Ccsp jobs in Hoboken, New JerseyCreate job alerts

Job Description *This position is hybrid in: • Plano, TX,, • NY, NY, • Pennington, NJ, • Jersey City, NJ OUR COMPANY: EOS IT Solutions is a Global Technology and Logistics company, providing Collaboration and Business IT Support services to some of the world's largest industry leaders, delivering forward-thinking solutions based on multi-domain architecture. Customer satisfaction and commitment to superior quality of service are our top business priorities, along with investing in and supporting our partners and employees. We are a true International IT provider and are proud to deliver our services through global simplicity with trusted transparency. WHAT YOU WILL DO: We're seeking a Principal Architect with deep expertise in Perimeter/DMZ architectures, network segmentation, and secure ingress/egress across on‑premises and cloud environments. This leader will drive the target-state design, standards, and roadmap for perimeter security and service exposure while enabling end‑to‑end self-service capabilities. KEY RESPONSIBILITIES: • Define and evolve target-state perimeter/DMZ architectures., • Develop segmentation and secure ingress/egress patterns for hybrid/multi‑cloud., • Lead the architectural roadmap aligning Cloud and Middleware capabilities., • Establish reference architectures and automation-first patterns., • Drive Zero Trust-aligned designs, security guardrails, and compliance., • Partner with Cloud, Network, Security, and Middleware teams to deliver self-service and frictionless developer enablement., • Guide architectural governance, design reviews, and PoC implementations. ESSENTIAL CRITERIA: • 10+ years in network/security architecture., • Expertise in cloud networking and perimeter technologies (AWS/Azure/GCP)., • Strong knowledge of WAF, NGFW, API gateways, service mesh, and identity., • Proficiency with Infrastructure-as-Code and policy-as-code., • Excellent communication and stakeholder leadership. DESIRABLE CRITERIA: • Certifications such as CCSP, CISSP, cloud architect certs., • Experience with developer self-service platforms., • Knowledge of Zero Trust, API security, and observability. The EOS pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, experience, education, knowledge, skills, and abilities, as well as internal equity, market data, or other laws. EOS is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at EOS regardless of your gender; gender identity; gender reassignment; age; religious or similar philosophical belief; race; national origin; political opinion; sexual orientation; disability; marital or civil partnership status or other non-merit factor. #INDNAMER #LI-HH1 Pay Range$170,000—$200,000 USD

Job DescriptionPlease note: This position description is for RFQ response. There is no active vacancy at this time.About FedSync: Since our inception, FedSync has stood for Accountability, Integrity, Teaming, Value, Innovation, and Quality-the core values that define who we are. Our vision is to collaborate with innovative, forward-thinking leaders to deliver solutions that look beyond today. Our mission is to provide the federal government with proven, innovative solutions that transform organizations by equipping them with the right tools and people to meet tomorrow's challenges. At FedSync, our people matter-both our employees and our clients. Position Overview The Cybersecurity Analyst proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive DOE data and maintain enterprise resilience. This role drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization's security posture. Five (5) Cybersecurity Analysts are required for this engagement. Work will be a hybrid schedule withe 3 days in the office and 2 days of telework. Key Responsibilities • Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of DOE systems, applications, and data assets., • Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments., • Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization., • Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact., • Monitor, analyze, and detect cybersecurity threats across multiple security domains including Security Operations (SOC), Cloud Security, Infrastructure Security, Information Protection, and Data Protection., • Monitor security alerts through the SIEM platform and execute immediate triage and incident response protocols., • Conduct proactive threat hunting to identify hidden threats and adversary behavior., • Implement, tune, and manage DLP controls across endpoints, email, and cloud collaboration platforms., • Ensure alignment with federal and regulatory security standards (NIST, FISMA) and internal cybersecurity policies., • Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments. Minimum Qualifications • 5+ years of experience in cybersecurity analysis, security operations, or a related field., • Demonstrated experience performing threat triage, incident response, and risk analysis., • Proficiency with SIEM platforms, vulnerability scanners, and cloud security tools., • Working knowledge of NIST and FISMA compliance frameworks., • Experience supporting security in large enterprise or public-sector environments preferred. Required Certifications (one or more) • CISSP, CompTIA Security+, CompTIA CySA+, • CEH (Certified Ethical Hacker), • GCIA, GCIH, CISA, or CCSP Technologies & Tools • SIEM: Devo / Splunk, • Vulnerability Scanners: Rapid7 / Armis, • Cloud Platforms: AWS / Azure, • Wireshark, SQL, Python, MS Power BI, Microsoft Office Suite Acceptable background check including criminal history background check and credit Check.

Job Description About Child Mind Institute We're dedicated to transforming the lives of children and families struggling with mental health and learning disorders by giving them the help they need. We've become the leading independent nonprofit in children's mental health by providing gold-standard evidence-based care, delivering educational resources to millions of families each year, training educators in underserved communities, and developing tomorrow's breakthrough treatments. Position Details: As part of the IT team, you will report to Director of Information Security. As the Senior Cybersecurity Engineer, you will be responsible for designing, implementing, and managing security solutions to protect enterprise systems, applications, and data. You will assess risks, identify vulnerabilities, and apply security controls to strengthen cybersecurity posture and you will collaborate with teams across the organization, provide expertise in security architecture, and contribute to threat detection, incident response, and compliance efforts. Additionally, you will be managing security tools, developing best practices, and ensuring alignment with industry standards and frameworks. This is an exempt, full-time position which requires a minimum of four (4) days per week in the office, on a schedule determined by your supervisor in our NYC office. The in-office requirement and schedule are subject to change based on the needs of the program and the organization. You Will: · Implement Security Requirements & Risk Management: Define and document cybersecurity requirements for networks, systems, and applications, ensuring compliance with the Risk Management Framework. · Vulnerability Management & Threat Response: Conduct regular security scans, monitor IDS/third-party alerts, and respond to threats by identifying and mitigating vulnerabilities. · Security Architecture & Implementation: Collaborate with designing and deploying security controls, authentication mechanisms, and enterprise security solutions to protect systems, applications, and data. · Incident Response & Threat Hunting: Support with security investigations, execute incident response procedures, and develop threat hunting methodologies. · Security Tool Management & Optimization: Manage vulnerability scanning tools and integrate findings into security operations. Drive security initiatives that enhance organizational resilience and eliminate cyber threats. · Policy & Documentation: Develop and maintain security policies, SOPs, playbooks, and work instructions to support consistent and effective security practices. · Collaboration & Expertise: Work closely with system engineers, security leadership, and management to strengthen cybersecurity across the enterprise. · Perform additional job-related duties as assigned. You Have: · Bachelor's degree in information technology (or a related field) · 5 years of relevant work experience or an equivalent combination of education and experience. · Licenses or technical certifications, such as CISSP, CISM, COMPTIA, CCSP, CISA, CEH, etc. · Familiarity with MS Office, Google Workspace, or relevant software. Our Benefits Our great compensation package and benefits include medical insurance, 401(k), paid parental leave, dependent care, discounted tickets and entertainment perks programs. For more information about our benefits, please visit our employee benefits website. Pay Range The salary range for the position is posted. Factors such as candidate's work experience, education/training, job-related skills, internal peer equity, as well as market and business considerations affect the salary offered within this range. In addition, this salary may be subject to a geographic adjustment (according to a specific city and state and depending on the role), if an authorization is granted to work outside of the location listed in this posting. EEO Disclaimer Child Mind Institute is committed to fostering an inclusive and equitable workplace where all individuals are treated with respect and dignity. We are proud to be an equal opportunity employer and prohibit discrimination and harassment of any kind.

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC! ROLE AND RESPONSIBILITIES: The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk. They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions. Responsibilities: Vulnerability & Threat Management • Conduct vulnerability assessments across containerized and traditional infrastructure, • Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases., • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few., • Lead remediation efforts and track vulnerability lifecycle management, • Analyze security alerts and incidents, performing root cause analysis, • Contribute to threat hunting activities and security monitoring Security Platform Architecture support and administration • Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms, • Manage security aspects of VMware infrastructure, storage systems, and network segmentation, • Configure and maintain authentication systems (SAML, RADIUS) and identity management platforms such as OKTA. Security Tools Administration & Management CyberArk Privileged Access Management • Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components, • Configure privileged account onboarding, password management policies, and access workflows, • Implement CyberArk integrations with Active Directory, applications, and infrastructure systems, • Manage CyberArk clustering, disaster recovery, and high availability configurations, • Troubleshoot CyberArk performance issues and optimize system configurations Splunk Enterprise & Security Operations • Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders, • Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection, • Develop custom Splunk searches, dashboards, and alerts for security use cases, • Manage Splunk data models, knowledge objects, and correlation rules, • Optimize Splunk performance, storage management, and cluster operations Vulnerability Management & Security Testing • Administer Tenable Security Center and Nessus scanning infrastructure, • Configure vulnerability scanning policies, schedules, and remediation workflows, • Integrate vulnerability data with other security tools and ticketing systems, • Develop custom vulnerability reporting and metrics dashboards, • Coordinate vulnerability assessment activities and penetration testing support Security Orchestration & Response (SOAR) • Implement and maintain SOAR platforms for security automation, • Develop automated playbooks for incident response, threat hunting, and remediation activities, • Create custom integrations between the SOAR platform and existing security tools, • Design automated workflows for security alert triage and response coordination, • Maintain SOAR platform performance and troubleshoot automation issues System Administration & Infrastructure • Test disaster recovery, and business continuity procedures for security systems Security Operations Support • Provide Level 2/3 technical support for security incidents and tool-related issues, • Participate in incident response activities and forensic investigations, • Develop and maintain security procedures and troubleshooting guides, • Support 24/7 security operations center (SOC) activities and on-call rotation, • Collaborate with security analysts to optimize detection rules and reduce false positives Compliance & Governance • Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits, • Maintain security tool documentation, configurations, and change management procedures, • Implement logging and audit trail requirements for compliance frameworks, • Develop security metrics and KPI reporting for management and auditors, • Ensure security tools meet data retention and privacy requirements Cross-functional Collaboration • Partner with IT infrastructure teams on security tool deployment and maintenance, • Collaborate with application development teams on security tool integrations, • Work with network teams to implement security monitoring and traffic analysis, • Support risk management activities with technical security assessments, • Provide security expertise for project planning and technology implementations Desired Qualifications: • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience, • Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent, • Vendor-specific certifications: CyberArk Defender/Sentry, Splunk Certified Admin/Architect, Tenable Certified Security Practitioner Technical Skills - Core Platform: Security Tools Proficiency (3+ years each) • CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment, • Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization, • Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning, • SOAR Platforms: Hands-on experience with security orchestration tools (Phantom, Demisto, IBM Resilient, or similar) System Administration (5+ years combined) • Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation, • Windows Server administration including PowerShell scripting and Active Directory integration, • Network security concepts and implementation (firewalls, IDS/IPS, network segmentation) Security Specializations • Enterprise PKI and certificate management, • Log aggregation, analysis, and correlation techniques, • Incident response procedures and forensic analysis, • Threat intelligence integration and threat hunting methodologies, • Security automation and orchestration best practices Professional Experience • 4+ years of cybersecurity experience with focus on enterprise security tools, • 4+ years of hands-on system administration in enterprise environments, • Experience with self-hosted, on-premises security infrastructure, • Proven track record of security tool implementations and migrations, • Experience participating in and supporting compliance audits and regulatory requirements Additional Skills • Strong scripting abilities (Python, Bash, PowerShell) for automation and integration, • Experience with API integration and custom security tool development, • Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred, • Understanding of DevSecOps practices and CI/CD pipeline security, • Excellent troubleshooting and analytical problem-solving skills, • Strong documentation and technical writing capabilities Key Competencies • Technical Leadership: Ability to serve as subject matter expert across various Security tool sets., • Problem-Solving: Advanced analytical skills for complex security tool issues and integrations, • Communication: Ability to explain technical concepts to both technical and non-technical stakeholders, • Project Management: Experience leading security tool implementations and upgrades, • Continuous Learning: Commitment to staying current with emerging security technologies and threats Preferred Qualifications • Degree in Cybersecurity or related field, • Experience in regulated industries (government), • Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications, • Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike, • Background in security architecture and enterprise security frameworks *The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process. Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at www.mettel.net

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Sia’s Cybersecurity team is the powerhouse of our firm’s innovation. With over 350 experts worldwide, we tackle projects from proof-of-concept to large-scale deployment, always pushing the boundaries of AI capabilities. By joining Sia’s Cybersecurity team, you’ll step into a vibrant, collaborative environment that nurtures professional growth and empowers you to shape the future of consulting. Job Description You will join Sia Partners’ Cybersecurity, Data Protection and Resilience Global Business Line. In accordance with your skills and expertise, you will work - in Consulting, Implementation and Audit - on one or more of our following offers: Strategy, Risk, Compliance, Operations, Data Protection, Offensive Security, Resilience and Training. Key Responsibilities • Manage end-to-end projects or be responsible for sub-projects of a complex and/or international project, on which you will ensure relevant, proactive and regular reporting to the Manager and Client to ensure that our commitments are met., • Take part in business development through the design and development of commercial proposals, as well as by identifying new opportunities and clients., • Manage the client relationship on your missions and build a solid relationship with your contacts on the client side, at middle management level, who recognize you as an expert for your assigned tasks., • You will be responsible for the management of consultants in the context of missions or internal projects, where you will act as a reference and relay for the Manager/Senior Manager regarding the follow-up of projects, the validation of deliverables, the evaluation of achievements, and above all you will ensure the development of their soft and hard skills. In addition, as part of your participation in the internal development of the firm, you will contribute to: • Innovation within our Sia CyberLab, where you will work on the development of new offers and SaaS solutions around advanced technologies and capitalizing on our unique know-how in AI. You will also carry out benchmarks and PoC of Cyber solutions on the market, while participating in the active monitoring of Cyber news., • The firm's eminence, around our Cybersecurity expertise, by actively contributing to the publication plan (articles, white papers, studies, webinars, etc.), and represent the firm at various professional clubs, trade shows and events. Qualifications Graduated with a Cybersecurity degree or a related field from an accredited college/university, you have at least 3 years of experience with a consulting firm or a Cybersecurity solutions/services provider/integrator. • You master some Cybersecurity standards, norms and/or reference systems of the market, notably ISO 270xx, SANS, NIST, etc., • You have actively participated in successful projects/missions where you have developed a solid knowledge of at least two of our 8 offerings listed above;, • You have a general knowledge of IP networks, operating systems (Unix/Linux, Windows and/or MacOs), Cloud (AWS, Azure and/or GCP), applications (Web Server, DB, Middleware, etc.) as well as cryptography; knowledge in Blockchain would be a real plus;, • You are familiar with the major market solutions and technologies of: Endpoint Security, VPN, VSX, Proxy/Reverse Proxy, EDR, IAM, MDM, DLP, CASB, Office 365 Security, etc.;, • CISSP, Security + OSCE, OSEE, OSCP, OSWE, CCSP, SSCP, CSSLP, HCISPP, CISM, C-CISO, CISA, SANS SECXXX, CEH, LTP, GCIH, GCFA, GPEN, GXPN, GWAPT, GCFE, GCIA, ISO 27001 LI/LA, ISO 27005 RM, ISO 22301 LI/LA, AWS Certified Security, M-AZ 500 Preferred *An exception will be made for high potential profiles who do not have these certifications. They will join our internal Cyber Training program within the Sia Cyber Institute for the preparation of Cybersecurity certifications. Attributes for Success • You actively participated in successful projects where you have developed expertise around the missions listed in the job description, • You have an excellent culture in Cybersecurity and dispose of a strong appetite for solving complex technical problems, • You are a supportive team player who actively develops relationships and is eager to share knowledge with colleagues and our clients, • You are intellectually curious and have the entrepreneurial spirit to invest in the development of innovative offers and solutions, • You wish to join a stimulating and fulfilling professional environment, where you will share the values of expertise, innovation, customer satisfaction and a results-oriented culture, • You wish to evolve quickly and take responsibilities on high stakes subjects within a young, dynamic and supportive team, • You have a strong drive and commitment to deliver high quality work while ensuring that client expectations and deadlines are met. Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation Annual base salary between $130,600 to $135,700 (commensurate with experience and qualifications) Annual performance based discretionary bonus Robust Health Coverage 3 Medical plans Dental and Vision Life, AD&D and other voluntary insurance Tax-Advantaged Accounts 401K retirement plan 4% matching and 100% vested upon enrollment Health Savings Account (HSA) Flexible Spending Account (FSA) Health, Dependent Care, Commuter Family Friendly Benefits 100% paid parental leave for all new parents with eligible tenure Building Healthy Families program if enrolled through Medical plan Time Off to Recharge Generous Paid Time Off (PTO) policy 9 company holidays plus 1 floating holiday Extras that Make Life Easier College savings and student loan repayment assistance Monthly cell phone stipend Access to wellness programs at no cost if enrolled through Medical plan, including: Gym membership reimbursement LiveHealth Online virtual care Personalized support from a Well-being Coach Employee Assistance Program at no cost Free confidential counseling and emotional support services On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco- are expected to live within a reasonable commuting distance and attend the office at least three days or more per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H1-B visa, F-1/OPT) or STEM OPT, TN, etc). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job Description Our client is an established, privately held, growing, New York-area government contractor. Our client’s focus is in providing Information Technology (IT) Services to city, state and federal government clients. We are currently seeking a skilled IT Cloud Specialist to work in a full-time onsite role on a large scale project at a client location in Manhattan, New York City / Newark, New Jersey. Reporting to the IT Project Manager, the IT Cloud Specialist is responsible for assisting in the design, implementation, management, and support of cloud computing networks utilizing Virtual Desktop Infrastructure (VDI), Azure Virtual Desktop (AVD) and Citrix technologies to ensure a smooth end-user experience, optimal performance, and strong security across the IT infrastructure. The ideal candidate will have relevant technical education / certifications, 5+ years of IT cloud computing experience and strong technical expertise in VDI, Citrix, and AVD. Experience in Construction or Building related organizations is highly desirable. Must be solution and customer-focused with effective communication skills, and demonstrated ability to meet user needs with IT cloud solutions. PRIMARY RESPONSIBILITIES INCLUDE: • Configure, implement, manage, maintain, troubleshoot and support IT cloud solutions within Microsoft Azure and Citrix Cloud., • Configure, install and update cloud software, manage user accounts and monitor networks and system performance., • Assist in designing, deploying, and managing VDI solutions such as Citrix XenDesktop / XenApp or Microsoft AVD., • Manage documentation, contribute to improvement efforts, and automate processes using scripting., • Oversee VDI image management, troubleshoot and resolve issues related to Citrix VDI and AVD, ensuring high availability and disaster recovery, monitoring performance, and collaborating with IT security teams to enforce security policies., • Work closely with Project Management, IT, Engineering and other stakeholders. Ensure that cloud solutions and systems perform properly and that all business requirements are successfully met., • Implement and support new client requirements and customizations., • Consistently engage with clients and stakeholders to maintain relationships and ensure high levels of satisfaction. CANDIDATE REQUIREMENTS INCLUDE: • Bachelor’s Degree in Computer Science, Information Technology, or closely related field. Relevant IT cloud certifications such as Microsoft Azure, AWS Cloud, Google Cloud, CompTIA Cloud+ or Certified Cloud Security Professional (CCSP). Other VDI-related certifications such as VMware VCP-DTM, Citrix CCA-V/CCP-V, or Microsoft AZ-140 a plus., • 5+ years of experience implementing, managing and supporting large scale IT Cloud networks and platforms., • Prior experience in Construction or Building-related organizations is highly desirable., • Experience managing VDI, including Citrix and/or Microsoft AVD. Hands-on experience with Citrix Virtual Apps and Desktops, Citrix ADC, and Citrix Cloud services. Proficiency in Windows Server administration, Active Directory, and networking concepts required. Proficient knowledge of the VDI stack and experience with scripting languages like PowerShell. Familiarity with monitoring tools for Citrix environments (Citrix Director)., • Experience with other virtualization technologies (VMware, Hyper-V), and knowledge of security best practices for virtualization and remote access., • Ability to work in a fast-paced environment and manage multiple tasks simultaneously., • Experience with Project Management principles and practices such as ITIL, Scrum, LEAN, Agile, or DevOps., • Effective problem-solving and relationship-management skills. Prior experience collaborating closely with users, clients, stakeholders and technology suppliers to resolve technical issues., • Excellent verbal, written and interpersonal communication skills with users, clients, team members, technical staff, and management. Able to interface, communicate and maintain effective relationships with team members and all levels of management on an ongoing basis and work as a trusted IT professional., • Proficient in Microsoft Office Suite (Word, Excel, PowerPoint, Outlook) for use in communication, analysis & tracking., • Key Competencies: Collaborative Work Style, Customer Service Focused, Problem-Solver, Professional, Resourceful, Results-Focused, Solutions Focused, Self-Motivated, Team-Player., • Must be able to pass a required background check and/or security clearance to work on government projects., • Legal authorization to work in the U.S. is required. The company will not sponsor individuals for employment visas for this job at this time. POSITION LOCATION: Onsite-based role in New York, NY / New Jersey. Must be able to commute daily to New York City. TEAM RESPONSIBILITY: Serve as a key member of the client's IT team. Collaborate with internal team members, users, clients and vendor partners. Mentor team members. KEY RELATIONSHIPS / STAKEHOLDERS: • IT Project Manager, • Internal Team Members, Users, Clients and SME's, • Client and Technology Partners RELOCATION ELIGIBILITY: No relocation assistance provided. Local, qualified New York City metro area candidates will be given preference and priority. Qualified candidates willing to self-relocate to the New York City metro area will also be considered. COMPENSATION & BENEFITS INFORMATION: • Base Salary Range: $120,000 - $150,000, commensurate with experience and qualifications, • Benefits Include: Health & Dental Insurance, Paid Time Off, 401-K with match, FSA, Company Paid Training, etc. POSSIBLE COMPARABLE TITLES: • IT Cloud Engineer, • IT Cloud Architect, • IT Cloud Administrator, • IT Cloud Consultant, • DevOps EngineerCompany DescriptionTalent Solution Partners is a full-service Talent Acquisition and Solutions Firm. Our primary focus is the placement of senior-level professionals and executives for clients in Healthcare, Consumer Products, Business-to-Business Services and related industries. Visit us at: www.TalentSolutionPartners.comTalent Solution Partners is a full-service Talent Acquisition and Solutions Firm. Our primary focus is the placement of senior-level professionals and executives for clients in Healthcare, Consumer Products, Business-to-Business Services and related industries.\r\n\r\nVisit us at: www.TalentSolutionPartners.com

ISE is hiring an Embedded AI Content Security Engineer to partner with the team at select clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

Parachute Health is transforming post-acute care through the leading digital ordering platform for medical equipment and supplies. We replace the outdated, error-prone paper and fax process, which negatively impacts over 30 million patients annually, with a system that’s 10 times faster. Our platform connects a vast network of Home Medical Equipment (HME) providers, clinicians, and payors across all 50 states, ensuring millions of patients get the life-saving products they need quickly and efficiently. Join our team and make a difference in patient care. You'll be the software engineer embedded in Parachute Health's IT & Security team, building the internal platforms, automations, and AI-powered workflows that keep our healthcare technology environment secure, compliant, and operationally efficient. You'll write code that touches on identity, endpoint, network, cloud security, compliance, evidence collection, and incident response in an environment governed by HITRUST, SOC 1, and SOC 2. Internal tooling & automation • Design, develop, and maintain internal applications and automations that eliminate manual IT/Security work, including provisioning, access reviews, compliance evidence collection, audit preparation, and ticket triage., • Develop and maintain integrations across the security and IT stack, including Okta, Zscaler, Splunk/Wazuh, Lacework, Drata, Datadog, AWS, GCP, GitHub, and n8n., • Package, deploy, and operate IT/Security tooling using Parachute's standard deployment patterns and observability stack. AI & agentic workflows • Architect agentic AI workflows for IT and Security operations, including automated alert triage, log correlation, root-cause analysis, guided remediation, access-review automation, and audit evidence collection., • Build the context layer (MCP servers, retrieval pipelines, and embeddings) that grounds AI agents in Parachute-specific systems, policies, and runbooks., • Drive AI adoption across the IT/Security team through pairing, architecture reviews, and reusable skills/plugins/workflows., • Build an MCP-based agent that automates audit evidence collection from multiple sources, • Replace manual access-review workflows with an agentic pipeline Security • Develop, tune, and maintain SOAR/SIEM detections, dashboards, and correlation rules in Splunk/Wazuh., • Support threat hunting, incident investigation, pen test, and/or red teaming, and forensic analysis with custom tooling and queries (Redshift, BigQuery, log platforms), • Apply MITRE ATT&CK, NIST CSF, and HITRUST CSF to guide detection engineering and control implementation., • Contribute to SOC runbooks, SOPs, and automation playbooks (SOAR). Security audits & reliability • Automate compliance evidence collection and control validation across SOC 2, HITRUST CSF, HITRUST AI, and HIPAA., • Participate in an on-call rotation for IT/Security incidents; contribute to post-incident reviews and continuous improvement., • Maintain stable, performant, and auditable internal application stacks., • 2+ years of writing production code in a web-based environment., • Professional experience with Ruby on Rails, and/or Python, and/or JavaScript/TypeScript (React, Node.js)., • Hands-on experience with AWS (IAM, EC2, ECS/EKS, S3, RDS, Lambda) and infrastructure-as-code., • Demonstrated experience integrating with REST/GraphQL APIs and building automations across SaaS platforms., • Working knowledge of at least one compliance framework - SOC 2, HITRUST, HIPAA, ISO 27001, or NIST., • Security-first mindset: you think about least privilege, secrets handling, PHI exposure, and audit trails by default., • Strong fundamentals in data structures, design patterns, and TDD., • Must reside in the U.S., • Experience building agentic AI systems in production - agent architectures, tool integration via MCP, retrieval-augmented generation, evaluation frameworks., • Experience setting up AI development environments and driving AI adoption across a technical team., • Familiarity with our stack: Okta, ZScaler, Splunk/Wazuh, Lacework, Drata, Datadog, n8n workflows and/or Argo workflows., • SIEM detection engineering or SOC tooling experience (Splunk SPL, Wazuh rules, Sigma)., • Healthcare technology background - exposure to HIPAA, PHI handling, or DME workflows., • Security or cloud certifications (CCA-F, CISSP, CCSP, AWS Security Specialty, OSCP)., • Experience as a technical lead bridging IT, Security, Engineering, and Compliance stakeholders., • Proficient in SQL (Redshift, BigQuery) for forensic and operational analytics. Benefits • Medical, Dental, and Vision Coverage: Comprehensive plans with options for low-to-no-cost premiums., • Employer HSA Contribution: Company-funded contributions to your Health Savings Account., • 401(k) Retirement Plan, • Equity Incentive Plan, • Annual Company-Wide Bonus: Opportunity for up to 15% bonus based on company performance., • Remote-First Culture: We are remote-first with a dedicated NYC office and reimbursement options for co-working spaces., • Flexible Vacation Policy, • Summer Fridays: 5 additional Fridays off during the summer (separate from PTO)., • Home Office and Wellness Stipend, • Monthly Internet Stipend, • Annual Learning and Development Stipend Base Salary Band (based on experience and level) $80,000 - $120,000 California job applicants may access the Notice of Collection of Personal Information and Privacy Policy with information and rights required by the California Privacy Rights Act (CPRA) the link _. We are proud to be an equal opportunity employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth related medical conditions and lactation), gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, disability, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances. This role is not eligible for employer visa sponsorship. Applicants must be legally authorized to work in the United States at the time of application and for the duration of employment. The Company does not sponsor employment authorization for this position, nor will it provide assistance in obtaining temporary work authorization

ISE is hiring an Embedded Content Security Engineer to partner with the team at one of our large clients in the media and entertainment industry. This role is particularly focused on AI and machine learning security, though responsibilities extend across the technology stack, including infrastructure and application security. The term “embedded” refers to the collaborative, integrated nature of the work, not embedded systems or IoT devices. What you’ll do at ISE: • Act as a subject matter expert on AI security, advising internal teams and external partners on best practices related to AI/ML technologies, • Stay ahead of emerging trends in AI threats, particularly those relevant to media and entertainment workflows, • Lead initiatives to build and enhance offensive testing capabilities for both AI and non-AI applications, • Conduct in-depth technical assessments of AI-enabled systems and deliver actionable insights to technical and non-technical stakeholders, • Support broader security reviews, including infrastructure (on-prem and cloud), appli-cations, content editing/transfer platforms, and media workflows., • Publish secure configuration guidance and work with vendors to assess and improve their content protection strategies., • Dedicate 50%-100% of time per week to one large client, • Travel to the Los Angeles, CA area on a regular basis: once every one or two months What you bring to the table: • Bachelor's degree in Computer Science, Engineering, Data Science, or a related field (Master’s degree preferred), • 7+ years of experience in cybersecurity, preferably with a focus on offensive security and technical assessments, • Demonstrated experience designing and securing infrastructure and cloud-native applications, • Proficiency with major cloud platforms (AWS, Azure, GCP), especially with respect to deploying and evaluating AI/ML solutions, • Ability to distill complex security findings for a non-technical audience, • Solid understanding of traditional infrastructure security technologies, including storage, VPNs, firewalls, directory services, and endpoint protection, • AI/ML certifications (e.g., AWS Certified ML, Azure AI Engineer) are a plus, • Information security certifications such as CISSP, CCSP, OSCP are also beneficial. Salary: $140K-$170K, depending on experience. If you don't think you meet all the criteria above but are still interested in the job, please apply. Nobody checks every box, and we're looking for someone excited to join the team. What we bring to the table: • Check out joinise.io for full details, • Work that matters; projects that impact people’s everyday life and wellbeing, • Quality, integrity, dedication, and education: our core values, • Life balance: flexible schedule, work from home options, unlimited vacation, • $0 health premium plan option, including spouse and family, • Opportunities to research and publish, speak at major security events and conferences, • Leadership and peers that support and mentor you: your growth is our growth, your success is our success, • Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk or find a sofa How you’ll learn at ISE: Everyone has a mentor, or two or three sometimes. We hold you and ourselves accountable for your advancement. You’ll learn directly from your mentor, your colleagues, resources vetted by the team, and at regular firetalk lunches by your peers – oh, and lunch is on us once a week in the office. You also have access to paid training, workshops, university courses, certification courses, and we’ll pay for the certs too. Want to learn a new skill that you aren’t currently using but want to? Great! Innovation is key–new technology is important. About ISE: ISE is an independent security consulting and software firm headquartered in Baltimore, Maryland, dedicated to securing high value assets for global enterprises and performing groundbreaking security research. Using an adversary-centric perspective driven by our elite team of analysts and developers, we improve our clients’ overall security posture, protect digital assets, harden existing technologies, secure infrastructures, and work with development teams to ensure product security prior to deployment. Our team enjoys working in a creative, educational, and comfortable environment where they can thrive professionally. Building a Better Community: We value different viewpoints and fresh perspectives. We embrace people who challenge our thinking and question the status quo. We are opposed to narrow minded, exclusionary, and discriminatory viewpoints or practices that inherently undermine our creative process, hinder growth, and impede innovation. Need more info? Be sure you spend some time at www.ise.io. Make sure you look through all the perks on the Careers page, then check out our Research and Blog, our events page for the IoT Village, and About page. Follow us on Twitter @ISEsecurity and @IoTvillage

Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit _. The Sr. Director – Customer Security & Trust is a senior, customer-facing security leader responsible for representing the company’s security posture to prospects and current customers. This role partners closely with Sales, Product, Engineering, Legal, Compliance teams to lead technical security conversations, support pre-procurement due diligence, and build customer confidence in the company’s security architecture, controls, and operating maturity. This role requires a highly technical professional typically with a Security Architect or Principal Security Engineer background, who can articulate security related matters in a clear and credible narrative to an external technical audience, including senior cybersecurity leadership. • Serve as the primary security representative in customer and prospect engagements, including security deep dives, architecture reviews, due diligence activities and executive briefings., • Articulate security architecture, threat model, controls, and risk management approach across cloud, application, data, and identity layers., • Drive technical security discussions during pre-procurement stages, addressing customer concerns related to confidentiality, integrity, availability, privacy, and compliance., • Partner with Sales and Customer Success teams to support deal cycles by proactively addressing security objections and accelerating trust., • Act as a bridge between customers and internal security, engineering, and product teams to clarify requirements, risks, and roadmap alignment., • Maintain a comprehensive understanding of the organization’s security design, tooling, processes, and incident response capabilities to ensure accurate and consistent messaging., • Represent the company’s security program in customer-led penetration testing discussions, third-party assessments, and assurance reviews., • Contribute to the continuous improvement of customer-facing security artifacts, including security whitepapers, architecture diagrams, trust documentation, and FAQs, • Track emerging customer security expectations, regulatory trends, and industry best practices to inform security strategy and customer messaging., • 12+ years of experience in information security, with a strong background in Security Architecture, Cloud Security, Application Security and Compliance., • Proven experience leading technical security discussions with external customers, auditors, or regulators., • Deep understanding of modern security architectures across cloud (AWS, Azure, or GCP), SaaS platforms, APIs, and distributed systems., • Strong knowledge of identity and access management, encryption, network security, application security, logging/monitoring, and incident response., • Hands-on experience with security frameworks and standards such as ISO 27001, SOC2, NIST, CSA CCM, and privacy regulations (GDPR, etc.)., • Ability to translate complex technical concepts into clear, business-relevant explanations for both technical and non-technical audiences., • Excellent written and verbal communication skills, with strong executive presence., • Prior experience in a customer-facing security role such as Customer Security Architect, Security Assurance, or Trust Office roles., • Relevant security certifications (e.g., CISSP, CCSP, CISM, AWS/Azure Security certifications) are nice to have but not required, • Experience working closely with legal, compliance, and privacy teams on customer assurance topics., • This role is critical to establishing and maintaining customer trust. You will be the face of the company’s security program, ensuring customers not only understand what controls exist, but why they matter and how they are implemented. Your credibility, technical depth, and communication skills will directly impact customer confidence and business growthIf required for this role, you will:- Complete security & privacy literacy and awareness training during onboarding and annually thereafter- Review (initially and annually thereafter), understand, and adhere to Information Security/Privacy Policies and Procedures such as (but not limited to): Data Classification, Retention & Handling Policy > Incident Response Policy/Procedures > Business Continuity/Disaster Recovery Policy/Procedures > Mobile Device Policy > Account Management Policy > Access Control Policy > Personnel Security Policy > Privacy Policy Saviynt is an amazing place to work. We are a high-growth, Platform as a Service company focused on Identity Authority to power and protect the world at work. You will experience tremendous growth and learning opportunities through challenging yet rewarding work which directly impacts our customers, all within a welcoming and positive work environment. If you're resilient and enjoy working in a dynamic environment you belong with us! Saviynt is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Finite State partners with product security teams, the guardians of our connected world, to create transparency for their connected devices and supply chains. Our platform handles connected devices and embedded systems across all industries, including those found in enterprises, healthcare, utilities, connected vehicles, manufacturing facilities, critical infrastructure, and government entities. We are a fast-growing series-B company with a fully distributed workforce. Led by a team of seasoned experts, we are a mission-driven team passionate about arming our customers with the actionable insights, critical vulnerability data, and remediation guidance necessary to mitigate product risk and protect the connected attack surface. We are committed to a remote first culture. MANAGER, PRODUCT SECURITY TECHNICAL MANAGED SERVICES SUMMARY • Operational leader accountable for hands-on management, planning, and delivery of all Finite State Product Security Technical Managed Services binary firmware analysis, device penetration testing, threat and risk assessments (TARAs), SBOM/SCA generation, vulnerability response coordination, triage and remediation, and long-term engagement support for connected product OEMs and manufacturers (strategic accounts), • Drives operational design, build-out, and scale of new and emerging managed services PSIRT-as-a-Service (PSIRTaaS), EU Cyber Resilience Act (CRA) sustainable compliance, and adjacent offerings with Finite State's AI Product Security Automation Platform as the delivery spine, • Direct people manager for the Technical Services team, accountable for hiring, onboarding, mentorship, performance management, capacity planning, skills development, and utilization optimization across a multi-disciplinary team of product security engineers and analysts, • Customer-facing managed services delivery leader accountable for engagement quality, technical accuracy, schedule adherence, customer satisfaction, renewal, and expansion across the active managed services portfolio, • Cross-functional partner to Product, Engineering, Sales, Marketing, Legal, and Regulatory Advisory Services Team, channeling field-level delivery experience into platform requirements, packaging and pricing, go-to-market enablement, and regulatory positioning ESSENTIAL FUNCTIONS Managed Service Delivery Operations • Manages day-to-day execution of all active managed technical services customer engagements; ensures delivery quality, technical accuracy, schedule adherence, and consistent application of Finite State methodology across binary analysis, penetration testing, TARA, SBOM/SCA, vulnerability management, and remediation advisory, • Owns the full engagement lifecycle: scoping, statement of work, kickoff, execution, deliverable review, customer communications, and renewal/expansion planning, • Establishes, maintains, and continuously improves service delivery playbooks, technical methodologies, deliverable templates, peer review gates, and quality acceptance criteria, • Drives consistent integration of Finite State automation platform into every engagement; ensures platform capabilities are leveraged to maximum effect and that field experience feeds the platform roadmap, • Defines, monitors, and reports Service Level Agreements (SLAs), Service Level Objectives (SLOs), and engagement-level KPIs including billable utilization, time-to-deliverable, defect/escape rates, customer satisfaction (CSAT/NPS), and renewal rate, • Acts as senior technical escalation point for engagement issues, customer concerns, and complex or contested technical findings New Service Build-Out and Operationalization • Leads operational design and standup of new product security managed service offerings — PSIRTaaS, EU CRA sustainable compliance, and other emerging services — including process design, runbook authoring, tooling integration, staffing model, pricing inputs, contractual scaffolding, and SLA framework, • Partners with Product to ensure platform capabilities required for new managed services are scoped, prioritized, instrumented, and operationalized for service delivery, • Designs and operates the customer-facing PSIRTaaS function: continuous vulnerability monitoring, automated and human-assisted triage, advisory issuance, CVE coordination with the appropriate CNA, customer disclosure workflow, remediation tracking, and post-disclosure verification, • Builds the operating model for sustainable EU CRA compliance services: conformity assessment support, Annex I essential requirements mapping, vulnerability handling obligations, technical documentation maintenance, and post-market surveillance support for connected product manufacturers People Management and Team Development • Hires, onboards, develops, mentors, and retains a team of product security engineers and analysts across multiple technical disciplines (binary/firmware analysis, offensive security, embedded systems, SBOM/SCA, regulatory engineering, vulnerability management), • Sets individual performance objectives aligned to team and company OKRs; conducts regular 1:1s, delivers ongoing performance feedback, runs formal review cycles, and addresses performance issues directly and constructively, • Builds and maintains team capacity plans and skills inventories; identifies gaps and drives hiring, cross-training, certification, and external training plans to close them, • Manages utilization across the team to balance billable engagement work, capability development, and reserved capacity for new service launches and surge demand, • Cultivates a culture of technical excellence, intellectual honesty, customer empathy, peer review, and continuous learning; fosters psychological safety in a fully remote operating environment Customer Engagement and Account Management • Serves as senior delivery contact and trusted technical advisor for strategic customer accounts; owns the technical health of those relationships, • Leads recurring service reviews, escalation discussions, and quarterly business reviews; ensures customer outcomes are visible, measurable, and tied to renewal and expansion narratives, • Partners with Sales on scoping, statements of work, pricing alignment, and pre-sales technical engagement; provides expert input to deal qualification and risk, • Identifies and qualifies expansion opportunities (additional products, additional service lines, multi-year commitments) and works with Sales to convert them Financial and Operational Performance • Owns operational delivery against the Services ARR plan; accountable for margin discipline, utilization targets, and forecast accuracy, • Provides input to pricing, packaging, and capacity planning for current and new service offerings, • Tracks and reports delivery cost, gross margin per engagement, write-down and write-off rates, and other services-economics metrics; surfaces structural issues with concrete remediation proposals, • Produces timely, accurate forecasts of staffing, hiring, and external contractor needs against the demand pipeline QUALIFICATIONS EDUCATION AND/OR EXPERIENCE • Bachelor's degree in Computer Science, Mathematics, Physical Sciences, Electrical/Computer Engineering, or equivalent demonstrable experience and certifications; advanced degree desirable, • Minimum 8 years of relevant experience in product security, embedded/connected device security, application security, or offensive security — a meaningful portion delivered in a customer-facing services, consulting, or managed services context, • Minimum 4 years of direct people management experience, including hiring, performance management, mentorship, and team development, • Demonstrated experience standing up new service offerings or productizing technical capabilities within a managed services or information technology environments is strongly preferred, • Hands-on technical depth in two or more of: binary/firmware analysis, penetration testing of embedded or IoT systems, threat modeling and TARA, SBOM and software composition analysis, vulnerability management and disclosure (CVE/CNA workflows), PSIRT/ESIRT operations KNOWLEDGE, SKILLS, ABILITIES Technical • Deep working knowledge of connected and embedded device security, including firmware, microcontrollers, wireless SoCs, RTOS environments, and integrated IoT systems, • Hands-on familiarity with binary and firmware analysis tooling and methodology (Ghidra, IDA, Binary Ninja, radare2, and platform-driven equivalents), • Strong understanding of SBOM standards (SPDX, CycloneDX), VEX, software composition analysis, and vulnerability correlation against CVE/CPE/PURL, • Strong understanding of vulnerability disclosure and PSIRT operating models, including ISO/IEC 29147 (vulnerability disclosure) and ISO/IEC 30111 (vulnerability handling), CVSS v3.1/v4, and CNA operating procedures, • Familiarity with offensive security methodology applied to embedded systems, including hardware-adjacent attacks (fault injection, side-channel concepts, debug interface exploitation) at a depth sufficient to scope, review, and quality-control the work, • Working knowledge of TARA methodologies (ISO/SAE 21434 for automotive, IEC 62443-3-2 for industrial, MITRE ATT&CK and EMB3D where applicable), • Working knowledge of applied cryptography, secure protocols, secure boot, secure update, and key management as applied to embedded systems, • Ability to ramp quickly on AI and agentic AI platforms and productivity systems; familiarity with the automated firmware/binary analysis platform category and AI-assisted vulnerability triage is preferred Standards and Regulatory • Working knowledge of EU Cyber Resilience Act (CRA), including Annex I essential requirements, vulnerability handling obligations, conformity assessment routes, and post-market surveillance expectations, • Working knowledge of IEC 62443, ETSI EN 303 645, NIST IR 8259 series, NIST SSDF (SP 800-218), and US Executive Order 14028 / OMB M-22-18 SBOM requirements, • Familiarity with ISO 27001, SOC 2 Type I/II, and adjacent compliance regimes as they apply to a managed services delivery organization Managed Services Operations • Demonstrated ability to design and operate service delivery functions to defined SLAs, SLOs, and quality standards, • Demonstrated ability to manage utilization, capacity, and engagement profitability in a billable services context, • Strong project and program management capability Leadership and Communication • Excellent written and verbal communication skills; operates fluently with executives, technical individual contributors, customer technical staff, customer executives, regulators, and partners, • Strong people leadership: hiring, coaching, performance management, conflict resolution, and team building in a fully remote environment, • Demonstrated ability to translate technical findings into business and regulatory consequences for non-technical stakeholders, • Customer-facing executive presence: owns escalations, leads difficult conversations, and represents Finite State at the most senior levels of customer organizations Certifications • One or more of the following is required: CISSP, CSSLP, CCSP, GIAC (GPEN/GXPN/GREM/GICSP), OSCP, or equivalent demonstrated technical depth, • One or more of the following is desirable: CISM, CRISC, CISA, ISO/IEC 27001 Lead Auditor or Lead Implementer, IEC 62443 Cybersecurity Expert, PMP/PgMP, ITIL Foundation or higher Tools and Environments • Familiarity with vulnerability analysis and reverse engineering tools, • Familiarity with SAST/DAST/IAST tooling categories, • Familiarity with offensive security tooling, • Familiarity with collaboration and delivery tooling, • Comfort operating in a fully remote, cloud-only company environment Our salary ranges are categorized into two tiers based on geographic location: • Tier 1 (San Francisco, New York, Seattle): $200,000 - $215,000, • Tier 2 (All Other Locations): $190,000 - $207,000 The final base salary will be determined by experience, skill set, and specific location. In addition to base pay, this role is eligible for equity and benefits. At Finite State, we're on a mission to secure the connected world. Our platform empowers product security teams to detect vulnerabilities, manage software supply chain risks, and ensure compliance across complex device ecosystems. From IoT to critical infrastructure, we provide unparalleled visibility into firmware and software components, helping organizations protect their products and customers. We move with urgency and intent — we’re transparent, own outcomes, put customers first, speak up, and learn fast — turning evidence into action. CLARITY is how we move fast without breaking trust. • C - Customer first - Learn from customers. Ship with urgency., • L - Leverage - Outsource the routine. Own the result., • A - Agency - We take responsibility—end to end., • R - Results - Ship value. Improve fast., • I - Integrity - Speak up. Experiment boldly. Be kind., • T - Transparency - Clear context. Faster decisions., • Y - "Why" - Our mission—securing the connected products humanity depends on—is the reason Finite State exists. CLARITY is how we make that mission real, every day, at speed Bold Innovation – We push boundaries, explore new ideas, and take initiative to solve complex problems. The Finite State platform brings visibility and control to the supply chains that create connected devices and embedded systems—all in a simple to use platform and at the scale manufacturers need to keep device production on time and on budget. After unpacking and analyzing every file, configuration, and setting in a firmware build, the platform generates a complete bill of materials for software components, identifies known and 0-day vulnerabilities, shows a contextual risk score, and provides actionable insights that product teams can use to secure their software We are proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Finite State is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities.

Tactibit Technologies provides innovative information technology, cybersecurity, and cloud support services to the Federal Government. We support some of the nation's most critical and demanding projects including satellite operations, critical infrastructure, and search and rescue. We are a diverse team of hands-on professionals dedicated to solving problems and developing innovative solutions in support of our customers' critical missions. Our success is dependent on our inclusive, collaborative environment with a shared commitment to excellence in everything we do. We are looking for a talented Quality Assurance Software Tester to join our team remotely. You will work closely with application developers to plan, execute, and report on tests of applications developed and deployed in an AWS cloud environment. You should have a deep understanding of software requirements and experience running tests of software applications against specified requirements or objectives. • Execute automated and manual test cases against applications deployed in an AWS cloud environment and analyze results, • Log and document bugs and similar test failures in the tracking system, • Review and analyze software requirement and design specifications, • Evaluate product code according to specifications, • Assist with troubleshooting issues, • Work with cross-functional teams to ensure quality throughout the software development lifecycle, • Support security testing, hardening, and assessments to meet strict compliance and operational security requirements, • 5+ years of software testing/QA experience, • Experience in project management and QA methodology, • Familiarity with modern agile software development principles, practices, methods, and tools, • Experience with version control systems (preferably Git) and issue tracking software (preferably Jira), • Ability to troubleshoot, document, and explain errors, • Strong analytical skills and ability to work under pressure, • BS/BA degree in Computer Science, Engineering, or a related field, • Must be able to pass a full background investigation and obtain a security badge to enter the applicable government facility, • Experience working with AWS services or AWS cloud certification(s) are a plus, • Familiarity with GIS and similar scientific data and applications, • Industry certifications such as AWS certifications, CCSP, Cloud+, Security+, and GCLD

SimSpace serves as an AI Proving Ground where organizations can confidently train, test, and outmaneuver adversaries in any environment. Trusted by allied governments, militaries, enterprises, and research institutions worldwide, SimSpace enables adaptive, AI-ready defenses that stay ahead of evolving threats. Founded in 2015 by experts from U.S. Cyber Command and MIT Lincoln Laboratory, the platform unifies training, testing, and validation in a realistic, live-fire simulation—helping teams evaluate security investments, optimize performance, and compress cyber readiness cycles from months to days. Why join SimSpace? We are an organization that is focused on building our culture and mindfully enhancing our atmosphere every day which is why we have collaborated on an integral value system. Our governing philosophy of being Human Centered is deeply embedded within our value system. We apply this philosophy to every one of our internal team members, external clients, and their customers. How Do We Work? We believe that people are at the center of everything we do. SimSpace fosters a culture of continuous learning, curiosity, and professional growth. That belief shows up in action: in-house training, internal and external learning platforms, cyber conferences, industry events, and dedicated time for skill development. Our people are empowered to shape their careers - and it shows. Year over year, SimSpace consistently outperforms industry benchmarks in internal mobility, promotions, and total rewards growth. Who Thrives Here? We are a team of innovators, protectors, and problem-solvers. We believe diversity of thought and experience fuels better solutions, and we’re committed to building teams that reflect the communities we serve. Whether you’re remote or office-based, you’ll collaborate with talented colleagues across departments and time zones, united by the mission to create a safer digital world. We invite you to apply today! We are looking for: A Senior Product Manager to connect and work closely with security teams and organizations that SimSpace partners with across the defense and private sector globally. This person will connect with our customers, prospects, and thought leaders to understand user needs, then collaborate with engineering leads, designers, and internal stakeholders to drive the product life cycle. To effectively communicate, this person has in-depth experience working with SOC Teams, Security Leaders, and IT professionals. The Senior Product Manager also understands the functions of modern security tools, cloud architecture, cloud security, cloud native services, virtualization technologies, and basic networking principles. What will you be doing as a Senior Product Manager at SimSpace? Define product requirements, acceptance criteria, user personas, and use cases for new features. Develop strong, collaborative relationships with cross-functional teams and drive alignment for joint initiatives. Work closely with a team of designers and engineers to envision, roadmap, create, and deliver new features. Manage a backlog of feature epics and stories (JIRA experience preferred). Engage customers to validate, design, refine product offering and enable customer adoption. What are the qualifications to apply? To be successful as a Senior Product Manager, you need to: Have passion and expertise in one or more of the following areas: cloud security, application security, network security, exploitation, vulnerability management, data protection, DLP, host and endpoint security, detection and mitigation, threat intelligence and investigations, identity and access management. Experience developing strategy, building, and shipping security products (cloud native experience preferred). Experience working with SOC Teams, Security Leaders, and IT professionals. A strong understanding of cloud architecture, cloud security, cloud native services, virtualization technologies, and basic networking principles. Preferred- would hold one or more of these cyber and IT certifications: Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), CompTIA Security+, CompTIA Advanced Security Practitioner (CASP), any entry-professional level Cisco certifications. Preferred- would hold one or more of these cloud certifications: (advanced tiers not listed also ideal): Google Certified Professional Cloud Architect, Microsoft Certified: Microsoft Azure Fundamentals, Microsoft Certified: Azure Administrator Associate, AWS Certified Solutions Architect – Associate, AWS Certified Developer – Associate, CompTIA Cloud+, Certified Cloud Security Professional (CCSP) We’re proud to offer a competitive and comprehensive package designed to support your well-being, growth, and success: Compensation. Base salary range: $150,000 - $215,000, reflecting our confidence in your expertise and impact, with the opportunity for annual bonuses tied to company performance and individual contributions. Health & Wellness. Comprehensive medical, dental, and vision benefits, plus savings plans—coverage starts on day one! Mental Health Support. Access to company-paid counseling, coaching, and resources for you and your family through Spring Health. Financial Well-Being. Plan for your future with a 401(k)-retirement savings plan featuring a company match. Flexible Time Off. Take the time you need with unlimited vacation and dedicated health & wellness days. SimSpace provides flexible solutions to meet the diverse work-life needs of team members. Parental Leave. Paid leave plans to support you and your loved ones during life’s most important moments. Ownership Opportunities: Equity stock options at hire, with annual performance-based grants—become an invested stakeholder in our shared success. Referral Rewards: Earn $1,500–$3,500 for every qualified hire through our employee referral program. Peloton Interactive Wellness Program: Full- and partial- subsidized membership plans and equipment discounts to help you reach your personalized fitness goals. Continuous Learning: Access a LinkedIn Learning membership to prioritize your personal and professional development. Social Connections: Monthly reimbursements for meaningful connections with teammates through our SocialSpace Community. Extra Perks: Legal plan coverage, pet insurance, wellness reimbursements, and more to simplify life’s details. SimSpace is an Equal Opportunity Employer: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. SimSpace is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected category under applicable federal, state, and local laws. We are committed to providing an inclusive and welcoming environment for all members of our staff, clients, volunteers, subcontractors, vendors, and clients. Research shows that women and people from underrepresented groups only apply to jobs if they meet all of the qualifications. However, no one ever meets 100% of the qualifications. SimSpace encourages you to break that statistic and to apply. We look forward to your application! We also consider qualified applicants regardless of criminal histories, in accordance with applicable law. We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact _. SimSpace does not accept unsolicited resumes from employment agencies. Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range.

As Marqeta’s Principal Security Engineer you will serve as the technical lead across our security engineering function. This role combines three critical responsibilities: leading product security engineering across our payment platform, building our AI security program as we scale generative AI and ML capabilities, and providing security architecture oversight across enterprise and infrastructure security. Your primary focus will be product security and AI—threat modeling payment features, securing APIs, building genAI controls, and ensuring AI-powered capabilities ship securely. You'll also own the security architecture function and provide technical oversight for infrastructure security—endpoint protection, network security, VPN, and enterprise security controls—ensuring coherent security standards across everything we build and operate. You'll partner closely with Product Security, Infrastructure Security, and Security Operations teams and serve as the security voice in our Model Risk Office. This is an individual contributor role with mentoring responsibilities and broad technical influence across the security, engineering, and business technology organizations. We work _. This role can be performed remotely anywhere within the United States or from our Oakland office. We’d love for you to join us! You'll have the chance to: • Lead product security engineering for our payment platform—owning threat modeling, security architecture review, secure SDLC practices, and API security across the engineering organization, • Help mature our AI security programdeveloping genAI controls, securing ML pipelines, and working alongside the Model Risk Office for model evaluations., • Provide security architecture oversight across infrastructure and enterprise security—endpoint, network, VPN, and corporate security controls—ensuring technical standards are coherent across all security domains, • Shape how security engineering scales across the organization through tooling, frameworks, security champions engagement, and engineering partnerships The Impact You'll Have: Product Security: • Conduct security architecture reviews and threat modeling for new product features, APIs, and service integrations across the payment platform, • Define and maintain secure development lifecycle practices including secure code review standards, API security patterns, and authentication/authorization frameworks, • Develop self-service security tooling and developer-facing guardrails that reduce friction while maintaining security posture AI Security: • Lead security strategy and risk assessment for AI/ML systems including customer-facing AI products, fraud detection models, LLM integrations, and recommendation systems, • Build genAI security controls—prompt injection prevention, output filtering, model validation, and monitoring frameworks, • Perform security assessments of AI/ML model architectures, training pipelines, inference endpoints, and deployment infrastructure, • Evaluate and operationalize AI-powered security tools (e.g., AI-assisted code review, anomaly detection, automated threat intelligence) to improve security operations Enterprise & Infrastructure Security Oversight: • Provide technical oversight for infrastructure security including endpoint protection, network security, VPN, and enterprise security controls, • Ensure coherent security architecture standards across product, cloud infrastructure, and corporate environments, • Drive technical decisions for security tooling and controls that span the full environment—from developer laptops to production infrastructure Across All Domains: • Partner across Product Security, Infrastructure Security, and Security Operations teams as well as engineering, data science, and compliance, • Mentor security engineers and cross-functional teams, raising the organization's overall security engineering maturity, • Communicate security risks and strategy to executive and board-level audiences Who You Are: • 10+ years of security engineering experience with demonstrated technical leadership across multiple security domains; or equivalent combination of education and experience, • Deep product security expertise: threat modeling, security architecture review, secure code review, API security, authentication/authorization design, and secure SDLC practices, • Experience with or strong interest in AI/ML security—understanding of risks including adversarial attacks, model poisoning, prompt injection, data privacy, and AI supply chain threats. We want someone who is genuinely excited about AI technology and wants to secure it, not just govern it, • Broad security fluency across infrastructure and enterprise security—endpoint protection, network security, identity, and cloud security—even if your deepest expertise is in application and product security, • Experience working in cloud-native environments (AWS preferred) with familiarity across AI/ML services (Bedrock, SageMaker, etc.), • Proven ability to build security frameworks, tools, and programs from the ground up, • Strong programming skills in at least one language (Python, Java, Go, or similar) with the ability to read and review code across multiple languages, • Experience with security assessment methodologies and risk management frameworks, • Working knowledge of compliance and control frameworks relevant to financial services (PCI DSS, SOX, SOC2, NIST CSF), • Ability to communicate complex security risks to both technical and executive audiences Nice to Have: • Financial services or fintech experience strongly preferred, • Experience securing payment processing systems, card issuing platforms, fraud detection models, or transaction monitoring infrastructure, • Hands-on experience with LLM security: prompt injection mitigation, output filtering, RAG security, agent security patterns, • Experience with enterprise security platforms (EDR, SIEM, identity providers, network security tools), • Experience with ML frameworks (PyTorch, TensorFlow) or background in data science / machine learning engineering, • Knowledge of AI governance, model risk management practices, and emerging AI regulatory frameworks (EU AI Act, NIST AI RMF), • Background in supply chain security, CI/CD pipeline security, or secure software composition analysis, • Experience with privacy-preserving ML techniques (differential privacy, federated learning, secure multi-party computation), • Experience with Kubernetes, containerized workloads, and Infrastructure as Code (Terraform), • CISSP, CCSP, CISA, or other relevant security certifications, • Experience building and scaling security programs in high-growth environments Typical Process: • Application Submission, • Recruiter phone call, • Hiring manager video call, • Virtual “Onsite” consisting of 5-6, 45-60 min video calls, • Offer! At this point, we hope you're feeling excited about the role. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates, so again, don’t hesitate to apply — we’d love to hear from you. Compensation and Benefits: Marqeta is a Flex First company which allows you to choose your best working environment, whether that be from home or at a company office. To support Flex First, we calibrate pay to a competitive value according to working location. Compensation is aligned according to three tiers within the United States: • National: A baseline tier that applies to most of the geographic territory of the United States., • Premium: Slightly elevated from the National tier, and oriented toward a narrower set of higher cost-of-living areas, such as Los Angeles CA and Seattle WA, • Premium Plus: A tier for the most expensive working areas, like the San Francisco Bay area and New York City. Visit _ or consult with a Recruiter to determine which tier would be applicable to you. When determining salaries, we consider several factors including, but not limited to, skills, prior experience, and work location. The new-hire base salary range for this position is: • National: $218,300 - $272,900, • Premium: $236,200 - $295,300, • Premium Plus: $256,800 - $321,000 We also believe in recognizing the contributions of our people. That's why we award annual bonuses to eligible employees, rewarding both individual performance and the success of the entire company. Along with monetary compensation, Marqeta offers • Multiple health insurance options, • Flexible time off – take what you need, • Retirement savings program with company contribution and after tax contributions, • Equity in a publicly-traded company and an Employee Stock Purchase Program, • Family-forming benefits, fertility support, and up to 20 weeks of Parental Leave, • Free therapy sessions, financial and professional coaching, and legal advice, • Monthly stipend to support our remote work model, • Annual “development dollars” to support our people growth and development, • Through Flex First, the freedom to live and work wherever you and your family thrive

Location: Dallas, Denver, or Seattle Requirements: Experience in C/C++ embedded software development on Linux-based SoC. Hands-on experience in IT/Telecom with software and hardware solutions. Relevant network knowledge (Residential gateways, IPv4/v6, TR-181, 802.11, Ethernet). Experience with RDK-B (familiarity with Wi-Fi RDK-B CCSP, HAL, and BBF TR181 Data Model). Experience with Broadcom-based SoC (familiarity with Broadcom SoC Wi-Fi driver debug commands). Optional Technical Skills: Wi-Fi: Experience analyzing Wi-Fi protocol frames with a sniffer; knowledge of Wi-Fi features like puncturing and MLO. EasyMesh: Understanding of EM Controller vs. EM Agent responsibilities; familiarity with P1905 protocol. Soft Skills: Autonomy: Ability to work independently with remote leadership. Leadership: Strong decision-making skills to prioritize development activities for project success. Fluent in English with excellent verbal and written communication skills. Ability to understand complex problems and communicate effectively at multiple levels.

Job DescriptionWho we are: EHE Health is the leading national preventive healthcare provider network partnering with mid- and large-sized employers to help their employees and dependents stay healthy by screening and diagnosing health risks through comprehensive exams, allowing for early intervention. Named by Fortune Magazine and Great Place to Work® as one of the Best Workplaces in healthcare, EHE Health is headquartered in New York City and has over 200 health clinics and practices across the U.S., staffed by a network of curated primary care physicians and clinicians. EHE Health was acquired by Consello Capital, the private equity arm of Consello. This transformative partnership leverages Consello’s proven expertise in scaling high-growth ventures and its extensive network of industry leaders. Together, EHE Health and Consello will unlock unprecedented opportunities to accelerate EHE Health’s mission of revolutionizing preventive care. What we’re looking for: EHE Health is seeking a talented Security and Privacy Manager to lead and evolve our enterprise cybersecurity and privacy program, reducing risk exposure and strengthening our control environment. This role will be responsible for advancing our compliance and certification efforts, while conducting internal audits, risk assessments and ongoing security analyses to ensure our processes and controls remain effective, scalable and aligned with industry best practices. The ideal candidate is intellectually curious, detail-oriented and proactive with a collaborative mindset and a bias toward continuous improvement rather than maintaining the status quo. This individual will bring both the capability and ambition to grow within the organization. To support this trajectory, the Security and Privacy Manager will partner closely with a fractional CISO who will provide hands-on mentorship, strategic guidance and development support, enabling the individual to build the experience and leadership capabilities required for long-term success. In this role, you will: • Conduct comprehensive security and privacy audits across networks, systems, applications, platforms, databases, and operational processes in alignment with established audit standards, • Support and perform enterprise risk assessments to evaluate the design and effectiveness of controls across EHE’s technology and business environments, • Manage the third-party risk management program, including due diligence, ongoing monitoring, and enforcement of EHE security and privacy requirements, • Partner with IT and business stakeholders to communicate control requirements, strengthen adoption, and reinforce a robust control environment, • Drive enterprise-wide awareness of cybersecurity and privacy policies through targeted education and engagement initiatives, • Monitor and analyze security event data across computing platforms, networks, and security tools to identify risks, trends, and potential threats, • Develop and deliver regular security metrics, dashboards, and operational reports to inform decision-making and leadership visibility, • Conduct ongoing threat research, including emerging technologies such as artificial intelligence and evolving threat actors, to proactively assess business impact, • Design and implement scalable, measurable, and repeatable security and privacy strategies aligned with organizational objectives, • Lead and manage responses to prospective and existing client security and privacy inquiries, including questionnaires, due diligence requests, and audits What the role requires: • Bachelor’s degree in Information Security, Computer Science, or a related field, • 3–5 years’ experience in information security, cybersecurity, or privacy program operations, • Hands-on experience supporting or operating security and/or privacy programs within ISO27001, ISO27701, SOC2 Type 2 frameworks, • Working knowledge of HIPAA and the HITECH Act, healthcare or regulated industry experience preferred, • Relevant industry certifications (e.g., CISSP, CCSP, CISM) preferred, • Practical experience participating in cybersecurity incident response, either as a respondent or incident manager, • Familiarity with the NIST Cybersecurity Framework (CSF), including its core functions: Govern, Identify, Protect, Detect, Respond and Recover, • Strong written and verbal communication skills, with the ability to clearly convey complex security concepts to both technical and non-technical stakeholders, • Demonstrable experience implementing or auditing identity and access management for on-premise and cloud-based services, • Ability to identify and assess emerging technology risks (e.g. software supply chain and AI) What we offer: • Competitive salary, • Medical, dental, vision, life and disability insurance, • Employer-matched 401(k) plan, • Professional development reimbursement, • Employee access to our wellness clinics, • Gym reimbursement/fitness bonus The salary range for this role is $100,000 - $140,000 and is determined by a number of factors including the candidate’s experience, qualifications and skills. EHE is committed to Equal Employment Opportunity and to attracting and retaining the most qualified employees. Powered by JazzHR GT8hl96ni9