterprise cybersecurity strategy", "Security architecture", "Security operations", "Microsoft 365 security", "Cloud security" ], "coreResponsibilities" : "Define enterprise cybersecurity strategy, Execute enterprise cybersecurity strategy, Maintain enterprise cybersecurity strategy, Define security roadmap, Execute security roadmap, Maintain security roadmap, Define target security architecture, Execute target security architecture, Maintain target security architecture, Establish cybersecurity policies, Enforce cybersecurity policies, Establish technical controls, Enforce technical controls, Embed cybersecurity into architecture, Embed cybersecurity into infrastructure, Embed cybersecurity into cloud platforms, Embed cybersecurity into technology initiatives, Provide risk-based reporting, Configure security technologies, Implement security technologies, Tune security technologies, Lead platform implementation, Manage security platforms, Perform vulnerability identification, Oversee vulnerability identification, Perform remediation, Oversee remediation, Perform validation, Oversee validation, Participate in threat detection, Participate in security monitoring, Participate in incident response, Participate in root cause analysis, Participate in post-incident remediation, Manage SOC capabilities, Enhance SOC capabilities, Oversee MSSPs, Validate alerts, Validate detections, Validate response quality, Own Microsoft 365 security, Manage Microsoft 365 security, Design Conditional Access policies, Implement Conditional Access policies, Design identity protection controls, Implement identity protection controls, Design Zero Trust access models, Implement Zero Trust access models, Lead MDM strategy, Implement MDM strategy, Lead MAM strategy, Implement MAM strategy, Develop CIS hardening baselines, Implement CIS hardening baselines, Develop security GPOs, Implement security GPOs, Develop secure workstation images, Implement secure workstation images, Develop secure server images, Implement secure server images, Ensure secure configuration, Ensure continuous hardening, Lead secure cloud design, Implement secure cloud configuration, Implement identity-centric security controls, Implement secure networking, Implement logging, Implement monitoring, Integrate security controls into automation, Integrate security controls into IaC, Integrate security controls into IT delivery, Lead cybersecurity personnel, Mentor cybersecurity personnel, Develop cybersecurity personnel, Drive continuous improvement", "teamCollaboration" : "Peer technology functions; Risk stakeholders; Compliance stakeholders; Legal stakeholders; Business stakeholders", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "NIST CSF; CIS Controls; Zero Trust architecture; Cloud-native environments; Energy transition", "domainList" : [ "nist-csf", "cis-controls", "zero-trust-architecture", "cloud-native-environments", "energy-transition" ], "domainSpecificKnowledge" : [ "NIST CSF", "CIS Controls", "Zero Trust architecture", "Cloud-native environments", "Energy transition" ], "toolProficiency" : [ "Microsoft 365", "Entra ID", "Azure AD", "Exchange Online", "SharePoint", "OneDrive", "Teams", "Defender", "Microsoft Intune", "SASE", "DLP", "IAM", "PAM", "SIEM" ], "communicationSkills" : "Risk reporting", "problemSolvingSkills" : "Root cause analysis", "qualificationsBasic" : "5+ years cybersecurity experience, Hands-on security leader, Technical execution focus, Microsoft 365 security ownership, Cloud security experience, Develop security policies, Implement security controls, Manage security operations, Vulnerability management experience, Incident response experience, Develop security strategy, Define security architecture, Lead cybersecurity personnel, CIS hardening baselines, Security GPOs, Secure workstation images, Secure server images, Secure cloud environments, Identity-centric security controls, Secure networking, Logging and monitoring, Automation integration, Infrastructure-as-code integration, SASE implementation experience, DLP implementation experience, IAM implementation experience, PAM implementation experience, Endpoint security implementation, SIEM implementation experience, Zero Trust architecture experience, Develop CIS hardening standards, Enforce CIS hardening standards, Develop security baselines, Enforce security baselines, Develop secure images, Enforce secure images, Experience with SOX, Experience with SOC 2, Lead teams technically, Execution-focused leadership", "qualificationsPreferred" : "CISSP certification preferred, CISM certification preferred, CISA certification preferred, CIS Controls Practitioner preferred, Microsoft Security certifications preferred", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description About HASI HASI is an investor in sustainable infrastructure assets advancing the energy transition. With more than $16 billion in managed assets, our investments are diversified across multiple asset classes, including utility-scale solar, storage, and onshore wind; distributed solar and storage; RNG; and energy efficiency. We combine deep expertise in energy markets and financial structuring with long-standing programmatic client partnerships to deliver superior risk-adjusted returns and measurable environmental benefits. HA Sustainable Infrastructure Capital, Inc. is listed on the New York Stock Exchange (Ticker: HASI). For more information, please visit hasi.com. Position Summary The Sr. Manager, Cybersecurity is a hands-on technical leader responsible for defining, leading, and executing the organization’s enterprise cybersecurity strategy, architecture, and daily security operations. This role combines strategic ownership with direct technical execution, requiring active involvement in designing, implementing, configuring, and maintaining security controls across the enterprise. This role operates as a core member within the Digital Technology Organization (DTO), working in close alignment with peer technology functions while engaging collaboratively with risk, compliance, legal, and business stakeholders. The position ensures the confidentiality, integrity, and availability of HASI’s information assets while aligning cybersecurity initiatives with business objectives, regulatory requirements, and industry best practices. Beyond governance and oversight, this role is deeply engaged in security engineering and operations, including tool deployment, control configuration, vulnerability management, and incident response. A strong emphasis is placed on Microsoft 365 and cloud security, with expectations to operate directly within platforms to implement and optimize controls. The Sr. Manager owns the adoption and execution of cybersecurity frameworks, including CIS Controls, leads cybersecurity personnel, and drives continuous improvement across security operations, awareness, and technology platforms. Key Responsibilities Cybersecurity Strategy, Architecture & Governance Define, execute, and maintain HASI’s enterprise cybersecurity strategy, roadmap, and target security architecture. Establish and enforce cybersecurity policies, standards, and technical controls aligned to NIST CSF, CIS Controls, and regulatory requirements. Ensure cybersecurity is embedded into enterprise architecture, infrastructure design, cloud platforms, and technology initiatives from inception. Provide regular, risk-based reporting on cybersecurity posture, control maturity, and emerging threats to executive leadership. Hands-On Security Engineering & Operations Serve as a hands-on security leader, actively configuring, implementing, and tuning security technologies and controls. Lead the implementation and ongoing management of security platforms including SASE, DLP, IAM, PAM, endpoint protection, SIEM, and network security solutions. Perform and oversee vulnerability identification, remediation, and validation across infrastructure, cloud, endpoints, and applications. Actively participate in threat detection, security monitoring, incident response, root cause analysis, and post-incident remediation. Manage and enhance SOC capabilities, including direct oversight of MSSPs and validation of alerts, detections, and response quality. Microsoft 365 & Endpoint Security Ownership Own and manage security across the Microsoft 365 ecosystem, including Entra ID (Azure AD), Exchange Online, SharePoint, OneDrive, Teams, and Defender platforms. Design, implement, and maintain Conditional Access policies, identity protection controls, and Zero Trust access models. Lead Mobile Device Management (MDM/MAM) strategy and implementation using Microsoft Intune, including device compliance, application protection, and data loss prevention controls. Develop, implement, and maintain CIS hardening baselines, security GPOs, and standardized secure workstation and server images. Ensure secure configuration and continuous hardening of Microsoft and endpoint environments in alignment with CIS benchmarks. Cloud & Infrastructure Security Lead secure design and configuration of cloud environments (Azure, AWS), with a strong focus on defense-in-depth and least privilege. Implement identity-centric security controls, secure networking, logging, and monitoring across hybrid and cloud-native environments. Ensure security controls are integrated into automation, infrastructure-as-code, and modern IT delivery practices. Leadership & Team Development Lead, mentor, and develop a team of cybersecurity professionals, while remaining technically engaged and hands-on. Establish clear expectations that balance strategic ownership with operational execution. Foster a culture of accountability, continuous improvement, and strong security engineering discipline. Cross-Functional Collaboration & Awareness Partner with IT, risk, compliance, legal, and business teams to design solutions that are secure, scalable, and compliant Act as a trusted technical advisor on cybersecurity risks, control design, and mitigation strategies Drive organization-wide security awareness and training programs to improve cyber hygiene and reduce human risk Qualifications Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field 10+ years of progressive experience in cybersecurity or information security, with significant hands-on technical responsibility Demonstrated experience personally implementing and configuring security technologies, not solely managing teams or vendors Deep expertise in Microsoft 365 security, including Conditional Access, Intune (MDM/MAM), Defender, identity protection, and tenant hardening Strong experience implementing SASE, DLP, IAM, PAM, endpoint security, SIEM, vulnerability management, and Zero Trust architectures Proven experience developing and enforcing CIS hardening standards, security baselines, GPOs, and secure images. Experience with regulatory and compliance requirements (e.g., SOX, SOC 2) Ability to lead teams while remaining technically hands-on and execution-focused Excellent communication skills with the ability to translate technical risk into business impact Relevant certifications preferred: CISSP, CISM, CISA, CIS Controls Practitioner, Microsoft Security certifications, or equivalent ## Additional Information WORK AUTHORIZATION HASI is willing to take over sponsorship for existing H1-B visas for exceptional talent. We are unable to provide new H-1B sponsorship at this time. EEO STATEMENT The Company maintains a policy of non-discrimination in employment and complies with and supports all Federal, state, and local laws regarding discrimination in employment. Specifically, the Company does not discriminate in employment opportunities or practices against any employee, intern, or applicant on the basis of race, color, gender, sex, sexual orientation, gender identity, religion, ancestry, national origin, age, citizenship status, marital status, pregnancy (including childbirth, lactation, or related medical conditions), mental or physical disability, veteran status, uniformed servicemember status, genetic information (including testing and characteristics), or any other characteristic to the extent prohibited by federal, state, or local law. Decisions regarding staffing, selection, and promotions are made on the basis of individual qualifications related to the requirements of the position. If you need reasonable accommodation for a job opening, please connect with us at hiring@hasi.com and describe the specific accommodation requested for a disability-related limitation. Reasonable accommodations are modifications or adjustments to the application or hiring process that would enable you to fully participate in that process.", "summaryDescription" : "Senior Manager, Cybersecurity at HASI. Skills: Enterprise cybersecurity strategy, Security architecture, Security operations, Microsoft 365 security, Cloud security. Define enterprise cybersecurity strategy. Execute enterprise cybersecurity strategy", "postedDate" : "2026-06-12T15:17:51.802", "createdAt" : "2026-06-12T15:17:51.802", "lastUpdated" : "2026-06-15T22:12:30.292", "ingestTimestamp" : "2026-06-14T21:44:50.031", "mongoId" : "6a2c77ab74d8ee00a093d097", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 185000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Vulnerability identification", "Remediation validation", "Security monitoring", "Hardening baselines", "Security GPOs", "Secure workstation configuration", "Secure server configuration", "Leadership", "Enterprise cybersecurity strategy", "Security architecture", "Security operations", "Microsoft 365 security", "Cloud security", "Enterprise strategy", "Risk reporting", "Control maturity", "Threat detection", "Incident response", "Root cause analysis", "Post-incident remediation", "SOC capabilities", "MSSP management", "Alert validation", "Detection validation", "Response quality", "Mobile Device Management", "Least privilege", "Team leadership", "Mentoring", "Continuous improvement", "Roadmap planning", "NIST CSF", "CIS Controls", "Zero Trust architecture", "Cloud-native environments", "Energy transition", "CISSP", "CISM", "CISA", "CIS Controls Practitioner", "Microsoft Security certifications", "Microsoft 365", "Entra ID", "Azure AD", "Exchange Online", "SharePoint", "OneDrive", "Teams", "Defender", "Microsoft Intune", "SASE", "DLP", "IAM", "PAM", "SIEM" ], "skillCount" : 55, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 1055.6162, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Finance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6af174d8ee00a090f55e", "title" : "Security Senior Specialist", "company" : "Bybit", "industry" : "FinTech", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Specialist in Vienna, Austria, within the FinTech industry, adjusted for seniority and company size." }, "location" : "Vienna", "locations" : [ "Vienna" ], "certifications" : [ "CISSP", "CISM", "CISA", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "PCI DSS QSA", "PCI DSS ISA", "Microsoft Identity", "SailPoint", "Okta" ], "timestamp" : "2026-06-15T09:05:36.877", "fingerprint" : "4c8ae67e8781859334c6fdaf6b87f088ba39f3e797d56b5570a8f90a88f8a1f2", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/bybit/jobs/4878926101", "externalId" : "4878926101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vienna", "country" : "Austria", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "48.2083537,16.3725042" } ], "locationText" : "Vienna, Austria", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "IAM, Network security", "professionalSkills" : [ "Project management", "Stakeholder management" ], "hardSkillsList" : [ "Access rights management", "Penetration testing", "Gap analyses" ], "hardSkills" : [ { "name" : "Access rights management", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" }, { "name" : "Gap analyses", "level" : "intermediate" } ], "majorSkills" : "Network Security, Compliance & Certification", "majorSkillsList" : [ "Network Security", "Compliance & Certification" ], "coreResponsibilities" : "Design IAM frameworks, Implement IAM frameworks, Maintain IAM frameworks, Oversee access rights management, Lead MFA rollout, Enforce MFA, Ensure least-privilege principles, Audit least-privilege principles, Oversee network security controls, Implement network security controls, Improve network security controls, Monitor security threats, Detect security threats, Respond to security threats, Monitor vulnerabilities, Detect vulnerabilities, Respond to vulnerabilities, Generate security reports, Generate security dashboards, Support audit processes, Coordinate penetration testing, Oversee penetration testing, Track penetration testing findings, Drive remediation, Lead security certification processes, Coordinate security certification processes, Conduct gap analyses, Maintain compliance documentation, Liaise with auditors, Liaise with certification bodies", "teamCollaboration" : "Work with CISO; Global collaboration; International team", "projectManagementSkills" : [ "Security project management" ], "domainKnowledge" : "Cryptocurrency exchange; Digital financial platforms; Web3; Digital finance; Digital asset industry; Regulatory frameworks", "domainList" : [ "cryptocurrency-exchange", "digital-financial-platforms", "web3", "digital-finance", "digital-asset-industry", "regulatory-frameworks" ], "domainSpecificKnowledge" : [ "Cryptocurrency exchange", "Digital financial platforms", "Web3", "Digital finance", "Digital asset industry", "Regulatory frameworks" ], "communicationSkills" : "Stakeholder management", "documentationSkills" : "Compliance documentation", "continuousLearning" : "Study Growth Fund; Professional development; Continuous learning", "problemSolvingSkills" : "Independent problem-solving", "qualificationsBasic" : "Bachelor's degree or above, 3–5 years of hands-on experience, Proven track record in security project implementation, Demonstrated experience in IAM, Demonstrated experience in network security, Demonstrated experience in compliance programs", "qualificationsPreferred" : "CISSP, CISM, CISA, or equivalent, ISO 27001 Lead Implementer / Lead Auditor, PCI DSS QSA or ISA certification, IAM-related certifications", "rawDescription" : "About Us Established in 2018, Bybit is one of the world’s leading cryptocurrency exchanges and digital financial platforms, serving over 80 million users across more than 200 countries and regions. Powered by world-class technology and a user-first mindset, Bybit delivers a seamless ecosystem across trading, payments, wealth management, custody, institutional services, and Web3 — connecting users to the future of digital finance. Our core values define how we build. We listen, care and improve to create products and experiences that put users first. Backed by a global team of ambitious builders, problem-solvers, and innovators, we foster a high-performance and fast-moving environment where talent is empowered to drive real impact at the global scale. Supported by 24/7 multilingual customer service and a strong commitment to innovation, we are shaping the future of finance through technology, collaboration, and bold execution. Today, Bybit is recognized as one of the most trusted and transparent platforms in the digital asset industry, continuing to expand its global presence while building the infrastructure for the next generation of financial services. Role Overview We are looking for a hands-on Senior Security Specialist to lead and oversee key security initiatives across the organization. You will play a central role in strengthening our security posture, driving compliance certifications, and ensuring robust access governance — working closely with the CISO to protect our infrastructure and data assets. --- Key Responsibilities **Identity & Access Management (IAM)** - Design, implement, and maintain IAM frameworks, policies, and processes across the organization - Oversee access rights management, including provisioning, de-provisioning, and periodic access reviews - Lead the rollout and enforcement of Multi-Factor Authentication (MFA) across all systems and user groups - Ensure least-privilege principles are consistently applied and audited **Network Security** - Oversee the implementation and continuous improvement of network security controls - Monitor, detect, and respond to security threats and vulnerabilities across the network infrastructure **Security Reporting & Audit** - Generate regular security reports and dashboards for the CISO and senior management - Support internal and external audit processes, ensuring timely and accurate documentation - Coordinate and oversee penetration testing engagements, track findings, and drive remediation **Compliance & Certification** - Lead and coordinate security certification processes (e. g. PCI DSS, ISO 27001) in close collaboration with the CISO - Conduct gap analyses, maintain compliance documentation, and liaise with auditors and certification bodies Requirements Bachelor's degree or above in Computer Science, Information Technology, Cybersecurity, or a related field 3–5 years of hands-on experience in information security Proven track record in security project implementation and management Demonstrated experience in IAM, network security, or compliance programs Certifications would be a strong plus - CISSP, CISM, CISA, or equivalent - ISO 27001 Lead Implementer / Lead Auditor - PCI DSS QSA or ISA certification - IAM-related certifications (e. g. Microsoft Identity, SailPoint, Okta) Skills - Solid understanding of IAM principles, network security, and regulatory frameworks - Strong analytical and independent problem-solving abilities - Excellent communication and stakeholder management skills - Ability to manage multiple priorities in a fast-paced environment Can use German and English as working language Why Join Us At Bybit, we are committed to fostering a supportive and enriching work environment. Our benefits include: - Study Growth Fund: We support your professional development and continuous learning. - Internal Events: Participate in regular team-building activities, workshops, and events designed to promote collaboration and innovation. - Global Collaboration: Be part of a diverse, international team, working alongside colleagues from around the world. - Career Advancement: Access opportunities for growth and advancement within a rapidly expanding global company. - Internal Mobility: Grow with us- Your long-term development is important to us. We offer internal job opportunities to help build your career path.", "summaryDescription" : "Security Senior Specialist at Bybit. Skills: Network Security, Compliance & Certification. Design IAM frameworks. Implement IAM frameworks", "postedDate" : "2026-06-14T07:58:22.569", "createdAt" : "2026-06-14T07:58:22.569", "lastUpdated" : "2026-06-15T09:05:36.877", "ingestTimestamp" : "2026-06-14T07:58:22.569", "mongoId" : "6a2c6af174d8ee00a090f55e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Access rights management", "Penetration testing", "Gap analyses", "Network Security", "Compliance & Certification", "Project management", "Stakeholder management", "Security project management", "Cryptocurrency exchange", "Digital financial platforms", "Web3", "Digital finance", "Digital asset industry", "Regulatory frameworks", "CISSP", "CISM", "CISA", "ISO 27001 Lead Implementer", "ISO 27001 Lead Auditor", "PCI DSS QSA", "PCI DSS ISA", "Microsoft Identity", "SailPoint", "Okta" ], "skillCount" : 24, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1008.9209, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3057f5f292fd229cf3f231", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:14:43.050", "fingerprint" : "bb3bf1fd4e7d55411eb83fbc341b38e2ce2335d962e33ef3f3feb348a180b316", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring use cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage service provider relationships, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Protect against threats, Resolve threats, Participate in selection of security solutions, Evaluate security solutions, Improve enterprise security, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud computing; Threat Intelligence Management; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud-computing", "threat-intelligence-management", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T23:44:55.017", "lastUpdated" : "2026-06-16T08:14:43.050", "ingestTimestamp" : "2026-06-15T23:44:55.017", "mongoId" : "6a3057f5f292fd229cf3f231", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Cyber Security Operations", "Incident Response", "SIEM tuning", "Cyber Security", "Cyber security domains", "Cloud computing", "Threat Intelligence Management", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM solutions", "EDR solutions", "Splunk Apps", "SOAR solutions" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1005.21106, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.95 }, { "id" : "6a305299f292fd229cf0ec61", "title" : "Senior Cyber Security Specialist", "company" : "Avaloq", "industry" : "Financial Services", "salary" : { "min" : 135000.0, "max" : 175000.0, "currency" : "CHF", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Cyber Security Specialist in Bioggio, Switzerland, adjusted for the FinTech industry and company size." }, "location" : "Bioggio, Canton Ticino, CH", "locations" : [ "Bioggio", "Canton Ticino", "CH" ], "certifications" : [ "CISSP", "SANS" ], "timestamp" : "2026-06-16T08:29:37.048", "fingerprint" : "50545fa5c12fe38cf8ac3a90e9d739c9b1a419db521bdc38142890221e997e19", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Avaloq1/744000132197944-senior-cyber-security-specialist", "externalId" : "744000132197944", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bioggio", "state" : "Ticino", "country" : "Switzerland", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "46.0141052,8.9076167" } ], "locationText" : "Bioggio, Ticino, Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "mid", "technicalSkills" : "SIEM, EDR, AWS, Azure, Oracle, Splunk", "professionalSkills" : [ "Cyber Security" ], "hardSkillsList" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation" ], "hardSkills" : [ { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Threat analysis", "level" : "intermediate" }, { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Security services management", "level" : "intermediate" }, { "name" : "Security solution evaluation", "level" : "intermediate" } ], "majorSkills" : "Cyber Security Operations, Incident Response, SIEM Tuning", "majorSkillsList" : [ "Cyber Security Operations", "Incident Response", "SIEM Tuning" ], "coreResponsibilities" : "Handle daily incidents/threats, Correlate alerts, Implement monitoring Use Cases, Recommend Cyber Security changes, Drive implementation of changes, Manage security services, Manage relationship to service providers, Participate in Security projects, Support development of procedures, Provide implementations for threats, Provide recommendations for threats, Provide implementations for incidents, Provide recommendations for incidents, Participate in selection of security solutions, Participate in evaluation of security solutions, Manage major Cyber Security Incidents, Support major Cyber Security Incidents, Support on-call rotation, Act as technical Lead, Drive initiatives, Drive projects", "teamCollaboration" : "Global cyber security operations team; Talented team", "domainKnowledge" : "Cyber security domains; Cloud; Digital Forensics; Cyber Security Incident Response", "domainList" : [ "cyber-security-domains", "cloud", "digital-forensics", "cyber-security-incident-response" ], "domainSpecificKnowledge" : [ "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response" ], "toolProficiency" : [ "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "documentationSkills" : "Documentation", "specialRequirements" : "On-call rotation", "qualificationsBasic" : "4-6 years SOC/CDC experience, SIEM use case creation, SIEM use case tuning, Threat Intelligence Management experience, Fluent in English", "qualificationsPreferred" : "CISSP certification, SANS certification, Splunk Apps experience, Splunk Enterprise Security experience, Splunk search language knowledge, Automation experience, SOAR solutions experience, Digital Forensics experience, Cyber Security Incident Response experience", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 12 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. We are looking for an individual with a passion for cyber security to work alongside a talented team to Improve and operate a cyber security Center. The role requires a strong background and understanding of all cyber security domains. In this position, you will be part of the global cyber security operations team with focus on identification, analysis and response to cyber security threats and events. You will support the Head of our Cyber Security Operations Center in improving the effectiveness of the team and Leads the planning, implementation, documentation. You can expect a demanding and complex international environment, which is highly stimulating and encouraging. The growth of the company demands your structured and innovative approach, as well as flexibility to a high degree. As a committed team player, you will support developing the maturity of the cyber security operation center, its controls and processes. Your key tasks * Handle daily incidents/threats * Assist correlating alerts, implementing monitoring Use Cases * Recommend Cyber Security changes or enhancements and drive implementation * Manage and cultivate the defined security services and the relationship to our service providers * Participate in organizational Security projects, as required * Support in development processes, and procedures for the team * Provide implementations, recommendations for protecting and resolving threats and incidents * Participate in the selection and evaluation of security solutions, or enhancements to existing cyber security solutions, to improve overall enterprise security * Manage and support in major Cyber Security Incidents * Support in on-call rotation * Act as a technical Lead role model in the team on driving initiatives and projects ## Qualifications * 4-6 years of working experience in a SOC / CDC or similar roles * Working experience in the creation of playbooks and the tuning of SIEM use cases * Deep knowledge and expertise in SIEM and EDR solutions * Solid knowledge about Cloud like (AWS, Azure, Oracle etc) * Working experience in Threat Intelligence Management * Fluent in English (both written and verbal) * Knowledge of German is considered a strong asset It would be a real bonus if you have * Information and Cyber Security certificates like CISSP, SANS or similar * Working experience with Splunk Apps, especially Enterprise Security and knowledge of the Splunk “search”-language * Working experience with automation and SOAR solutions * Working experience in Digital Forensics and Cyber Security Incident Response ## Additional Information We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations. #LI-Hybrid", "summaryDescription" : "Senior Cyber Security Specialist at Avaloq. Skills: Cyber Security Operations, Incident Response, SIEM Tuning. Handle daily incidents/threats. Correlate alerts", "postedDate" : "2026-06-15T13:04:15.000", "createdAt" : "2026-06-15T21:55:54.859", "lastUpdated" : "2026-06-16T08:29:37.048", "ingestTimestamp" : "2026-06-15T21:55:54.859", "mongoId" : "6a305299f292fd229cf0ec61", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Incident response", "Threat analysis", "Security monitoring", "Security services management", "Security solution evaluation", "Cyber Security Operations", "Incident Response", "SIEM Tuning", "Cyber Security", "Cyber security domains", "Cloud", "Digital Forensics", "Cyber Security Incident Response", "CISSP", "SANS", "SIEM", "EDR", "Splunk Apps", "Splunk Enterprise Security", "SOAR" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1005.21106, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305f3bf292fd229cf79f2d", "title" : "Cybersecurity Engineer", "industry" : "Growth Initiatives", "salary" : { "min" : 135000.0, "max" : 195000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Washington, United States, adjusted for industry and seniority." }, "location" : "Washington, DC (Hybrid)", "locations" : [ "Washington, DC (Hybrid)" ], "timestamp" : "2026-06-16T14:15:49.309", "fingerprint" : "be563ebc07eb041e70d0bc2989dab3c45d73e4f27dc9a09e1a4bb2d3e1389847", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/sprymethods/e248901d-227a-41dd-bf28-0c0a3c3765cb/apply", "externalId" : "e248901d-227a-41dd-bf28-0c0a3c3765cb", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Washington", "state" : "District of Columbia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "38.8950982,-77.0363849" } ], "locationText" : "Washington, District of Columbia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust architecture, Cloud platforms, On-premises platforms, Hybrid environments, Authentication, Authorization, Role-based access control, Privileged access management, Multi-factor authentication, Centralized logging, Monitoring, Audit capabilities, Vulnerability assessment, System hardening, Application hardening, Cloud environment hardening", "professionalSkills" : [ "Risk analysis", "Change management", "Security posture improvement" ], "hardSkillsList" : [ "Security controls implementation", "Access management", "Least privilege", "Vulnerability management", "Incident response", "Security baselines", "Audit readiness", "Root cause analysis" ], "hardSkills" : [ { "name" : "Security controls implementation", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security baselines", "level" : "intermediate" }, { "name" : "Audit readiness", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity engineering, Security operations, Incident response", "majorSkillsList" : [ "Cybersecurity engineering", "Security operations", "Incident response" ], "coreResponsibilities" : "Implement enterprise security controls, Maintain enterprise security controls, Support security platform implementation, Support security platform operation, Support security platform optimization, Configure identity and access services, Manage identity and access services, Configure centralized logging, Configure monitoring, Configure audit capabilities, Conduct continuous monitoring, Conduct vulnerability assessment, Conduct risk analysis, Coordinate remediation, Harden systems, Harden applications, Harden cloud environments, Support incident response activities, Support forensic collection, Support root cause analysis, Support change management, Support SOP development, Collaborate with network teams, Collaborate with cloud teams, Collaborate with application teams, Resolve security issues, Improve security posture", "teamCollaboration" : "Network teams; Cloud teams; Application teams", "domainKnowledge" : "Federal security frameworks; Zero Trust architecture", "domainList" : [ "federal-security-frameworks", "zero-trust-architecture" ], "domainSpecificKnowledge" : [ "Federal security frameworks", "Zero Trust architecture" ], "documentationSkills" : "Standard operating procedure development", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Federal screening", "qualificationsBasic" : "Five years of experience in cybersecurity engineering, Experience implementing security controls, Experience with identity and access management, Experience with security baselines, Ability to meet federal screening", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "## What Your Day-To-Day Looks Like (Position Responsibilities) Implement and maintain enterprise security controls aligned to federal security frameworks and Zero Trust architecture. Support implementation, operation, and optimization of enterprise security platforms across cloud, on-premises, and hybrid environments. Configure and manage identity and access services, including authentication, authorization, role-based access control (RBAC), privileged access management (PAM), and multi-factor authentication (MFA). Configure centralized logging, monitoring, and audit capabilities across systems, applications, and cloud platforms. Conduct continuous monitoring, vulnerability assessment, risk analysis, and remediation coordination. Harden systems, applications, and cloud environments using secure baselines and industry best practices. Support incident response activities, forensic collection, root cause analysis, change management, and standard operating procedure (SOP) development. Collaborate with network, cloud, and application teams to resolve security issues and improve security posture. ## What You Need to Succeed (Minimum Requirements) Five years of experience in cybersecurity engineering or security operations. Experience implementing security controls in cloud, network, endpoint, and identity environments. Experience with identity and access management (IAM), least privilege, MFA, logging, monitoring, vulnerability management, and security incident response. Experience with security baselines, documentation, audit readiness, root cause analysis, and formal change management. Ability to meet federal screening and suitability requirements prior to start.", "summaryDescription" : "Cybersecurity Engineer. Skills: Cybersecurity engineering, Security operations, Incident response. Implement enterprise security controls. Maintain enterprise security controls", "postedDate" : "2026-06-14T15:47:12.782", "createdAt" : "2026-06-14T15:47:12.782", "lastUpdated" : "2026-06-16T14:15:49.309", "ingestTimestamp" : "2026-06-16T03:22:51.320", "mongoId" : "6a305f3bf292fd229cf79f2d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 195000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security controls implementation", "Access management", "Least privilege", "Vulnerability management", "Incident response", "Security baselines", "Audit readiness", "Root cause analysis", "Cybersecurity engineering", "Security operations", "Risk analysis", "Change management", "Security posture improvement", "Federal security frameworks", "Zero Trust architecture" ], "skillCount" : 15, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 1001.986, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2cea0374d8ee00a0a6f696", "title" : "Senior Staff Cybersecurity Engineer, Platform Security", "company" : "Shield AI", "industry" : "Cybersecurity", "salary" : { "min" : 160000.0, "max" : 240000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "San Diego, California", "locations" : [ "San Diego, California" ], "timestamp" : "2026-06-16T05:00:21.189", "fingerprint" : "2d53963230691813e0d1a2815b93ccb0bdeab0c94c02686e96a27282d190b5c4", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/shieldai/6504c787-5aff-41ad-9104-2d251bf9eb12/apply", "externalId" : "6504c787-5aff-41ad-9104-2d251bf9eb12", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Diego", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "32.7174202,-117.1627720" } ], "locationText" : "San Diego, California, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description Founded in 2015, Shield AI is a venture-backed defense-tech company with the mission of protecting service members and civilians with intelligent systems. Its products include Hivemind autonomy software and V-BAT and X-BAT aircraft. With offices and facilities across the U.S., Europe, the Middle East, and Asia-Pacific, Shield AI’s technology actively supports operations worldwide. For more information, visit www.shield.ai. Follow Shield AI on LinkedIn, X, Instagram, and YouTube. ## What you'll do Build the secure defaults: Infrastructure-as-Code modules, CI/CD pipeline templates, internal libraries, and golden-path scaffolding that make the secure choice the easy choice. Engineer guardrails as code — policy-as-code (OPA/Conftest), admission controllers, cloud guardrails (SCPs / org policy), and pre-commit and CI checks — so the insecure path is blocked or flagged automatically. Own the platform security tooling that other teams consume, so they don't have to build their own; replace recurring manual work with durable, self-service mechanisms. Embed security into the software and infrastructure supply chain: pipeline security, build/artifact integrity, dependency and container scanning, and secrets management. Engineer workload and service identity controls (least privilege, short-lived credentials, federated trust) so zero-standing-privilege is real and observable. Write and maintain production-quality code and infrastructure that backs these controls. Partner with platform, infrastructure, and product engineering teams early — review high-blast-radius designs against the internal Security Engineering standard while the design can still change, and turn recurring findings into a missing paved road, not just another fix. Set technical direction and standards for secure-by-default; document them so they can be applied without us, and mentor and raise the bar for other engineers. ## Required qualifications Extensive experience in security engineering, platform/infrastructure engineering, DevSecOps, or a closely related field, with a track record of owning complex systems end-to-end. Strong software engineering ability — you write, review, and ship production-quality code (any modern language) and treat infrastructure as software. Hands-on experience building secure-by-default mechanisms: Infrastructure-as-Code, CI/CD pipeline security, and policy/guardrails as code. Deep working knowledge of at least one major cloud provider and its security and identity model. Demonstrated ability to design durable, automated solutions that reduce real risk without becoming a bottleneck — and to make explicit tradeoffs between security and the business. Strong communication: you can explain a security concept to a product engineer in their language and to a leader in business terms, and you write recommendations people can act on. ## Preferred qualifications Strong DevSecOps background with hands-on Kubernetes (admission control, OPA/Gatekeeper, workload identity) and Terraform (reusable secure modules, policy-as-code). Production coding experience in Go, Python, and/or Rust; comfortable with scripting/automation in Bash and PowerShell. Depth in Azure security and identity (Entra ID, Azure Policy, Management Group guardrails). Experience securing AI/ML systems, pipelines, or workloads. Offensive security / red team experience, with the ability to think like an attacker and translate those findings into stronger defaults and guardrails. Experience with supply-chain security (SLSA, sigstore/cosign, SBOMs), container/image hardening, and secrets management. Experience operating security tooling as an internal product consumed self-service by other engineering teams. Bachelor's degree or equivalent professional certification and experience. ## Additional Information Full-time regular employee offer package: Pay within range listed + Bonus + Benefits + Equity Temporary employee offer package: Pay within range listed above + temporary benefits package (applicable after 60 days of employment) Salary compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications, and specific work location. All offers are contingent on a cleared background and possible reference check. Military fellows and part-time employees are not eligible for benefits. Please speak to your talent acquisition representative for more information. ### Shield AI is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status. If you have a disability or special need that requires accommodation, please let us know. ", "summaryDescription" : "Senior Staff Cybersecurity Engineer, Platform Security at Shield AI", "postedDate" : "2026-06-12T22:59:31.881", "createdAt" : "2026-06-12T22:59:31.881", "lastUpdated" : "2026-06-16T05:00:21.189", "ingestTimestamp" : "2026-06-15T21:13:52.059", "mongoId" : "6a2cea0374d8ee00a0a6f696", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 160000, "salaryAnnualMax" : 240000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1001.68695, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca5f474d8ee00a09b8c7e", "title" : "IT & Cybersecurity Manager", "company" : "Nooks", "industry" : "Cybersecurity", "salary" : { "min" : 155000.0, "max" : 175000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Colorado Springs, Colorado, United States", "locations" : [ "Colorado Springs", "Colorado", "United States" ], "certifications" : [ "DoD 8570/8140 IAM Level III" ], "timestamp" : "2026-06-15T05:01:45.302", "fingerprint" : "34802dfd1ce43275651ae8eaeb82788c2f3ca85e89600eee1ff97cc21e5c0c3c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/nooks/jobs/4274144009", "externalId" : "4274144009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Colorado Springs", "state" : "Colorado", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8339578,-104.8253480" } ], "locationText" : "Colorado Springs, Colorado, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 10, "experienceLevel" : "Manager", "technicalSkills" : "Networking, Cloud infrastructure, IAM, Endpoint security", "professionalSkills" : [ "Risk assessment", "Budget management", "Vendor management", "Technology lifecycle management" ], "hardSkillsList" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation" ], "softSkillsList" : [ "Leadership", "Service-first mindset" ], "hardSkills" : [ { "name" : "Incident response planning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Remediation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Service-first mindset" } ], "majorSkills" : "IT operations, Cybersecurity operations, Security protocols, Incident response", "majorSkillsList" : [ "IT operations", "Cybersecurity operations", "Security protocols", "Incident response" ], "coreResponsibilities" : "Foster technical growth, Develop leadership capabilities, Establish security protocols, Enforce security protocols, Develop incident response plans, Oversee hardware lifecycle, Oversee software lifecycle, Oversee networking assets lifecycle, Ensure maximum efficiency, Ensure minimal downtime, Ensure rigorous configuration management, Manage third-party service providers, Oversee IT/Cyber departmental budget, Prioritize security investments, Prioritize tech investments, Lead local response efforts for outages, Lead local response efforts for security events, Maintain clear communication channels, Maintain disciplined communication channels, Provide direct technical assistance, Troubleshoot complex issues, Support peak project demands, Support system migrations", "teamCollaboration" : "Corporate policy alignment; Federal frameworks alignment; Corporate leadership communication", "projectManagementSkills" : [ "Configuration management" ], "domainKnowledge" : "Classified Infrastructure-as-a-Service; NIST; DAAPM; JSIG; ISO 27001; SOC2; ITIL", "domainList" : [ "classified-infrastructure-as-a-service", "nist", "daapm", "jsig", "iso-27001", "soc2", "itil" ], "domainSpecificKnowledge" : [ "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL" ], "toolProficiency" : [ "ITSM tools", "Security monitoring tools" ], "communicationSkills" : "Clear communication; Disciplined communication", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Troubleshooting; Incident response", "specialRequirements" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility", "outcomesObjectives" : "Ensure maximum efficiency; Ensure minimal downtime; Ensure rigorous configuration management", "qualificationsBasic" : "US citizen, Active Top Secret/SCI clearance, Maintain Top Secret/SCI eligibility, Bachelor's degree or higher, Active DoD 8570/8140 IAM Level III certification, 10+ years of experience in IT/Cyber operations, 3 years in leadership or management capacity, Implement and enforce enterprise IT and security policies, Experience leading IT and cybersecurity teams, Align operational and security priorities, Working knowledge of compliance frameworks, Broad technical understanding of networking, Broad technical understanding of cloud infrastructure, Broad technical understanding of IAM, Broad technical understanding of endpoint security, Risk assessment and remediation experience, Experience managing budgets, Experience managing vendors, Experience managing technology lifecycles, Proficiency with ITSM tools, Proficiency with security monitoring tools", "qualificationsPreferred" : "Maintain eligibility up to the Top Secret/SCI level within 45 days of hire", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "ABOUT NOOKS Are you seeking an exciting and unique opportunity to grow and support our national security? As a startup, we are offering a limited-time opportunity to be an equity owner in a pioneering new industry. Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset. ABOUT THE ROLE: As the IT foster technical growth and leadership capabilities within your team. Establish and enforce local security protocols and incident response plans in alignment with corporate policy and federal frameworks (NIST, DAAPM, JSIG, ISO 27001, or SOC2). Oversee the lifecycle of site hardware, software, and networking assets to ensure maximum efficiency, minimal downtime, and rigorous configuration management. Manage third-party service providers and oversee the IT/Cyber departmental budget, prioritizing high-ROI security and tech investments. Lead local response efforts for outages or security events while maintaining clear, disciplined communication channels with corporate leadership. Transition seamlessly from strategy to execution, providing direct technical assistance during complex troubleshooting, peak project demands, or system migrations. THE SKILLSET: You must be a US citizen and have an active Top Secret/SCI security clearance. Candidates must be capable of maintaining eligibility up to the Top Secret/SCI level within 45 days of hire. Bachelor’s degree or higher in Information Technology, Cybersecurity, Computer Science, or a related technical field. Active DoD 8570/8140 IAM Level III certification (CISSP, CISM, or GSLC). 10+ years of experience in IT/Cyber operations with at least 3 years in a leadership or management capacity. Proven ability to implement and enforce enterprise IT and security policies in regulated or classified environments. Experience leading IT and cybersecurity teams and aligning operational and security priorities. Working knowledge of compliance frameworks such as NIST, ISO 27001, SOC 2, and ITIL. Broad technical understanding of networking, cloud infrastructure, IAM, and endpoint security. Strong risk assessment and remediation experience aligned with enterprise risk tolerance. Experience managing budgets, vendors, and technology lifecycles within corporate governance models. Proficiency with ITSM and security monitoring tools to report operational health and compliance metrics. Salary Range for all departments Salary Range $155,000—$175,000 USD", "summaryDescription" : "IT & Cybersecurity Manager at Nooks. Skills: IT operations, Cybersecurity operations, Security protocols, Incident response. Foster technical growth. Develop leadership capabilities", "postedDate" : "2026-06-14T04:46:16.678", "createdAt" : "2026-06-14T04:46:16.678", "lastUpdated" : "2026-06-15T05:01:45.302", "ingestTimestamp" : "2026-06-14T04:46:16.678", "mongoId" : "6a2ca5f474d8ee00a09b8c7e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 155000, "salaryAnnualMax" : 175000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Incident response planning", "Configuration management", "Risk assessment", "Remediation", "Leadership", "Service-first mindset", "IT operations", "Cybersecurity operations", "Security protocols", "Incident response", "Budget management", "Vendor management", "Technology lifecycle management", "Classified Infrastructure-as-a-Service", "NIST", "DAAPM", "JSIG", "ISO 27001", "SOC2", "ITIL", "DoD 8570/8140 IAM Level III", "ITSM tools", "Security monitoring tools" ], "skillCount" : 23, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 1.0, "_score" : 958.40955, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30704bf292fd229cff307e", "title" : "Senior Security Operations Analyst", "company" : "NuHarbor Security", "industry" : "Cybersecurity", "salary" : { "min" : 110000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Remote", "locations" : [ "Remote", "Vermont", "United States" ], "certifications" : [ "Relevant industry certifications" ], "timestamp" : "2026-06-16T11:21:20.145", "fingerprint" : "3beb472f9b9441ed873cd3e0d296125167bd0a272c7086b41fed4fc363a7dc2c", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.nuharborsecurity.com/careers?gh_jid=7988994", "externalId" : "7988994", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, EDR, Identity telemetry, CrowdStrike, Microsoft Defender, Microsoft Sentinel, Splunk Enterprise Security, Python, PowerShell", "professionalSkills" : [ "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement" ], "hardSkillsList" : [ "Security event triaging", "Threat hunting", "Scripting" ], "softSkillsList" : [ "Mentorship" ], "hardSkills" : [ { "name" : "Security event triaging", "level" : "intermediate" }, { "name" : "Threat hunting", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentorship" } ], "majorSkills" : "Security Operations, Incident Response, Threat Analysis", "majorSkillsList" : [ "Security Operations", "Incident Response", "Threat Analysis" ], "coreResponsibilities" : "Own investigations end-to-end, Conduct root cause analysis, Reconstruct attack chains, Produce client-ready written narrative, Correlate across SIEM, EDR, and identity telemetry, Identify what alerts missed, Self-assign to difficult work, Deliver work reflecting technical excellence, Support Security Analyst team, Triage alerts, Classify alerts, Dispose alerts, Escalate alerts within SLA, Identify security gaps, Communicate security mitigations, Communicate proactively with Manager, Facilitate client-facing meetings, Produce ticket documentation, Include evidence trail in tickets, Include analyst reasoning in tickets, Include disposition rationale in tickets, Include plain-language client summary, Remain current on emerging threats, Remain current on CVEs, Remain current on attacker techniques, Support onboarding of new clients, Train junior analysts, Mentor junior analysts, Support junior analysts, Coach on investigation methodology, Coach on documentation standards, Coach on client communication, Review escalations from junior analysts, Ensure investigative completeness, Ensure documentation quality, Develop automation playbooks, Refine automation playbooks, Contribute tuning feedback, Contribute noise identification, Contribute alert fidelity assessments, Develop recommendations for client cybersecurity program, Develop enhancements for client cybersecurity program, Coordinate with NuHarbor clients, Coordinate with internal stakeholders during incident response, Coordinate with internal stakeholders after incident response", "teamCollaboration" : "Security Operations team; Detection Engineering program; Internal stakeholders", "projectManagementSkills" : [ "Incident response management" ], "domainKnowledge" : "Cybersecurity services; SOC operations; MSSP environment; Endpoint Detection and Response", "domainList" : [ "cybersecurity-services", "soc-operations", "mssp-environment", "endpoint-detection-and-response" ], "domainSpecificKnowledge" : [ "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response" ], "toolProficiency" : [ "SIEM", "EDR", "SOAR" ], "communicationSkills" : "Client-ready documentation; Client-facing meetings; Incident briefings; Escalation reviews; Threat landscape discussions; Plain-language client summary", "documentationSkills" : "Client-ready documentation; Runbooks; Support procedures; Ticket documentation", "continuousLearning" : "Remain current on emerging threats; Remain current on CVEs; Remain current on attacker techniques", "innovationCreativity" : "Develop automation playbooks; Refine automation playbooks", "problemSolvingSkills" : "Deep investigations; Root cause analysis; Attack chain reconstruction; Identify what alerts missed; Self-assign to complex problems; Troubleshooting", "specialRequirements" : "Work Sunday - Thursday, 8:30am - 5:00pm, Authorized to work within the United States", "outcomesObjectives" : "Improve cybersecurity of clients; Deliver work that reflects technical excellence; Deliver work that reflects client outcomes", "qualificationsBasic" : "Bachelor's Degree and five (5) years of experience in cybersecurity, Relevant industry certifications, Demonstrated experience with SOC operations, Executing security event triaging and tuning, Demonstrated experience writing runbooks and support procedures, Demonstrated experience executing Monitoring and Response, Containment, eradication, and recovery experience, Demonstrated experience with threat hunting, Hands on experience with at least two EDR/SOAR solutions, Demonstrated experience with scripting in Python, PowerShell, or equivalent, Excellent written and verbal communication skills, Previous experience in technical support or security-focused role, Authorized to work within the United States", "qualificationsPreferred" : "Bachelor's Degree and seven (7) or more years of experience in cybersecurity, Progressive cybersecurity disciplines experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "The Company Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission. The Role The Senior Security Analyst is a senior individual contributor within the NuHarbor Managed Services Security Operations team. This role serves as the technical anchor on shift, conducting deep investigations, producing client-ready documentation, and actively raising the quality of the team's work through mentorship and technical shift ownership. Senior Security Analysts are expected to operate with minimal direction, self-assign to the most complex open problems, and deliver work that reflects NuHarbor's commitment to technical excellence and client outcomes. . What you’ll do Live by the NuHarbor corporate values: Help Clients Win, Always Improve, Protect the House. Own investigations end-to-end from initial alert through root cause analysis, attack chain reconstruction, and client-ready written narrative. Correlate across SIEM, EDR, and identity telemetry to identify what alerts missed, not just what they flagged. Self-assign to difficult, ambiguous, or high-priority work without requiring direction, including work that falls outside defined lanes. Support the Security Analyst team with alert triage, classification, disposition, and escalation within SLA requirements. Identify and communicate security gaps and mitigations in the context of client environments. Communicate proactively with the Security Operations Manager on active threats, escalations, and items requiring leadership visibility. Facilitate client-facing meetings including incident briefings, escalation reviews, and threat landscape discussions. Produce ticket documentation that requires no editorial cleanup, every ticket must include an evidence trail, analyst reasoning, disposition rationale, and a plain-language client summary Remain current on emerging threats, CVEs, and attacker techniques relevant to client environments. Support the onboarding of new clients onto NuHarbor Security Services and Platforms. Train, mentor, and support junior analysts, including structured coaching on investigation methodology, documentation standards, and client communication. Review escalations to clients from junior analysts prior to client delivery, ensuring investigative completeness and documentation quality. Develop and refine automation playbooks to reduce alert volume and improve analyst workflow. Contribute tuning feedback, noise identification, and alert fidelity assessments to the Detection Engineering program, in coordination with DE leadership. Develop recommendations and enhancements to mature a client’s cybersecurity program. Coordinate with NuHarbor clients and internal stakeholders during and after incident response activities. Your foundation. The requirements for this role: Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. Demonstrated experience with SOC operations, executing security event triaging and tuning. Demonstrated experience writing runbooks and support procedures. Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment. Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset. Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions. CrowdStrike Microsoft Defender Microsoft Sentinel Splunk Enterprise Security Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions. Excellent written and verbal communication skills. Previous experience in technical support or security-focused role. Willing and able to work Sunday - Thursday, 8:30am - 5:00pm. Must be authorized to work within the United States. Additional capabilities that will differentiate you for this role: Bachelor’s Degree and seven (7) or more years of experience in cybersecurity with progressive responsibility in SOC, MDR, or MSSP environment. Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.) Demonstrated experience communicating and presenting to executive level client stakeholders. Technical writing and reporting experience. Experience executing initial triaging and response through a SOAR platform. Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems. Experience with memory and storage forensics. Experience with static and dynamic malware analysis. Demonstrated ability to translate complex technical findings into clear, business-relevant narratives for non-technical audiences. Experience with data science techniques (clustering, anomaly detection, data normalization, etc. General systems administrator experience. Fluency with the MITRE ATT&CK framework as an active investigation and communication tool. Experience working in multiple cybersecurity disciplines (i. e. Penetration Testing, Threat, Information Assurance, Engineering, etc.) The Rewards What you can expect: The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market. An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption. A collaborative and driven working environment in a rapidly growing company and market A fun and social working environment where you are encouraged to be your true self. You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO. The salary for this role is targeted in the 110K - 135K, based on Burlington, VT salaries. Geographical location will be taken into consideration in salary offer. We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled. NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.", "summaryDescription" : "Senior Security Operations Analyst at NuHarbor Security. Skills: Security Operations, Incident Response, Threat Analysis. Own investigations end-to-end. Conduct root cause analysis", "postedDate" : "2026-06-16T01:19:48.332", "createdAt" : "2026-06-16T01:19:48.332", "lastUpdated" : "2026-06-16T11:21:20.145", "ingestTimestamp" : "2026-06-16T01:19:48.332", "mongoId" : "6a30704bf292fd229cff307e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 110000, "salaryAnnualMax" : 135000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Security event triaging", "Threat hunting", "Scripting", "Mentorship", "Security Operations", "Incident Response", "Threat Analysis", "Root cause analysis", "Attack chain reconstruction", "Client-ready documentation", "Technical shift ownership", "Investigation methodology", "Documentation standards", "Client communication", "Automation playbooks", "Alert tuning", "Noise identification", "Alert fidelity", "Detection engineering", "Cybersecurity program enhancement", "Incident response management", "Cybersecurity services", "SOC operations", "MSSP environment", "Endpoint Detection and Response", "Relevant industry certifications", "SIEM", "EDR", "SOAR" ], "skillCount" : 29, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 956.3902, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6af374d8ee00a090f70e", "title" : "Senior Consultant, Cybersecurity", "company" : "Capco", "industry" : "Consulting", "salary" : { "min" : 120000.0, "max" : 150000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "US - New York", "locations" : [ "US - New York" ], "timestamp" : "2026-06-16T05:25:16.734", "fingerprint" : "17124aa5ddfd717d68ab08c6cccf37c31e2d7e0858f0683392917dafb400b9d0", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/capco/jobs/8001376", "externalId" : "8001376", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AI, GenAI, Cloud Security", "professionalSkills" : [ "Risk management", "Data protection", "Governance frameworks", "Strategic advisory" ], "hardSkillsList" : [ "Cybersecurity", "Technology risk", "Information security", "Operational Resilience", "Data Security", "IAM", "Application Security", "Digital Trust", "Technology Risk", "AI governance", "Model risk management", "Regulatory compliance", "Responsible AI practices", "Cybersecurity maturity", "Operational effectiveness", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Security Transformation" ], "hardSkills" : [ { "name" : "Cybersecurity", "level" : "intermediate" }, { "name" : "Technology risk", "level" : "intermediate" }, { "name" : "Information security", "level" : "intermediate" }, { "name" : "Operational Resilience", "level" : "intermediate" }, { "name" : "Data Security", "level" : "intermediate" }, { "name" : "IAM", "level" : "intermediate" }, { "name" : "Application Security", "level" : "intermediate" }, { "name" : "Digital Trust", "level" : "intermediate" }, { "name" : "Technology Risk", "level" : "intermediate" }, { "name" : "AI governance", "level" : "intermediate" }, { "name" : "Model risk management", "level" : "intermediate" }, { "name" : "Regulatory compliance", "level" : "intermediate" }, { "name" : "Responsible AI practices", "level" : "intermediate" }, { "name" : "Cybersecurity maturity", "level" : "intermediate" }, { "name" : "Operational effectiveness", "level" : "intermediate" }, { "name" : "Cyber Strategy", "level" : "intermediate" }, { "name" : "Cyber Risk Management", "level" : "intermediate" }, { "name" : "Cyber Regulatory Response", "level" : "intermediate" }, { "name" : "Security Transformation", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, Technology risk, AI adoption", "majorSkillsList" : [ "Cybersecurity", "Technology risk", "AI adoption" ], "coreResponsibilities" : "Design cybersecurity policies, Enhance cybersecurity policies, Design cybersecurity standards, Enhance cybersecurity standards, Design cybersecurity controls, Enhance cybersecurity controls, Design governance frameworks, Enhance governance frameworks, Support clients developing secure AI adoption strategies, Support clients developing secure GenAI adoption strategies, Conduct structured assessments, Conduct data analysis, Conduct control evaluations, Conduct risk reviews, Identify opportunities improving cybersecurity maturity, Identify opportunities improving operational effectiveness, Lead client meetings, Lead workshops, Lead stakeholder discussions, Develop high-quality presentations, Develop reports, Develop executive-level deliverables, Contribute business development efforts, Create innovative cybersecurity service offerings, Create innovative AI service offerings", "teamCollaboration" : "Cross-functional teams; Client stakeholders", "domainKnowledge" : "Financial services; Investment Banking; Retail Banking; Wealth Management; Capital Markets; Insurance; Cyber risk; Governance; Resilience; Data protection; Cloud security; Emerging technologies; Artificial intelligence; AI risk; AI adoption; AI governance; Model risk management; Responsible AI; Cybersecurity frameworks; Cybersecurity standards; Cybersecurity regulations; Privacy requirements; Cyber Risk Management; Threat Management; Operational Resilience; Vulnerability Management; Third-Party Risk; Data Security; Insider Threat; Cloud Security; AI/GenAI governance; AI security; Model risk management; Responsible AI frameworks; Cyber Strategy; Cyber Risk Management; Cyber Regulatory Response; Technology Risk; Security Transformation; Digital transformation; Evolving regulatory expectations", "domainList" : [ "financial-services", "investment-banking", "retail-banking", "wealth-management", "capital-markets", "insurance", "cyber-risk", "governance", "resilience", "data-protection", "cloud-security", "emerging-technologies", "artificial-intelligence", "ai-risk", "ai-adoption", "ai-governance", "model-risk-management", "responsible-ai", "cybersecurity-frameworks", "cybersecurity-standards", "cybersecurity-regulations", "privacy-requirements", "cyber-risk-management", "threat-management", "operational-resilience", "vulnerability-management", "third-party-risk", "data-security", "insider-threat", "ai-genai-governance", "ai-security", "responsible-ai-frameworks", "cyber-strategy", "cyber-regulatory-response", "technology-risk", "security-transformation", "digital-transformation", "evolving-regulatory-expectations" ], "domainSpecificKnowledge" : [ "Financial services", "Investment Banking", "Retail Banking", "Wealth Management", "Capital Markets", "Insurance", "Cyber risk", "Governance", "Resilience", "Data protection", "Cloud security", "Emerging technologies", "Artificial intelligence", "AI risk", "AI adoption", "AI governance", "Model risk management", "Responsible AI", "Cybersecurity frameworks", "Cybersecurity standards", "Cybersecurity regulations", "Privacy requirements", "Cyber Risk Management", "Threat Management", "Operational Resilience", "Vulnerability Management", "Third-Party Risk", "Data Security", "Insider Threat", "Cloud Security", "AI/GenAI governance", "AI security", "Model risk management", "Responsible AI frameworks", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Technology Risk", "Security Transformation", "Digital transformation", "Evolving regulatory expectations" ], "toolProficiency" : [ "PowerPoint", "Excel" ], "communicationSkills" : "Stakeholder discussions; Executive-level deliverables; Writing; Storytelling; Presentation", "documentationSkills" : "Reports", "continuousLearning" : "Tuition reimbursement; Learning", "innovationCreativity" : "Innovative cybersecurity service offerings; Innovative AI service offerings; Innovation", "problemSolvingSkills" : "Problem-solving", "qualificationsBasic" : "4+ years experience cybersecurity consulting, Experience with cybersecurity frameworks, Knowledge across multiple cybersecurity domains, Understanding of emerging technology risks, Analytical skills, Problem-solving skills, Communication skills, Stakeholder management skills, Ability to work across cross-functional teams, Experience supporting Cyber Strategy, Experience supporting Cyber Risk Management, Experience supporting Cyber Regulatory Response, Experience supporting Technology Risk, Experience supporting Security Transformation initiatives, Writing skills, Storytelling skills, Presentation skills, Proficiency in PowerPoint, Proficiency in Excel", "qualificationsPreferred" : "Bachelor's degree or higher in Cybersecurity, Bachelor's degree or higher in Information Security, Bachelor's degree or higher in Computer Science, Bachelor's degree or higher in Information Systems, Bachelor's degree or higher in related discipline", "rawDescription" : "About the Team At Capco, we believe in fostering an inclusive work environment where you can #BeYourselfAtWork. Our Cybersecurity team partners with leading financial institutions to evaluate, design, and implement risk-aware security solutions that enable business growth and resilience. We help organizations navigate an evolving threat landscape by delivering strategic advisory services across cyber risk, governance, resilience, data protection, cloud security, and emerging technologies. As artificial intelligence continues to transform the financial services industry, we work closely with clients to establish secure, responsible, and compliant AI adoption strategies. Our team helps organizations manage AI-related risks, strengthen governance frameworks, secure AI-enabled platforms, and build trust in the use of emerging technologies. We combine deep financial services expertise with cybersecurity, risk management, data, and technology capabilities to advise executive leadership on their most critical security and digital transformation priorities. About the Job As a Senior Consultant within Capco’s Cybersecurity Practice, you will play a key role in delivering complex cybersecurity and technology risk engagements for leading Investment Banking, Retail Banking, Wealth Management, Capital Markets, and Insurance clients. You will work alongside industry experts and client stakeholders to solve challenging business problems, strengthen security capabilities, and support large-scale transformation initiatives. You will also help clients address emerging risks associated with cloud adoption, digital transformation, artificial intelligence, and evolving regulatory expectations. What You'll Get to Do Design and enhance cybersecurity policies, standards, controls, and governance frameworks across domains including Operational Resilience, Data Security, IAM, Cloud Security, Application Security, Digital Trust, and Technology Risk. Support clients in developing secure AI and GenAI adoption strategies, including AI governance, model risk management, data protection, regulatory compliance, and responsible AI practices. Conduct structured assessments, data analysis, control evaluations, and risk reviews to identify opportunities for improving cybersecurity maturity and operational effectiveness. Lead client meetings, workshops, and stakeholder discussions while developing high-quality presentations, reports, and executive-level deliverables. Contribute to business development efforts through thought leadership, whitepapers, points of view (PoVs), market research, and the creation of innovative cybersecurity and AI-related service offerings. What You'll Bring With You 4+ years of experience in cybersecurity consulting, technology risk, information security, or related industry roles. Experience working with cybersecurity frameworks, standards, regulations, and privacy requirements applicable to financial services organizations. Knowledge across multiple cybersecurity domains, including Cyber Risk Management, Threat Management, Operational Resilience, Vulnerability Management, Third-Party Risk, Data Security, Insider Threat, or Cloud Security. Understanding of emerging technology risks, including AI/GenAI governance, AI security considerations, model risk management, and responsible AI frameworks. Strong analytical, problem-solving, communication, and stakeholder management skills with the ability to work effectively across cross-functional teams. Experience supporting Cyber Strategy, Cyber Risk Management, Cyber Regulatory Response, Technology Risk, or Security Transformation initiatives. Strong writing, storytelling, and presentation skills with proficiency in PowerPoint and Excel. Bachelor's degree or higher in Cybersecurity, Information Security, Computer Science, Information Systems, or a related discipline preferred. Why Capco? A career at Capco is an opportunity to help reshape the future of financial services. We launch new banks, transform existing institutions, and help clients navigate complex business, technology, and regulatory change. As the world's largest financial services-focused consultancy, we partner with global banks, insurers, asset managers, and fintechs across strategy, digital transformation, data and analytics, cybersecurity, cloud, engineering, and AI-enabled innovation. Our Cybersecurity Practice sits at the forefront of emerging technology transformation, helping clients balance innovation with security and trust. From securing cloud environments and digital platforms to developing governance frameworks for AI adoption, our teams help organizations address some of the industry's most critical challenges. Capco offers an entrepreneurial, collaborative, and inclusive culture with opportunities to work on high-impact engagements, accelerate your professional growth, and contribute to thought leadership in rapidly evolving areas such as cybersecurity, AI, and technology risk. We offer highly competitive benefits, including medical, dental and vision insurance, a 401(k) plan, tuition reimbursement, wellness programs, and a culture focused on innovation, learning, and delivering lasting value for our clients and employees. Ready to Take the Next Step? If you're passionate about cybersecurity, emerging technologies, and helping financial institutions navigate an increasingly complex risk landscape, we'd love to hear from you. Join us and help shape the future of secure digital transformation and responsible AI adoption across the financial services industry. US Pay Range $120,000—$150,000 USD", "summaryDescription" : "Senior Consultant, Cybersecurity at Capco. Skills: Cybersecurity, Technology risk, AI adoption. Design cybersecurity policies. Enhance cybersecurity policies", "postedDate" : "2026-06-14T20:02:26.599", "createdAt" : "2026-06-14T20:02:26.599", "lastUpdated" : "2026-06-16T05:25:16.734", "ingestTimestamp" : "2026-06-14T20:02:26.599", "mongoId" : "6a2c6af374d8ee00a090f70e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 150000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Cybersecurity", "Technology risk", "Information security", "Operational Resilience", "Data Security", "IAM", "Application Security", "Digital Trust", "Technology Risk", "AI governance", "Model risk management", "Regulatory compliance", "Responsible AI practices", "Cybersecurity maturity", "Operational effectiveness", "Cyber Strategy", "Cyber Risk Management", "Cyber Regulatory Response", "Security Transformation", "AI adoption", "Risk management", "Data protection", "Governance frameworks", "Strategic advisory", "Financial services", "Investment Banking", "Retail Banking", "Wealth Management", "Capital Markets", "Insurance", "Cyber risk", "Governance", "Resilience", "Cloud security", "Emerging technologies", "Artificial intelligence", "AI risk", "Responsible AI", "Cybersecurity frameworks", "Cybersecurity standards", "Cybersecurity regulations", "Privacy requirements", "Threat Management", "Vulnerability Management", "Third-Party Risk", "Insider Threat", "Cloud Security", "AI/GenAI governance", "AI security", "Responsible AI frameworks", "Digital transformation", "Evolving regulatory expectations", "PowerPoint", "Excel" ], "skillCount" : 54, "jobCategory" : "general", "jobSubcategory" : "general", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 952.59686, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.95 }, { "id" : "68fe561670f0b99d58721039", "title" : "Senior Security Assurance Specialist", "company" : "AWS EMEA SARL", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Security Assurance Specialist in Berlin, Germany, adjusted for industry and company size." }, "location" : "Berlin, Berlin, DEU", "locations" : [ "Berlin, Berlin, DEU" ], "timestamp" : "2026-06-16T06:25:08.344", "fingerprint" : "5c54894301f27c2b44e85fe0e7bfeea98c4685cb6ab185844196797be74e4f0f", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/3100452/apply", "externalId" : "4b9b0748-0ef3-4d6a-8158-0a8cd7d25515", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Berlin", "state" : "Berlin", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "52.5033790,13.3386522" } ], "locationText" : "Berlin, Berlin, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Cloud, Automation", "professionalSkills" : [ "Process engineering", "Problem solving" ], "hardSkillsList" : [ "Audit principles", "Security controls", "Compliance", "IT processes", "Information security regulation", "Information security policy", "GRC tools", "GRC technology" ], "softSkillsList" : [ "Diversity", "Inclusion" ], "hardSkills" : [ { "name" : "Audit principles", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" }, { "name" : "Compliance", "level" : "intermediate" }, { "name" : "IT processes", "level" : "intermediate" }, { "name" : "Information security regulation", "level" : "intermediate" }, { "name" : "Information security policy", "level" : "intermediate" }, { "name" : "GRC tools", "level" : "intermediate" }, { "name" : "GRC technology", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Diversity" }, { "name" : "Inclusion" } ], "majorSkills" : "Security Assurance, Compliance, Audit, Risk Management", "majorSkillsList" : [ "Security Assurance", "Compliance", "Audit", "Risk Management" ], "coreResponsibilities" : "Demonstrate security controls, Work with customers, Work with regulators, Demonstrate Amazon security controls, Help customers understand infrastructure, Inspire audit programs, Lead audit programs, Transform audit programs, Inspire compliance programs, Lead compliance programs, Transform compliance programs, Engage technical stakeholders, Engage non-technical stakeholders, Design solutions for compliance challenges, Solve business problems, Improve assurance demonstration, Dive deep into control environment, Develop domain understanding, Develop technical understanding, Articulate compliance implications, Develop understanding of compliance requirements, Communicate control activities, Liaise with customers, Liaise with regulators, Liaise with auditors, Articulate control implementation, Describe security considerations, Describe compliance considerations, Monitor organization, Evaluate organization, Continuously improve organization, Implement continuous improvements, Share process frameworks, Share process tools, Share best practices, Apply working knowledge of regulation, Apply working knowledge of policy, Articulate customer impact, Articulate control impact, Drive alignment to controls", "teamCollaboration" : "Internal and external customers; Multiple organizations and teams; Technical and non-technical stakeholders; Senior leadership within Amazon; Diverse perspectives of the team", "projectManagementSkills" : [ "Program management", "Project management" ], "domainKnowledge" : "Cloud security; Regulated industry standards; DORA requirements; C5 requirements; Information security regulation; Information security policy", "domainList" : [ "cloud-security", "regulated-industry-standards", "dora-requirements", "c5-requirements", "information-security-regulation", "information-security-policy" ], "domainSpecificKnowledge" : [ "Cloud security", "Regulated industry standards", "DORA requirements", "C5 requirements", "Information security regulation", "Information security policy" ], "toolProficiency" : [ "GRC tools", "GRC technology" ], "communicationSkills" : "Communicate clearly; Communicate transparently; Verbal communication; Written communication", "innovationCreativity" : "Applying cutting edge technologies; Automation in manual processes; Finding innovative solutions; Inventing new ways; Innovative process engineering; Innovative process changes", "problemSolvingSkills" : "Solving complex compliance challenges; Creative problem solver", "qualificationsBasic" : "Foundation in audit principles, Diverse technology background, Technically experienced security professional, Innovative compliance professional, Innovative audit professional, Ability to understand IT processes, Communicate clearly with customers, Drive innovative process changes, Work across many stakeholders, Understand security controls, Understand regulated industry standards, Understand IT infrastructure design, Understand IT infrastructure operation, Understand IT infrastructure maintenance, Understand IT infrastructure protection, Understand global regulated industry standards, Understand Amazon control environment, Understand security activities, Understand control implementations, Articulate compliance implications, Understand regulated industry compliance requirements, Communicate control activities, Liaise with customers, Liaise with regulators, Liaise with auditors, Articulate control implementation, Describe security considerations, Describe compliance considerations, Monitor organization, Evaluate organization, Continuously improve organization, Apply working knowledge of global information security regulation, Apply working knowledge of global information security policy, Articulate customer impact, Articulate control impact, Drive alignment to Amazon controls, Experience with DORA requirements, Experience with C5 requirements, Experience with other applicable standards, Record of IT process improvement projects, Generate automated metrics, Measure effectiveness, Measure consistency, Experience in IT program management, Experience in IT project management, Experience in IT auditing, Experience in control framework development, Experience in control framework implementation, Experience building certification roadmaps, Ensure committed assessments are delivered, Detailed understanding of evaluating IT controls, Experience working with auditors, Experience working with regulators, Experience with GRC tools, Experience with GRC technology, Ability to prioritize, Ability to multi-task, Ability to meet deadlines, Verbal communication skills, Written communication skills", "qualificationsPreferred" : "Experience in finding innovative solutions, Influencing the future of security assurance, Experience with technology processes, Experience with major tech companies, Experience building certification roadmaps based on customer requirements, Experience building certification roadmaps based on compliance documentation, Experience with evaluating the design of IT controls, Experience with evaluating the effectiveness of IT controls", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Do you have a passion for applying cutting edge technologies and automation in traditionally manual processes? Do you have experience in finding innovative solutions to scale security controls across diverse teams and technologies? Do you have ideas about influencing the future of security assurance? At Amazon, Security is our highest priority. Come, join a creative team at Security Assurance dedicated to demonstrating the security controls of the services we offer here. At Amazon’s scale, we are committed to inventing new ways to provide the highest level of assurance to our most regulatory conscious customers. You have a strong foundation in audit principles, as well as a diverse technology background. As part of the team, you will work with customers and regulators to demonstrate Amazon' security controls applicable to local requirements. You will join our team in helping customers understand how our infrastructure is designed, operated, maintained, and protected in accordance with global regulated industry standards. You will help inspire, lead, and transform our audit and compliance programs through innovative process engineering across multiple organizations and teams, engaging technical and non-technical stakeholders throughout the company. Your combination of technical and audit background will help bridge security, technology, and compliance, and facilitate the scale of the program. The successful candidate is one who loves working across many stakeholders, including internal and external customers, to design solutions for complex compliance challenges. You are passionate about the security of the cloud and you want to solve real business problems. We have a team culture that encourages ownership, diversity, inclusion, and innovation. We expect team members and management alike to take a high degree of ownership for their program vision and execution of ideas. We expect this person to balance their unique perspective with those of the diverse perspectives of the team and its stakeholders. You will have an opportunity to work directly with senior leadership within Amazon to improve our ability to demonstrate assurance for regulated customers. You should be a technically experienced and innovative security, compliance, and audit professional who has the ability to understand IT processes, communicate clearly and transparently with customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities As part of the team, you will work with customers and regulators to demonstrate Amazon security controls applicable to local requirements. You will join our team in helping customers understand how our infrastructure is designed, operated, maintained, and protected in accordance with global regulated industry standards. In this role, you will be responsible for the following activities: - Dive deep into the Amazon control environment to develop broad domain and technical understanding of our security activities and control implementations to articulate compliance implications to both customers and internal/external audit functions. - Develop understanding of regulated industry compliance requirements and communicate how we control activities to meet global regulatory obligations. - Liaise with customers, regulators and auditors, articulate control implementation, and describe considerations for applying security and compliance concepts to monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver. - Implement continuous improvements to the security organization and the program management process. Share program/project process frameworks, tools, and best practices that can be adopted throughout the organization. - Apply a working knowledge of global information security regulation and policy to articulate customer and control impact and drive alignment to Amazon controls. About the team Diverse Experiences AWS Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS Security At AWS, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of AWS’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture Here at Amazon, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship & Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future. Basic Qualifications: - This role requires you to be a national of an EU member state - Bachelors, Masters or Diploma in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, Cybersecurity or other related fields. - 10+ years of working experience in performing and/or participating in IT audits and assessments of highly technical cloud-based environments. - 10+ years working in highly regulated industries (e.g. financial services, healthcare, and energy, telecommunications), including direct work with European audits and frameworks such as DORA. - Auditors who have experience conducting IT audits based on ISAE 3402. Experience auditing COBIT, ITIL, and IT-Grundschutz as well. - 1 or more industry-recognized security, cloud, or audit professional certifications (e.g., CISA, CISM, CISSP, CCSP, Amazon Cloud Security Practitioner - Business-level fluency in English is required for this role. Preferred Qualifications: - Experience in technical security design, compliance consulting, or advisory work in support of a highly technical environment. Solid technical background will some demonstrable understanding of cloud services/deployment architecture (ideally Amazon cloud services offering). - Deep understanding of regulatory guidance, FCA guidance FG16/5 (Guidance for firms outsourcing to the ‘cloud’ and other third-party IT services), DORA requirements for Critical Service Provider, C5 requirements of the Federal Office of Information Security of Germany and other applicable standards and requirements. - A record of delivery of IT process improvement projects with technology processes and/or major tech companies along with generating automated metrics to measure effectiveness and consistency. - Experience in IT program or project management, IT auditing, and/or control framework development and implementation. - Experience building certification roadmaps based on customer requirements, compliance documentation, and ensuring that committed assessments are delivered on schedule. - A detailed understanding of evaluating the design and effectiveness of IT controls and experience working with auditors/regulators for these types of assessments. - Experience with Governance, Risk, and Compliance tools and technology. - Strong bias for action with ability to prioritize, multi-task, and meet deadlines. - Strong verbal and written communications skills are a must, as well as the ability to work effectively across internal and external organizations. Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. m/w/d Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Senior Security Assurance Specialist at AWS EMEA SARL. Skills: Security Assurance, Compliance, Audit, Risk Management. Demonstrate security controls. Work with customers", "postedDate" : "2026-06-14T20:32:54.809", "createdAt" : "2026-06-14T20:32:54.809", "lastUpdated" : "2026-06-16T06:25:08.344", "ingestTimestamp" : "2026-06-14T20:32:54.809", "mongoId" : "68fe561670f0b99d58721039", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/3100452/apply", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Audit principles", "Security controls", "Compliance", "IT processes", "Information security regulation", "Information security policy", "GRC tools", "GRC technology", "Diversity", "Inclusion", "Security Assurance", "Audit", "Risk Management", "Process engineering", "Problem solving", "Program management", "Project management", "Cloud security", "Regulated industry standards", "DORA requirements", "C5 requirements" ], "skillCount" : 21, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 943.40155, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "69fe47284c40e2acd1f59727", "title" : "Senior Security Risk Specialist", "company" : "Amazon.com Services LLC", "industry" : "Systems, Quality, Security Engineering, Security Industry Specialist, amazonian experience and tech", "salary" : { "min" : 119300.0, "max" : 208900.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CISSP", "CISA", "CISM" ], "timestamp" : "2026-06-15T03:31:32.795", "fingerprint" : "f489e2feeebbc7b9592f59b7628690f42f4b0162514adf9449ff469918c07b73", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "externalId" : "99ceaf08-dd0c-49ec-a527-ba856049100b", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training" ], "hardSkillsList" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Risk assessment methodologies", "level" : "intermediate" }, { "name" : "Risk frameworks", "level" : "intermediate" }, { "name" : "Quantitative risk models", "level" : "intermediate" }, { "name" : "Vendor risk questionnaires", "level" : "intermediate" }, { "name" : "Continuous monitoring approaches", "level" : "intermediate" }, { "name" : "Remediation plans", "level" : "intermediate" }, { "name" : "Process paths", "level" : "intermediate" }, { "name" : "Workflows", "level" : "intermediate" }, { "name" : "Risk management outcomes", "level" : "intermediate" }, { "name" : "Security control design", "level" : "intermediate" }, { "name" : "Security control testing", "level" : "intermediate" }, { "name" : "Security control implementation", "level" : "intermediate" }, { "name" : "Security control validation", "level" : "intermediate" }, { "name" : "Security controls evaluation", "level" : "intermediate" }, { "name" : "Negotiate remediation timelines", "level" : "intermediate" }, { "name" : "Evaluate security controls", "level" : "intermediate" }, { "name" : "Risk posture communication", "level" : "intermediate" }, { "name" : "Compliance gaps communication", "level" : "intermediate" }, { "name" : "Strategic recommendations communication", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Security risk management, Third-party risk, Benefits compliance, Regulatory requirements", "majorSkillsList" : [ "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements" ], "coreResponsibilities" : "Lead third-party vendor risk assessments, Evaluate security posture, Evaluate privacy posture, Evaluate compliance posture, Define risk assessment methodologies, Iterate on risk assessment frameworks, Scale risk management capabilities, Identify long-term risks, Influence business strategy, Make independent decisions, Engage vendors on risk matters, Engage auditors on risk matters, Engage regulators on risk matters, Drive benefits compliance management, Ensure adherence to regulations, Lead risk assessments of vendor processes, Lead control assessments of vendor processes, Determine state of compliance, Analyze risk exposure, Author reports, Own third-party risk review programs, Drive third-party risk review programs, Create predictable process paths, Create repeatable mechanisms, Simplify approaches, Decouple project dependencies, Prevent duplicate effort, Prevent wasted effort, Define business problems, Set objectives, Analyze data, Drive improvements, Influence resource allocation, Develop mechanisms to inspect risk delivery, Develop mechanisms to monitor risk delivery, Develop mechanisms to improve risk delivery, Hold team to high standard, Escalate risks, Escalate blockers, Propose recommendations, Identify correct owners, Track issues to resolution, Develop deep understanding of benefits solutions, Develop deep understanding of third-party vendors, Drive business requirements, Lead collaboration with vendors, Lead collaboration with external teams, Ensure employee-centered experiences, Understand builder experience, Understand stakeholder experience, Align third-party risk processes, Author written narratives, Recommend solutions on third-party risk, Influence the organization, Influence external partners, Drive business discussions, Drive technical discussions, Make decisions on alignment, Advise managers on risk matters, Advise directors on risk matters, Communicate risk posture to leaders, Communicate compliance gaps to leaders, Communicate strategic recommendations to leaders, Write with stakeholders, Speak with stakeholders, Network with stakeholders, Broaden influence on risk management, Develop manager communications, Develop employee communications, Develop FAQs, Develop policy positions, Develop standard operating procedures, Develop strategic narratives, Mentor junior team members, Develop junior team members", "teamCollaboration" : "Across the organization; With US benefits owners; With diverse stakeholders; With vendors; With external teams; With managers and directors; With key internal stakeholders; With key external stakeholders", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Employee benefits; Third-party risk; HIPAA; ERISA; ACA; COBRA; Federal regulations; State regulations; Local regulations; Security compliance regimes; Security compliance frameworks", "domainList" : [ "employee-benefits", "third-party-risk", "hipaa", "erisa", "aca", "cobra", "federal-regulations", "state-regulations", "local-regulations", "security-compliance-regimes", "security-compliance-frameworks" ], "domainSpecificKnowledge" : [ "Employee benefits", "Third-party risk", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks" ], "toolProficiency" : [ "JIRA" ], "communicationSkills" : "Written narratives; Verbal communication; Written communication", "documentationSkills" : "Author reports; Written narratives; Manager communications; Employee communications; FAQs; Policy positions; Standard operating procedures; Strategic narratives", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "outcomesObjectives" : "Mitigate risks; Drive scalable solutions; Achieve risk management outcomes; Resolve issues", "qualificationsBasic" : "Bachelor's degree or equivalent, 7+ years risk management experience, 7+ years audit experience, 7+ years legal experience, 7+ years compliance experience, Engaging with external stakeholders experience, Experience with IT compliance, Experience with risk management requirements", "qualificationsPreferred" : "CISSP certification, CISA certification, CISM certification, Other security certification, Advanced degree in related area, Deep knowledge of federal benefits regulations, Knowledge of state regulations, Knowledge of local regulations, Experience influencing vendor security strategies, Experience influencing vendor compliance strategies, Negotiating remediation timelines, Shaping vendor contractual obligations, Proficiency across security compliance regimes, Proficiency across security compliance frameworks", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Benefits Experience and Technology Risk team (BXT Risk) is responsible for managing employee benefits risk activities in countries where we do business. As a Senior Security Risk Specialist on the BXT Risk team, you will serve as a subject matter expert and strategic contributor to our benefits third-party risk ecosystem, working across the organization with US benefits policy, process, and system owners to define strategies, evaluate complex risks, and drive scalable solutions that mitigate risks introduced by third-party vendors and service providers supporting the organization's US health and financial employee benefit programs. This role requires both tactical execution and strategic thinking. You will independently lead complex third-party risk assessments, influence vendor security and compliance strategies across the organization, shape how the team scales its risk management capabilities, and drive alignment across diverse stakeholders with potentially conflicting priorities. You will create predictable process paths and repeatable mechanisms that multiple teams utilize, mentor junior team members, and advise managers and directors on third-party risk matters affecting employee benefits programs. Key job responsibilities Third-Party Risk Strategy and Assessment: - Lead complex third-party vendor risk assessments across multiple benefits programs and vendor relationships, evaluating security, privacy, and compliance posture against federal, state, and local regulatory requirements - Define and iterate on risk assessment methodologies, frameworks, and mechanisms to scale for diverse vendor requirements and evolving regulatory expectations (e.g., quantitative risk models, vendor risk questionnaires, continuous monitoring approaches) - Identify long-term risks associated with third-party vendors and influence business strategy to proactively mitigate them before they materialize into risk events - Make diligent, independent decisions on how to engage vendors, auditors, and regulators on third-party risk matters with minimal oversight - Drive comprehensive benefits compliance management related to third-party service delivery, ensuring adherence to federal, state, and local regulatory requirements including HIPAA, ERISA, ACA, and COBRA - Lead risk and control assessments of vendor-managed processes, determine state of compliance, analyze risk exposure, and author reports detailing methodology, results, and remediation plans Program Leadership and Scalable Solutions: - Own and drive third-party risk review programs associated with benefits program launches, modifications, vendor onboarding, and transitions across the organization - Create predictable process paths, workflows, and repeatable mechanisms (e.g., for vendor security control design, testing, implementation, and validation) that multiple teams utilize to deliver consistent risk management outcomes - Identify opportunities to simplify approaches throughout the organization and across project boundaries; decouple dependencies and prevent duplicate or wasted effort - Define business problems, set objectives, analyze data, drive improvements, and influence resource allocation for third-party risk initiatives - Develop mechanisms to inspect, monitor, and improve third-party risk delivery over time; hold the team to a high standard for both solutions and practices - Escalate when risks or blockers emerge, propose viable recommendations to resolve them, identify the correct owners, and track issues to resolution Vendor Systems, Process, and Compliance Oversight: - Develop deep understanding of the employee benefits solutions utilized by Amazon and the third-party vendors that support them; drive business requirements for vendor system implementations and enhancements - Lead collaboration with vendors and external teams to evaluate security controls, negotiate remediation timelines, and ensure employee-centered benefits experiences are delivered securely - Understand the builder and stakeholder experience with security compliance and proactively seek to align third-party risk processes with existing workflows - Author written narratives to define strategy, evaluate trade-offs, anticipate risks, and recommend solutions on third-party risk that influence the organization and external partners Stakeholder Engagement, Influence, and Communication: - Drive business and technical discussions across the organization to make decisions on how to align with diverse, potentially conflicting, third-party risk and compliance expectations - Advise managers and directors on third-party risk matters; communicate effectively with leaders up to three levels above on risk posture, compliance gaps, and strategic recommendations - Write, speak, and network with key internal and external stakeholders to broaden influence on third-party risk management practices - Develop and deliver documentation such as manager and employee communications, FAQs, policy positions, standard operating procedures, and strategic narratives related to third-party risk - Mentor and develop junior team members in third-party risk assessment methodologies, compliance frameworks, and stakeholder engagement About the team The BXT Risk team is made up of lawyers, risk specialists, data security specialists, automation experts, and privacy specialists with global HR and benefits backgrounds. We are a dedicated collective committed to creating supportive, comprehensive benefits solutions. We provide our benefits stakeholders guidance to help them identify and manage potential risks and improve their team's risk management strategies and compliance posture. The team proactively scans the horizon for new and emerging risks not yet fully developed or understood, and performs inspections to identify compliance gaps and control weaknesses before they materialize into risk events. We provide end-to-end risk management oversight, including risk identification, risk assessments, risk quantification, compliance advisory services, inspection services, control design and testing, compliance solutions, risk monitoring and reporting, issue management, and risk training. We cultivate an environment where every team member feels valued, empowered, and equipped to thrive both professionally and personally. Our work goes beyond benefits operations - we're building experiences that genuinely care for our employees. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - 7+ years of risk management, audit, legal, compliance or related field work including engaging with external stakeholders experience - Experience with IT compliance and risk management requirements (e.g. security, privacy, SOX, HIPAA etc.) Preferred Qualifications: - CISSP, CISA, CISM or other security certification - Advanced degree in a related area (Information Security, Risk Management, MSHR, MBA, JD) - Deep knowledge of federal benefits regulations including ACA, COBRA, ERISA, and HIPAA, as well as state and local regulations including Massachusetts, Vermont, Hawaii, and San Francisco - Experience influencing vendor security and compliance strategies across an organization, including negotiating remediation timelines and shaping vendor contractual obligations - Proficiency across multiple widely adopted security compliance regimes and frameworks (SOC, PCI, NIST, ISO) with ability to apply expertise across diverse regulatory environments Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 119,300.00 - 208,900.00 USD annually", "summaryDescription" : "Senior Security Risk Specialist at Amazon.com Services LLC. Skills: Security risk management, Third-party risk, Benefits compliance, Regulatory requirements. Lead third-party vendor risk assessments. Evaluate security posture", "postedDate" : "2026-06-13T08:17:41.380", "createdAt" : "2026-06-13T08:17:41.380", "lastUpdated" : "2026-06-15T03:31:32.795", "ingestTimestamp" : "2026-06-13T08:17:41.380", "mongoId" : "69fe47284c40e2acd1f59727", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10415257/apply", "salaryAnnualMin" : 119300, "salaryAnnualMax" : 208900, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Risk assessment methodologies", "Risk frameworks", "Quantitative risk models", "Vendor risk questionnaires", "Continuous monitoring approaches", "Remediation plans", "Process paths", "Workflows", "Risk management outcomes", "Security control design", "Security control testing", "Security control implementation", "Security control validation", "Security controls evaluation", "Negotiate remediation timelines", "Evaluate security controls", "Risk posture communication", "Compliance gaps communication", "Strategic recommendations communication", "Leadership", "Mentoring", "Security risk management", "Third-party risk", "Benefits compliance", "Regulatory requirements", "Risk management", "Compliance oversight", "Legal analysis", "Third-party risk assessment", "Vendor risk management", "Risk mitigation", "Regulatory compliance", "Process improvement", "Stakeholder management", "Business strategy", "Risk quantification", "Control design", "Control testing", "Issue management", "Risk training", "Agile", "Employee benefits", "HIPAA", "ERISA", "ACA", "COBRA", "Federal regulations", "State regulations", "Local regulations", "Security compliance regimes", "Security compliance frameworks", "CISSP", "CISA", "CISM", "JIRA" ], "skillCount" : 55, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 923.7172, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a477874d8ee00a05da30a", "title" : "Senior Cybersecurity Engineer", "company" : "Similarweb", "industry" : "Technology", "salary" : { "min" : 360000.0, "max" : 540000.0, "currency" : "ILS", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Tel Aviv-Yafo, Israel, adjusted for the technology industry and company size." }, "location" : "Tel Aviv-Yafo, Israel", "locations" : [ "Tel Aviv-Yafo", "Israel" ], "certifications" : [ "CISSP", "CISM", "AWS Security Specialty", "CKS" ], "timestamp" : "2026-06-13T03:31:17.651", "fingerprint" : "1023f2c0f8097bbcbd3a81b6722b9f5767626a8202e77fb0a253fec3d64fff60", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/similarweb/jobs/7992665", "externalId" : "7992665", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tel Aviv-Yafo", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "hybrid", "geo" : "32.0852997,34.7818064" } ], "locationText" : "Tel Aviv-Yafo, Israel", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, GCP, Azure, EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, Python, Bash, PowerShell, Generative AI, LLM", "professionalSkills" : [ "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Audit support", "Compliance frameworks" ], "hardSkillsList" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion" ], "softSkillsList" : [ "Problem-solving" ], "hardSkills" : [ { "name" : "Security controls implementation", "level" : "intermediate" }, { "name" : "Security technologies administration", "level" : "intermediate" }, { "name" : "Risk assessment", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Secure baselines", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Audit support", "level" : "intermediate" }, { "name" : "DDQ completion", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" } ], "majorSkills" : "Cloud security, Security technologies, AI security, GRC", "majorSkillsList" : [ "Cloud security", "Security technologies", "AI security", "GRC" ], "coreResponsibilities" : "Implement security controls, Manage security controls, Enhance security controls, Administer security technologies, Optimize security technologies, Maintain security technologies, Lead AI technology security, Assess AI risks, Define AI security controls, Establish AI guardrails, Design security processes, Implement security processes, Automate security processes, Drive security-by-design, Lead vulnerability management, Track remediation, Implement secure baselines, Manage hardening standards, Take role in security operations, Conduct threat detection, Perform IR, Perform security investigations, Monitor security posture, Lead GRC initiatives, Support audits, Complete DDQs", "teamCollaboration" : "Cross-functional teams; IT teams; R&D teams; Product teams; DevOps teams; Engineering teams", "domainKnowledge" : "Generative AI; LLM; AI agents; NIST CSF; ISO/IEC 27000 series; CIS Benchmarks; SOC 2; SOX; OWASP; MITRE ATT&CK", "domainList" : [ "generative-ai", "llm", "ai-agents", "nist-csf", "iso-iec-27000-series", "cis-benchmarks", "soc-2", "sox", "owasp", "mitre-att-ck" ], "domainSpecificKnowledge" : [ "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK" ], "toolProficiency" : [ "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "communicationSkills" : "Problem-solving skills", "problemSolvingSkills" : "Problem-solving skills", "qualificationsBasic" : "5+ years Information Security experience, Experience securing cloud environments, Experience implementing security technologies, Experience with vulnerabilities management, Experience working with DevOps teams, Experience with scripting and automation, Experience supporting GRC initiatives, Communication skills, Problem-solving skills, Ability to work independently, Ability to collaborate effectively", "qualificationsPreferred" : "Experience in SaaS company, Experience in global technology company, CISSP certification, CISM certification, AWS Security Specialty certification, CKS certification", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Similarweb (NYSE: SMWB) is a leading digital intelligence company that empowers businesses with trusted insights into online behavior, market trends, and competitive performance. By analyzing billions of digital interactions every day, Similarweb helps organizations make data-driven decisions and accelerate growth. Why is this role so important at Similarweb? As a Senior Cybersecurity Engineer reporting directly to the Chief Information Security Officer (CISO), you will play a key role within Similarweb’s security team. In this position you will drive impactful security initiatives that support the company’s business objectives, leveraging innovative technologies and practical solutions to strengthen our security posture while enabling the business to operate securely and efficiently. You will collaborate with cross-functional teams across the organization, including IT, R&D, Product, and other stakeholders, to ensure that security is embedded throughout our products, services, and operations. You will help identify and mitigate risks, implement effective security controls, and continuously enhance our security capabilities in a dynamic, fast-growing, technology-driven environment. Responsibilities Implement, manage, and continuously enhance security controls across cloud environments (AWS, GCP, Azure), endpoints, SaaS platforms, and applications. Administer, optimize, and maintain security technologies, including EDR/XDR, SIEM, CDR, CNAPP, DLP, IAM, SASE, MFA, network security solutions, and more. Take a leading role in securing Similarweb's adoption of Generative AI & LLM-based technologies, assessing risks, defining security controls, and establishing guardrails for AI agents, MCP-based integrations, and AI-powered applications across the organization. Design, implement, and automate security processes, workflows, and controls to improve operational efficiency, visibility, and risk reduction across the organization. Partner with IT, DevOps, Engineering, and Product teams to drive security-by-design principles across system architecture, software development and AI lifecycles, cloud infrastructure, and business operations. Lead vulnerability management initiatives, including identification, assessment, prioritization, remediation tracking, validation, and reporting across applications and environments. Implement, manage, and maintain secure configuration baselines, hardening standards, and technical controls aligned with industry frameworks and best practices, including CIS Benchmarks, NIST(CSF), and ISO/IEC 27000 series. Take an active role in security operations activities, including threat detection, IR, security investigations, and continuous monitoring of the organization's security posture. Lead GRC initiatives through control implementation, assessments, audit support, customer security & Due Diligence Questionnaires (DDQs), and remediation efforts related to SOC 2, SOX, ISO 27001, and other compliance frameworks. Qualifications 5+ years of experience in Information Security, Cybersecurity, or a related technical field. Experience securing cloud environments (AWS, GCP, Azure), SaaS platforms, and enterprise applications (APIs and Integrations). Experience implementing and managing security technologies such as EDR/XDR, SIEM, CNAPP, IAM, SSO, MFA, Identity Providers (IdPs), WAF, VPN, DLP, ZTNA, and secure connectivity solutions Strong understanding of security frameworks, standards and best practices, such as NIST CSF, CSA, CIS Controls, MITRE ATT&CK, OWASP, SOC 2, or ISO/IEC 27000 series. Experience with vulnerabilities/CVEs management, assessment, incident response, and security operations processes. Experience working with DevOps, R&D, and IT teams to integrate security into OS, cloud infrastructure, SDLC, applications, and operational processes, including authentication and authorization technologies such as SSO, SAML, OAuth, and OpenID Connect. Experience with scripting and automation using Python, Bash, PowerShell, or similar technologies. Familiarity with AI security concepts, including risks and controls related to Generative AI, LLMs, AI agents, MCP-based integrations, and AI-powered applications. Experience supporting GRC initiatives, audits, compliance programs, and security assurance activities. Strong communication and problem-solving skills, with the ability to work independently and collaborate effectively across technical and business teams. Experience in a SaaS or global technology company - Advantage Security certifications such as CISSP, CISM, AWS Security Specialty, CKS or equivalent - an advantage. —----------------------------------------------------------------------------------------------------------- **At Similarweb, collaborating with our colleagues in-office creates a more connected, unified culture. Our best work is a product of our face-to-face collaboration, with the ability to work partially from home.** Why you’ll love being a Similarwebber: You’ll actually love the product you work with: Our customers aren’t our only raving fans. When we asked our employees why they chose to come work at Similarweb, 99% of them said “the product.” Imagine how exciting your job is when you get to work with the most powerful digital intelligence platform in the world. You’ll find a home for your big ideas: We encourage an open dialogue and empower employees to bring their ideas to the table. You’ll find the resources you need to take initiative and create meaningful change within the organization. We offer competitive perks & benefits: We take your well-being seriously, and offer competitive compensation packages to all employees. We also put a strong emphasis on community, with regular team outings and happy hours. You can grow your career in any direction you choose: Interested in becoming a VP or want to transition into a different department? Whether it’s Career Week, personalized coaching, or our ongoing learning solutions, you’ll find all the tools and opportunities you need to develop your career right here. Diversity isn’t just a buzzword: People want to work in a place where they can be themselves. We strive to create a workplace that is reflective of the communities we serve, where everyone is empowered to bring their full, authentic selves to work. We are committed to inclusivity across race, gender, ethnicity, culture, sexual orientation, age, religion, spirituality, identity and experience. Our culture of equality and mutual respect also helps us better understand and serve our customers in a world that is becoming more global, more diverse, and more digital every day. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here. We will handle your application and information related to your application in accordance with the Applicant Privacy Policy available here.", "summaryDescription" : "Senior Cybersecurity Engineer at Similarweb. Skills: Cloud security, Security technologies, AI security, GRC. Implement security controls. Manage security controls", "postedDate" : "2026-06-11T17:06:51.871", "createdAt" : "2026-06-11T17:06:51.871", "lastUpdated" : "2026-06-13T03:31:17.651", "ingestTimestamp" : "2026-06-11T17:06:51.871", "mongoId" : "6a2a477874d8ee00a05da30a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Security controls implementation", "Security technologies administration", "Risk assessment", "Security automation", "Vulnerability assessment", "Remediation tracking", "Secure baselines", "Threat monitoring", "Control implementation", "Audit support", "DDQ completion", "Problem-solving", "Cloud security", "Security technologies", "AI security", "GRC", "Security initiatives", "Risk mitigation", "Security controls", "Security capabilities", "Security-by-design", "Vulnerability management", "Secure configuration", "Threat detection", "Security investigations", "GRC initiatives", "Compliance frameworks", "Generative AI", "LLM", "AI agents", "NIST CSF", "ISO/IEC 27000 series", "CIS Benchmarks", "SOC 2", "SOX", "OWASP", "MITRE ATT&CK", "CISSP", "CISM", "AWS Security Specialty", "CKS", "EDR/XDR", "SIEM", "CDR", "CNAPP", "DLP", "IAM", "SASE", "MFA", "AWS", "GCP", "Azure", "Python", "Bash", "PowerShell" ], "skillCount" : 55, "jobCategory" : "other", "jobSubcategory" : "r&d", "dataQualityScore" : 0.8888889, "_score" : 917.20557, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c6ae374d8ee00a090ee1a", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2500000.0, "max" : 4000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T09:39:27.679", "fingerprint" : "01d7824291008376c7b6e17f1602e170a7f25cac0134b1861071c3308ed3b798", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=5154663008", "externalId" : "5154663008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Network security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Lead Zero Trust implementation, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Perform technical design reviews, Triage security bugs, Recommend solutions for security bugs, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Support RFI's, Evaluate new security solutions, Conduct POCs", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "domainKnowledge" : "Cyber Security; Infrastructure security; AI risk assessments; Emerging threat landscapes; Network protocols; Networking concepts; Security engineering; System security; Network security; Authentication protocols; Security protocols; Application security; Cloud Concepts; AI threat modeling; LLM components; Public cloud; Private cloud; On-prem infrastructure; Abuse risks", "domainList" : [ "cyber-security", "infrastructure-security", "ai-risk-assessments", "emerging-threat-landscapes", "network-protocols", "networking-concepts", "security-engineering", "system-security", "network-security", "authentication-protocols", "security-protocols", "application-security", "cloud-concepts", "ai-threat-modeling", "llm-components", "public-cloud", "private-cloud", "on-prem-infrastructure", "abuse-risks" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "System security", "Network security", "Authentication protocols", "Security protocols", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "communicationSkills" : "Articulate security concepts; Technical stakeholders", "continuousLearning" : "Learning new security products; Learning new security features; Learning new security strategies", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Assess complex security risks; Mitigate complex security risks", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Lead Zero Trust implementation", "postedDate" : "2026-06-14T08:55:22.103", "createdAt" : "2026-06-14T08:55:22.103", "lastUpdated" : "2026-06-15T09:39:27.679", "ingestTimestamp" : "2026-06-14T08:55:22.103", "mongoId" : "6a2c6ae374d8ee00a090ee1a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Cyber Security", "AI risk assessments", "Emerging threat landscapes", "Network protocols", "Networking concepts", "Security engineering", "Application security", "Cloud Concepts", "AI threat modeling", "LLM components", "Public cloud", "Private cloud", "On-prem infrastructure", "Abuse risks", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls" ], "skillCount" : 41, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 916.7642, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2d149174d8ee00a0ae7b6b", "title" : "Cybersecurity Analyst, IT Operations", "company" : "Fors Marsh", "industry" : "Cybersecurity", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in the Technology industry in the United States, adjusted for remote work and company size." }, "location" : "United States", "locations" : [ "Arlington", "VA", "United States" ], "timestamp" : "2026-06-15T08:39:13.122", "fingerprint" : "a6836faf2cfae74b0ac49670ad0ff5e634257163183beb15a764ef30b890be9a", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://fors-marsh-group.breezy.hr/p/3f533063ebac-cybersecurity-analyst-it-operations", "externalId" : "3f533063ebac", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "remoteFriendly" : true, "rawDescription" : "WHO WE ARE: At Fors Marsh, we take on issues that matter. We are a team of researchers, strategists, and communicators working together to drive lasting change. We look at human behavior from all angles with a deep understanding of people and context to design solutions that influence decision-mak", "summaryDescription" : "Cybersecurity Analyst, IT Operations at Fors Marsh", "createdAt" : "2026-06-14T07:04:33.457", "lastUpdated" : "2026-06-15T08:39:13.122", "ingestTimestamp" : "2026-06-14T07:04:33.457", "mongoId" : "6a2d149174d8ee00a0ae7b6b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 915.69165, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a308fdef292fd229c0addaa", "title" : "Security Specialist", "company" : "ARSIEM Corporation", "industry" : "0001-0031", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Specialist in Bulgaria, adjusted for the government industry and remote work." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "GIAC" ], "timestamp" : "2026-06-16T12:10:57.382", "fingerprint" : "d9ef4a4eada39c1b28b874903ba8faddee73732ec58a929084f8da0d09532a43", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/arsiem/c57d9e84-c663-40cf-94e3-3f5418b64d94/apply", "externalId" : "c57d9e84-c663-40cf-94e3-3f5418b64d94", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, SOAR, Endpoint security, Network security, Cloud security, Vulnerability management, Incident response, Scripting, Automation", "professionalSkills" : [ "Risk assessment", "Threat analysis", "Security architecture", "Compliance management" ], "hardSkillsList" : [ "Security monitoring", "Forensic analysis", "Penetration testing" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Penetration testing", "level" : "intermediate" } ], "majorSkills" : "Incident response, Threat intelligence, Security operations", "majorSkillsList" : [ "Incident response", "Threat intelligence", "Security operations" ], "coreResponsibilities" : "Monitor security alerts, Investigate security incidents, Develop incident response playbooks, Conduct threat hunting exercises, Perform vulnerability assessments, Implement security controls, Automate security processes, Document security procedures, Collaborate with IT teams, Stay updated on threats", "teamCollaboration" : "Cross-functional teams; IT operations; Engineering teams", "domainKnowledge" : "Cyber threats; Security frameworks; Compliance regulations; Network protocols", "domainList" : [ "cyber-threats", "security-frameworks", "compliance-regulations", "network-protocols" ], "domainSpecificKnowledge" : [ "Cyber threats", "Security frameworks", "Compliance regulations", "Network protocols" ], "toolProficiency" : [ "Splunk", "Palo Alto", "CrowdStrike", "Nessus" ], "communicationSkills" : "Incident reporting; Technical briefings", "documentationSkills" : "Security policies; Incident reports; Playbooks", "continuousLearning" : "Industry conferences; Training courses", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Forensic investigation", "outcomesObjectives" : "Minimize security risks; Reduce incident impact; Improve security posture", "qualificationsBasic" : "5+ years experience, Bachelor's degree", "qualificationsPreferred" : "Master's degree, CISSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description About ARSIEM Corporation At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. We provide support to multiple agencies across the United States Government. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support. As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients. That means a career packed with opportunities to grow and the ability to have an impact on every client you work with. ARSIEM is looking for a self-starting, motivated Quality Assurance Analyst to support a federal Microsoft 365 Contractor Support Services program. The Quality Assurance Analyst will support contractor-side quality control, deliverable review, performance monitoring, reporting quality, corrective action tracking, and documentation compliance against the PWS, QASP, and Quality Control Plan. This position is primarily remote. ## Responsibilities Support security, privacy, and governance activities across the Microsoft 365 cloud suite. Assist with data readiness planning and integration of Microsoft Purview to protect sensitive data. Support management of user permissions, data retention, compliance settings, and enterprise policies. Assist with documentation and management of Security Change Requests and audit logging solutions. Support Microsoft security and cyber architecture activities related to M365 services. Assist with security and configuration support for SharePoint Online, OneDrive for Business, Exchange Online, Teams, Power Platform, Copilot, Azure/Azure AD, Intune, and AvePoint Online Services. Support AvePoint Online Services security capabilities, including tenant-to-tenant considerations, Splunk Enterprise integration, bring-your-own-key configurations, IP restrictions, SFTP, and related interfaces. Collaborate with systems support staff and technical teams to identify, mitigate, and document risks. Contribute to bi-weekly and monthly status reporting, including action items, risks, mitigations, escalations, accomplishments, and closures. ## Minimum Qualifications Minimum 5 years of experience supporting Microsoft 365 cloud-based services in a large corporate or government environment. Experience supporting M365 security, compliance, governance, or privacy activities. Knowledge of Microsoft Purview, Defender, Azure AD, Intune, Exchange Online, SharePoint Online, Teams, and related M365 security capabilities. Experience managing or supporting user permissions, data retention, compliance settings, and audit logging. Experience with Power Platform security and governance concepts. Experience creating or supporting PowerShell scripts. Ability to troubleshoot technical and security issues across the M365 platform and AvePoint Online Services. Strong written and oral communication skills. Ability to complete IRS MBI/security onboarding and required IRS security training. ## Preferred Qualifications Experience with federal security processes, audit logging, security change requests, or cyber architecture support. Experience supporting M365 in a regulated or government enterprise environment. Knowledge of Power Apps, Power Automate, Power BI, Copilot for Power Platform, AI Builder, and Dataverse governance. Experience with risk tracking, mitigation planning, and technical documentation. ## Benefits For an overview of ARSIEM benefits, please visit https://www.arsiem.com/careers/ ## Additional Information Clearance Requirement: This position requires the ability to complete IRS MBI/security onboarding and required federal security training. Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is 3,500, and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment. ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.", "summaryDescription" : "Security Specialist at ARSIEM Corporation. Skills: Incident response, Threat intelligence, Security operations. Monitor security alerts. Investigate security incidents", "postedDate" : "2026-06-14T01:09:27.473", "createdAt" : "2026-06-14T01:09:27.473", "lastUpdated" : "2026-06-16T12:10:57.382", "ingestTimestamp" : "2026-06-16T03:27:20.614", "mongoId" : "6a308fdef292fd229c0addaa", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Security monitoring", "Forensic analysis", "Penetration testing", "Incident response", "Threat intelligence", "Security operations", "Risk assessment", "Threat analysis", "Security architecture", "Compliance management", "Cyber threats", "Security frameworks", "Compliance regulations", "Network protocols", "CISSP", "GIAC", "Splunk", "Palo Alto", "CrowdStrike", "Nessus" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 913.55945, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c6ae374d8ee00a090ee19", "title" : "Senior Security Engineer", "company" : "PubMatic", "industry" : "Cybersecurity", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Security Engineer in Gurugram, India, adjusted for the technology industry and company size." }, "location" : "Gurugram", "locations" : [ "Gurugram", "Pune" ], "timestamp" : "2026-06-15T11:31:26.144", "fingerprint" : "036fe461d5c32bde966d19674ee2896db18ea68e5c02dfd07b4ff5eed08ab41f", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://pubmatic.com/job/?gh_jid=4994052008", "externalId" : "4994052008", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Gurugram", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "28.4646148,77.0299194" } ], "locationText" : "Gurugram, India", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Zero Trust, AWS, Azure, GCP, IDS/IPS, SIEM, WAF, DLP, Python, Bash, Ruby, Container security, Kubernetes security, Network protocols, Cryptography, Application security, Cloud Concepts", "professionalSkills" : [ "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis" ], "hardSkillsList" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols" ], "softSkillsList" : [ "Problem-solving", "Mentoring" ], "hardSkills" : [ { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Security automation", "level" : "intermediate" }, { "name" : "Cyber threat intelligence", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Infrastructure security", "level" : "intermediate" }, { "name" : "System security", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Security protocols", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem-solving" }, { "name" : "Mentoring" } ], "majorSkills" : "Cybersecurity, Cloud security, Zero Trust, Incident response", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Zero Trust", "Incident response" ], "coreResponsibilities" : "Strengthen cybersecurity posture, Implement Zero Trust, Manage cloud security, Lead vulnerability management initiatives, Lead threat detection initiatives, Lead incident response initiatives, Lead security automation initiatives, Integrate security by design, Conduct risk assessments, Participate in red team exercises, Participate in blue team exercises, Support security awareness initiatives, Contribute to internal audits, Contribute to compliance efforts, Mentor junior team members, Deploy and manage security solutions, Monitor security alerts and events, Analyze security events, Utilize threat intelligence, Mitigate security risks, Develop detection rules, Update threat profiles, Manage intelligence requirements, Improve cyber threat intelligence function, Support Incident Response teams, Provide intelligence context, Provide remediation recommendations, Deploy and manage IDS/IPS, Deploy and manage WAF, Mitigate security issues, Mitigate misconfigurations, Mitigate vulnerabilities, Conduct security assessments, Manage vendor risk, Bolster network security, Participate in security incident response, Minimize incident impact, Facilitate recovery, Enhance security posture proactively, Integrate security practices, Set up security tooling, Secure defaults, Perform architecture analysis, Perform threat modeling, Review technical designs, Triage security bugs, Recommend solutions for security bugs, Participate in Red-Teaming exercises, Participate in Blue Teaming exercises, Execute VAPT exercises, Run security scans, Collaborate to mitigate security issues, Collaborate to mitigate vulnerabilities, Provide mentorship and guidance, Conduct security awareness sessions, Participate in security campaigns, Create security policies, Contribute to security policies, Participate in Audits, Participate in RFI's, Evaluate new security solutions, Conduct POCs, Demonstrate POVs, Implement anti-abuse solutions, Apply AI tools for anomaly detection, Apply AI tools for insider threat detection, Apply AI tools for incident response", "teamCollaboration" : "Cross-functional teams; Global teams; Operations teams; Engineering teams; Risk management teams; Incident Response teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Cyber Security; Infrastructure security; Network security; Endpoint security; Zero Trust; Cloud security; AI risk; AI threat modeling; LLM components", "domainList" : [ "cyber-security", "infrastructure-security", "network-security", "endpoint-security", "zero-trust", "cloud-security", "ai-risk", "ai-threat-modeling", "llm-components" ], "domainSpecificKnowledge" : [ "Cyber Security", "Infrastructure security", "Network security", "Endpoint security", "Zero Trust", "Cloud security", "AI risk", "AI threat modeling", "LLM components" ], "toolProficiency" : [ "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "communicationSkills" : "Articulate security concepts", "continuousLearning" : "Learning about new security products; Learning about new security features; Learning about new security strategies", "innovationCreativity" : "Hackathon", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Root cause analysis", "qualificationsBasic" : "8+ years experience, Experience with Global teams, In-depth knowledge of anti-abuse solutions, Applied knowledge of securing public, private cloud and on-prem infrastructure, Ability to perform security reviews, audits, security operations, Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls, Ability to assess engineering designs and architecture diagrams for abuse risks, Ability to assess abuse risks within infrastructure, Experience designing and implementing anti-abuse solutions, Proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response, Proficient in scripting", "qualificationsPreferred" : "AI risk assessment and policy development, Understanding of AI threat modeling", "rawDescription" : "About the Role The Senior Security Engineer role is a highly technical position responsible for strengthening the organization’s cybersecurity posture through robust infrastructure, endpoint, and cyber security measures. The role requires strong expertise in Zero Trust implementation, cloud security (AWS, Azure, GCP), and technologies like IDS/IPS, SIEM, WAF, and DLP. The engineer will lead initiatives in vulnerability management, threat detection, incident response, and security automation, leveraging advanced tools. The engineer will work closely with cross-functional teams to integrate security by design, conduct risk assessments, and participate in red and blue team exercises. They’ll also support security awareness initiatives and contribute to internal audits, compliance efforts, and help in mentoring junior team members. Familiarity with AI risk assessments, emerging threat landscapes, and scripting for automation (Python, Bash, Ruby) is are integral aspect of the position. This is a highly visible strategic role requiring a blend of technical expertise and deep knowledge of the security landscape. Excellent communication, proactive problem-solving, and the ability to align technical solutions with business goals are key to excelling in this security engineering role. What You'll Do: Proven experience as a Security Engineer with a focus on deploying and managing security solutions in the field of Cyber Security, End-point Security, and Network Security. Experience with vulnerability management, security incident response, and security incident and event management (SIEM) systems. Monitor security alerts and events from various sources, including security information and event management (SIEM) systems, and do a thorough analysis of the security events. Utilize advanced threat intelligence to proactively identify and mitigate potential security risks. Develop and implement detection rules and signatures to enhance threat detection capabilities. Monitor threat landscape to identify new tactics, techniques and procedures employed by threat actors and update associated profiles. Manage intelligence requirements from internal stakeholders across operations, engineering, risk management and others, soliciting feedback to continually drive improvements. Develop, manage, optimize, and continuously improve processes to enhance the overall cyber threat intelligence function. Support Incident Response and Engineering teams during incidents and other threat monitoring activities providing intelligence context, remediation recommendations and expertise. Strong experience with Darktrace, CrowdStrike, Cloud proxy, DLP solutions, SOAR, and other cyber security products. Should have strong understanding and experience with implementation of Zero trust Strong hands-on experience on deploying and managing IDS/IPS, WAF. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s container, and Kubernetes infrastructure. Proven experience in conducting security assessments, vendor risk management including third-party vendors in a corporate environment. Sound understanding of network protocols, firewalls, and networking concepts. Able to understand the network architecture and contribute to bolstering the network security. Participate in security incident response efforts, contributing to minimizing the impact of security incidents and facilitating recovery. Stay updated on emerging threats and trends, applying this knowledge to enhance our security posture proactively. Collaborate with cross-functional teams to ensure that security practices are seamlessly integrated into the infrastructure and security is implemented by design. Set up security tooling and secure defaults to ensure software security best practices are adhered. Perform architecture analysis, threat modeling and technical design reviews of sensitive features and infrastructure. Triage and recommend solutions for security bugs from tools, third party assessments and external reported bugs. Participate in Red-Teaming, Blue Teaming exercises. Work with Partners to execute VAPT exercises, run security scans and collaborate to mitigate security issues and vulnerabilities. Should have experience and in-depth technical knowledge of security engineering, system and network security, authentication and security protocols, cryptography, and application security. Good understanding of Cloud Concepts – AWS, AZURE, GCP. Provide mentorship and guidance to junior engineers to enhance their understanding of infrastructure and cyber security. Should be able to conduct security awareness sessions and participate in various security campaigns e.g., Phishing campaigns, Hackathon, security bulletins. Strong analytical and problem-solving skills with the ability to assess and mitigate complex security risks. Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to PubMatic’s infrastructure. Create and contribute to PubMatic security policies, standards, procedures, guidelines. Drive and participate in different Audits (both Internal and External), RFI’s to support new business initiatives. Experience and enthusiasm for learning about new security products, features, and strategies. AI risk assessment and policy development. Understanding of AI threat modeling – identifying new risks introduced by AI and LLM components. Work with different vendors, partners to evaluate new security solutions, conduct POC to demonstrate POV. We'd Love for You to Have Must Have: 8+ years of experience in Cyber Security, Infrastructure security. Experience of working with Global teams. Excellent communication and interpersonal skills to collaborate effectively with teams and articulate security concepts to both technical and non-technical stakeholders. In-depth knowledge of anti-abuse solutions, cyber security, network security, and/or infrastructure security. Applied knowledge of securing public, private cloud and on-prem infrastructure. Ability to perform security reviews, audits, security operations. Hands-on experience on EDR, DLP, SIEM, zero trust solutions, endpoint security solutions, Privilege Access management (PAM), Firewalls. Ability to assess engineering designs and architecture diagrams for abuse risks. Ability to assess abuse risks within infrastructure. Experience designing and implementing anti-abuse solutions. Should have proficiency in using and applying AI tools for anomaly detection, insider threat detection and incident response. Proficient in scripting languages such as Python, Ruby, or Bash for automating security tasks. Experience in managing we don’t just value diversity, we promote and celebrate it. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. About PubMatic PubMatic is one of the world’s leading scaled digital advertising platforms, offering more transparent advertising solutions to publishers, media buyers, commerce companies and data owners, allowing them to harness the power and potential of the open internet to drive better business outcomes. Founded in 2006 with the vision that data-driven decisioning would be the future of digital advertising, we enable content creators to run a more profitable advertising business, which in turn allows them to invest back into the multi-screen and multi-format content that consumers demand.", "summaryDescription" : "Senior Security Engineer at PubMatic. Skills: Cybersecurity, Cloud security, Zero Trust, Incident response. Strengthen cybersecurity posture. Implement Zero Trust", "postedDate" : "2026-06-14T03:22:32.536", "createdAt" : "2026-06-14T03:22:32.536", "lastUpdated" : "2026-06-15T11:31:26.144", "ingestTimestamp" : "2026-06-14T03:22:32.536", "mongoId" : "6a2c6ae374d8ee00a090ee19", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Vulnerability management", "Threat detection", "Incident response", "Security automation", "Cyber threat intelligence", "Network security", "Endpoint security", "Infrastructure security", "System security", "Authentication protocols", "Security protocols", "Problem-solving", "Mentoring", "Cybersecurity", "Cloud security", "Zero Trust", "Risk assessments", "Vendor risk management", "Threat modeling", "Architecture analysis", "Agile", "Cyber Security", "AI risk", "AI threat modeling", "LLM components", "Darktrace", "CrowdStrike", "Cloud proxy", "SOAR", "EDR", "PAM", "Firewalls", "JIRA" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 912.5172, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c5fb974d8ee00a08ee12d", "title" : "Cybersecurity Engineer", "company" : "cBEYONData + SMX", "salary" : { "min" : 120000.0, "max" : 200000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "cBEYONData", "locations" : [ "cBEYONData" ], "certifications" : [ "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security" ], "timestamp" : "2026-06-15T00:46:05.169", "fingerprint" : "566bf0810b5188c2c2207ce8b8df4d9f1d2d9b0e9c3f7a6c2d5315fc41183273", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/ess/jobs/7751843003", "externalId" : "7751843003", "structuredLocations" : [ { "city" : "izabelin c", "state" : "mazovia", "country" : "poland", "continent" : "europe", "source" : "city_strategy", "geo" : "52.29929,20.80381" } ], "locationText" : "cBEYONData", "technicalSkills" : "SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, AWS, Azure, Google Cloud", "professionalSkills" : [ "risk management", "network security", "cloud security", "secure system implementation", "vulnerability management", "security assessments", "risk analysis", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "access control", "secure configuration" ], "hardSkillsList" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills" ], "hardSkills" : [ { "name" : "security engineering", "level" : "intermediate" }, { "name" : "security operations", "level" : "intermediate" }, { "name" : "information assurance", "level" : "intermediate" }, { "name" : "vulnerability management", "level" : "intermediate" }, { "name" : "security assessments", "level" : "intermediate" }, { "name" : "risk analysis", "level" : "intermediate" }, { "name" : "remediation support", "level" : "intermediate" }, { "name" : "network security", "level" : "intermediate" }, { "name" : "access control", "level" : "intermediate" }, { "name" : "identity management", "level" : "intermediate" }, { "name" : "encryption", "level" : "intermediate" }, { "name" : "secure configuration", "level" : "intermediate" }, { "name" : "documentation", "level" : "intermediate" }, { "name" : "compliance reporting", "level" : "intermediate" }, { "name" : "audit readiness", "level" : "intermediate" }, { "name" : "troubleshooting", "level" : "intermediate" }, { "name" : "analytical skills", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity Engineering, Security Operations, Risk Management, Compliance", "majorSkillsList" : [ "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance" ], "coreResponsibilities" : "Design security solutions, Implement security solutions, Monitor security solutions, Maintain security solutions, Protect enterprise systems, Protect networks, Protect applications, Protect data, Support security engineering, Support security architecture, Support vulnerability management, Support incident response, Support compliance activities, Assist secure system implementation, Administer cybersecurity tools, Configure cybersecurity tools, Support cybersecurity tools, Conduct vulnerability assessments, Support vulnerability assessments, Conduct security reviews, Conduct risk analysis, Plan remediation, Track POA&M, Ensure systems align with frameworks, Ensure solutions align with policies, Ensure systems align with compliance, Ensure solutions align with compliance, Collaborate with teams, Support secure solution delivery, Develop security documentation, Maintain security documentation, Develop reports, Maintain reports, Develop technical artifacts, Maintain technical artifacts, Develop audit readiness materials, Maintain audit readiness materials, Support continuous monitoring, Support system hardening, Support access control, Support secure configuration, Help maintain secure systems, Help maintain compliant systems, Help maintain resilient systems, Support mission-focused modernization", "teamCollaboration" : "infrastructure teams; network teams; cloud teams; data teams; application teams; customer teams; engineering teams", "domainKnowledge" : "NIST; RMF; FedRAMP; FISMA; DoD 8570/8140; network security; cloud security; Zero Trust architectures; Zero Trust methodologies", "domainList" : [ "nist", "rmf", "fedramp", "fisma", "dod-8570-8140", "network-security", "cloud-security", "zero-trust-architectures", "zero-trust-methodologies" ], "domainSpecificKnowledge" : [ "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "network security", "cloud security", "Zero Trust architectures", "Zero Trust methodologies" ], "toolProficiency" : [ "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "communicationSkills" : "documentation; analytical; communication", "documentationSkills" : "security documentation; technical artifacts; audit readiness", "problemSolvingSkills" : "troubleshooting; analytical; risk analysis; vulnerability management", "specialRequirements" : "Active DoD security clearance, DoD 8570/8140", "qualificationsBasic" : "cybersecurity engineering experience, security operations experience, information assurance activities experience, enterprise federal DoD environments experience, NIST RMF FedRAMP FISMA knowledge, DoD 8570/8140 guidance knowledge, vulnerability management experience, security assessments experience, POA&M tracking experience, risk analysis experience, remediation support experience, network security understanding, access control understanding, identity management understanding, encryption understanding, secure configuration practices understanding, support security documentation, support compliance reporting, support audit readiness, troubleshooting skills, analytical skills, documentation skills, collaborate with engineering teams, collaborate with infrastructure teams, collaborate with cloud teams, collaborate with data teams, collaborate with customer teams", "qualificationsPreferred" : "Active DoD security clearance, federal DoD environments experience, mission-critical environments experience, AWS cloud security experience, Azure cloud security experience, Google Cloud security experience, Zero Trust architectures experience, Zero Trust methodologies experience, security architecture experience, system hardening experience, incident response experience, continuous monitoring experience, Security+ certification, CySA+ certification, CISSP certification, CASP+ certification, CEH certification, CISM certification, AWS Security certification, Azure Security certification", "rawDescription" : "cBEYONData + SMX is seeking Cybersecurity Engineers to support federal customers with cybersecurity operations, security engineering, compliance, risk management, network security, cloud security, and mission-focused modernization initiatives. Responsibilities Design, implement, monitor, and maintain security solutions that protect enterprise systems, networks, applications, and data Support security engineering, security architecture, vulnerability management, incident response, and compliance activities Assist with secure system implementation across federal, DoD, or enterprise technology environments Administer, configure, and support cybersecurity tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, and related platforms Conduct or support vulnerability assessments, security reviews, risk analysis, remediation planning, and POA&M tracking Help ensure systems and solutions align with applicable security frameworks, policies, and compliance requirements Collaborate with infrastructure, network, cloud, data, application, and customer teams to support secure solution delivery Develop and maintain security documentation, reports, technical artifacts, and audit readiness materials Support continuous monitoring, system hardening, access control, and secure configuration activities Help maintain secure, compliant, and resilient systems in support of mission-focused modernization efforts Required Skills and Experience Experience supporting cybersecurity engineering, security operations, or information assurance activities in enterprise, federal, or DoD environments Knowledge of cybersecurity frameworks, policies, and standards such as NIST, RMF, FedRAMP, FISMA, DoD 8570/8140, or related guidance Experience with vulnerability management, security assessments, POA&M tracking, risk analysis, and remediation support Familiarity with security tools such as SIEM, endpoint protection, vulnerability scanners, firewalls, IDS/IPS, or similar technologies Understanding of network security, access control, identity management, encryption, and secure configuration practices Ability to support security documentation, compliance reporting, and audit readiness activities Strong troubleshooting, analytical, communication, and documentation skills Ability to collaborate with engineering, infrastructure, cloud, data, and customer teams to support secure solution delivery Desired Skills and Experience Active or current DoD security clearance Experience supporting federal, DoD, or mission-critical environments Familiarity with cloud security concepts across AWS, Azure, Google Cloud, or similar platforms Experience with Zero Trust architectures and methodologies Experience supporting security architecture, system hardening, incident response, or continuous monitoring Relevant certifications such as Security+, CySA+, CISSP, CASP+, CEH, CISM, AWS Security, Azure Security, or similar Application Deadline: 7/31/26 # LI-SA1 The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement. The proposed salary for this position is: $120,000—$200,000 USD SMX is an Equal Opportunity employer including disabilities and veterans. Selected applicant may be subject to a background investigation and/or education verification. SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i. e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).", "summaryDescription" : "Cybersecurity Engineer at cBEYONData + SMX. Skills: Cybersecurity Engineering, Security Operations, Risk Management, Compliance. Design security solutions. Implement security solutions", "postedDate" : "2026-06-12T22:24:44.083", "createdAt" : "2026-06-12T22:24:44.083", "lastUpdated" : "2026-06-15T00:46:05.169", "ingestTimestamp" : "2026-06-12T22:24:44.083", "mongoId" : "6a2c5fb974d8ee00a08ee12d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 120000, "salaryAnnualMax" : 200000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "security engineering", "security operations", "information assurance", "vulnerability management", "security assessments", "risk analysis", "remediation support", "network security", "access control", "identity management", "encryption", "secure configuration", "documentation", "compliance reporting", "audit readiness", "troubleshooting", "analytical skills", "Cybersecurity Engineering", "Security Operations", "Risk Management", "Compliance", "risk management", "cloud security", "secure system implementation", "remediation planning", "compliance requirements", "secure solution delivery", "system hardening", "NIST", "RMF", "FedRAMP", "FISMA", "DoD 8570/8140", "Zero Trust architectures", "Zero Trust methodologies", "Security+", "CySA+", "CISSP", "CASP+", "CEH", "CISM", "AWS Security", "Azure Security", "SIEM", "endpoint protection", "vulnerability scanners", "firewalls", "IDS/IPS" ], "skillCount" : 48, "jobCategory" : "other", "jobSubcategory" : "mission-intelligence&analytics", "dataQualityScore" : 0.7777778, "_score" : 900.74274, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c6ac174d8ee00a090db9b", "title" : "Sr. Cybersecurity Operations Analyst", "company" : "Atlas Air", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Operations Analyst in White Plains, NY, adjusted for industry and company size." }, "location" : "White Plains, NY, USA", "locations" : [ "White Plains", "NY", "USA" ], "timestamp" : "2026-06-15T22:36:57.018", "fingerprint" : "b22b12aba85b1209b9458c38499c58725ca1486cec8d9c90b54b808147e3e7ca", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.atlasairworldwide.com/careers/job-board/?gh_jid=4267649009", "externalId" : "4267649009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "White Plains", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0339862,-73.7629097" } ], "locationText" : "White Plains, New York, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "rawDescription" : "Join Atlas Air Worldwide. Move the World with Us! At Atlas Air Worldwide, we’re not just an airline, we’re a global engine powering cargo, passenger, and leasing operations across more than 70 countries. As a leader in outsourced aviation logistics, we’re built on a foundation of safety, service excellence, integrity, innovation, teamwork, and responsibility. With over 30 years of history, a modern all-Boeing fleet, and nearly 5,000 teammates collaborating across operations, technical, and corporate functions, we’re driven by purpose. If you're ready to grow, innovate, and help us deliver excellence every single day, you belong here. This position is responsible for cybersecurity operations and defense including threat assessment, incident handling, and managing vulnerabilities against Atlas Air Global Technology environment. Values and Behavioral Standards: To ensure the effective communication and application of company values and behavioral standards, as stated in our company “Code of Conduct” policy, and to respond appropriately in the event of any known departure. Major Job Responsibilities: This position will be responsible for security event monitoring, vulnerability assessments, web application penetration tests, integrity checking, and maintaining necessary standards we lift ambition.", "summaryDescription" : "Sr. Cybersecurity Operations Analyst at Atlas Air", "postedDate" : "2026-06-14T19:15:37.345", "createdAt" : "2026-06-14T19:15:37.345", "lastUpdated" : "2026-06-15T22:36:57.018", "ingestTimestamp" : "2026-06-14T19:15:37.345", "mongoId" : "6a2c6ac174d8ee00a090db9b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 897.2719, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Logistics", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ca53574d8ee00a09b531e", "title" : "Principal / Lead Software Engineer (Cybersecurity Specialist)", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 185000.0, "max" : 275000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Lead Software Engineers in Singapore, adjusted for the cybersecurity specialization and GovTech's industry position." }, "location" : "DEP Digital Economy Products", "locations" : [ "DEP Digital Economy Products" ], "timestamp" : "2026-06-16T05:07:33.247", "fingerprint" : "2e7bfa353428202c6e448987bdc4b0b5bdc0686c6f5916d2cdd151d21bbc7715", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4001907201?gh_jid=4001907201", "externalId" : "4001907201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Lead", "technicalSkills" : "Cloud security, Platform security, Identity, Encryption, Key management, Segmentation, Zero-trust, Secure SDLC, Policy-as-code, MITRE ATT", "professionalSkills" : [ "Systems thinking", "Architecture security", "Architecture resilience" ], "hardSkillsList" : [ "Security architecture", "Resilience engineering", "Threat modeling", "Vulnerability assessment", "Policy-as-code" ], "softSkillsList" : [ "Leadership", "Mentorship" ], "hardSkills" : [ { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Resilience engineering", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentorship" } ], "majorSkills" : "Cybersecurity architecture, Resilience engineering, Secure SDLC", "majorSkillsList" : [ "Cybersecurity architecture", "Resilience engineering", "Secure SDLC" ], "coreResponsibilities" : "Design and embed security controls, Embed resilience controls, Decide inherited security tech stack, Build owned security tech stack, Design defensive terrain, Own reference security architecture, Define trust boundaries, Define identity architecture, Define segmentation strategy, Define trust-zone strategy, Define east-west controls, Define encryption key management, Define blast-radius containment, Embed secure-by-design controls, Maintain living threat model, Provide engineering guidance, Provide incident-response support, Scope external VAPT, Engineer external VAPT, Validate vulnerability closure", "teamCollaboration" : "Product and engineering teams; Singapore Customs Agency CISO; SIRO; ACISO; GCSOC", "domainKnowledge" : "Critical Information Infrastructure; TradeNet platform; CSA CCoP v2; WOG IM8; National trade-continuity; Cloud-native architecture", "domainList" : [ "critical-information-infrastructure", "tradenet-platform", "csa-ccop-v2", "wog-im8", "national-trade-continuity", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Critical Information Infrastructure", "TradeNet platform", "CSA CCoP v2", "WOG IM8", "National trade-continuity", "Cloud-native architecture" ], "documentationSkills" : "Document conformance basis", "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "TradeNet security architecture conformant; Documented defensible conformance basis; Coherent evidenced security architecture; Engineered national trade-continuity posture; Recoverability designed property; Degraded-mode operation designed property; Containment blast radius designed property; Explicit control boundary; Security control intent expressed code; Continuously monitored controls; Culture of security", "qualificationsBasic" : "10+ years Cybersecurity Software Engineer, Design security architecture, Implement security architecture, Coach engineering teams, Understand cybersecurity tooling, Design security into regulated systems, Implement security into regulated systems, Working command Singapore regulatory frameworks, Translate obligation into architecture, Delineate control inheritance, Systems thinking, Depth cloud platform security architecture, Depth identity, Depth encryption key management, Depth segmentation zero-trust, Depth secure SDLC policy-as-code, Fluency architectural adversary frameworks", "qualificationsPreferred" : "MITRE ATT framework", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "About GovTech The Government Technology Agency (GovTech) transforms the delivery of Government digital services by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We build the Smart Nation infrastructure and the platforms the public sector runs on, and we partner agencies to engineer trustworthy, resilient digital services at national scale. What is this role? TradeNet is Singapore's national single-window trade platform and a legislated Critical Information Infrastructure (CII). Its availability and integrity underpin national trade continuity; disruption is an economic event, not a system outage. We are seeking a Principal / Lead level Software Engineer (Cybersecurity Specialist) to be the technical design authority for the modernised TradeNet CII rebuild, focusing on architecture security and resilience. This is an architect-and-build mandate, not an assurance or operations role. As a first-line engineering role, you will Design and embed security and resilience controls into the platform starting from the architecture and down to the implementation details. Decide what is inherited from the GovTech security tech stack versus built and owned by the product team. Design the defensive terrain jointly with the Singapore Customs Agency CISO (ACISO) so that the agency can defensibly discharge its CII regulatory accountability to Cyber Security Agency (CSA). You will be measured on the delivery of TradeNet CII that is secure and resilient by design and construction — not on the volume of findings triaged or evidence produced after the fact. Impact and outcomes You will be successful when: TradeNet's security architecture is conformant with CSA CCoP v2 and WOG IM8 by design, not by downstream remediation, and the conformance basis is clearly documented and defensible to CSA. The Customs ACISO can stand behind a coherent, evidenced security and resilience architecture for the CII without reconstructing it from operational artefacts. The platform has an engineered national trade-continuity posture — recoverability, degraded-mode operation, and containment of blast radius are designed properties, not aspirations. The boundary between controls inherited from the GovTech security tech stack and controls owned by the TradeNet product is explicit, maintained, and used to scope CII audit and attestation. Security control intent is expressed as code and continuously monitored, reducing reliance on point-in-time attestation. There is a strong culture of security in the organization through your leadership, mentorship and coaching. What you will be working on Secure and resilient architecture (core mandate) Own the reference security architecture for the TradeNet CII: trust boundaries, identity architecture, segmentation and trust-zone strategy, east-west controls, encryption and key management, and blast-radius containment for the CII boundary. Embed secure-by-design controls by working inside product and engineering teams through the delivery lifecycle — at design, solutioning and implementation time, not as post-build validation. Maintain a living threat model per system and trust boundary, referenced to MITRE ATT the CLE provides engineering guidance, not self-validation: Advisory and incident-response engineering support in coordination with SIRO, ACISO, and GCSOC. Scoping and engineering guidance for external VAPT and vulnerability assessment, with closure validation performed independently. What we are looking for 10+ years in Cybersecurity as a Software Engineer and not just in the capacity of auditing, pen-testing, operational triage, etc…. We need someone that is hands on where the ideal candidate is someone that can design systems to be secure and can sit down to write code if they need to, someone that can coach our engineering teams on how to write better and more secure code, and someone that understands the cybersecurity tooling landscape to help us choose the right tools, we are not looking for a high level theorist / academic. Demonstrated experience with designing security architecture into regulated / critical systems and platforms at the national or whole enterprise level, not just providing testing and assurance but actually designing and implementing. Working command of Singapore regulatory frameworks for critical systems: CSA CCoP v2 for CII and WOG IM8 (Reform), with the ability to translate obligation into architecture and to delineate control inheritance for audit scoping. Strong systems thinking: able to reason about a national platform as an interdependent whole — boundaries, failure modes, recoverability, and concentration risk — not as a checklist of controls. Depth across cloud and platform security architecture (IaaS/PaaS/SaaS), identity, encryption and key management, segmentation and zero-trust patterns, and secure SDLC / policy-as-code. Fluency with architectural and adversary frameworks (MITRE ATT an independent assurance function validates and attests. The CLE provides the engineering and architectural substance both rely on, and does not validate or attest to the controls it designs. This separation is deliberate and protects the integrity of the CII assurance chain. --- Our employee benefits are based on a total rewards approach, offering a holistic and market-competitive suite of perks. These include leave benefits to meet your work-life needs and employee wellness programmes. We champion flexible work arrangements (subject to your job role) and trust that you will manage your own time to deliver your best, wherever you are, and whatever works best for you. Learn more about life inside GovTech at go.gov.sg/GovTechCareers. Stay connected with us on social media at go.gov.sg/ConnectWithGovTech", "summaryDescription" : "Principal / Lead Software Engineer (Cybersecurity Specialist) at GovTech. Skills: Cybersecurity architecture, Resilience engineering, Secure SDLC. Design and embed security controls. Embed resilience controls", "postedDate" : "2026-06-14T20:48:48.391", "createdAt" : "2026-06-14T20:48:48.391", "lastUpdated" : "2026-06-16T05:07:33.247", "ingestTimestamp" : "2026-06-14T20:48:48.391", "mongoId" : "6a2ca53574d8ee00a09b531e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Security architecture", "Resilience engineering", "Threat modeling", "Vulnerability assessment", "Policy-as-code", "Leadership", "Mentorship", "Cybersecurity architecture", "Secure SDLC", "Systems thinking", "Architecture security", "Architecture resilience", "Critical Information Infrastructure", "TradeNet platform", "CSA CCoP v2", "WOG IM8", "National trade-continuity", "Cloud-native architecture" ], "skillCount" : 18, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 0.8888889, "_score" : 896.3957, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2ca13274d8ee00a09a4b5f", "title" : "Cybersecurity Analyst", "company" : "Level", "industry" : "Corporate", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Austin, United States, adjusted for the Education industry and company size." }, "location" : "Austin", "locations" : [ "Austin" ], "certifications" : [ "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH" ], "timestamp" : "2026-06-15T05:23:45.000", "fingerprint" : "c34b92369538dc90b549740abdc4c0b596f06d245e039dd634669205c40fec2e", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/level/b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9/application", "externalId" : "b19529e9-60a7-4e0d-83cd-5ceb5aa2e1a9", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 3, "experienceMaxYears" : 5, "technicalSkills" : "SIEM, EDR, Network monitoring, TCP/IP, Firewalls, DNS, VPNs, IDS/IPS, MDM, RBAC, IAM, Zero Trust, Azure, AWS, GCP, DevSecOps, CI/CD", "professionalSkills" : [ "Threat hunting", "Incident response", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits" ], "hardSkillsList" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking" ], "hardSkills" : [ { "name" : "Security monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Threat detection", "level" : "intermediate" }, { "name" : "Endpoint security", "level" : "intermediate" }, { "name" : "Network traffic analysis", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Vulnerability scanning", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" } ], "majorSkills" : "Security monitoring, Threat detection, Incident response, Endpoint security", "majorSkillsList" : [ "Security monitoring", "Threat detection", "Incident response", "Endpoint security" ], "coreResponsibilities" : "Monitor security alerts, Analyze security events, Investigate security incidents, Investigate anomalies, Investigate potential threats, Tune detection rules, Maintain detection rules, Tune alerts, Maintain alerts, Tune dashboards, Maintain dashboards, Conduct threat hunting, Identify indicators of compromise, Identify attacker TTPs, Participate incident response, Contain incidents, Eradicate incidents, Document timelines, Document remediation actions, Administer endpoint security tools, Support MDM operations, Manage identity controls, Manage access controls, Enforce RBAC policies, Conduct access reviews, Monitor network traffic, Monitor logs, Assist maintaining firewall rules, Assist maintaining network segmentation, Support Zero Trust implementation, Support least-privilege enforcement, Monitor cloud environments, Identify misconfigurations, Identify policy violations, Assist vulnerability scans, Assist remediation tracking, Assist compliance assessments, Collaborate development teams, Collaborate IT ops teams, Integrate security CI/CD pipelines", "teamCollaboration" : "Security team; Development teams; IT ops teams", "domainKnowledge" : "Network security fundamentals; Zero Trust concepts; DevSecOps principles; NIST CSF; SOC 2; CIS Controls", "domainList" : [ "network-security-fundamentals", "zero-trust-concepts", "devsecops-principles", "nist-csf", "soc-2", "cis-controls" ], "domainSpecificKnowledge" : [ "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls" ], "toolProficiency" : [ "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "documentationSkills" : "IR playbooks; Runbooks; Escalation procedures", "problemSolvingSkills" : "Problem-solving skills", "specialRequirements" : "Based in Austin, TX, Willing to relocate", "qualificationsBasic" : "3-5 years cybersecurity analyst experience, Solid security monitoring knowledge, Solid log analysis knowledge, Solid SIEM platforms knowledge, Experience incident response, Working knowledge network security, Hands-on endpoint security experience, Hands-on EDR tools experience, Experience MDM platforms, Understanding RBAC principles, Understanding IAM principles, Familiarity Zero Trust concepts, Basic cloud security knowledge, Familiarity DevSecOps principles, Familiarity secure SDLC practices, Analytical skills, Problem-solving skills, Exceptional attention to detail", "qualificationsPreferred" : "CompTIA Security+ certification, CySA+ certification, Microsoft Certified: Security Operations Analyst Associate, Azure Security Engineer Associate, CEH certification, GIAC GSEC certification, GIAC GCIA certification, GIAC GCIH certification", "workSiteFlexibility" : "Onsite", "rawDescription" : "Level is a learning technology company dedicated to helping students build real academic and life skills with confidence and joy. We combine proven curriculum principles with world class interactive design to make meaningful practice something students want to come back to, not something they struggle through. We support what teachers, schools, and parents are already doing by increasing student engagement with high quality, standards aligned practice that reinforces classroom learning. That's why we're building: For students: Rewarding and motivating learning experiences that meet students where they are to build real academic proficiency. For educators: Tools that fit naturally into instruction and help students stay engaged while reducing teacher workload. For parents: Activities that help your kid catch up or get ahead, build confidence, and minimize homework battles, whether learning at school or at home. We are committed to helping every person maximize their potential and live a life of meaning. It's a difficult problem that requires brilliant people and tremendous effort over time. Level is looking for a skilled and motivated Cybersecurity Analyst to join our security team and help protect the organization's systems, networks, and data from evolving cyber threats. This is a hands-on technical role that requires a strong foundation in security monitoring, threat detection, incident response, and endpoint security. Reporting to the Director of Cybersecurity, this analyst will be a key contributor to day-to-day security operations, working across network security, cloud environments, and endpoint management tools to identify risks, respond to incidents, and continuously improve the organization's security posture. What You Will Do: - Monitor and analyze security alerts and events across SIEM, EDR, and network monitoring platforms - Investigate security incidents, anomalies, and potential threats to determine scope and impact - Tune and maintain detection rules, alerts, and dashboards to reduce noise and improve fidelity - Conduct threat hunting to proactively identify indicators of compromise (IOCs) and attacker TTPs - Participate in incident response including containment, eradication, and recovery; document timelines and remediation actions - Assist in developing and maintaining IR playbooks, runbooks, and escalation procedures - Administer endpoint security tools including EDR/antivirus platforms and support MDM operations - Manage identity and access controls, enforce RBAC policies, and conduct access reviews - Monitor network traffic and logs for suspicious activity; assist in maintaining firewall rules and network segmentation - Support Zero Trust implementation efforts and least-privilege enforcement - Monitor cloud environments (Azure, AWS, or GCP) for misconfigurations and policy violations - Assist with vulnerability scans, remediation tracking, and compliance assessments (NIST CSF, SOC 2, CIS Controls) - Collaborate with development and IT ops teams to integrate security into CI/CD pipelines (DevSecOps) - Assist with third-party risk management and security audits Qualifications Need to Have: - 3-5 years of hands-on experience in a cybersecurity analyst, SOC analyst, or related technical security role - Solid understanding of security monitoring, log analysis, and SIEM platforms - Experience participating in incident response activities, including investigation and remediation - Working knowledge of network security fundamentals: TCP/IP, firewalls, DNS, VPNs, IDS/IPS - Hands-on experience with endpoint security platforms and EDR tools - Experience with MDM platforms for device management and policy enforcement - Understanding of RBAC and IAM principles in enterprise environments - Familiarity with Zero Trust concepts and practical enterprise application - Basic cloud security knowledge in at least one of Azure, AWS, or GCP - Familiarity with DevSecOps principles and secure SDLC practices - Strong analytical and problem-solving skills with exceptional attention to detail - Based in Austin, TX or willing to relocate prior to start date Nice to Have: - CompTIA Security+ (strongly preferred), CySA+, or equivalent certification - Microsoft Certified: Security Operations Analyst Associate (SC-200) or Azure Security Engineer Associate (AZ-500) - CEH, GIAC GSEC, GCIA, or GCIH", "summaryDescription" : "Cybersecurity Analyst at Level. Skills: Security monitoring, Threat detection, Incident response, Endpoint security. Monitor security alerts. Analyze security events", "createdAt" : "2026-06-14T04:08:21.356", "lastUpdated" : "2026-06-15T05:23:45.000", "ingestTimestamp" : "2026-06-14T04:08:21.356", "mongoId" : "6a2ca13274d8ee00a09a4b5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 115000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "Security monitoring", "Log analysis", "Threat detection", "Endpoint security", "Network traffic analysis", "Cloud security monitoring", "Vulnerability scanning", "Remediation tracking", "Incident response", "Threat hunting", "Vulnerability management", "Compliance assessment", "Risk management", "Security audits", "Network security fundamentals", "Zero Trust concepts", "DevSecOps principles", "NIST CSF", "SOC 2", "CIS Controls", "CompTIA Security+", "CySA+", "Microsoft Certified: Security Operations Analyst Associate", "Azure Security Engineer Associate", "CEH", "GIAC GSEC", "GIAC GCIA", "GIAC GCIH", "SIEM platforms", "EDR platforms", "Antivirus platforms", "MDM platforms", "Firewall rules" ], "skillCount" : 33, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 891.6787, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Education", "llmIndustryConfidence" : 0.95 }, { "id" : "6a1663ec58b93c861ea61720", "title" : "Senior Security Operations Engineer", "company" : "Bitdeer Technologies Group", "industry" : "Cybersecurity", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Security Operations Engineer in Singapore, adjusted for seniority and the technology industry." }, "location" : "Singapore, SG", "locations" : [ "Singapore", "SG", "Penang", "MY", "Cyberjaya", "MY" ], "timestamp" : "2026-06-15T07:09:56.617", "fingerprint" : "87d7984444f9fccf8d9c6c2ff99f7fad474ba564ed7be5935eab2bb6caa92f83", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://bitdeer.breezy.hr/p/b66174ea0d40-senior-security-operations-engineer-aidc", "externalId" : "b66174ea0d40", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "state" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2959845,103.7766186" } ], "locationText" : "Singapore, Singapore, Singapore", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "summaryDescription" : "Senior Security Operations Engineer at Bitdeer Technologies Group", "createdAt" : "2026-06-14T05:44:08.731", "lastUpdated" : "2026-06-15T07:09:56.617", "ingestTimestamp" : "2026-06-14T05:44:08.731", "mongoId" : "6a1663ec58b93c861ea61720", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.6666667, "_score" : 891.16254, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c995a74d8ee00a0995afb", "title" : "Senior Cybersecurity Engineer", "industry" : "Government", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Fort Belvoir, United States, adjusted for seniority and industry." }, "location" : "Fort Belvoir, VA", "locations" : [ "Fort Belvoir, VA" ], "timestamp" : "2026-06-16T02:45:54.816", "fingerprint" : "0fcc6494f0fb5ef6fd070e7625f3e2bcf3e81d641573a89c614911e5c4df1b71", "source" : "jazzhr", "language" : "en", "externalId" : "W9SDPvZCnz", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Fort Belvoir", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7107970,-77.1436907" } ], "locationText" : "Fort Belvoir, Virginia, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "summaryDescription" : "Senior Cybersecurity Engineer", "createdAt" : "2026-06-14T19:49:49.915", "lastUpdated" : "2026-06-16T02:45:54.816", "ingestTimestamp" : "2026-06-14T19:49:49.915", "mongoId" : "6a2c995a74d8ee00a0995afb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.44444445, "_score" : 889.9924, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "69e1043f2beec4dd3def2489", "title" : "Security Compliance Specialist, Devices & Services Security Compliance", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 102000.0, "max" : 178400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:29:41.932", "fingerprint" : "7cc0bf45d0a25eeeab0562af9b3c7ffbfdf42825d62d49d4d7c4862889d6453d", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10387917/apply", "externalId" : "ef7d0e34-03d9-48c4-9693-d204970ee7c5", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Redshift, S3, EC2, Glue", "professionalSkills" : [ "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security" ], "hardSkillsList" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography" ], "softSkillsList" : [ "Problem solving" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Data encryption", "level" : "intermediate" }, { "name" : "Auditing", "level" : "intermediate" }, { "name" : "Logging", "level" : "intermediate" }, { "name" : "Network security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Problem solving" } ], "majorSkills" : "Security compliance, Risk management, Governance", "majorSkillsList" : [ "Security compliance", "Risk management", "Governance" ], "coreResponsibilities" : "Understand compliance requirements, Rationalize compliance requirements, Provide business specific interpretations, Support automation opportunities, Review security controls, Engage with Business, Engage with SMEs, Define information security policies, Ensure compliance to policies, Maintain control libraries, Maintain compliance requirements, Maintain guidance materials", "teamCollaboration" : "Business and SMEs; Security and engineering teams", "domainKnowledge" : "Service security; Device security; ISO 27001/2; HIPAA; NIST 800-53; NIST CSF; Access-control system; Access-control methodology; Network security; Application security; System-development security; Security architecture; Security models; Cryptography; Operations security; Medical devices; Medical software; HITRUST; Hardware development; Software development; Product launches; Device lifecycles; Service lifecycles", "domainList" : [ "service-security", "device-security", "iso-27001-2", "hipaa", "nist-800-53", "nist-csf", "access-control-system", "access-control-methodology", "network-security", "application-security", "system-development-security", "security-architecture", "security-models", "cryptography", "operations-security", "medical-devices", "medical-software", "hitrust", "hardware-development", "software-development", "product-launches", "device-lifecycles", "service-lifecycles" ], "domainSpecificKnowledge" : [ "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Network security", "Application security", "System-development security", "Security architecture", "Security models", "Cryptography", "Operations security", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "communicationSkills" : "Written communications; Oral communications", "documentationSkills" : "Policies; Supporting documentation", "innovationCreativity" : "Innovative process changes", "problemSolvingSkills" : "Problem solving abilities", "qualificationsBasic" : "Bachelor's degree or equivalent, Experience developing policies, 3+ years information security experience, 3+ years compliance experience, Experience with multiple security frameworks, Experience with multiple regulations", "qualificationsPreferred" : "Experience working with security teams, Experience working with engineering teams, Experience implementing repeatable processes, Experience driving automation, Experience driving standardization, Experience handling ambiguous challenges, Experience creating written communications, Experience delivering written communications, Experience creating oral communications, Experience delivering oral communications, Experience supporting security compliance medical devices, Experience supporting security compliance medical software, Experience with hardware development processes, Experience with software development processes, Experience with product launches, Experience with lifecycles of devices, Experience with lifecycles of services", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Amazon’s Devices & Services Security Compliance team is growing and looking for a highly motivated security compliance specialist to help us enhance and integrate our governance and compliance programs. You will help to determine the high security bar we hold for our products, analyze regulatory and certification requirements, and ensure we have sufficient enforcement mechanisms to keep our products and services safe for our customers. You should be a technically experienced and innovative security governance, risk, and compliance professional who has the ability to understand systems, security, and privacy processes, communicate to customers, and to be able to drive innovative process changes through multiple organizations and teams. Key job responsibilities * Understand and rationalize compliance requirements for service and device security. * Provide business specific interpretations and support automation opportunities * Review security controls that are technical in nature, such as access controls, data encryption in transit and at rest, and auditing and logging user activity * Engage with the Business and SMEs to define and ensure compliance to information security policies * Maintain control libraries and compliance requirements and guidance materials for various security standards and regulations About the team The Devices & Services Security Compliance Team work across products like Alexa, FireTV, Echo, Kindle, and others to ensure the safety and security of our customers and their data. We support Amazon Devices by defining the security bar for our products and services, ensuring regulatory compliance, and obtaining and maintaining industry certifications and standards. Basic Qualifications: - Bachelor's degree or equivalent in Information Security, Computer Science, Risk Management, Engineering, Math, Statistics, or a related discipline, or equivalent technology experience - Experience developing policies and supporting documentation - 3+ years of information security and compliance experience - Experience working with multiple security frameworks and regulations like ISO 27001/2, HIPAA, NIST 800-53, NIST CSF Preferred Qualifications: - Experience working directly with security and engineering teams - Knowledge of AWS tech stack (e.g., AWS Redshift, S3, EC2, Glue) - Experience implementing repeatable processes and driving automation or standardization - Experience handling ambiguous or undefined challenges through strong problem solving abilities - Experience creating and delivering written and oral communications for technical and non-technical audiences - Knowledge of one or more of the following domains: access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security - Experience supporting security compliance for medical devices or software (e.g. HIPAA, HITRUST) - Experience with hardware and software development processes, products launches and lifecycles of devices and/or services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually", "summaryDescription" : "Security Compliance Specialist, Devices & Services Security Compliance at Amazon.com Services LLC. Skills: Security compliance, Risk management, Governance. Understand compliance requirements. Rationalize compliance requirements", "postedDate" : "2026-06-13T07:59:22.647", "createdAt" : "2026-06-13T07:59:22.647", "lastUpdated" : "2026-06-15T03:29:41.932", "ingestTimestamp" : "2026-06-13T07:59:22.647", "mongoId" : "69e1043f2beec4dd3def2489", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10387917/apply", "salaryAnnualMin" : 102000, "salaryAnnualMax" : 178400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Access control", "Data encryption", "Auditing", "Logging", "Network security", "Cryptography", "Problem solving", "Security compliance", "Risk management", "Governance", "Compliance", "Security architecture", "System development", "Operations security", "Service security", "Device security", "ISO 27001/2", "HIPAA", "NIST 800-53", "NIST CSF", "Access-control system", "Access-control methodology", "Application security", "System-development security", "Security models", "Medical devices", "Medical software", "HITRUST", "Hardware development", "Software development", "Product launches", "Device lifecycles", "Service lifecycles" ], "skillCount" : 33, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 886.19086, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2ec02074d8ee00a0e9d50c", "title" : "Technology Operations & Cybersecurity Analyst", "company" : "Gap International", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Technology Operations & Cybersecurity Analyst in Springfield, United States, adjusted for mid-seniority and full-time employment." }, "location" : "Springfield, Pennsylvania, United States", "locations" : [ "Springfield", "Pennsylvania", "United States" ], "timestamp" : "2026-06-16T03:49:12.895", "fingerprint" : "92e0559efb8376bffed4005889dceb687f20ea2d415667580f3406edc230fcba", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/gapinternational/jobs/6029338004", "externalId" : "6029338004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Springfield", "state" : "Pennsylvania", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "39.9306677,-75.3201879" } ], "locationText" : "Springfield, Pennsylvania, United States", "experienceMinYears" : 3, "experienceMaxYears" : 6, "rawDescription" : "The Opportunity Gap International is seeking a Technology Operations & Cybersecurity Analyst to help power a high-performing, secure, and forward-looking technology environment. This is a hands-on, high-exposure role across IT operations, cybersecurity, and emerging technologies. You’ll keep the business running smoothly while helping us evolve how we leverage technology, especially through automation and AI. It’s ideal for someone who enjoys solving complex problems, takes ownership, and wants to build broad capability across systems, security, and innovation. RESPONSIBILITIES Technology Operations Support day-to-day performance of networks, systems, and endpoints Troubleshoot issues and escalate when needed Configure and maintain Windows and macOS devices Manage identity and access (Entra ID, Active Directory) Maintain documentation, inventory, and asset lifecycle End-User Experience Provide responsive, high-quality support to employees Support core tools (Microsoft 365, Zoom, VPN, endpoint/security platforms) Own onboarding/offboarding setup and readiness Help employees get the most out of workplace technologies, including AI tools Cybersecurity Monitor and respond to security alerts across systems and endpoints Investigate incidents (phishing, suspicious activity) Support patching, vulnerability management, and system hardening Maintain access controls and identity security practices Contribute to improving security operations and response readiness Automation, AI & Improvement Identify and implement opportunities to automate repetitive work Leverage AI to improve troubleshooting, response, and efficiency Stay current on emerging tech and bring forward practical ideas Contribute to improving overall performance, scalability, and user experience What We're Looking For 3–6 years of experience in IT operations, systems, or cybersecurity Strong troubleshooting and hands-on problem-solving ability Working knowledge of networking fundamentals (TCP/IP, DNS, VPNs, etc.) Experience with Windows and/or macOS environments Familiarity with Microsoft 365, Entra ID (Azure AD), and identity management Foundational understanding of cybersecurity principles and tools Strong communication skills and a service-oriented mindset Curiosity and interest in automation, AI, and improving how things work Why This Role Broad exposure across IT, security, and emerging tech Opportunity to build capability, not just maintain systems Real ownership in a high-performing environment Direct impact on how the company operates and evolves LOCATION Gap International associates are based out of our corporate office in the Philadelphia metropolitan area. In order to be considered for this role, applicants should be legally authorized to work in the US. Gap International is an equal opportunity employer and values diversity. All employment is decided on the basis of qualifications, merit and business need, and all qualified candidates will receive consideration.", "summaryDescription" : "Technology Operations & Cybersecurity Analyst at Gap International", "postedDate" : "2026-06-14T20:04:04.627", "createdAt" : "2026-06-14T20:04:04.627", "lastUpdated" : "2026-06-16T03:49:12.895", "ingestTimestamp" : "2026-06-14T20:04:04.627", "mongoId" : "6a2ec02074d8ee00a0e9d50c", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 85000, "salaryAnnualMax" : 125000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.6666667, "_score" : 884.4553, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustryConfidence" : 0.92 }, { "id" : "6a25e74674d8ee00a01e2292", "title" : "Cybersecurity Intern, Security Operations", "company" : "BD", "industry" : "Medical Technology", "salary" : { "min" : 26.0, "max" : 33.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States of America", "locations" : [ "United States of America" ], "timestamp" : "2026-06-11T20:08:20.366", "fingerprint" : "b657463d2f285f835f916fd1adc3dea626d0d2ec05dff43a0f7cb90bf3b7a1b5", "source" : "workday", "language" : "en", "applyUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "externalId" : "R-547194", "industryFunction" : { }, "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "city" : "Franklin Lakes", "state" : "New Jersey", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0167639,-74.2057012" } ], "locationText" : "Franklin Lakes, New Jersey, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Monitor security events, Analyze security events, Monitor security incidents, Analyze security incidents, Hunt for threats, Identify potential security threats, Support incident response efforts, Investigate incidents, Contain incidents, Remediate incidents, Research emerging threats, Research emerging vulnerabilities, Develop security operations policies, Implement security operations policies, Develop security operations procedures, Implement security operations procedures, Collaborate with team members, Improve security posture, Improve incident response capabilities", "teamCollaboration" : "Team-based incident response; Improve security posture", "domainKnowledge" : "Cybersecurity operations", "domainList" : [ "cybersecurity-operations" ], "domainSpecificKnowledge" : [ "Cybersecurity operations" ], "qualificationsBasic" : "High School Diploma or GED, Analyze security data, Conduct basic threat hunting, Research emerging vulnerabilities, Collaboration skills, Communication skills, Support incident response, Contribute to security policies", "qualificationsPreferred" : "Foundational understanding of cybersecurity operations, Security event monitoring, Threat detection, Incident response processes", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "## **We are the people who give possibilities purpose** BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. # Job Description This **role is considering all qualified candidates, including transitioning service members**. The**BD SkillBridge Fellowship Program** provides opportunities for transitioning service members to gain valuable civilian work experience through individual Fellowships during their last 6 months of service, for up to 180 days. **SkillBridge** participants are not eligible for compensation or benefits from BD, as they continue to receive military compensation and benefits as active-duty service members. After successful completion of the program, there may be an opportunity to be considered for a full-time position, depending on business needs. **SkillBridge Requirement:** * Must meet all Department of Defense SkillBridge Eligibility requirements and be approved to participate in the SkillBridge program with your military installation command. **Location requirements:** This is an in-office role based in Franklin Lakes, NJ. SkillBridge participants may work remotely during the fellowship, with the expectation that they can transition to an in-office schedule in Franklin Lakes, NJ if hired full-time. We are seeking a motivated and enthusiastic Cybersecurity Intern to join our Cyber Fusion Center (CFC) team. The intern will assist in threat hunting, incident response (IR), and other cybersecurity activities. This is an excellent opportunity for someone looking to gain hands-on experience in the field of cybersecurity. This role is considering all qualified candidates, including transitioning service members. **Responsibilities** : * Assist in monitoring and analyzing security events and incidents. * Participate in threat hunting activities to identify potential security threats. * Support incident response efforts, including investigation, containment, and remediation. * Conduct research on emerging cybersecurity threats and vulnerabilities. * Assist in the development and implementation of security operations policies and procedures. * Collaborate with other team members to improve security posture and incident response capabilities. **Required Qualification(s):** * High School Diploma or GED * Ability to analyze security data and conduct basic threat hunting and research on emerging vulnerabilities * Strong collaboration and communication skills to support team-based incident response and contribute to security policies and procedures **Preferred Skills/Experience:** * Foundational understanding of cybersecurity operations, including security event monitoring, threat detection, and incident response processes, preferred At BD, we prioritize on-site collaboration because we believe it fosters creativity, innovation, and effective problem-solving, which are essential in the fast-paced healthcare industry. For most roles, we require a minimum of 4 days of in-office presence per week to maintain our culture of excellence and ensure smooth operations, while also recognizing the importance of flexibility and work-life balance. Remote or field-based positions will have different workplace arrangements which will be indicated in the job posting. For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required. Consistent with BD’s Workplace Accommodations Policy, requests for accommodation will be considered pursuant to applicable law. #earlycareer # Why Join Us? To find purpose in the possibilities, we need people who can see the bigger picture, who understand the human story that underpins everything we do. We welcome people with the imagination and drive to help us reinvent the future of healthcare. At BD, you’ll discover a culture in which you can learn, grow and thrive. We believe that when people connect in person, we learn faster, collaborate more deeply, and build a stronger culture. Join us and enjoy a culture where face-to-face collaboration supports your learning, your progress, and your success. **To learn more about BD visit**[ _https://bd.com/careers_](https://bd.com/careers). Becton, Dickinson, and Company is an Equal Opportunity Employer. We evaluate applicants without regard to race, color, religion, age, sex, creed, national origin, ancestry, citizenship status, marital or domestic or civil union status, familial status, affectional or sexual orientation, gender identity or expression, genetics, disability, military eligibility or veteran status, and other legally protected characteristics. Required Skills Optional Skills . # Primary Work Location USA NJ - Franklin Lakes # Additional Locations USA NC - Durham - Roche Drive # Work Shift At BD, we reward, support and develop our associates through our comprehensive Total Rewards program. We are committed to attracting and retaining high quality talent by providing reward and recognition opportunities that promote a performance-based culture, as well as a competitive package of compensation and benefits programs. You can learn more on our career site under \"[_Our Commitment to You_](https://jobs.bd.com/en/your-career-at-BD).\" Our salary or hourly rate ranges reward associates fairly and competitively. We regularly review these ranges and factors, such as location, contribute to the range displayed. Our pay is based on the role and the necessary skills and education to perform it successfully. The salary or hourly rate offered is determined by the role's specific requirements, including any applicable step rate pay system at the work location. Salary or hourly pay ranges are influenced by labor laws and Collective Bargaining Agreement (CBA) requirements applicable to the work location which may also affect the workplace arrangement of the role. **Salary Range Information** $26.00 - $33.00 USD Hourly", "summaryDescription" : "Cybersecurity Intern, Security Operations at BD. Monitor security events. Analyze security events", "postedDate" : "2026-06-09T10:01:54.763", "createdAt" : "2026-06-11T10:01:54.608", "lastUpdated" : "2026-06-11T20:08:20.366", "ingestTimestamp" : "2026-06-11T10:01:54.608", "mongoId" : "6a25e74674d8ee00a01e2292", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://bdx.wd1.myworkdayjobs.com/EXTERNAL_CAREER_SITE_USA/job/USA-NJ---Franklin-Lakes/Cybersecurity-Intern--Security-Operations---SkillBridge-Eligible_R-547194-1", "salaryAnnualMin" : 54080, "salaryAnnualMax" : 68640, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Cybersecurity operations" ], "skillCount" : 1, "jobCategory" : "engineering", "seniorityLevel" : "junior", "dataQualityScore" : 1.0, "_score" : 872.4721, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Medical Technology" }, { "id" : "6a2a8a7474d8ee00a0681f5a", "title" : "Senior Information Security Compliance Specialist", "company" : "Boeing", "salary" : { "min" : 150450.0, "max" : 233450.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "USA - Arlington, VA", "locations" : [ "USA - Arlington, VA", "United States of America" ], "timestamp" : "2026-06-13T15:36:31.211", "fingerprint" : "aa4f9c9a30a4b784c68792ba54c62e4cbc1fc81e4ccc08326b131d0e1ada8a1f", "source" : "workday", "language" : "en", "applyUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "externalId" : "JR2026513178", "locationPoint" : "39.34857,-76.68324", "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" }, { "city" : "El Segundo", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.9170280,-118.4156337" }, { "city" : "Huntsville", "state" : "Alabama", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "34.7298470,-86.5859011" }, { "city" : "Mesa", "state" : "Arizona", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "33.4151005,-111.8314550" }, { "city" : "Oklahoma City", "state" : "Oklahoma", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "35.4729886,-97.5170536" }, { "city" : "Orlando", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "28.5421218,-81.3790450" }, { "city" : "San Antonio", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "29.4246002,-98.4951405" }, { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" }, { "city" : "Berkeley", "state" : "Missouri", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.7544952,-90.3312256" } ], "locationText" : "Arlington, Virginia, United States; El Segundo, California, United States; Huntsville, Alabama, United States; Mesa, Arizona, United States; Oklahoma City, Oklahoma, United States; Orlando, Florida, United States; San Antonio, Texas, United States; Seattle, Washington, United States; Berkeley, Missouri, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "professionalSkills" : [ "Cybersecurity", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training" ], "hardSkillsList" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management" ], "hardSkills" : [ { "name" : "Compliance assessment reviews", "level" : "intermediate" }, { "name" : "Self-inspections", "level" : "intermediate" }, { "name" : "Corrective action development", "level" : "intermediate" }, { "name" : "Administrative inquiries", "level" : "intermediate" }, { "name" : "Inventory management", "level" : "intermediate" }, { "name" : "Information protection", "level" : "intermediate" }, { "name" : "Security procedure administration", "level" : "intermediate" }, { "name" : "Sub-contractor management", "level" : "intermediate" } ], "majorSkills" : "Information Security Compliance, Cybersecurity, Government Security Programs", "majorSkillsList" : [ "Information Security Compliance", "Cybersecurity", "Government Security Programs" ], "coreResponsibilities" : "Execute internal security controls, Perform compliance assessment reviews, Perform self-inspections, Identify deficiencies, Develop corrective action, Implement corrective action, Conduct administrative inquiries, Conduct COMSEC duties, Protect government information, Protect intellectual information, Protect third party information, Protect company information, Develop security education, Implement security education, Administer security education, Develop physical controls, Implement physical controls, Administer physical controls, Contribute to enterprise IPT, Participate in review cycle, Participate in decision making, Provide innovation into Personnel Security, Provide creativity into Personnel Security, Obtain security clearances, Obtain security accesses, Provide innovation into security awareness training, Provide creativity into security awareness training, Educate personnel, Refresh personnel, Motivate personnel, Complete tasks toward long-range goals, Complete tasks toward objectives, Oversee Sub-Contractor Management, Provide contractual requirements, Provide contractual direction, Conduct site assistance visits, Conduct site reviews", "teamCollaboration" : "Enterprise Integrated Product Team (IPT)", "domainKnowledge" : "Classified environments; Information System Security; Communication Security (COMSEC); Personnel Security; Sensitive Compartmented Information (SCI); Special Access Program (SAP)", "domainList" : [ "classified-environments", "information-system-security", "communication-security-comsec", "personnel-security", "sensitive-compartmented-information-sci", "special-access-program-sap" ], "domainSpecificKnowledge" : [ "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)" ], "toolProficiency" : [ "MS Office", "Word", "Excel", "Teams", "Outlook" ], "communicationSkills" : "Oral communication; Written communication", "innovationCreativity" : "Innovation into Personnel Security; Creativity into Personnel Security; Innovation into security awareness training; Creativity into security awareness training", "specialRequirements" : "Maintain access to SCI/SAP, U.S. Person required", "qualificationsBasic" : "Tier 5 Investigation (T5) within last 5 years, 10+ years implementing information security policies, 10+ years SAP Security/GRC, 5+ years government security programs, Maintain SCI/SAP access, Active U.S. Top Secret/SCI Security Clearance, U.S. Citizenship required", "qualificationsPreferred" : "MS Office experience, Oral and written communications skills, Obtain successful US government polygraph", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Senior Information Security Compliance Specialist **Company:** The Boeing Company The Boeing Company is looking for a **Senior Information Security Compliance Specialist** to join the team in **Arlington, VA****; El Segundo, CA; Huntsville, AL; Mesa, AZ; Oklahoma City, OK; Orlando, FL; San Antonio, TX; Seattle, WA;** or **Berkeley, MO.** The selected candidates will apply advanced expertise in cybersecurity, Information Assurance (IA), and technical instruction to assess the security posture of classified environments, support enterprise compliance activities, and strengthen the cybersecurity readiness of Boeing personnel and program stakeholders. The assessor will be responsible for conducting internal evaluations, providing expert guidance on security requirements, and helping shape and sustain the implementation of Information System Security policies, standards, and directives to ensure the inspection readiness of information systems processing classified information. **Position Responsibilities:** * Executes Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements * Identifies deficiencies, develops and implements corrective action * Conducts administrative inquiries on personnel, processes and situations in accordance with established operating procedures to determine level and scope of non-compliance with government and company regulations/requirements * Conducts Communication Security (COMSEC) duties and responsibilities (to include inventory, distribution and destruction), in compliance with government regulations/requirements * Protects government, intellectual, third party and company information from unauthorized disclosures * Develops, implements and administers security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on large and/or highly complex programs * Contributes to enterprise Integrated Product Team (IPT) (e.g., participates in the review cycle and decision making process for enterprise export compliance, procedures (PROs), Business Process Instructions (BPI's) and Desktop Instructions (DI's) * Provides innovation and creativity into Personnel Security (e.g., reduce cycle time) to assist in obtaining individual security clearances/accesses for complex customer requirements * Provides innovation and creativity into security awareness training and education program (briefings, bulletins and visual reminders) to educate, refresh, and motivate personnel to protect people, property and information * Completes tasks toward long-range goals and objectives * Oversees Sub-Contractor Management (e.g., providing contractual requirements and direction, site assistance visits and reviews) to ensure compliance with government regulations/requirements **Basic Qualifications (Required Skills/Experience):** * Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years * 10+ years of experience implementing information security policies and procedures * 10+ years of experience with SAP Security and/or SAP GRC * 5+ years of experience in government security programs * Ability to obtain and maintain access to a Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) access **Preferred Qualifications (Desired Skills/Experience):** * Experience with MS Office (Word, Excel, Teams, and outlook) * Experience with oral and written communications skills * Ability to obtain a successful US government polygraph examination **Conflict Of Interest:** Successful Candidates for this job must satisfy the Company’s Conflict Of Interest (COI) assessment process. **Drug Free Workplace:** Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies _._ **Pay & Benefits:** At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities. The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements. Pay is based upon candidate experience and qualifications, as well as market and business considerations. Summary pay range: $150,450 - $233,450 **Language Requirements:** Not Applicable **Education:** Not Applicable **Relocation:** Relocation assistance is not a negotiable benefit for this position. **Export Control Requirement:** This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee. **Safety Sensitive:** This is not a Safety Sensitive Position. **Security Clearance:** This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active) **Visa Sponsorship:** Employer will not sponsor applicants for employment visa status. **Contingent Upon Award Program** This position is not contingent upon program award **Shift:** Shift 1 (United States of America) **Stay safe from recruitment fraud! The only way to apply for a position at Boeing is via our Careers website. Learn how to protect yourself from recruitment fraud** \\- [Recruitment Fraud Warning](http://www.boeing.com/careers/recruitment-fraud-warning.page) Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. [EEO is the law](http://www.boeing.com/resources/boeingdotcom/careers/footer/EEOIsTheLawPoster.pdf) [Boeing EEO Policy](https://tbcdn.talentbrew.com/company/185/v1_0/img/2018_Policy_Statement.pdf) [Request an Accommodation](http://www.boeing.com/careers/request-accommodation.page) [Applicant Privacy](http://www.boeing.com/careers/privacy-statement.page) **Boeing Participates in E – Verify** * [E-Verify (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterEnglish.pdf) * [E-Verify (Spanish) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/EverifyPosterSpanish.pdf) **Right to Work Statement** * [Right to Work (English) ](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWEnglishversion.pdf) * [Right to Work (Spanish)](http://www.boeing.com/resources/boeingdotcom/careers/footer/WebBPPOSTERRtoWSpanishversion.pdf)", "summaryDescription" : "Senior Information Security Compliance Specialist at Boeing. Skills: Information Security Compliance, Cybersecurity, Government Security Programs. Execute internal security controls. Perform compliance assessment reviews", "postedDate" : "2026-06-11T19:50:43.714", "createdAt" : "2026-06-11T19:50:42.038", "lastUpdated" : "2026-06-13T15:36:31.211", "ingestTimestamp" : "2026-06-11T19:50:42.038", "mongoId" : "6a2a8a7474d8ee00a0681f5a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://boeing.wd1.myworkdayjobs.com/EXTERNAL_CAREERS/job/USA---Arlington-VA/Senior-Information-Security-Compliance-Specialist_JR2026513178-1", "salaryAnnualMin" : 150450, "salaryAnnualMax" : 233450, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Compliance assessment reviews", "Self-inspections", "Corrective action development", "Administrative inquiries", "Inventory management", "Information protection", "Security procedure administration", "Sub-contractor management", "Information Security Compliance", "Cybersecurity", "Government Security Programs", "Information Assurance", "Technical instruction", "Security posture assessment", "Enterprise compliance", "Security readiness", "Internal evaluations", "Security requirements guidance", "COMSEC duties", "Personnel security", "Security education", "Physical controls", "Export compliance", "Security awareness training", "Classified environments", "Information System Security", "Communication Security (COMSEC)", "Personnel Security", "Sensitive Compartmented Information (SCI)", "Special Access Program (SAP)", "MS Office", "Word", "Excel", "Teams", "Outlook" ], "skillCount" : 35, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 869.3899, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a7ffb74d8ee00a066c5ac", "title" : "Cybersecurity Manager (Incident Response & Security Operations)", "company" : "Match Group", "industry" : "Security", "salary" : { "min" : 170000.0, "max" : 190000.0, "currency" : "CAD", "frequency" : "yearly" }, "location" : "Vancouver, British Columbia", "locations" : [ "Vancouver, British Columbia" ], "certifications" : [ "GCIH", "GCFA", "GCIA", "GSOM", "CISSP" ], "timestamp" : "2026-06-15T00:05:27.519", "fingerprint" : "6dcc57fb7b8160bc9400f872d1609fde7a4e6117091effb646a4513f2120db6b", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/matchgroup/70690017-f01c-446e-93e5-eca0e8d8aba3/apply", "externalId" : "70690017-f01c-446e-93e5-eca0e8d8aba3", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, GCP, Kubernetes, CrowdStrike, Okta, Python", "professionalSkills" : [ "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing" ], "hardSkillsList" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Detection engineering framework", "level" : "intermediate" }, { "name" : "Detections-as-code", "level" : "intermediate" }, { "name" : "GitOps", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "SIEM platform", "level" : "intermediate" }, { "name" : "Log source integration", "level" : "intermediate" }, { "name" : "SOC metrics", "level" : "intermediate" }, { "name" : "SLAs", "level" : "intermediate" }, { "name" : "Tabletop exercises", "level" : "intermediate" }, { "name" : "Endpoint forensics", "level" : "intermediate" }, { "name" : "Network forensics", "level" : "intermediate" }, { "name" : "Threat hunting techniques", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Datacenter security", "level" : "intermediate" }, { "name" : "Container orchestration security", "level" : "intermediate" }, { "name" : "Access security monitoring", "level" : "intermediate" }, { "name" : "Threat intelligence workflows", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Incident Response, Security Operations, Detection Engineering, AI-augmented SOC", "majorSkillsList" : [ "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC" ], "coreResponsibilities" : "Lead integrated team, Drive strategic vision, Maximize threat response capabilities, Integrate core functions, Leverage AI innovation, Own detection lifecycle, Build AI-augmented SOC model, Develop high-performing team, Operate across time zones, Provide 24/7 coverage, Develop detection engineering framework, Contribute to detections-as-code, Drive AI Agentic SOC adoption, Evaluate AI tooling, Select AI tooling, Implement AI tooling, Manage full incident lifecycle, Partner with Legal, Partner with Communications, Partner with Privacy, Partner with Engineering, Build detection content, Integrate log sources, Establish SOC metrics, Track SOC metrics, Establish SOC SLAs, Track SOC SLAs, Create dashboards, Visualize performance, Visualize alert fidelity, Visualize response effectiveness, Coordinate IR tabletop exercises, Execute IR tabletop exercises, Validate readiness, Improve playbooks, Partner with Red Team, Validate detection capabilities, Collaborate with Platform Security, Collaborate with InfraSec, Collaborate with AppSec, Identify detection gaps, Close detection gaps, Integrate threat intelligence, Anticipate emerging threats, Proactively defend threats, Use automation, Improve detection times, Improve response times, Mitigate incident impact", "teamCollaboration" : "Cross-functional stakeholders; External incident response teams; Law enforcement; Platform Security teams; InfraSec teams; AppSec teams; Legal teams; Communications teams; Privacy teams; Engineering teams; Red Team", "projectManagementSkills" : [ "Detections-as-code", "GitOps", "CI/CD pipelines" ], "domainKnowledge" : "Attacker TTPs; MITRE ATT&CK; Cloud-native environments; Hybrid environments; Datacenter infrastructure; Endpoint security; Network security; Identity and access security; SaaS security; Application security; Threat intelligence", "domainList" : [ "attacker-ttps", "mitre-att-ck", "cloud-native-environments", "hybrid-environments", "datacenter-infrastructure", "endpoint-security", "network-security", "identity-and-access-security", "saas-security", "application-security", "threat-intelligence" ], "domainSpecificKnowledge" : [ "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence" ], "toolProficiency" : [ "SIEM", "SOAR", "Git", "GitOps", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "communicationSkills" : "Verbal communication; Written communication; Post-incident reports", "continuousLearning" : "Annual training allowance", "innovationCreativity" : "AI-driven innovation; AI-augmented SOC model; AI Agentic SOC adoption", "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Alert tuning; Investigation; Incident resolution", "specialRequirements" : "24/7 coverage", "outcomesObjectives" : "Maximize rapid threat response; Maximize accurate threat response; Reduce noise; Accelerate response; Scale across portfolio; Reduce false positives; Accelerate initial response speed; Validate detection capabilities; Improve playbooks; Close detection gaps; Improve detection times; Improve response times; Mitigate incident impact", "qualificationsBasic" : "5+ years security operations, 5+ years incident response, 5+ years detection engineering, 5+ years threat hunting, 2+ years team leadership, 2+ years management role, Build and operate modern SOC, Experience with SIEM platforms, Experience with SOAR tools, Understanding AI/ML applications, Manage full incident lifecycle, Experience with cloud security monitoring, Experience with datacenter security, Experience with container orchestration security, Familiarity with identity access security monitoring, Experience coordinating external IR teams, Experience coordinating with law enforcement, Experience coordinating with cross-functional stakeholders, Polished verbal communication skills, Polished written communication skills", "qualificationsPreferred" : "Python-based detections experience, Log analysis experience, Background consumer internet industry, Background dating industry, Background high-scale B2C platforms, Cloudflare experience, CrowdStrike experience, SaaS security monitoring experience, Obsidian experience, Experience building Blue Team program, Experience leading Blue Team program, Experience building cross-functional security team, Experience leading cross-functional security team", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. ## What You'll Do Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats Use automation to improve detection and response times and mitigate incident impact ## What You'll Bring 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) Familiarity with identity and access security monitoring (Okta, SSO, MFA events) Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent ## Nice to Have Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms Background in the consumer internet/dating industry or other high-scale B2C platforms Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) Experience building or leading a Blue Team volunteer program or cross-functional security response team ## Additional Information Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG", "summaryDescription" : "Cybersecurity Manager (Incident Response & Security Operations) at Match Group. Skills: Incident Response, Security Operations, Detection Engineering, AI-augmented SOC. Lead integrated team. Drive strategic vision", "postedDate" : "2026-06-10T16:28:32.723", "createdAt" : "2026-06-10T16:28:32.723", "lastUpdated" : "2026-06-15T00:05:27.519", "ingestTimestamp" : "2026-06-12T07:31:26.388", "mongoId" : "6a2a7ffb74d8ee00a066c5ac", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Detection engineering framework", "Detections-as-code", "GitOps", "CI/CD pipelines", "SIEM platform", "Log source integration", "SOC metrics", "SLAs", "Tabletop exercises", "Endpoint forensics", "Network forensics", "Threat hunting techniques", "Cloud security monitoring", "Datacenter security", "Container orchestration security", "Access security monitoring", "Threat intelligence workflows", "Leadership", "Incident Response", "Security Operations", "Detection Engineering", "AI-augmented SOC", "Detection engineering", "Security operations", "Incident response", "Threat hunting", "Team leadership", "Management", "AI-driven triage", "Automated triage", "Intelligent alert enrichment", "Threat intelligence integration", "Adversary simulation", "Assumed-compromise testing", "Attacker TTPs", "MITRE ATT&CK", "Cloud-native environments", "Hybrid environments", "Datacenter infrastructure", "Endpoint security", "Network security", "Identity and access security", "SaaS security", "Application security", "Threat intelligence", "GCIH", "GCFA", "GCIA", "GSOM", "CISSP", "SIEM", "SOAR", "Git", "CI/CD", "CrowdStrike", "Okta", "Cloudflare", "Obsidian" ], "skillCount" : 58, "jobCategory" : "other", "dataQualityScore" : 1.0, "_score" : 854.17615, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a25145b74d8ee00a00bb585", "title" : "Security & LP Specialist, Worldwide Operations", "company" : "ASSPL", "industry" : "Investigation Loss Prevention, Fulfillment Center, Logistics", "salary" : { "min" : 850000.0, "max" : 1400000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security & LP Specialist in Logistics in Thane, India, adjusted for company size and industry." }, "location" : "Thane, Maharashtra, IND", "locations" : [ "Thane, Maharashtra, IND" ], "timestamp" : "2026-06-15T03:07:55.677", "fingerprint" : "a50b70f6d78455374f2fb47435395177510c49a955faa5f3bcb1763fab56a865", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10440724/apply", "externalId" : "33dc6d6b-2d04-4842-a67f-291ffba6a2a8", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Thane", "state" : "Maharashtra", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "19.3653598,73.3685437" } ], "locationText" : "Thane, Maharashtra, India", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Loss prevention", "Security operations", "Risk management", "Crisis planning", "Process improvement", "Supply chain security" ], "hardSkillsList" : [ "Physical security checks", "Data analysis", "Investigation techniques", "Security audits", "Policy violation investigation", "Loss event investigation", "Interviewing", "Security incident response", "Vulnerability assessment", "System health monitoring" ], "hardSkills" : [ { "name" : "Physical security checks", "level" : "intermediate" }, { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Investigation techniques", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Policy violation investigation", "level" : "intermediate" }, { "name" : "Loss event investigation", "level" : "intermediate" }, { "name" : "Interviewing", "level" : "intermediate" }, { "name" : "Security incident response", "level" : "intermediate" }, { "name" : "Vulnerability assessment", "level" : "intermediate" }, { "name" : "System health monitoring", "level" : "intermediate" } ], "majorSkills" : "Security operations, Loss prevention, Risk management, Physical security", "majorSkillsList" : [ "Security operations", "Loss prevention", "Risk management", "Physical security" ], "coreResponsibilities" : "Execute day-to-day security operations, Conduct regular physical security checks, Support business operations resilience, Contribute to emergency planning, Contribute to crisis planning, Identify vulnerabilities, Define mitigating actions, Ensure compliance with standards, Serve as point of contact, Coordinate risk management measures, Manage risk with local management, Manage risk with external parties, Conduct physical security rounds, Monitor CCTV systems, Respond to security concerns, Perform physical security audits, Investigate policy violations, Investigate security incidents, Investigate loss events, Collect information by monitoring systems, Analyze data reports, Conduct interviews, Execute procedures to address incidents, Implement solutions for vulnerabilities, Identify vulnerabilities in processes, Develop mitigating measures, Maintain physical integrity of sites, Audit system health status, Monitor system health status, Maintain system functionality, Interact with external security providers, Ensure delivery of security services, Act as point of contact for departments, Deliver loss prevention education, Deliver loss prevention awareness programs, Liaise with stakeholders on policy, Liaise with stakeholders on procedure", "teamCollaboration" : "Local management; External parties; Law enforcement agencies; Industry associations; Business customers; Multiple business units; Subject matter experts; External suppliers; Internal departments; External departments; Security service providers; Other teams; Various stakeholders; Management levels", "domainKnowledge" : "Supply chain; Loss prevention; Physical security; Security standards", "domainList" : [ "supply-chain", "loss-prevention", "physical-security", "security-standards" ], "domainSpecificKnowledge" : [ "Supply chain", "Loss prevention", "Physical security", "Security standards" ], "toolProficiency" : [ "Microsoft Excel", "CCTV systems" ], "problemSolvingSkills" : "Root cause analysis; Troubleshooting; Data analysis", "qualificationsBasic" : "Experience in security and loss prevention, Experience with MS Office Professional Suite, Microsoft Excel to manipulate and analyze data, Speak, write, and read fluently in English", "qualificationsPreferred" : "Relevant degree or industry certification, Experience with physical security systems, Experience with investigation techniques, Management of contract security officers, Experience with retail, warehouse, distribution centre services, or supply chain, Experience in working with data, Driver's license", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Our operations network, known for our speed, accuracy, and exceptional service, delivers millions of packages and smiles to Amazon customers every day. To keep our operations network secure and assure operational continuity, we are looking for a hands-on and detail-oriented professional who wants to join our team as Security and Loss Prevention (SLP) Specialist. In this key role, you will be responsible for the day-to-day execution of security operations, delivering concrete on-the-ground contributions through direct operational support to our sites. You will deliver security as a service to our operational sites across the end-to-end supply chain to protect our people and prevent loss. Key job responsibilities • Execute day-to-day security operations and conduct regular physical security checks at assigned sites • Support resilience of our business operations by contributing to emergency and crisis planning for sites within your area of responsibility • Contribute to the identification of vulnerabilities (e.g., loss, associate experience, process improvement) and define appropriate mitigating actions while ensuring compliance with legal and ethical standards • Serve as point of contact for and coordinate measures to manage risk with local management and external parties (e.g., law enforcement agencies and industry associations) on all security-related matters • Ensure compliance of your assigned sites with Amazon global security standards A day in the life As an SLP Specialist, you will join a team of Security and Loss Prevention professionals providing security as a service to business customers across multiple business units within a dedicated geographical area. Your daily focus will be on hands-on execution of security operations, including conducting physical security rounds, monitoring CCTV systems, and responding to immediate security concerns. You perform regular physical security audits and investigate policy violations, security-related incidents, and loss events. During your investigations, you collect information by monitoring systems and tools, analysing data reports, and conducting interviews. You execute established procedures to address security incidents and implement approved solutions for identified vulnerabilities. Your findings help to identify vulnerabilities in our processes, for which you contribute to the development of mitigating measures. You play a key role in maintaining the physical integrity of our sites by auditing and monitoring the health status of our systems and, jointly with subject matter experts and external suppliers, maintain their functionality. You interact on a daily basis with our external security service providers to ensure delivery of high-quality security services and a smooth customer experience. You also act as point of contact for multiple internal and external departments (e.g., legal, HR, security service providers, local law enforcement) and subject matter expert in Security and Loss Prevention-related matters. Finally, you deliver loss prevention-related education and awareness programs to other teams and liaise with various stakeholders on policy and procedure across all management levels. About the team Sitting within the Worldwide Operations Security organisation, Security and Loss Prevention supports the accomplishment of Amazon´s business targets and the strengthening of our brand by effectively protecting against relevant threats and by managing security and loss prevention risks that could: • Put our associates and customers under jeopardy • Disrupt the continuity of our business operations • Inflict damage to our assets • Have adverse impact on our brand reputation Working in partnership with our stakeholders, we secure the Amazon supply chain end-to-end and promote security during business conversations. We do this by preventing security and loss prevention-related risks and vulnerabilities as early as possible, intervening in unfolding incidents to minimize any negative impact as well as thoroughly investigating security-related incidents to identify and remove root causes, preventing reoccurrence. Basic Qualifications: - Experience in security and loss prevention - Experience with MS Office Professional Suite, including Microsoft Excel to manipulate and analyze data - Speak, write, and read fluently in English Preferred Qualifications: - A relevant degree, degree equivalent, or industry certification - Relevant experience with physical security systems, investigation techniques, and/or management of contract security officers - Relevant experience with retail, warehouse, distribution centre services, delivery service, or supply chain - Relevant experience in working with data - Driver’s license Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security & LP Specialist, Worldwide Operations at ASSPL. Skills: Security operations, Loss prevention, Risk management, Physical security. Execute day-to-day security operations. Conduct regular physical security checks", "postedDate" : "2026-06-13T04:35:37.434", "createdAt" : "2026-06-13T04:35:37.434", "lastUpdated" : "2026-06-15T03:07:55.677", "ingestTimestamp" : "2026-06-13T04:35:37.434", "mongoId" : "6a25145b74d8ee00a00bb585", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10440724/apply", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Physical security checks", "Data analysis", "Investigation techniques", "Security audits", "Policy violation investigation", "Loss event investigation", "Interviewing", "Security incident response", "Vulnerability assessment", "System health monitoring", "Security operations", "Loss prevention", "Risk management", "Physical security", "Crisis planning", "Process improvement", "Supply chain security", "Supply chain", "Security standards", "Microsoft Excel", "CCTV systems" ], "skillCount" : 21, "jobCategory" : "marketing", "dataQualityScore" : 0.8888889, "_score" : 852.861, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "69f8950e4c40e2acd1fa4a70", "title" : "Cybersecurity Analyst", "company" : "Texas Workforce Commission", "industry" : "Government", "salary" : { "max" : 6982.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "826970", "locations" : [ "826970", "
Austin:1117 Trinity St (320TX-4002)
1117 Trinity St
Austin, 78701-1919

" ], "timestamp" : "2026-06-15T09:42:30.940", "fingerprint" : "79d57d066c1e9f1688bb80c121b3a094589b0455ca67250a444d6c53761b762b", "source" : "taleo", "language" : "en", "applyUrl" : "https://aa270.taleo.net/careersection/ex/jobdetail.ftl?job=34795", "externalId" : "34795", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Cybersecurity analysis, Information security analysis, Digital forensics, Vulnerability scanning, Forensic analysis, Data recovery, System monitoring", "professionalSkills" : [ "Risk assessment", "Independent judgment" ], "hardSkillsList" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis" ], "softSkillsList" : [ "Critical thinking" ], "hardSkills" : [ { "name" : "Account permissions review", "level" : "intermediate" }, { "name" : "Security violation review", "level" : "intermediate" }, { "name" : "Incident detection", "level" : "intermediate" }, { "name" : "Incident analysis", "level" : "intermediate" }, { "name" : "Incident prevention", "level" : "intermediate" }, { "name" : "Network vulnerability scans", "level" : "intermediate" }, { "name" : "Application vulnerability scans", "level" : "intermediate" }, { "name" : "System monitoring", "level" : "intermediate" }, { "name" : "Cybersecurity alert analysis", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Critical thinking" } ], "majorSkills" : "Cybersecurity analysis, Information security, Digital forensics", "majorSkillsList" : [ "Cybersecurity analysis", "Information security", "Digital forensics" ], "coreResponsibilities" : "Perform technical risk assessments, Review account permissions, Review security violations, Conduct cybersecurity incident detection, Conduct cybersecurity incident analysis, Conduct cybersecurity incident prevention, Perform vulnerability scans, Identify network weaknesses, Identify application weaknesses, Execute forensic analysis, Recover data using tools, Monitor systems, Monitor procedures, Protect data systems, Analyze cybersecurity alerts", "domainKnowledge" : "Information security; Cybersecurity", "domainList" : [ "information-security", "cybersecurity" ], "domainSpecificKnowledge" : [ "Information security", "Cybersecurity" ], "toolProficiency" : [ "Assessment tools" ], "continuousLearning" : "Training opportunities; Development opportunities", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Must be Texas resident, Willing to relocate to Texas", "qualificationsBasic" : "Four years cybersecurity analysis experience, Four years information security analysis experience, Four years digital forensics experience, Relevant academic credits may apply, Acceptance into TWC Internship, Acceptance into TWC Apprenticeship", "qualificationsPreferred" : "High interest in cybersecurity", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "WHO WE ARE: Texas Workforce Commission connects people with careers across the state. While we are based in Austin on the north lawn of the Texas State Capitol, we have offices statewide. We're a Family Friendly Certified Workplace with great work-life balance, competitive salaries, extensive opportunities for training and development, and fantastic benefits. This position is located at 1117 Trinity Street, Austin, Texas in the Chief Info Security Officer department. TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. You must be a Texas resident to work for the Texas Workforce Commission or willing to relocate to Texas. WHO YOU ARE: A person with technical experience and experience or a high interest in cybersecurity WHAT YOU WILL DO: The Cybersecurity Analyst I performs moderately complex (journey-level) information security and cybersecurity analysis work. Works under general supervision, with moderate latitude for the use of initiative and independent judgment. YOU WILL BE TRUSTED TO: -Perform technical risk assessments and reviews of account permissions and security violations. -Conduct cybersecurity incident detection, analysis, and prevention. -Perform vulnerability scans of networks and applications to identify weaknesses. -Execute forensic analysis and recovery of data using assessment tools. -Monitor systems and procedures to protect data systems from unauthorized access. -Analyze cybersecurity alerts from tools, network devices, and information systems. - Perform other duties as assigned. YOU QUALIFY WITH: -Four years of full-time experience in cybersecurity analysis, information security analysis, or digital forensics. -Relevant academic credits may be applied toward experience qualifications for this position. -Acceptance into a TWC Internship or TWC Apprenticeship will satisfy the minimum qualifications. YOU ARE A GREAT FIT WITH: You are ready to learn and use critical thinking skills to succeed. YOU GAIN: - A Family Friendly Certified Workplace. - Competitive salary: $6,982.50/month - Defined Retirement Benefit Plan - Optional 401(k) and 457 accounts - Medical Insurance - Paid time off, including time for vacation, sick and family care leave - Additional benefits for active employees can be found at https://www.ers.texas.gov/Active-Employees/Health-Benefits. VETERANS: Use your military skills to qualify for this position or other jobs! Go to www.texasskillstowork.com to translate your military work experience and training courses into civilian job terms, qualifications, and skill sets. Also, you can compare this position to military occupations (MOS) at the Texas State Auditor's Office by pasting this link into your browser: https://hr.sao.texas.gov/Compensation/MilitaryCrosswalk/MOSC_InformationTechnology.pdf HOW TO APPLY: To be considered, please complete a State of Texas Application for Employment and apply online at www.workintexas.com or on Taleo ( Job Search ). TWC is not considering applications from individuals who require sponsorship for an employment visa, including those currently on student or postgraduate visas. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. A position utilizing this classification will be designated as security sensitive according to the Texas Labor Code, Section 301.042. United States-Texas-Austin", "summaryDescription" : "Cybersecurity Analyst at Texas Workforce Commission. Skills: Cybersecurity analysis, Information security, Digital forensics. Perform technical risk assessments. Review account permissions", "createdAt" : "2026-06-14T07:31:02.477", "lastUpdated" : "2026-06-15T09:42:30.940", "ingestTimestamp" : "2026-06-14T07:31:02.477", "mongoId" : "69f8950e4c40e2acd1fa4a70", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMax" : 83784, "hasSalary" : false, "allSkills" : [ "Account permissions review", "Security violation review", "Incident detection", "Incident analysis", "Incident prevention", "Network vulnerability scans", "Application vulnerability scans", "System monitoring", "Cybersecurity alert analysis", "Critical thinking", "Cybersecurity analysis", "Information security", "Digital forensics", "Risk assessment", "Independent judgment", "Cybersecurity", "Assessment tools" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 848.2002, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a304f40f292fd229cee6583", "title" : "IT Security Ops Specialist", "company" : "Mattel", "industry" : "Retail", "salary" : { "min" : 2250000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Ops Specialist in Hyderabad, India, adjusted for Lead seniority and a large company size in the Technology industry." }, "location" : "Hyderabad, IN", "locations" : [ "Hyderabad", "IN" ], "timestamp" : "2026-06-16T07:04:14.872", "fingerprint" : "f9236ae2609f20d25c7cf315ecd18ff15f89bf2ef1b9b6deb6d746f56b44d4f8", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/MattelInc/744000132139477-it-security-ops-specialist", "externalId" : "744000132139477", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "GCP, AWS, Azure, OCI, CSPM, IAM, Network controls, Cloud security, DevSecOps, Automation, Scripting, SIEM, SOAR", "professionalSkills" : [ "Risk assessment", "Threat intelligence", "Business impact analysis", "Remediation guidance", "Risk reduction", "Secure architecture", "Design reviews", "Security baselines", "Operational documentation", "Technical leadership" ], "hardSkillsList" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring implementation", "Zero Trust principles", "Security-by-design practices", "Automation development", "Scripting development", "Tool integration" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Configuration reviews", "level" : "intermediate" }, { "name" : "Misconfiguration detection", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Validation", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Risk-based prioritization", "level" : "intermediate" }, { "name" : "IAM implementation", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Encryption implementation", "level" : "intermediate" }, { "name" : "Logging implementation", "level" : "intermediate" }, { "name" : "Monitoring implementation", "level" : "intermediate" }, { "name" : "Zero Trust principles", "level" : "intermediate" }, { "name" : "Security-by-design practices", "level" : "intermediate" }, { "name" : "Automation development", "level" : "intermediate" }, { "name" : "Scripting development", "level" : "intermediate" }, { "name" : "Tool integration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud security operations, GCP security, DevSecOps", "majorSkillsList" : [ "Cloud security operations", "GCP security", "DevSecOps" ], "coreResponsibilities" : "Provide technical leadership, Oversee cloud security operations, Own cloud security operations, Manage configuration reviews, Manage misconfiguration detection, Manage remediation tracking, Manage validation, Serve as execution partner, Serve as escalation point, Design cloud security review strategies, Optimize cloud security review strategies, Maintain cloud security review strategies, Design monitoring strategies, Optimize monitoring strategies, Maintain monitoring strategies, Translate security findings, Drive risk-based prioritization, Partner with application owners, Partner with DevOps teams, Partner with platform teams, Provide remediation guidance, Influence risk reduction decisions, Ensure secure IAM implementation, Ensure secure network segmentation, Ensure secure encryption, Ensure secure logging, Ensure secure monitoring, Lead secure architecture reviews, Support secure architecture reviews, Lead design reviews, Support design reviews, Champion Zero Trust principles, Champion security-by-design practices, Develop automation, Enhance automation, Maintain automation, Detect misconfigurations, Enforce cloud security baselines, Integrate CSPM tooling, Integrate cloud security tooling, Improve visibility, Improve response, Monitor cloud security threats, Monitor vulnerabilities, Monitor regulatory changes, Incorporate lessons learned, Develop runbooks, Maintain runbooks, Improve runbooks, Develop playbooks, Maintain playbooks, Improve playbooks, Develop operational documentation, Maintain operational documentation, Improve operational documentation, Mentor cloud security engineers, Mentor cloud security analysts, Strengthen technical depth, Strengthen operational maturity, Provide escalation support, Handle tooling issues, Handle remediation challenges", "teamCollaboration" : "Partnering with Security Operations; Partnering with IT; Partnering with Engineering; Partnering with Application teams; Partnering with application owners; Partnering with DevOps teams; Partnering with platform teams", "projectManagementSkills" : [ "Risk management" ], "domainKnowledge" : "Cloud security; Zero Trust principles; Regulatory requirements; Cloud platforms; Cloud workloads; Emerging threats; Emerging technologies; Compliance requirements", "domainList" : [ "cloud-security", "zero-trust-principles", "regulatory-requirements", "cloud-platforms", "cloud-workloads", "emerging-threats", "emerging-technologies", "compliance-requirements" ], "domainSpecificKnowledge" : [ "Cloud security", "Zero Trust principles", "Regulatory requirements", "Cloud platforms", "Cloud workloads", "Emerging threats", "Emerging technologies", "Compliance requirements" ], "toolProficiency" : [ "AWS Security Hub", "OCI Cloud Guard", "SIEM platforms", "SOAR platforms" ], "communicationSkills" : "Executive reporting", "documentationSkills" : "Operational documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Availability off-business hours, Work hours may vary", "outcomesObjectives" : "Ensure consistency; Ensure scalability; Ensure resilience; Evolve cloud security capability; Timely risk reduction", "qualificationsBasic" : "9+ years cloud security engineering, 9+ years DevSecOps, 9+ years cloud security operations, Proven technical lead experience, Proven senior engineer experience, Hands-on GCP security, Working knowledge AWS, Working knowledge Azure, Working knowledge OCI, Experience GCP Security Command Center, Experience AWS Security Hub, Experience Azure Defender for Cloud, Experience OCI Cloud Guard", "qualificationsPreferred" : "Master's degree", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers. Cloud Security Tech lead is responsible for leading and delivering day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role combines hands-on technical execution with technical leadership, ensuring cloud security risks are accurately identified, prioritized, and remediated in alignment with business risk, Zero Trust principles, and regulatory requirements. Cloud Security Tech lead provides direct technical leadership and guidance to cloud security engineers and analysts while partnering closely with Security Operations, IT, Engineering, and Application teams to drive remediation accountability and continuous improvement. Operating within a global delivery model, this role serves as a key execution and escalation point to ensure consistency, scalability, and resilience of the organization’s cloud security program. In addition to operational ownership, cloud security strategy, tooling optimization, automation, and analytics, ensuring the cloud security capability evolves alongside emerging threats, technologies, and compliance requirements. Roles and Responsibilities Skill:GCP/AWS/Azure/OCI security operations, CSPM (SCC, Security Hub, Defender, Cloud Guard), IAM & network controls, misconfiguration remediation * Provide direct technical leadership and day-to-day oversight of cloud security operations across GCP (primary), AWS, Azure, and OCI. * Own and manage cloud security operations including configuration reviews, misconfiguration detection, prioritization, remediation tracking, and validation. * Serve as a key execution partner and escalation point for cloud security initiatives, ensuring alignment with enterprise security strategy and priorities. * Design, optimize, and maintain cloud security review and monitoring strategies using native cloud security tools and CSPM platforms. * Translate large-scale cloud security findings into actionable risk intelligence through dashboards, metrics, and executive reporting. * Drive risk-based prioritization of cloud security issues using threat intelligence, asset criticality, exposure, and business impact. * Partner with application owners, DevOps, and platform teams to provide clear remediation guidance and influence timely risk reduction decisions. * Ensure secure implementation and continuous improvement of IAM, network segmentation, encryption, logging, and monitoring controls across cloud platforms. * Lead and support secure architecture and design reviews for new and existing cloud workloads. * Champion Zero Trust principles and security-by-design practices across cloud environments. * Develop, enhance, and maintain automation and scripting to detect misconfigurations and enforce cloud security baselines. * Integrate CSPM and cloud security tooling with SIEM and SOAR platforms to improve visibility and response. * Monitor emerging cloud security threats, vulnerabilities, and regulatory changes, incorporating lessons learned into improved controls and processes. * Develop, maintain, and continuously improve cloud security runbooks, playbooks, and operational documentation. * Mentor and develop cloud security engineers and analysts, strengthening technical depth and operational maturity. * Provide advanced escalation support for complex cloud security findings, tooling issues, and remediation challenges. * Work hours may vary, and the position may require availability during off-business hours due to incidents, system changes, or project needs. * Additional duties may be assigned as necessary to meet the ongoing needs of the organization. ## Qualifications Skills and Qualifications Required: * 9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations. * Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment. * Hands-on expertise securing Google Cloud Platform (GCP), with working knowledge of AWS, Azure, and OCI. * Strong experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard. * Deep understanding of IAM, network security, encryption, key management, logging, and monitoring across cloud platforms. * Experience implementing and operationalizing CSPM, CWPP, and cloud IAM solutions. * Hands-on experience with infrastructure-as-code security using Terraform, CloudFormation, or equivalent tools. * Strong scripting and automation skills using Python, Bash, PowerShell, or cloud-native tooling. * Experience supporting compliance initiatives aligned with CIS benchmarks, NIST CSF, and ISO 27001. * Strong analytical, leadership, and stakeholder communication skills. * Ability to support after-hours coordination or incident response activities as needed. Preferred: * Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent practical experience. * Cloud security certifications such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or Azure Security Engineer Associate. * Security certifications such as CISSP, CCSP, or CISM. * Experience integrating cloud security tooling with enterprise SIEM and SOAR platforms. * Familiarity with Zero Trust architecture and cloud-native security design patterns. Shift Timing: * Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events. ## Additional Information Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. How We Work: We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors: * We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower. * We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking. * We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results. Our Approach to Flexible Work: We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter. Who We Are: Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.", "summaryDescription" : "IT Security Ops Specialist at Mattel. Skills: Cloud security operations, GCP security, DevSecOps. Provide technical leadership. Oversee cloud security operations", "postedDate" : "2026-06-15T08:24:32.000", "createdAt" : "2026-06-15T21:32:42.154", "lastUpdated" : "2026-06-16T07:04:14.872", "ingestTimestamp" : "2026-06-15T21:32:42.154", "mongoId" : "6a304f40f292fd229cee6583", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring implementation", "Zero Trust principles", "Security-by-design practices", "Automation development", "Scripting development", "Tool integration", "Leadership", "Mentoring", "Cloud security operations", "GCP security", "DevSecOps", "Risk assessment", "Threat intelligence", "Business impact analysis", "Remediation guidance", "Risk reduction", "Secure architecture", "Design reviews", "Security baselines", "Operational documentation", "Technical leadership", "Risk management", "Cloud security", "Regulatory requirements", "Cloud platforms", "Cloud workloads", "Emerging threats", "Emerging technologies", "Compliance requirements", "AWS Security Hub", "OCI Cloud Guard", "SIEM platforms", "SOAR platforms" ], "skillCount" : 43, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 840.69305, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c799774d8ee00a0941f9d", "title" : "Senior Solutions Architect - Security Specialist", "company" : "Elastic", "industry" : "Cybersecurity", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Solutions Architect - Security Specialist in Germany, adjusted for seniority, technology industry, and company size." }, "location" : "Germany", "locations" : [ "Germany" ], "certifications" : [ "CISSP", "CEH", "GIAC" ], "timestamp" : "2026-06-15T09:35:43.764", "fingerprint" : "cbb809d2a43ae403361a22b18562f972c6bc87cd3279dfeb56707add2d0c44af", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.elastic.co/jobs?gh_jid=7995039&gh_jid=7995039", "externalId" : "7995039", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Germany", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SIEM, AI, Analytics, Machine Learning", "professionalSkills" : [ "Consultative selling", "Vendor ecosystems", "Operational processes", "Use case requirements", "Incident response", "Threat mitigation" ], "hardSkillsList" : [ "Forensic analysis", "Troubleshooting", "Behavioral analytics", "Machine learning" ], "softSkillsList" : [ "Knowledge sharing", "Continuous learning" ], "hardSkills" : [ { "name" : "Forensic analysis", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" }, { "name" : "Behavioral analytics", "level" : "intermediate" }, { "name" : "Machine learning", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Knowledge sharing" }, { "name" : "Continuous learning" } ], "majorSkills" : "SIEM solutions, Security architectures, Incident response, AI in security", "majorSkillsList" : [ "SIEM solutions", "Security architectures", "Incident response", "AI in security" ], "coreResponsibilities" : "Architect security solutions, Design cutting-edge solutions, Implement AI advancements, Improve incident response, Harness Elastic Security Solution, Achieve use case requirements, Improve operational efficiency, Deliver proof-of-value projects, Showcase detection capabilities, Showcase AI capabilities, Showcase Incident Response capabilities, Improve analyst experience, Shorten analyst decision time, Be a thought leader, Evangelize vision, Share expertise, Position Elastic as leader, Foster collaboration, Share knowledge, Drive continuous improvement, Learn evolving landscapes, Explore SIEM landscape, Explore Analytics landscape, Ensure solutions are forefront", "teamCollaboration" : "Solutions Architecture team; Across departments", "projectManagementSkills" : [ "RFI/RFP responses" ], "domainKnowledge" : "SIEM; Security technologies; Security architectures; SOC workflows; Behavioral Analytics; Machine Learning", "domainList" : [ "siem", "security-technologies", "security-architectures", "soc-workflows", "behavioral-analytics", "machine-learning" ], "domainSpecificKnowledge" : [ "SIEM", "Security technologies", "Security architectures", "SOC workflows", "Behavioral Analytics", "Machine Learning" ], "toolProficiency" : [ "Elastic Security Solution" ], "communicationSkills" : "Presentations; Blog posts; Customer presentations; Technical audiences; Non-technical audiences", "continuousLearning" : "Continuous learning; Staying ahead of curve", "innovationCreativity" : "Cutting-edge solutions; AI advancements; Forefront of innovation", "problemSolvingSkills" : "Solve complex challenges; Troubleshooting; Threat mitigation", "specialRequirements" : "30-50% travel", "outcomesObjectives" : "Improve incident response; Achieve use case requirements; Improve operational efficiency; Improve analyst experience; Shorten analyst decision time", "qualificationsBasic" : "5+ years enterprise PreSales, Extensive SIEM platforms experience, Deep AI understanding, SOC workflows knowledge, Security solutions knowledge, Forensic analysis background, Behavioral Analytics experience, Machine Learning techniques experience, Ability to work independently, Proven consultative selling success, RFI/RFP responses experience, Customer presentations experience", "qualificationsPreferred" : "CISSP certification, CEH certification, GIAC certification", "workSiteFlexibility" : "Flexible", "rawDescription" : "Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role As a Security Specialist Solutions Architect, you will bring deep expertise in SIEM solutions, security technologies, and consultative selling to support customers in securing their data and infrastructure. You will leverage your knowledge of vendor ecosystems, security architectures, and operational processes to help customers solve complex challenges, enhance incident response, and build modern, scalable security solutions. What You Will Be Doing Architect next-generation security solutions: Design and implement cutting-edge solutions utilizing Elastic's latest advancements in AI, to help improve incident response Harness the power of the Elastic Security Solution to enable organizations to achieve their use case requirements and improve overall operational efficiency Deliver compelling proof-of-value (POV) projects: Showcase the value of Elastic Security’s detection, AI, and Incident Response capabilities, demonstrating the potential to improve the analyst experience and shorten the time it takes for an analyst to make an informed decision. Be a thought leader and evangelize our vision: Share your expertise through presentations, blog posts, and other channels, positioning Elastic as the leader in SIEM and Analytics Foster collaboration and knowledge sharing: Cultivate a collaborative environment within the Solutions Architecture team and across departments, promoting knowledge sharing and driving continuous improvement. Stay ahead of the curve: Continuously learn and explore the ever-evolving landscapes of SIEM and Analytics and related technologies, ensuring our solutions are always at the forefront of innovation. What You Bring 5+ years of experience in enterprise PreSales. Extensive experience with SIEM platforms and vendor solutions in enterprise environments. Deep understanding of AI and its impact on SIEM and Analytics solutions. Strong understanding of SOC workflows, processes, and operational challenges. Knowledge of a wide range of security solutions, the type of data they produce and build content to satisfy Use Case Requirements Background that includes forensic analysis, troubleshooting, and threat mitigation. Experience with Behavioral Analytics, and Machine Learning techniques. Ability to work independently and thrive in fast-paced environments. Proven success in consultative selling, RFI/RFP responses, and customer presentations. Excellent communication and presentation skills, able to engage both technical and non-technical audiences Collaborative spirit and a passion for sharing knowledge and expertise. Unwavering commitment to continuous learning and staying ahead of the curve in technology and emerging trends Certifications such as CISSP, CEH, or GIAC are a plus Willingness to travel 30-50% of the time Additional Information - We Take Care of Our People As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do. We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do. Competitive pay based on the work you do here and not your previous salary Health coverage for you and your family in many locations Ability to craft your calendar with flexible locations and schedules for many roles Generous number of vacation days each year Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service Up to 40 hours each year to use toward volunteer projects you love Embracing parenthood with minimum of 16 weeks of parental leave Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation. We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email candidate_accessibility@elastic.co. We will reply to your request within 24 business hours of submission. Applicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster) Elasticsearch develops and distributes technology and information that is subject to U. S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic. Please see here for our Privacy Statement.", "summaryDescription" : "Senior Solutions Architect - Security Specialist at Elastic. Skills: SIEM solutions, Security architectures, Incident response, AI in security. Architect security solutions. Design cutting-edge solutions", "postedDate" : "2026-06-13T20:19:08.265", "createdAt" : "2026-06-13T20:19:08.265", "lastUpdated" : "2026-06-15T09:35:43.764", "ingestTimestamp" : "2026-06-13T20:19:08.265", "mongoId" : "6a2c799774d8ee00a0941f9d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Forensic analysis", "Troubleshooting", "Behavioral analytics", "Machine learning", "Knowledge sharing", "Continuous learning", "SIEM solutions", "Security architectures", "Incident response", "AI in security", "Consultative selling", "Vendor ecosystems", "Operational processes", "Use case requirements", "Threat mitigation", "RFI/RFP responses", "SIEM", "Security technologies", "SOC workflows", "Behavioral Analytics", "Machine Learning", "CISSP", "CEH", "GIAC", "Elastic Security Solution" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 839.13196, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c790f74d8ee00a0940b2a", "title" : "Senior Cybersecurity Engineer", "company" : "Redhorse Corporation", "industry" : "Cyber Analytics", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cybersecurity Engineer in Chantilly, United States, adjusted for seniority and industry." }, "location" : "Chantilly, VA", "locations" : [ "Chantilly, VA" ], "timestamp" : "2026-06-16T03:07:31.093", "fingerprint" : "e998cd3d7760090df626abf1828fb72c863b795917a4be4626b9c5e4e5d16a14", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/redhorsecorp/6b1fdcb9-1a74-4fe2-a684-276afe9e8d33/apply", "externalId" : "6b1fdcb9-1a74-4fe2-a684-276afe9e8d33", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chantilly", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8852190,-77.4486772" } ], "locationText" : "Chantilly, Virginia, United States", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "qualificationsBasic" : "10+ years experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "## Description About the Organization Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets. ## Key Responsibilities Secure enterprise and mission IT infrastructures across diverse operating systems, networks, and web/database applications. Manage and harden storage, boundary/perimeter devices, and logging/monitoring solutions within cloud environments (e.g., C2S) and classified enclaves. Implement policy-based protections for data flows and network boundaries across complex, multi-classification architectures. Support security certification and accreditation activities (RMF) and lead the development of required security documentation. Perform ad-hoc penetration testing, formal red/blue team exercises, and compliance assessments of classified Federal systems. Identify innovative protection strategies that align with budget and infrastructure constraints. Communicate and brief technical risks and mitigation options to both technical and non-technical stakeholders. Prioritize and coordinate cybersecurity workflows in fast-paced, high-stakes environments. ## Required Experience/Clearance Active TS/SCI security clearance. 10+ years of experience in cybersecurity engineering or information assurance. Proven experience securing cloud environments (AWS/C2S/Azure) and classified enclaves. Demonstrated expertise in network boundary protection and policy-based data flow implementation. Experience with the Risk Management Framework (RMF) and the security accreditation process. Hands-on experience with penetration testing tools and red/blue team methodologies. Must possess and maintain relevant cybersecurity professional certification(s) (e.g., CISSP, CEH, Security+, or equivalent DoD 8140/8570.01-M certification). ## Desired Experience Familiarity with DataBricks, GitLab, or Jira for managing security workflows. Experience with advanced logging and monitoring solutions like Splunk or ELK stack. Knowledge of Spark or other big data technologies within a secure environment. Advanced degree in Cybersecurity, Computer Science, or a related technical field. Previous experience supporting Intelligence Community (IC) or Department of Defense (DoD) customers. ## Additional Information Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class. Accommodations: If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at Talent-Acquisition@redhorsecorp.com Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs. This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.", "summaryDescription" : "Senior Cybersecurity Engineer at Redhorse Corporation", "postedDate" : "2026-06-12T15:48:39.670", "createdAt" : "2026-06-12T15:48:39.670", "lastUpdated" : "2026-06-16T03:07:31.093", "ingestTimestamp" : "2026-06-14T21:31:30.533", "mongoId" : "6a2c790f74d8ee00a0940b2a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.7777778, "_score" : 838.0577, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a30531ff292fd229cf112d9", "title" : "IT Security Ops Specialist", "company" : "Mattel", "industry" : "Retail", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for IT Security Ops Specialist in Hyderabad, India, adjusted for Lead seniority and a large company size in the Technology industry." }, "location" : "Hyderabad, IN", "locations" : [ "Hyderabad", "IN" ], "timestamp" : "2026-06-16T06:55:30.416", "fingerprint" : "3f590e72efb588affcef3a3560d6c2a2e3a849060de26884bea8fad8edb44aad", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/MattelInc/744000132139477-it-security-ops-specialist", "externalId" : "744000132139477", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Hyderabad", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "17.3605890,78.4740613" } ], "locationText" : "Hyderabad, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "GCP, AWS, Azure, OCI, CSPM, IAM, Network controls, Cloud security, DevSecOps, Automation, Scripting, SIEM, SOAR", "professionalSkills" : [ "Technical leadership", "Risk identification", "Risk prioritization", "Risk remediation", "Threat intelligence", "Business impact analysis", "Secure architecture", "Design reviews", "Security by design", "Operational maturity", "Escalation support" ], "hardSkillsList" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "Remediation guidance", "Risk reduction", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring controls", "Secure workload design", "Automation development", "Scripting development", "Security baselines enforcement", "Tool integration", "Threat monitoring", "Vulnerability monitoring", "Regulatory change monitoring", "Runbook development", "Playbook development", "Operational documentation" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Configuration reviews", "level" : "intermediate" }, { "name" : "Misconfiguration detection", "level" : "intermediate" }, { "name" : "Remediation tracking", "level" : "intermediate" }, { "name" : "Validation", "level" : "intermediate" }, { "name" : "Cloud security monitoring", "level" : "intermediate" }, { "name" : "Risk-based prioritization", "level" : "intermediate" }, { "name" : "Remediation guidance", "level" : "intermediate" }, { "name" : "Risk reduction", "level" : "intermediate" }, { "name" : "IAM implementation", "level" : "intermediate" }, { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Encryption implementation", "level" : "intermediate" }, { "name" : "Logging implementation", "level" : "intermediate" }, { "name" : "Monitoring controls", "level" : "intermediate" }, { "name" : "Secure workload design", "level" : "intermediate" }, { "name" : "Automation development", "level" : "intermediate" }, { "name" : "Scripting development", "level" : "intermediate" }, { "name" : "Security baselines enforcement", "level" : "intermediate" }, { "name" : "Tool integration", "level" : "intermediate" }, { "name" : "Threat monitoring", "level" : "intermediate" }, { "name" : "Vulnerability monitoring", "level" : "intermediate" }, { "name" : "Regulatory change monitoring", "level" : "intermediate" }, { "name" : "Runbook development", "level" : "intermediate" }, { "name" : "Playbook development", "level" : "intermediate" }, { "name" : "Operational documentation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Cloud security operations, GCP security, AWS security, Azure security, OCI security", "majorSkillsList" : [ "Cloud security operations", "GCP security", "AWS security", "Azure security", "OCI security" ], "coreResponsibilities" : "Provide technical leadership, Oversee cloud security operations, Own cloud security operations, Manage configuration reviews, Manage misconfiguration detection, Manage remediation tracking, Manage validation, Serve as execution partner, Serve as escalation point, Design cloud security review strategies, Optimize cloud security review strategies, Maintain cloud security review strategies, Design monitoring strategies, Optimize monitoring strategies, Maintain monitoring strategies, Translate findings into risk intelligence, Drive risk-based prioritization, Partner with application owners, Partner with DevOps teams, Partner with platform teams, Provide remediation guidance, Influence risk reduction decisions, Ensure secure IAM implementation, Ensure secure network segmentation, Ensure secure encryption, Ensure secure logging, Ensure secure monitoring, Lead secure architecture reviews, Support secure architecture reviews, Lead design reviews, Support design reviews, Champion Zero Trust principles, Champion security-by-design practices, Develop automation, Enhance automation, Maintain automation, Develop scripting, Enhance scripting, Maintain scripting, Detect misconfigurations, Enforce cloud security baselines, Integrate CSPM tooling, Integrate cloud security tooling, Improve visibility, Improve response, Monitor cloud security threats, Monitor vulnerabilities, Monitor regulatory changes, Incorporate lessons learned, Improve controls, Improve processes, Develop cloud security runbooks, Maintain cloud security runbooks, Improve cloud security runbooks, Develop cloud security playbooks, Maintain cloud security playbooks, Improve cloud security playbooks, Develop operational documentation, Maintain operational documentation, Improve operational documentation, Mentor cloud security engineers, Mentor cloud security analysts, Strengthen technical depth, Strengthen operational maturity, Provide advanced escalation support", "teamCollaboration" : "Security Operations; IT teams; Engineering teams; Application teams; DevOps teams; Platform teams", "domainKnowledge" : "Cloud security; Zero Trust principles; Regulatory requirements; Cloud-native architecture", "domainList" : [ "cloud-security", "zero-trust-principles", "regulatory-requirements", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Cloud security", "Zero Trust principles", "Regulatory requirements", "Cloud-native architecture" ], "toolProficiency" : [ "AWS Security Hub", "OCI Cloud Guard", "CSPM platforms", "SIEM platforms", "SOAR platforms" ], "documentationSkills" : "Operational documentation", "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "Work hours may vary, Availability during off-business hours, Incidents, System changes, Project needs", "qualificationsBasic" : "9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations, Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment, Hands-on expertise securing Google Cloud Platform (GCP), Working knowledge of AWS, Azure, and OCI, Experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers. Cloud Security Tech lead is responsible for leading and delivering day-to-day cloud security operations across Google Cloud Platform (GCP), Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI). This role combines hands-on technical execution with technical leadership, ensuring cloud security risks are accurately identified, prioritized, and remediated in alignment with business risk, Zero Trust principles, and regulatory requirements. Cloud Security Tech lead provides direct technical leadership and guidance to cloud security engineers and analysts while partnering closely with Security Operations, IT, Engineering, and Application teams to drive remediation accountability and continuous improvement. Operating within a global delivery model, this role serves as a key execution and escalation point to ensure consistency, scalability, and resilience of the organization’s cloud security program. In addition to operational ownership, cloud security strategy, tooling optimization, automation, and analytics, ensuring the cloud security capability evolves alongside emerging threats, technologies, and compliance requirements. Roles and Responsibilities Skill:GCP/AWS/Azure/OCI security operations, CSPM (SCC, Security Hub, Defender, Cloud Guard), IAM & network controls, misconfiguration remediation * Provide direct technical leadership and day-to-day oversight of cloud security operations across GCP (primary), AWS, Azure, and OCI. * Own and manage cloud security operations including configuration reviews, misconfiguration detection, prioritization, remediation tracking, and validation. * Serve as a key execution partner and escalation point for cloud security initiatives, ensuring alignment with enterprise security strategy and priorities. * Design, optimize, and maintain cloud security review and monitoring strategies using native cloud security tools and CSPM platforms. * Translate large-scale cloud security findings into actionable risk intelligence through dashboards, metrics, and executive reporting. * Drive risk-based prioritization of cloud security issues using threat intelligence, asset criticality, exposure, and business impact. * Partner with application owners, DevOps, and platform teams to provide clear remediation guidance and influence timely risk reduction decisions. * Ensure secure implementation and continuous improvement of IAM, network segmentation, encryption, logging, and monitoring controls across cloud platforms. * Lead and support secure architecture and design reviews for new and existing cloud workloads. * Champion Zero Trust principles and security-by-design practices across cloud environments. * Develop, enhance, and maintain automation and scripting to detect misconfigurations and enforce cloud security baselines. * Integrate CSPM and cloud security tooling with SIEM and SOAR platforms to improve visibility and response. * Monitor emerging cloud security threats, vulnerabilities, and regulatory changes, incorporating lessons learned into improved controls and processes. * Develop, maintain, and continuously improve cloud security runbooks, playbooks, and operational documentation. * Mentor and develop cloud security engineers and analysts, strengthening technical depth and operational maturity. * Provide advanced escalation support for complex cloud security findings, tooling issues, and remediation challenges. * Work hours may vary, and the position may require availability during off-business hours due to incidents, system changes, or project needs. * Additional duties may be assigned as necessary to meet the ongoing needs of the organization. ## Qualifications Skills and Qualifications Required: * 9+ years of experience in cloud security engineering, DevSecOps, or cloud security operations. * Proven experience acting as a technical lead or senior engineer supporting cloud security programs in a global enterprise environment. * Hands-on expertise securing Google Cloud Platform (GCP), with working knowledge of AWS, Azure, and OCI. * Strong experience with native cloud security tools such as GCP Security Command Center, AWS Security Hub, Azure Defender for Cloud, and OCI Cloud Guard. * Deep understanding of IAM, network security, encryption, key management, logging, and monitoring across cloud platforms. * Experience implementing and operationalizing CSPM, CWPP, and cloud IAM solutions. * Hands-on experience with infrastructure-as-code security using Terraform, CloudFormation, or equivalent tools. * Strong scripting and automation skills using Python, Bash, PowerShell, or cloud-native tooling. * Experience supporting compliance initiatives aligned with CIS benchmarks, NIST CSF, and ISO 27001. * Strong analytical, leadership, and stakeholder communication skills. * Ability to support after-hours coordination or incident response activities as needed. Preferred: * Bachelor’s degree in computer science, Cybersecurity, Information Technology, or equivalent practical experience. * Cloud security certifications such as Google Professional Cloud Security Engineer, AWS Certified Security – Specialty, or Azure Security Engineer Associate. * Security certifications such as CISSP, CCSP, or CISM. * Experience integrating cloud security tooling with enterprise SIEM and SOAR platforms. * Familiarity with Zero Trust architecture and cloud-native security design patterns. Shift Timing: * Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events. ## Additional Information Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles. How We Work: We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors: * We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower. * We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking. * We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results. Our Approach to Flexible Work: We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter. Who We Are: Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.", "summaryDescription" : "IT Security Ops Specialist at Mattel. Skills: Cloud security operations, GCP security, AWS security, Azure security, OCI security. Provide technical leadership. Oversee cloud security operations", "postedDate" : "2026-06-15T08:24:32.000", "createdAt" : "2026-06-15T21:54:30.659", "lastUpdated" : "2026-06-16T06:55:30.416", "ingestTimestamp" : "2026-06-15T21:54:30.659", "mongoId" : "6a30531ff292fd229cf112d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Configuration reviews", "Misconfiguration detection", "Remediation tracking", "Validation", "Cloud security monitoring", "Risk-based prioritization", "Remediation guidance", "Risk reduction", "IAM implementation", "Network segmentation", "Encryption implementation", "Logging implementation", "Monitoring controls", "Secure workload design", "Automation development", "Scripting development", "Security baselines enforcement", "Tool integration", "Threat monitoring", "Vulnerability monitoring", "Regulatory change monitoring", "Runbook development", "Playbook development", "Operational documentation", "Leadership", "Mentoring", "Cloud security operations", "GCP security", "AWS security", "Azure security", "OCI security", "Technical leadership", "Risk identification", "Risk prioritization", "Risk remediation", "Threat intelligence", "Business impact analysis", "Secure architecture", "Design reviews", "Security by design", "Operational maturity", "Escalation support", "Cloud security", "Zero Trust principles", "Regulatory requirements", "Cloud-native architecture", "AWS Security Hub", "OCI Cloud Guard", "CSPM platforms", "SIEM platforms", "SOAR platforms" ], "skillCount" : 51, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Lead", "dataQualityScore" : 1.0, "_score" : 837.89795, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a305191f292fd229cf0245a", "title" : "Cybersecurity Policy Developer", "company" : "GovTech", "industry" : "Government", "salary" : { "min" : 85000.0, "max" : 130000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Policy Developer in Singapore, adjusted for the government industry." }, "location" : "PPS Policy, Plans and Strategy Cluster", "locations" : [ "PPS Policy", "Plans and Strategy Cluster" ], "certifications" : [ "CISSP", "CISA" ], "timestamp" : "2026-06-16T08:37:51.072", "fingerprint" : "d9ba5b201cb970ca566d20fe6d2bff294a0b7b765a0244293d4cacfd5b17eaff", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://jobs.careers.gov.sg/jobs/greenhouse/4004295201?gh_jid=4004295201", "externalId" : "4004295201", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Azure, Google, DevSecOps", "professionalSkills" : [ "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit" ], "hardSkillsList" : [ "Information security", "Cryptography" ], "hardSkills" : [ { "name" : "Information security", "level" : "intermediate" }, { "name" : "Cryptography", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity policy, Risk management, Policy development", "majorSkillsList" : [ "Cybersecurity policy", "Risk management", "Policy development" ], "coreResponsibilities" : "Lead formulation of ICT Security policies, Support formulation of ICT Security policies, Develop policies, Assess policies, Review policies, Govern cyber activities, Promote awareness of security issues, Communicate security principles, Address policy queries, Assess exemption requests, Identify mitigation plans, Qualify mitigation plans, Quantify mitigation plans, Agree mitigation plans, Measure security health posture, Provide analytical studies, Provide trending of key risk indicators, Support security projects, Support system vulnerability assessments, Support audits of cyber programs, Find creative ways to address challenges", "teamCollaboration" : "Collaboration with stakeholders; Work with operational teams; Work with implementation teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Internet of Things; Hardware design protection; Mobile application management; Device management; Cloud hosting design; Cloud hosting implementation; CI/CD pipelines", "domainList" : [ "internet-of-things", "hardware-design-protection", "mobile-application-management", "device-management", "cloud-hosting-design", "cloud-hosting-implementation", "ci-cd-pipelines" ], "domainSpecificKnowledge" : [ "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines" ], "communicationSkills" : "Communicate security principles", "innovationCreativity" : "Find creative ways", "problemSolvingSkills" : "Address complex challenges", "qualificationsBasic" : "3 years of relevant IT or infocomm security consulting, 3 years of project management, 3 years of IT audit and governance, Knowledge of IT security management principles and practices, Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards, Singapore Citizen only", "qualificationsPreferred" : "CISSP certification, CISA certification", "remoteFriendly" : false, "rawDescription" : "The Government Technology Agency (GovTech) aims to transform the delivery of Government digital services and products by taking an \"outside-in\" view, putting citizens and businesses at the heart of everything we do. We also develop the Smart Nation infrastructure and applications and facilitate collaboration with citizens and businesses to co-develop technologies. Join us as we support Singapore’s vision of building a Smart Nation - a nation of possibilities empowered through info-communications technology and related engineering. Do you want to apply your skills, knowledge and energy to implement cutting-edge infocomm technology and digital solutions that will change the lives of Singaporeans and the public? In GovTech, you can! The Cyber Security Group (CSG) is the cybersecurity arm of GovTech, committed to creating a safe and secure digital government. You will be part of the Policy Development team to formulate cybersecurity policy standards and guidelines. Job Description: Lead or Support the formulation of progressive ICT Security policies to ensure continuous and relevant protection of Government ICT assets Develop, assess and review existing and proposed policies in collaboration with stakeholders to govern cyber activities Promote awareness of security issues and communicate security principles among management and stakeholders Address policy queries, and assess exemption requests to ascertain relevance of preventive and detective controls to reduce risk of exposure Work with the operational and implementation teams to identify, qualify, quantify and agree proposed mitigation plans against any identified risks and that those risks have been captured with mitigation plans. Conduct the measurement of security health posture of Agencies and provide analytical studies and trending of key risk indicators Support limited scale security projects, system vulnerability assessments or audits of cyber programs if required Find creative ways to take on and address complex information security challenges across a variety of existing and emerging technologies and digital environments. Requirements: Degree in Infocomm Security, Computer Science, Computer/Electronics Engineering or Information Technology Possess CISSP and/or CISA certifications would be an advantage At least 3 years’ of relevant IT or inforcomm security consulting, project management, and/or IT audit and governance Knowledge of IT security management principles and practices Experience in one or more of the following areas will be an advantage; policy compliance and governance, risk assessment, solutioning, network design, application development, Internet of Things, cryptography, hardware design protection, mobile application/device management, cloud hosting design and implementation in AWS/Azure/Google, DevSecOps consulting, design and implementation of CI/CD pipelines, etc. Knowledge and experience of IM8/NIST/IS0 27001/2 policies /standards Singapore Citizen only", "summaryDescription" : "Cybersecurity Policy Developer at GovTech. Skills: Cybersecurity policy, Risk management, Policy development. Lead formulation of ICT Security policies. Support formulation of ICT Security policies", "postedDate" : "2026-06-15T23:17:53.254", "createdAt" : "2026-06-15T23:17:53.254", "lastUpdated" : "2026-06-16T08:37:51.072", "ingestTimestamp" : "2026-06-15T23:17:53.254", "mongoId" : "6a305191f292fd229cf0245a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Information security", "Cryptography", "Cybersecurity policy", "Risk management", "Policy development", "Policy compliance", "Governance", "Risk assessment", "Solutioning", "Network design", "Application development", "Project management", "IT audit", "Internet of Things", "Hardware design protection", "Mobile application management", "Device management", "Cloud hosting design", "Cloud hosting implementation", "CI/CD pipelines", "CISSP", "CISA" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 832.8727, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c91cb74d8ee00a09841a3", "title" : "Security Specialist II", "company" : "Redwood Materials", "industry" : "Manufacturing", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Security Specialist in McCarran, Nevada, adjusted for the manufacturing industry and company size." }, "location" : "McCarran, NV", "locations" : [ "McCarran", "NV" ], "timestamp" : "2026-06-16T04:40:11.602", "fingerprint" : "ebe1e091a2bce01fd670a5ae114af4c4b574e0b9da2e18e3b01a1d3a661f8497", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/redwoodmaterials/jobs/6019247004?gh_jid=6019247004", "externalId" : "6019247004", "industryFunction" : { }, "structuredLocations" : [ { "city" : "McCarran", "state" : "Nevada", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "36.0861034,-115.1611002" } ], "locationText" : "McCarran, Nevada, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "High School", "professionalSkills" : [ "Incident response", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response" ], "hardSkillsList" : [ "First aid" ], "hardSkills" : [ { "name" : "First aid", "level" : "intermediate" } ], "majorSkills" : "Security operations, Incident response, Patrol procedures", "majorSkillsList" : [ "Security operations", "Incident response", "Patrol procedures" ], "coreResponsibilities" : "Perform assigned security duties, Patrol facilities and grounds, Monitor security systems, Respond to incidents, Serve as on-site responder, Follow response procedures, Follow escalation protocols, Notify supervisors of incidents, Conduct routine patrols, Conduct random patrols, Identify hazards, Identify security risks, Identify policy violations, Monitor CCTV systems, Operate CCTV systems, Monitor access control systems, Operate access control systems, Monitor alarm systems, Operate alarm systems, Monitor life-safety systems, Operate life-safety systems, Report system irregularities, Control site access, Document site access, Process visitors, Verify contractor credentials, Respond to alarms, Assess incident conditions, Escalate incidents to supervisors, Escalate incidents to emergency services, Provide initial emergency response, Provide basic first aid, Assist with evacuations, Control incident scenes, Complete incident reports, Complete daily activity logs, Complete shift documentation, Maintain accountability of issued equipment, Report equipment deficiencies, Support site operations, Support special events, Support high-visibility activities, Follow company policies, Follow post orders, Follow safety procedures, Report policy deviations, Communicate with supervisors, Communicate with team members, Ensure continuity between shifts", "teamCollaboration" : "Continuity between shifts", "domainKnowledge" : "Security operations; Patrol procedures; Access control systems; CCTV monitoring; Alarm systems; Emergency response protocols", "domainList" : [ "security-operations", "patrol-procedures", "access-control-systems", "cctv-monitoring", "alarm-systems", "emergency-response-protocols" ], "domainSpecificKnowledge" : [ "Security operations", "Patrol procedures", "Access control systems", "CCTV monitoring", "Alarm systems", "Emergency response protocols" ], "toolProficiency" : [ "CCTV", "Access control systems", "Alarms", "Life-safety systems" ], "communicationSkills" : "Complete accurate reports; Maintain shift continuity; Communicate professionally", "documentationSkills" : "Incident reports; Daily activity logs; Shift documentation", "problemSolvingSkills" : "Assess situations; Make sound decisions", "specialRequirements" : "Work rotating shifts, Work nights, Work weekends, Work holidays, Work overtime, Work extended hours, Stand for extended periods, Walk for extended periods, Patrol for extended periods, Respond to incidents for extended periods", "outcomesObjectives" : "Adherence to procedures; Response effectiveness; Completion of assigned tasks", "qualificationsBasic" : "High school diploma or equivalent, Prior security experience, Prior military experience, Prior law enforcement experience, Prior emergency response experience, Prior industrial security experience", "qualificationsPreferred" : "Working knowledge of security operations, Working knowledge of patrol procedures, Working knowledge of access control systems, Working knowledge of CCTV monitoring, Working knowledge of alarm systems, Working knowledge of emergency response protocols", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Redwood Materials Redwood is localizing a global battery supply chain that seamlessly integrates recovery, reuse, and recycling — keeping critical minerals in circulation and driving the energy transition. Founded in 2017, we’re delivering low-cost and large-scale energy storage and producing battery materials in the U. S. for the first time, all from batteries we already have. Security Specialist Security Specialists operate under direct or general supervision during assigned shifts. Work is performed in accordance with established procedures, post orders, and supervisor direction. Personnel are expected to carry out assigned duties, follow escalation protocols, and notify supervisors of incidents requiring higher-level decision-making. Performance is evaluated based on adherence to procedures, response effectiveness, and completion of assigned tasks. Responsibilities will include: Perform assigned security duties during scheduled shifts, including patrols, monitoring systems, and incident response. Serve as an on-site responder to security, safety, and medical incidents, following established response procedures and escalation protocols. Conduct routine and random patrols of facilities and grounds to identify hazards, security risks, or policy violations. Monitor and operate CCTV, access control systems, alarms, and life-safety systems, reporting irregularities to supervision. Control and document site access, including visitor processing, credential checks, and contractor verification. Respond to alarms and incidents, assess conditions, and escalate to supervisors or emergency services as required. Provide initial emergency response support, including basic first aid, evacuation assistance, and scene control until relieved. Complete incident reports, daily activity logs, and shift documentation accurately and before the end of each shift. Maintain accountability of issued equipment, ensuring readiness and reporting deficiencies. Support site operations, special events, and high-visibility activities as directed by supervision. Follow all company policies, post orders, and safety procedures, reporting any deviations. Communicate effectively with supervisors and team members to ensure continuity between shifts. All other duties as assigned. Desired Qualifications High school diploma or equivalent required; prior security, military, law enforcement, emergency response, or industrial security experience preferred Working knowledge of security operations, patrol procedures, access control systems, CCTV monitoring, alarm systems, and emergency response protocols Ability to follow and apply established procedures, post orders, safety requirements, and escalation protocols in a fast-paced operational environment Ability to work rotating shifts, including nights, weekends, holidays, overtime, and extended hours as operationally required Effective verbal and written communication skills, including the ability to complete accurate reports, maintain shift continuity, and communicate professionally with employees, contractors, visitors, and emergency responders Ability to assess situations, remain calm under pressure, and make sound decisions during security, safety, medical, or operational incidents Ability to stand, walk, patrol, and respond to incidents for extended periods while maintaining situational awareness and operational readiness The position is full-time. Compensation will be commensurate with experience. We collect personal information (PI) from you in connection with your application for employment with Redwood Materials, including the following categories of PI: identifiers, personal records, professional or employment information, and inferences drawn from your PI. We collect your PI for our purposes, including performing services and operations related to your potential employment. If you have additional privacy-related questions, please contact us at privacy@redwoodmaterials.com.", "summaryDescription" : "Security Specialist II at Redwood Materials. Skills: Security operations, Incident response, Patrol procedures. Perform assigned security duties. Patrol facilities and grounds", "postedDate" : "2026-06-14T21:48:11.737", "createdAt" : "2026-06-14T21:48:11.737", "lastUpdated" : "2026-06-16T04:40:11.602", "ingestTimestamp" : "2026-06-14T21:48:11.737", "mongoId" : "6a2c91cb74d8ee00a09841a3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 75000, "salaryAnnualMax" : 110000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "First aid", "Security operations", "Incident response", "Patrol procedures", "Access control", "CCTV monitoring", "Alarm systems", "Emergency response", "Access control systems", "Emergency response protocols", "CCTV", "Alarms", "Life-safety systems" ], "skillCount" : 13, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 832.55444, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a660774d8ee00a062b94f", "title" : "Security Assurance Specialist (Regulatory Operations Center)", "company" : "Amazon Web Services EMEA SARL (Irish Branch)", "industry" : "Project/Program/Product Management--Non-Tech, Security Industry Specialist, amazon security", "salary" : { "min" : 58000.0, "max" : 82000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Security Assurance Specialist in Dublin, Ireland, adjusted for the Technology industry." }, "location" : "Dublin, IRL", "locations" : [ "Dublin, IRL" ], "timestamp" : "2026-06-15T02:53:40.233", "fingerprint" : "99782e801ea496f51f4822d6c4dffecec0db33639be8903f0d3b4b589a9fcf08", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10443534/apply", "externalId" : "e82ec408-f8eb-453a-9674-da1742b81c58", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Dublin", "country" : "Ireland", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "53.3493795,-6.2605593" } ], "locationText" : "Dublin, Ireland", "employmentType" : "FULL_TIME", "technicalSkills" : "AWS", "professionalSkills" : [ "Risk assessment", "Process improvement", "Security posture" ], "hardSkillsList" : [ "Control implementation", "Regulatory compliance" ], "hardSkills" : [ { "name" : "Control implementation", "level" : "intermediate" }, { "name" : "Regulatory compliance", "level" : "intermediate" } ], "majorSkills" : "Security assurance, Regulatory operations", "majorSkillsList" : [ "Security assurance", "Regulatory operations" ], "coreResponsibilities" : "Develop understanding of operational services, Understand Risk and Control Library, Perform service assessment work, Develop and deliver tooling, Identify process improvement opportunities, Develop solutions to technical challenges, Manage build and deployment of tooling, Support process improvement projects, Manage communications to stakeholders, Develop technical understanding of control implementation, Articulate compliance implications, Set strategic direction, Improve documentation, Track progress, Coordinate improvement efforts, Monitor process improvement effectiveness, Develop domain and technical knowledge, Monitor, evaluate, and improve organization, Develop and share program frameworks, Liaise with auditors, Articulate control implementation, Establish considerations for security concepts, Communicate compliance program results", "teamCollaboration" : "Work with service owners; Coordinate with service teams; Communicate to service teams; Communicate to stakeholders; Liaise with auditors", "projectManagementSkills" : [ "Roadmap strategy", "Prioritizing deliverables" ], "domainKnowledge" : "AWS security solutions; AWS compliance programs; Security concepts; Privacy concepts; Compliance concepts; Cloud environment", "domainList" : [ "aws-security-solutions", "aws-compliance-programs", "security-concepts", "privacy-concepts", "compliance-concepts", "cloud-environment" ], "domainSpecificKnowledge" : [ "AWS security solutions", "AWS compliance programs", "Security concepts", "Privacy concepts", "Compliance concepts", "Cloud environment" ], "communicationSkills" : "Articulate compliance implications; Communicate program results", "documentationSkills" : "Improve documentation", "innovationCreativity" : "Develop innovative solutions", "problemSolvingSkills" : "Creative problem solver", "qualificationsBasic" : "Experience in security or compliance consulting, Experience performing technical audits/assessments, Bachelor's degree or above", "qualificationsPreferred" : "Experience with audit or risk program design, Experience communicating with customers, Experience defining roadmap strategy, Experience designing and implementing controls", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At AWS, Security is priority zero. As part of the Amazon Web Services (AWS) Security team, we are looking for a technically deep Industry Specialist who is passionate about owning far-reaching projects to drive continuous improvement across AWS at unparalleled scale. As a part of AWS Compliance and Security Assurance you’ll have an opportunity to operate in a constantly changing environment, working with AWS business and engineering teams on business-critical, security projects and programs. We work across AWS to drive strategic security initiatives, design and deliver tooling and automation, and continue to raise the bar on security at AWS. Our team also drives programs to enable customers that operate in regulated markets, such as Healthcare, Finance, Government, etc. Key job responsibilities In this role, you will: - Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture. - Understand our Risk and Control Library and how it relates to our assessment processes. - Perform service, feature, and other related assessment work for customer and audit requirements. - Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture. - Identify process improvement opportunities and high risk areas. - Work with service owners to develop innovative solutions to complex technical challenges. - Manage the build and deployment of new tooling to streamline and automate security-related initiatives. - Support process improvement and security-related projects in coordination with service teams. - Manage communications to service teams and stakeholders. A day in the life - Dive deep into the AWS control environment to develop technical understanding of control implementation, and articulate compliance implications to internal and external audit functions. - Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness. - Develop broad domain and technical knowledge in AWS security solutions including the operational processes and controls in place that support AWS compliance programs. - Monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver. - Develop and share program/project process frameworks, tools, and best practices that can be adopted throughout the organization. - Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment. - Effectively communicate compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Basic Qualifications: - Experience in security or compliance consulting or advisory work in support of a highly technical environment - Experience performing technical audits/assessments in direct support of a major compliance effort (e.g., ISO, NIST, SOX, PCI, HIPAA, GDPR and other regulatory/industry certifications) - Bachelor's degree or above in accounting, information systems, finance, or equivalent Preferred Qualifications: - Experience with audit or risk program design, control environment process documentation, and control mapping - Experience communicating with customers, technical, regulatory, business teams, and management to collect requirements, describe product features, and technical designs - Experience defining roadmap strategy and prioritizing deliverables for your team products - Experience designing and implementing controls or experience performing audits over financial reporting environment, or experience working with stakeholders Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( https://www.amazon.jobs/en/privacy_page ) to know more about how we collect, use and transfer the personal data of our candidates. Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.", "summaryDescription" : "Security Assurance Specialist (Regulatory Operations Center) at Amazon Web Services EMEA SARL (Irish Branch). Skills: Security assurance, Regulatory operations. Develop understanding of operational services. Understand Risk and Control Library", "postedDate" : "2026-06-13T05:25:49.893", "createdAt" : "2026-06-13T05:25:49.893", "lastUpdated" : "2026-06-15T02:53:40.233", "ingestTimestamp" : "2026-06-13T05:25:49.893", "mongoId" : "6a2a660774d8ee00a062b94f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10443534/apply", "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Control implementation", "Regulatory compliance", "Security assurance", "Regulatory operations", "Risk assessment", "Process improvement", "Security posture", "Roadmap strategy", "Prioritizing deliverables", "AWS security solutions", "AWS compliance programs", "Security concepts", "Privacy concepts", "Compliance concepts", "Cloud environment" ], "skillCount" : 15, "jobCategory" : "project-management", "dataQualityScore" : 0.8888889, "_score" : 832.55054, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2c7d6374d8ee00a094fb43", "title" : "Spécialiste en cybersécurité - Cyber Security Specialist", "company" : "TobogganLabs", "industry" : "Consulting", "salary" : { "min" : 75000.0, "max" : 110000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Cyber Security Specialist in Bulgaria, adjusted for the technology industry and remote work." }, "location" : "Montréal, Quebec, Canada", "locations" : [ "Montréal", "Quebec", "Canada" ], "certifications" : [ "AWS Security Specialty", "CISSP" ], "timestamp" : "2026-06-16T02:56:36.669", "fingerprint" : "d967d0dde2b524b450eb68bc9662ab703c28e4a08377e764c77aba8d6a6e3a95", "source" : "greenhouse", "language" : "fr", "applyUrl" : "https://job-boards.greenhouse.io/tobogganlabs/jobs/7767641003", "externalId" : "7767641003", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Azure, Terraform, CloudFormation, Okta, Azure AD, Google Workspace, Python, Bash, Kubernetes, Cloud-native security", "professionalSkills" : [ "Security architecture", "Security automation", "Technical leadership", "Strategic decision making", "Risk translation" ], "hardSkillsList" : [ "Network segmentation", "Encryption", "System hardening", "Vulnerability management", "Zero Trust", "Security pipelines", "Detection rules", "Response playbooks", "Audit evidence collection", "Threat modeling", "Compliance frameworks" ], "softSkillsList" : [ "Self-directed", "Autonomous" ], "hardSkills" : [ { "name" : "Network segmentation", "level" : "intermediate" }, { "name" : "Encryption", "level" : "intermediate" }, { "name" : "System hardening", "level" : "intermediate" }, { "name" : "Vulnerability management", "level" : "intermediate" }, { "name" : "Zero Trust", "level" : "intermediate" }, { "name" : "Security pipelines", "level" : "intermediate" }, { "name" : "Detection rules", "level" : "intermediate" }, { "name" : "Response playbooks", "level" : "intermediate" }, { "name" : "Audit evidence collection", "level" : "intermediate" }, { "name" : "Threat modeling", "level" : "intermediate" }, { "name" : "Compliance frameworks", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Self-directed" }, { "name" : "Autonomous" } ], "majorSkills" : "Cybersecurity, Cloud security, Identity management, Security automation", "majorSkillsList" : [ "Cybersecurity", "Cloud security", "Identity management", "Security automation" ], "coreResponsibilities" : "Design security controls in cloud environments, Implement security controls in cloud environments, Maintain security controls in cloud environments, Architect identity and access solutions, Administer identity and access solutions, Design security automation pipelines, Support continuous compliance monitoring, Collect audit evidence, Lead security aspects of projects, Guide client architectural decisions, Define strategic security directions, Mentor colleagues on security best practices, Contribute to internal security tools, Contribute to internal security standards, Participate in interviews, Make internal presentations", "teamCollaboration" : "Client teams; Technical stakeholders; Non-technical stakeholders", "domainKnowledge" : "AI; Health sector; Regulated industries; Cloud-native architecture; Zero Trust model; Compliance frameworks", "domainList" : [ "ai", "health-sector", "regulated-industries", "cloud-native-architecture", "zero-trust-model", "compliance-frameworks" ], "domainSpecificKnowledge" : [ "AI", "Health sector", "Regulated industries", "Cloud-native architecture", "Zero Trust model", "Compliance frameworks" ], "toolProficiency" : [ "AWS", "Azure", "Terraform", "CloudFormation", "Okta", "Azure AD", "Google Workspace", "GitHub Actions", "CI/CD tools", "Okta Workflows", "Tray.io", "Workato" ], "communicationSkills" : "Explain complex concepts; Connect security to business", "continuousLearning" : "Professional development", "problemSolvingSkills" : "Translate technical risks", "qualificationsBasic" : "5+ years infrastructure, DevOps, or security engineering, Practical experience with AWS or Azure, Experience with Terraform, CloudFormation, or equivalents, Deployed and administered Okta or similar identity providers, Experience with SSO, MFA, SCIM provisioning, Experience with MDM / endpoint management, Familiar with SOC 2, HIPAA, ISO 27001, Participated in audit processes, Explain complex security and infrastructure concepts", "qualificationsPreferred" : "Client-facing roles experience, Healthcare or regulated industries experience, Software development beyond scripting, Container security, Kubernetes, or cloud-native security, Automating security with Python or Bash, Okta Workflows, Tray.io, or Workato experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "La version anglaise suivra - English version will follow Spécialiste en cybersécurité À propos de nous Toboggan Labs est une firme-conseil boutique qui œuvre à l'intersection de l'IA et de la santé. Nous résolvons des problèmes humains complexes en appliquant des technologies de pointe combinées à une solide compréhension du domaine. À propos du poste Nous sommes à la recherche d'un·e spécialiste en cybersécurité pour joindre notre équipe en tant que ressource senior en sécurité intégrée chez nos clients. Dans ce rôle, vous concevrez et mettrez en œuvre des programmes de sécurité complets dans des environnements infonuagiques et d'entreprise. Vous travaillerez directement avec les équipes clients pour intégrer la sécurité dans leur infrastructure, leur gestion des identités et leurs opérations, et agirez en tant que conseiller·ère de confiance capable de traduire les risques techniques en décisions stratégiques. Veuillez noter que, bien que nous soyons spécialisés dans le secteur de la santé et les industries réglementées, tous nos projets ne relèvent pas de ces domaines. Vous pourriez donc être amené·e à travailler sur des projets variés dans différents secteurs, selon les besoins. Vos responsabilités quotidiennes Sécurité de l'infrastructure — Concevoir, implanter et maintenir des contrôles de sécurité dans les environnements infonuagiques (AWS, Azure), incluant la segmentation réseau, le chiffrement, le durcissement des systèmes et la gestion des vulnérabilité s. Gestion des identités et des accès — Architecturer et administrer des solutions d'identité et d'accès, incluant le SSO, le MFA, le provisionnement SCIM, la gestion des accès privilégiés et les approches Zero Trust. Automatisation et opérations de sécurité — Concevoir des pipelines d'automatisation de la sécurité, des règles de détection et des playbooks de réponse aux incidents; soutenir la surveillance continue de la conformité et la collecte de preuves d'audit. Sur certains mandats, leadership technique — Piloter l'ensemble du volet sécurité, guider les équipes clients dans leurs décisions architecturales et définir les orientations stratégiques de sécurité. Soutien à l'équipe — Mentorer des collègues sur les meilleures pratiques en sécurité, contribuer aux outils et standards de sécurité internes, participer aux entrevues et faire des présentations internes. À propos de vous Nous recherchons des personnes ayant un solide historique dans la conception et l'implantation de solutions de sécurité en environnements de production. La majorité de nos clients utilisent AWS, Terraform, GitHub Actions ou des outils CI/CD similaires, ainsi que des fournisseurs d'identité modernes. Vous devez être à l'aise pour naviguer entre la stratégie de sécurité et l'exécution technique, et communiquer efficacement avec des parties prenantes tant techniques que non techniques. Quand nous parlons de sécurité des infrastructures, nous cherchons quelqu'un capable de lire un modèle de menaces et un module Terraform dans le même après-midi — quelqu'un qui comprend que la sécurité n'est pas une liste de vérification de conformité, mais une discipline à intégrer dans chaque couche de la technologie et des processus d'une organisation. Nous vous encourageons à postuler si vous : Avez 5 ans ou plus d'expérience en infrastructure, DevOps ou ingénierie de la sécurité; Avez une expérience pratique avec des infrastructures AWS ou Azure et des outils d'infrastructure-as-code (Terraform, CloudFormation ou équivalents); Avez déployé et administré Okta ou des fournisseurs d'identité similaires (Azure AD, Google Workspace), incluant le SSO, le MFA, le provisionnement SCIM et la gouvernance des accès; Avez de l'expérience avec des solutions MDM / de gestion des postes de travail et des politiques de sécurité des appareils; Êtes familier·ère avec des cadres de conformité tels que SOC 2, HIPAA, ISO 27001 ou équivalents, et avez participé à des processus d'audit; Possédez d'excellentes compétences en communication et êtes capable d'expliquer des concepts complexes en sécurité et en infrastructure de façon claire et accessible; Êtes adaptable, autonome et à l'aise dans des environnements clients dynamiques; Savez expliquer les compromis en matière de sécurité et les relier aux besoins d'affaires. Atouts supplémentaires Expérience dans des rôles orientés client (consultation, ingénierie d'implantation, services-conseils); Expérience dans le secteur de la santé ou d'autres industries fortement réglementées; Expérience en développement logiciel au-delà du simple scripting (développement de fonctionnalités, d'API ou d'applications); Expérience avec la sécurité des conteneurs, Kubernetes ou des outils de sécurité cloud-native; Expérience en automatisation de la sécurité à l'aide de scripts (Python, Bash) ou d'outils de workflow (Okta Workflows, Tray.io, Workato); Détention de certifications pertinentes (AWS Security Specialty, CISSP ou équivalentes). Toutes nos offres d'emploi décrivent un peu une licorne. Si vous êtes plutôt un « narval », postulez quand même ! Il n'est pas nécessaire de répondre à toutes les exigences, ni aux critères bonus. L'expérience et les compétences sont importantes, mais le potentiel de croissance et l'attitude le sont tout autant. Nous sommes généralement flexibles quant aux niveaux ou pouvons vous orienter vers une offre plus appropriée lorsqu'elle sera ouverte. Ce que nous offrons Nous sommes une entreprise en télétravail d'abord, avec un espace de bureau à Montréal. Nous privilégions l'embauche au Québec, mais sommes ouverts aux candidatures partout au Canada dans les fuseaux horaires EST ±2. Toboggan Labs valorise la diversité des personnes qu'elle embauche et qu'elle sert. Pour nous, la diversité signifie créer un milieu de travail où les différences de chacun·e sont reconnues, appréciées, respectées et prises en compte afin de développer et de mettre à profit les talents et les forces de chaque personne. En plus : Budget pour le bureau à domicile et la technologie; Budget annuel de développement professionnel; REER avec contribution de l'employeur après 1 an; Dès le premier jour : Assurance santé et dentaire payée à 100 % par l'employeur, incluant un montant annuel pour les soins complémentaires (acupuncture, ostéopathie, massothérapie, naturopathie, psychologie, etc.); Assurance vie et assurance invalidité de courte et de longue durée; Complément de congé parental (8 semaines), disponible pour les employés ayant plus d'un an d'ancienneté, quel que soit le chemin vers la parentalité. Cyber Security Specialist About Us Toboggan Labs is a boutique consultancy building at the intersection of AI and healthcare. We solve challenging human problems by applying cutting-edge technology and domain understanding. About the role We're seeking a Cybersecurity Specialist to join our team as a senior security resource embedded in client engagements. In this role, you will design and implement comprehensive security programs across cloud and enterprise environments, working directly with client teams to embed security into their infrastructure, identity management, and operations. You will serve as a trusted security advisor, translating technical risk into actionable strategy. Note that while we specialize in healthcare and regulated industries, not all our projects are in these fields, so you may work across different domains from time to time. Your work will consist of: Infrastructure security engineering — Design, implement, and maintain security controls across cloud environments (AWS, Azure), including network segmentation, encryption, system hardening, and vulnerability management. Identity and access management — Architect and administer identity and access solutions including SSO, MFA, SCIM provisioning, privileged access management, and Zero Trust frameworks. Security automation and operations — Build security automation pipelines, detection rules, and incident response playbooks; support continuous compliance monitoring and audit evidence collection. On some projects, technical leadership — Own the security workstream end-to-end, guide client teams on architectural decisions, and shape strategic security direction. Supporting the team — Mentor colleagues on security best practices, contribute to internal security tools and standards, participate in interviews and internal presentations. About you We are seeking individuals with a proven track record designing and implementing security solutions in production environments. Most of our clients run AWS, Terraform, GitHub Actions or similar CI/CD tooling, and modern identity providers. You should be comfortable moving between security strategy and hands-on execution, and communicating effectively with both technical and non-technical stakeholders. When we say Security we mean someone who can read a threat model and a Terraform module in the same afternoon — someone who understands that security is not a compliance checkbox but a discipline that must be woven into every layer of an organization's technology and processes. We want you to apply if you: Have 5+ years of experience in infrastructure, DevOps, or security engineering; Have hands-on experience with AWS or Azure infrastructure and infrastructure-as-code tools (Terraform, CloudFormation, or equivalents); Have deployed and administered Okta or similar identity providers (Azure AD, Google Workspace), including SSO, MFA, SCIM provisioning, and access governance; Have experience with MDM / endpoint management solutions and device security policies; Are familiar with compliance frameworks such as SOC 2, HIPAA, ISO 27001, or equivalents, and have participated in audit processes; Have excellent communication skills and can explain complex security and infrastructure concepts clearly and accessibly; Are adaptable, self-directed, and comfortable in dynamic client environments; Can explain security trade-offs and connect them to business needs. Bonus points if you: Experience in client-facing roles (consulting, implementation engineering, advisory services); Experience in healthcare or other heavily regulated industries; Experience in software development beyond basic scripting (feature, API, or application development); Experience with container security, Kubernetes, or cloud-native security tools; Experience automating security processes using scripts (Python, Bash) or workflow tools (Okta Workflows, Tray.io, Workato); Relevant certifications (AWS Security Specialty, CISSP, or equivalents). All of our job postings describe a bit of a unicorn. If you're kind of a \"narwhal,\" please apply anyway. You don't need to meet all the requirements, let alone the bonus criteria. While experience and skill sets are valuable, growth potential and attitudes are equally important. We are usually flexible on levels or can advise you when a more relevant posting opens. What we offer We are a remote-first company with office space in Montreal. We prefer to hire in Quebec, but we are open to candidates anywhere in the EST±2 time zone in Canada. Toboggan Labs values the diversity of the people it hires and serves. Diversity, for us, means fostering a workplace in which a person's differences are recognized, appreciated, respected and responded to in ways that fully develop and utilize their talents and strengths. In addition: Home office/technology budget; Yearly professional development budget; Company matching RRSP after 1 year; From Day 1: 100% employer-paid health Life, long Parental leave top-up (8 weeks), available to employees with 1+ year of tenure, regardless of path to parenthood.", "summaryDescription" : "Spécialiste en cybersécurité - Cyber Security Specialist at TobogganLabs. Skills: Cybersecurity, Cloud security, Identity management, Security automation. Design security controls in cloud environments. Implement security controls in cloud environments", "postedDate" : "2026-06-14T21:47:47.747", "createdAt" : "2026-06-14T21:47:47.747", "lastUpdated" : "2026-06-16T02:56:36.669", "ingestTimestamp" : "2026-06-14T21:47:47.747", "mongoId" : "6a2c7d6374d8ee00a094fb43", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Network segmentation", "Encryption", "System hardening", "Vulnerability management", "Zero Trust", "Security pipelines", "Detection rules", "Response playbooks", "Audit evidence collection", "Threat modeling", "Compliance frameworks", "Self-directed", "Autonomous", "Cybersecurity", "Cloud security", "Identity management", "Security automation", "Security architecture", "Technical leadership", "Strategic decision making", "Risk translation", "AI", "Health sector", "Regulated industries", "Cloud-native architecture", "Zero Trust model", "AWS Security Specialty", "CISSP", "AWS", "Azure", "Terraform", "CloudFormation", "Okta", "Azure AD", "Google Workspace", "GitHub Actions", "CI/CD tools", "Okta Workflows", "Tray.io", "Workato" ], "skillCount" : 40, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 829.2463, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c5dc974d8ee00a08de8b8", "title" : "Cybersecurity Analyst", "company" : "SkyePoint Decisions", "industry" : "IT service provider", "salary" : { "min" : 95000.0, "max" : 135000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Arlington, United States, adjusted for industry and contract employment type." }, "location" : "1801 North Lynn St, Arlington, VA 22209", "locations" : [ "1801 North Lynn St", "Arlington", "VA 22209" ], "certifications" : [ "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "Agile IC", "SNOW App Dev" ], "timestamp" : "2026-06-15T00:47:32.599", "fingerprint" : "ac1a419fb03473c9fa3f06eee0d53bbb3539addd4fcad99688fd84023b604265", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/skyepointdecisionsinc/jobs/4273942009", "externalId" : "4273942009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "CONTRACT", "minimumEducation" : "Bachelor's", "technicalSkills" : "Windows Server, Active Directory, SQL, Oracle, Azure AD", "professionalSkills" : [ "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen" ], "hardSkillsList" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution" ], "hardSkills" : [ { "name" : "FISMA compliance", "level" : "intermediate" }, { "name" : "NIST SP 800-53", "level" : "intermediate" }, { "name" : "CIS Benchmarks", "level" : "intermediate" }, { "name" : "DISA STIGs", "level" : "intermediate" }, { "name" : "Research plans execution", "level" : "intermediate" } ], "majorSkills" : "Cybersecurity, NIST SP 800-53, FISMA compliance", "majorSkillsList" : [ "Cybersecurity", "NIST SP 800-53", "FISMA compliance" ], "coreResponsibilities" : "Support Security Standards HS, Provide cyber and technology security experience, Enable innovative business processes, Enable effective business processes, Enable secure business processes, Develop research plans, Execute research plans, Work with Windows Server, Manage Active Directory, Work with enterprise application virtualization, Work with server virtualization", "projectManagementSkills" : [ "Agile IC" ], "domainKnowledge" : "Cybersecurity domains; Enterprise application security; CIS Benchmarks; DISA STIGs; Cloud identity services", "domainList" : [ "cybersecurity-domains", "enterprise-application-security", "cis-benchmarks", "disa-stigs", "cloud-identity-services" ], "domainSpecificKnowledge" : [ "Cybersecurity domains", "Enterprise application security", "CIS Benchmarks", "DISA STIGs", "Cloud identity services" ], "documentationSkills" : "Technical writing skills", "continuousLearning" : "Certification incentive program", "specialRequirements" : "U. S. citizenship required, Onsite 5 days a week", "qualificationsBasic" : "4 years experience in lieu of degree, Active Secret clearance, Ability to obtain Top Secret clearance", "qualificationsPreferred" : "Process automation experience, AI tools and automation platforms, Virtualized IT systems development, Enterprise mobile device deployments, Red Hat Enterprise Linux systems, Networking technologies expertise", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U. S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results. This is a contingent position based upon customer approval. SkyePoint Decisions is seeking a Cybersecurity Analyst to support the Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective, and secure business processes. This position is located in Arlington, VA and will be onsite 5 days a week. No hybrid/telework allowed. Responsibilities: Support the Security Standards HS and an additional 4 years may be considered in lieu of bachelors degree. Must possess, or obtain prior to start date, at least one of the following certifications (continued certification is required as a condition of employment): CISSP-ISSAP, CISSP-ISSEP, CISSP, Security+ CE, CySA+, PPDA, Agile IC, SNOW App Dev. Experience and expertise across multiple cybersecurity domains, including FISMA compliance, NIST SP 800‑53 Revision 5 security controls, enterprise application security configuration, CIS Benchmarks, and DISA STIGs. Experience developing and executing research plans. Experience working with Windows Server in an enterprise environment. Experience managing Active Directory in a multi-domain environment. Experience with enterprise application or server virtualization. Demonstrated customer service excellence and strong business acumen. U. S. citizenship required. Active Secret clearance with the ability to obtain a final Top Secret security clearance. Preferred Qualifications: Experience with process automation - strongly desired. Demonstrated use of AI tools and automation platforms to enhance workflows, analysis, and documentation efficiency. Strong technical writing skills. Experience engineering or maintaining database infrastructure (SQL, Oracle). Experience with Active Directory Federation Services (ADFS), Azure AD, or cloud identity services. Experience developing or managing virtualized IT systems. Networking technologies expertise. Experience configuring or administering enterprise mobile device deployments. Experience working with Red Hat Enterprise Linux systems in an enterprise environment. Compensation: Salary Range: $90,000-$103,000 The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package. Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations. In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched. What We Can Offer You: At SkyePoint, we go B.I. G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day. Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs. Flexible Work Environment SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives. SkyePoint Decisions is a participating E-Verify Employer. U. S. Citizenship is required for most positions. Equal Opportunity Employer/Veterans/Disabled. CCPA Disclosure Notice Here", "summaryDescription" : "Cybersecurity Analyst at SkyePoint Decisions. Skills: Cybersecurity, NIST SP 800-53, FISMA compliance. Support Security Standards HS. Provide cyber and technology security experience", "postedDate" : "2026-06-12T21:39:27.187", "createdAt" : "2026-06-12T21:39:27.187", "lastUpdated" : "2026-06-15T00:47:32.599", "ingestTimestamp" : "2026-06-12T21:39:27.187", "mongoId" : "6a2c5dc974d8ee00a08de8b8", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 95000, "salaryAnnualMax" : 135000, "salaryBand" : "75k-100k", "hasSalary" : true, "allSkills" : [ "FISMA compliance", "NIST SP 800-53", "CIS Benchmarks", "DISA STIGs", "Research plans execution", "Cybersecurity", "Cybersecurity Architecture", "Critical Infrastructure", "Applications Development", "Business processes", "Enterprise application security", "Customer service excellence", "Business acumen", "Agile IC", "Cybersecurity domains", "Cloud identity services", "CISSP-ISSAP", "CISSP-ISSEP", "CISSP", "Security+ CE", "CySA+", "PPDA", "SNOW App Dev" ], "skillCount" : 23, "jobCategory" : "other", "jobSubcategory" : "billable-", "dataQualityScore" : 0.8888889, "_score" : 827.2763, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "IT service provider" }, { "id" : "69f9b8104c40e2acd11146b9", "title" : "Manager, Security Services Management, Worldwide Operations Security (WWOS)", "company" : "Amazon.com Services LLC", "industry" : "Investigation Loss Prevention, Program Management, Logistics", "salary" : { "min" : 127200.0, "max" : 172100.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Arlington, Virginia, USA", "locations" : [ "Arlington, Virginia, USA" ], "certifications" : [ "PMP certificate" ], "timestamp" : "2026-06-15T01:38:52.778", "fingerprint" : "fd0fb01325d75d1011d5a15a73254c8ab6db30a601625581aa6781b23ecedaaa", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.com/jobs/10386978/apply", "externalId" : "878d1fd2-c223-4721-9d86-862bb53ece0a", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Arlington", "state" : "Virginia", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "38.8769326,-77.0893094" } ], "locationText" : "Arlington, Virginia, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceLevel" : "Manager", "professionalSkills" : [ "Portfolio management", "Risk management", "Crisis management", "Security services" ], "hardSkillsList" : [ "Performance metrics", "Process improvement", "Lean techniques", "Automation", "Standardization" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Performance metrics", "level" : "intermediate" }, { "name" : "Process improvement", "level" : "intermediate" }, { "name" : "Lean techniques", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Standardization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Security services management, Program management, Cross-functional leadership", "majorSkillsList" : [ "Security services management", "Program management", "Cross-functional leadership" ], "coreResponsibilities" : "Lead the AMER region’s Security Services Management (SSM), Manage an annual budget in excess of $700MM, Oversee 16 million guarding hours, Manage security service provider administration for North America, Set a strategic vision, Establish organizational framework to facilitate daily operations, Contribute to global security strategies, Create OP1/OP2/3YP plans, Create roadmaps, Collaborate with cross-functional stakeholders, Develop security service programs, Develop effective mechanisms to meet long-term business goals, Present strategies to senior business leaders, Develop unique security service solutions, Support multiple verticals across 750+ AMER sites", "teamCollaboration" : "Cross-functional stakeholder collaboration; AMER Physical Security leadership team; AMER S&LP leadership teams; Partners in WWOS; Partners in Operations; Partners in Category Management; Partners in Finance; Partners in Legal; Partners in PXT", "projectManagementSkills" : [ "Program management", "Project management", "Roadmap creation" ], "domainKnowledge" : "Physical security; Security services management; North America remit", "domainList" : [ "physical-security", "security-services-management", "north-america-remit" ], "domainSpecificKnowledge" : [ "Physical security", "Security services management", "North America remit" ], "communicationSkills" : "Verbal communication; Written communication; Present strategies", "problemSolvingSkills" : "Data-driven improvements", "qualificationsBasic" : "5+ years of working cross functionally with tech and non-tech teams, 5+ years of team management, 5+ years of cross functional project delivery, 5+ years of program or project management, Experience defining program requirements, Experience using data and metrics to determine improvements, Experience with performance metrics, Experience with process improvement, Experience with Lean techniques, Experience delivering cross functional projects, Experience implementing repeatable processes, Experience driving automation or standardization, Bachelor's degree", "qualificationsPreferred" : "Experience managing, analyzing and communicating results to senior leadership, PMP certificate, Master's degree", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Manager, Security Services Management leads the AMER region’s Security Services Management (SSM) team, comprised of 6 performance and program managers. This leader is responsible for an annual budget in excess of $700MM, which represents approximately 16 million guarding hours. The role consists of portfolio management, execution of a region-wide support strategy, and Security Service Provider (SSP) administration for the North America remit. The Manager, Security Services Management sets a strategic vision, and organizational framework, to facilitate daily operations. They contribute to global security strategies through OP1/OP2/3YP planning, roadmap creation, and cross-functional stakeholder collaboration. The Manager, Security Services Management is a critical member of the AMER Physical Security and AMER S&LP leadership teams. They collaborate with partners in WWOS, Operations, Category Management, Finance, Legal, and PXT to develop security service programs that meet critical business objectives. The role requires technical expertise in physical security, risk management, crisis management, and the aptitude to develop effective mechanisms to meet long-term business goals. This role requires an experienced leader, proficient in verbal and written communication, who can present strategies to senior business leaders. The Manager, Security Services Management is accountable for developing and implementing unique security service solutions that support multiple verticals, across 750+ AMER sites. These include Fulfillment Centers, Sort Centers, Amazon Logistics Delivery Stations, Amazon XL Delivery Stations, Global Specialty Fulfillment, Reverse Logistics, Amazon Air, Retail, and Amazon Pharmacy. Basic Qualifications: - 5+ years of working cross functionally with tech and non-tech teams experience - 5+ years of team management experience - 5+ years of cross functional project delivery experience - 5+ years of program or project management experience - Experience defining program requirements and using data and metrics to determine improvements - Experience with performance metrics and process improvement and Lean techniques - Experience delivering cross functional projects - Experience implementing repeatable processes and driving automation or standardization - Bachelor's degree Preferred Qualifications: - Experience managing, analyzing and communicating results to senior leadership - PMP certificate - Master's degree Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, IL, Chicago - 127,200.00 - 172,100.00 USD annually USA, MI, Birmingham - 127,200.00 - 172,100.00 USD annually USA, TN, Nashville - 114,500.00 - 160,000.00 USD annually USA, VA, Arlington - 127,200.00 - 172,100.00 USD annually USA, WA, Seattle - 127,200.00 - 172,100.00 USD annually", "summaryDescription" : "Manager, Security Services Management, Worldwide Operations Security (WWOS) at Amazon.com Services LLC. Skills: Security services management, Program management, Cross-functional leadership. Lead the AMER region’s Security Services Management (SSM). Manage an annual budget in excess of $700MM", "postedDate" : "2026-06-13T03:51:12.592", "createdAt" : "2026-06-13T03:51:12.592", "lastUpdated" : "2026-06-15T01:38:52.778", "ingestTimestamp" : "2026-06-13T03:51:12.592", "mongoId" : "69f9b8104c40e2acd11146b9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.com/jobs/10386978/apply", "salaryAnnualMin" : 127200, "salaryAnnualMax" : 172100, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Performance metrics", "Process improvement", "Lean techniques", "Automation", "Standardization", "Leadership", "Security services management", "Program management", "Cross-functional leadership", "Portfolio management", "Risk management", "Crisis management", "Security services", "Project management", "Roadmap creation", "Physical security", "North America remit", "PMP certificate" ], "skillCount" : 18, "jobCategory" : "marketing", "dataQualityScore" : 1.0, "_score" : 826.36975, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 158948, "totalPages" : 3179, "hasNext" : true, "hasPrevious" : false } }

Senior Cybersecurity Operations Specialist Security Services Jobs in Toronto

Senior Cybersecurity Operations Specialist (Security Services)

Cybersecurity Network Security Specialist

Cybersecurity Network Security Specialist

Senior Cybersecurity Operations Specialist

Senior Cybersecurity Specialist - SOC, Security Operations (f/m/x)

Senior Cybersecurity Governance Specialist

Cybersecurity Specialist

Senior Cybersecurity Advisor

Cybersecurity GRC Specialist

Senior Security Specialist

Senior Cybersecurity Architect, Agentic SOC Modernization & AI-Enabled Security Operations

Senior Manager, Cybersecurity

Security Senior Specialist

Senior Cyber Security Specialist

Senior Cyber Security Specialist

Cybersecurity Engineer

Senior Staff Cybersecurity Engineer, Platform Security

IT & Cybersecurity Manager

Senior Security Operations Analyst

Senior Consultant, Cybersecurity

Senior Security Assurance Specialist

Senior Security Risk Specialist

Senior Cybersecurity Engineer

Senior Security Engineer

Cybersecurity Analyst, IT Operations

Security Specialist

Senior Security Engineer

Cybersecurity Engineer

Sr. Cybersecurity Operations Analyst

Principal / Lead Software Engineer (Cybersecurity Specialist)

Cybersecurity Analyst

Senior Security Operations Engineer

Senior Cybersecurity Engineer

Security Compliance Specialist, Devices & Services Security Compliance

Technology Operations & Cybersecurity Analyst

Cybersecurity Intern, Security Operations

Senior Information Security Compliance Specialist

Cybersecurity Manager (Incident Response & Security Operations)

Security & LP Specialist, Worldwide Operations

Cybersecurity Analyst

IT Security Ops Specialist

Senior Solutions Architect - Security Specialist

Senior Cybersecurity Engineer

IT Security Ops Specialist

Cybersecurity Policy Developer

Security Specialist II

Security Assurance Specialist (Regulatory Operations Center)

Spécialiste en cybersécurité - Cyber Security Specialist

Cybersecurity Analyst

Manager, Security Services Management, Worldwide Operations Security (WWOS)

Common Questions