Cyber security jobs in San Francisco, CaliforniaCreate job alerts

Job DescriptionBusiness AnalystEmployment Type: Full-Time, ExperiencedDepartment: Information Technology CGS is looking for business analysts to work with a large federal agency! As a Business Analyst in Business operations and Content Strategy for CGS, you will partner with internal business owners and external partners to understand new business opportunities and define functional requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Support the development of briefings, agendas, and other general documentation support as directed, including training material and demonstration sessions for new and existing technologies to various stakeholders.- Document and analyze business and functional requirements so that they may be accurately translated into process maps and technical system requirements- Develop comprehensive documentation that meets organizational standards, to include but not limited to basic system architectural diagrams/wireframes, concepts of operations, monthly status reports- Create high-level briefings and communications materials for customers, management, and executive stakeholders- Work with the government and team members to identify, recommend, and implement opportunities for service delivery improvement and new technology implementation- Evaluate program materials and develop innovative approaches for improvement- Independently gather information from subject matter experts to develop, organize, and write procedure manuals, technical specifications, and process documentation- Develop and implement a deep understanding of Microsoft and Atlassian products and services (Teams, SharePoint, Visio, Jira, Confluence) to translate complex product information into simple, polished, and engaging content- Research, outline, write, and edit new and existing content, working closely with various team members to understand project requirements- Develop content in various media forms for maximum usability, with a consistent and cohesive voice across all documentation- Perform risk management, including identifying, prioritizing, and mitigating risks, and communicating and escalating risks and issues- Support a continuous improvement process by providing recommendations on improving products, services, and processes.- Manage client interaction and expectations regarding team efforts- Identify and coordinate cross-team dependencies and collaboration- Continually seek opportunities to increase customer satisfaction, develop and deepen long-lasting client relationships Qualifications:- Must be a U.S. Citizen- Bachelor's Degree (Computer Science, or engineering)- Must be able to successfully complete a stringent Background Investigation and obtain required Government Security clearance- 7+ years of experience in business analysis, systems analysis, and/or design of information systems programs and related business processes- Experience working with phase-based and Agile delivery methods- Experience with Jira or other Agile tools- Ability to clearly communicate technical concepts to both technical and non-technical users.- Must be able to work well both in a team environment and independently.- Must possess exceptional attention to detail- Excellent interpersonal and communication skills- Familiarity with government projects and policy/procedures teams- Demonstrates ability to interact comfortably with Senior Leadership and/or Government Executives and staff on a day-to-day basis- Experience in managing client requirements and small teams- Excellent analytical skills and business presentation skills Ideally, you will also have:- Experience supporting DHS HQ or other US Federal Agencies - Experience tracking and reporting project or program delivery progress and budget execution- Experience developing project briefs and reports for non-technical audiences - Knowledge of the federal acquisition lifecycle- Familiarity with Business Intelligence and Data Analytics- Project Management, Agile, and/or Cyber Certifications (PMP / ACP / CSM / SAFe / CISM) Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionSenior Network EngineerEmployment Type: Full TimeDepartment: Information Technology CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large-scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionSenior Lead Network Engineer IIEmployment Type: Full TimeDepartment: Information Technology CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large-scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Crusoe's mission is to accelerate the abundance of energy and intelligence. We’re crafting the engine that powers a world where people can create ambitiously with AI — without sacrificing scale, speed, or sustainability. Be a part of the AI revolution with sustainable technology at Crusoe. Here, you'll drive meaningful innovation, make a tangible impact, and join a team that’s setting the pace for responsible, transformative cloud infrastructure. About This Role: Crusoe Security & Compliance is hiring a Senior Detection Engineer to play a critical role in safeguarding Crusoe, our customers, and ensuring our security posture remains robust against emerging threats. This role involves leading the detection strategy, creation, tuning, validation, and correlation to maintain effective detections against an ever-changing threat landscape. The role is hands-on, encompassing the management of detection technologies and incident response. A Day in the Life: Leadership & Strategy: * Develop and execute a comprehensive security operations strategy that aligns with organizational goals, ensuring robust protection against current and future cyber threats. * Evaluate and implement emerging security technologies and methodologies to continuously enhance our security posture and operational efficiency. * Partner with stakeholders and cross-functional teams (Engineering, Product, SRE, IT, Legal) to adapt in a dynamic security landscape. Detection and Incident Response: * Design, implement, and fine-tune advanced detection mechanisms to proactively identify potential security threats and vulnerabilities. * Continuously tune alerting rules to reduce false positives and enhance our signal-to-noise ratio. * Perform forensics and lead response efforts during security incidents, including triaging security alerts, taking relevant mitigation steps, and engaging with internal stakeholders to ensure swift resolution. Operational Security: * Drive the advancement and growth of detection and automation initiatives. * Manage security event monitoring, management, response workflows, and tasks. * Improve security operations by developing measurement capabilities and metrics to track and communicate performance, coverage, and risk. Automation and Improvement: * Author comprehensive runbooks, write automation scripts, and build SOAR (Security Orchestration, Automation, and Response) capabilities to reduce manual intervention and improve response times. * Create, maintain, and manage a library of automated playbooks to address new threats and tactics employed by attackers. Documentation and Compliance: * Develop standard operating procedures and other appropriate documentation to enforce quality and consistency of services being delivered. * Support ongoing security compliance, audit, and certification programs (e.g., HIPAA, SOC 2). You Will Thrive In This Role If: * Minimum of 6 years in cybersecurity, with a focus on detection and response. * Technical proficiency with protection of on-premise computing environments and proficiency with one or more major cloud computing environments. * Strong expertise in incident handling and forensic investigation. * Strong knowledge of the cyber threat landscape and ability to articulate and incorporate understanding of major threat categories, motivations, and intent of adversaries. * Automation-first mindset and demonstrated expertise in mentoring and training peers in security engineering skill sets. * Experience in at least one programming language (Python, Go, C, C++) or deep expertise using low-code automation tools or SOAR platforms. * Exceptional collaboration and communication skills, with the ability to engage with partners and stakeholders from various perspectives and technical understanding. * Familiarity with modern infrastructure tools, such as Docker, Kubernetes, Ansible, Cloud Formation, Terraform. * Experience building and scaling open source security observability solutions * Experience with Unix/Linux environments. * Self-motivated, with good communication and writing skills. * Must be able to pass a background check. * Embody the Company values Benefits: * Industry competitive pay * Restricted Stock Units in a fast growing, well-funded technology company * Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents * Employer contributions to HSA accounts * Paid Parental Leave * Paid life insurance, short-term and long-term disability * Teladoc * 401(k) with a 100% match up to 4% of salary * Generous paid time off and holiday schedule * Cell phone reimbursement * Tuition reimbursement * Subscription to the Calm app * MetLife Legal * Company paid commuter benefit; $300 per month Compensation Range: Compensation will be paid in the range of $165k-$200k per year + Bonus. Restricted Stock Units are also included in all offers. Compensation to be determined by the applicant’s education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.

Job DescriptionAtomic Machines is ushering in a new era of micromanufacturing with its Matter Compiler™ technology platform. This platform enables new classes of micromachines to be designed and built by providing manufacturing processes and a materials library that are inaccessible to semiconductor manufacturing methods. It unlocks MEMS manufacturing not only for device classes that could never be produced by semiconductor methods, but also for entirely new categories. Furthermore, this digital platform is fully programmable in the way 3D printing is digital—but whereas 3D printing produces parts of a single material using a single process, the Matter Compiler™ technology platform is a multi-process, multi-material system: bits and raw materials go in, and complete, functional micromachines come out. The Atomic Machines team has also created an exciting first device—made possible only through the Matter Compiler™ technology platform—that we will be unveiling to the world soon.Our offices are in Emeryville and Santa Clara, California.About The Role:This is a broad-responsibility, high-judgment technical leadership role managing the cyber security function and implementing the security and IT infrastructure of a rapidly growing startup company with engineering offices in Emeryville and Santa Clara. As a Cyber Security Engineer, you will lead and oversee the design, implementation, and maintenance of robust security solutions within platform, data, engineering, and office environments. The ideal candidate will possess strong leadership skills, deep technical expertise, and a strategic mindset to safeguard the organization's digital assets. This is a full-time, onsite position in either our Emeryville or Santa Clara office, with a need to work from the other office occasionally.What You'll Do: • Build and manage cyber security at Atomic Machines., • Develop and implement a strategic vision for securing Atomic Machines' assets, including IP, financial records, personal data, and physical infrastructure, while designing scalable security architectures for both cloud-native and on-prem systems., • Conduct security risk assessments, threat modeling, and incident response, identifying vulnerabilities, implementing mitigations, and managing escalations as needed., • Lead IT risk and compliance initiatives, implementing cybersecurity best practices (e.g., ISO 27001, NIST), conducting internal audits, assessing vendor security certifications, and reviewing contractual security requirements., • Integrate security into CI/CD pipelines and Git-driven Infrastructure-as-Code (IaC) workflows to support secure software releases., • Manage security across networking and infrastructure across engineering teams, including physical access control, on-prem servers, cloud services, CI/CD pipelines, and embedded systems, ensuring scalability and reliability., • Develop and deliver formal and informal security training sessions to educate the engineering organization on best practices, risk mitigation strategies, and secure development principles., • Partner with and manage external agencies and vendors when additional security coverage and support are needed.What You'll Need:, • 8+ years of experience in Information Security, including at least 3 years in a management role., • Experience managing all aspects of Information Security for a company, including Cyber Security, risk assessment, and incident response (startup experience preferred)., • Previous industry experience as a System Administrator, with hands-on knowledge of infrastructure management, user access controls, and system security best practices., • Expertise in cloud security for modern AWS architectures, including IAM, security monitoring, logging, security configuration, and Infrastructure-as-Code (IaC)., • Proficiency in Infrastructure-as-Code (IaC) workflows (e.g., Terraform, Ansible, Git)., • Ability to enable secure cloud environments for production software releases using AWS services (e.g., EC2, Redshift, S3) and hybrid security solutions (e.g., Tailscale, WireGuard)., • Strong networking expertise across physical and virtual environments, including VLANs, firewalls, DNS, and secure access solutions., • Experience balancing infrastructure automation, security, scalability, and developer productivity., • Extensive hands-on experience with security tools and technologies, including SIEM, MDR, IDS/IPS, WAF, DLP, and vulnerability scanners., • High-level proficiency in SAML/SSO solutions and using hardware MFA keys., • Experience developing and presenting cybersecurity training programs for employees., • Knowledge of IT processes, risk, and control frameworks, including CoBIT, ISO 27001, NIST, ITIL, and PCI., • Familiarity with security regulatory requirements and standards (e.g., SOC 1/2/3, SANS Top 20, NIST 800-53)., • Security certifications preferred (e.g., CISSP, CCSP, CISM, CSSP)., • Ability to explain complex security issues to both technical and non-technical audiences., • Proven ability to work in fast-paced environments with minimal guidance., • Flexibility to work daily in the Emeryville office and commute to Santa Clara as needed.

Job Description Reports to: Senior Manager, Hunt & Response Location: Remote US Compensation Range: $145,000 to $165,000 base plus bonus and equity What We Do: Huntress is a fully remote, global team of passionate experts and ethical badasses on a mission to break down the barriers to cybersecurity. Whether creating purpose-built security solutions, hunting down hackers, or impacting our community, our people go above and beyond to change the security game and make a real difference. Founded in 2015 by former NSA cyber operators, Huntress protects all businesses—not just the 1%—with enterprise-grade, fully owned, and managed cybersecurity products at the price of an affordable SaaS application. The Huntress difference is our One Team advantage: our technology is designed with our industry-defining Security Operations Center (SOC) in mind and is never separated from our service. We protect 4M+ endpoints and 7M+ identities worldwide, elevating underresourced IT teams with protection that works as hard as they do. As long as hackers keep hacking, Huntress keeps hunting. What You'll Do: The Huntress Global Hunting & Response team has the unique honor of waking up every morning knowing we will be kicking out threat actors. This team sits alongside our 24x7 Security Operations Center team. It is a skilled team of individuals who review lower-confidence signals and manage tactical incident response scenarios to assist customers in exiting critical intrusions. Members of this team will be able to allocate their time between hunting and response efforts. While in Hunting mode, you will get to research new attacker tradecraft, test new theories, and review hunting data at scale for millions of endpoints. While the SOC responds to alerts within minutes, this team develops detections and reviews more ambiguous signs of attacker activity on a daily & weekly basis. In the Response side of the role, you will have the opportunity to flex your incident response and forensics skills. When customers are experiencing the worst incidents of their lives, this team will step in to answer questions core to understanding the cause of an attack, the high-level activities of the attacker once in the environment, and provide remediation actions and recommendations that will help reduce or eliminate this threat from occurring again in their environment. If you love Threat Hunting, Incident Response, and Detection Engineering while in the environment and energy of a SOC, this is the role for you! Responsibilities: • Perform a cadenced review of hunting data to identify compromises not found during standard SOC workflows, • Research, develop, and test new hunting hypotheses in the form of new detections or analytics, • Lead or support tactical incident response engagements for customers who already utilize Huntress MDR. Perform live analysis on systems to determine the root cause of an intrusion, and craft reports that summarize the intrusion, with the next steps to be taken, • Perform intermediate malware analysis as part of hunting and response efforts, • Perform OSINT as part of hunting and response efforts, • Contribute to content creation efforts such as blogs, videos, podcasts, and webinars, • Contribute to community-driven projects and frameworks, such as MITRE ATT&CK, HijackLibs, and the LOLBAS Project, • 3-5 years working in one or more of the following: SOC, MDR, Threat Hunting, or Incident Response roles, • Experience leading or participating in Incident Response engagements for external customers, • Experience with tools such as osquery, Velociraptor, or leveraging EDRs to perform forensic artifact analysis on systems, • Confident command of forensic tools - such as Ericzimmerman's EZ tools, RegRipper, Hayabusa, or Chainsaw - and forensic artifacts - such as prefetch, jumplists, shellbags, and more, • Deep understanding of offensive security tradecraft, particularly persistence, lateral movement, credential theft, and remote access., • Confidently able to track threat actors across an organization and timeline the activity, • Strong familiarity with one or more detection languages such as Sigma, Suricata, Snort, or Yara, • Familiarity with OSINT sources and how they can help answer questions relating to threat actor activity and infrastructure., • Strong familiarity with various query languages such as KQL, EQL, ES|QL, Splunk SPL, • Intermediate malware analysis skills, • Intermediate knowledge of Windows internals, • Intermediate knowledge of Linux and macOS internals is a bonus, • Strong understanding of the current threat landscape, initial access brokers, and ransomware actors., • Passionate and involved with the community through blogs, social media, conferences, etc., • Experience with scripting (such as PowerShell, Python, Bash, PHP, JavaScript, or Ruby), • Demonstrable experience providing written and/or verbal customer-facing deliverables, • Experience with detection and response in cloud environments such as Microsoft M365/Azure, • 100% remote work environment - since our founding in 2015, • Generous paid time off policy, including vacation, sick time, and paid holidays, • 12 weeks of paid parental leave, • Highly competitive and comprehensive medical, dental, and vision benefits plans, • 401(k) with a 5% contribution regardless of employee contribution, • Life and Disability insurance plans, • Stock options for all full-time employees, • One-time $500 reimbursement for building/upgrading home office, • Annual allowance for education and professional development assistance, • $75 USD/month digital reimbursement, • Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to . Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights. #BI-Remote

Job DescriptionAbout UsAt Resilience, we’re creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the US military and intelligence communities – and built by prominent leaders and innovators from the insurance, technology, and cybersecurity industries – Resilience is rewriting the rules of how cyber risk is assessed, measured, and managed. Our integrated cyber risk solutions connect risk quantification software, cybersecurity experts, and A+ rated cyber insurance, all purpose-built for middle and large organizations. Guided strongly by our mission and four core values - transparency, excellence, grit, and humility, our culture uniquely blends many different backgrounds, experiences, and skills from across industries and geographies - all focused on helping our clients and partners stay ahead of the bad guys. We are a cybersecurity company, a Cyber and Tech E&O-focused MGA, a fintech startup, and a data science powerhouse, all purposefully built into one. Resilience is proud to be backed by leading technology investment firms, including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital. With headquarters in San Francisco, Resilience’s team is globally dispersed, with offices in New York, Chicago, Baltimore, Los Angeles, Toronto, and London. Resilience offers insurance coverage through its licensed and appointed insurance agents and security services through its expert security team. Resilience is seeking a strategic, customer-centric Senior Product Manager to lead the evolution of our Vendor Risk Management product within our enterprise cyber risk platform. In this role, you’ll drive end-to-end product development across discovery, definition, delivery, and iteration—ensuring our vendor risk management product successfully helps customers manage a complex set of risks across their entire enterprise. As companies face increasing exposure to cyber risks they need to effectively track, mitigate, and manage their security posture and their risk exposure on an ongoing basis. All modern companies rely on a complex set of vendors and suppliers to support and run their business, and each of these vendors can in turn expose companies to additional cyber risk through supply chain attacks and other means. By some estimates, more than 60% of cyber attacks are a result of such vendor exposure. The Resilience Vendor Risk Management product helps companies manage and mitigate the cyber risk that they are exposed to through vendors by providing a set of innovative tools for analyzing, quantifying, and actioning the risk posed by each vendor. This role is ideal for a product manager who thrives in a fast-paced B2B SaaS environment, enjoys working cross-functionally, and is passionate about translating complex risk challenges into intuitive, high-impact product experiences.Responsibilities: • Product Discovery & Definition, • Conduct user research with internal teams and external enterprise SaaS users to understand workflows, data needs, and platform requirements., • Translate technical and operational needs into clear product specs, user stories, and acceptance criteria., • Support market and competitive analysis, focusing on enterprise SaaS, workflow automation, and platform architecture trends., • Use analytics, SaaS usage data, system logs, and operational metrics to inform prioritization and product decisions., • Roadmap Execution, • Manage and maintain the product backlog with clear prioritization across application and platform initiatives., • Partner with application, data, and platform engineering teams to scope, prioritize, and deliver SaaS platform and workflow improvements., • Work closely with customer success, sales engineering, and operations to gather requirements and optimize enterprise workflows., • 4+ years of product management experience supporting B2B SaaS products, enterprise business applications, platform capabilities, or internal tooling., • Experience with cyber security & risk, IT management, or enterprise IT systems is a plus., • Strong skills in writing clear product requirements, workflow specs, and managing backlogs in an agile SaaS environment., • Comfort working closely with engineering teams on product architecture requirements, integrations, APIs, and automation tooling., • Strong analytical skills and a data-driven, metrics-oriented decision-making approach., • Excellent communication, organization, and cross-functional collaboration skills.

Job DescriptionNetwork EngineerEmployment Type: Full Time, Experienced levelDepartment: Information Technology CGS is seeking an experienced Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve government’s most dynamic problems with cutting edge technology. To carry out our mission, we are seeking candidates that are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our commitmentContact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting edge technology with world-class personnel to deliver customized solutions that fit our clients’ specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years we’ve been growing our government-contracting portfolio, and along the way we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package:- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran Join our team and become part of meaningful government innovation! Explore additional job opportunities with CGS on our Job Board: For more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionISSOEmployment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you’ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. - Maintain responsibility for managing cybersecurity risk from an organizational perspective. - Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.- Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.- Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).- Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.- Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.- Provide subject matter expertise for cyber security and trusted system technology. - Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.- Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. - Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.- Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications:- Bachelor’s Degree.- A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.- eMASS experience.- Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.- Strong desktop publishing skills using Microsoft Word and Excel.- Experience with industry writing styles such as grammar, sentence form, and structure.- Ability to multi-task in a deadline-oriented environment. Ideally, you will also have:- CISSP, CASP, or a similar certificate is preferred.- Master's Degree in Cybersecurity or related field.- Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.- Demonstrated ability to work well independently and as a part of a team.- Excellent work ethic and a high commitment to quality. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.Health, Dental, and VisionLife Insurance401kFlexible Spending Account (Health, Dependent Care, and Commuter)Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Location: Remote (United States Only) What is Verse? Organizations today are under growing pressure to navigate the transition to clean energy — not just to meet sustainability goals, but to manage risk, control costs, and build long-term resilience. Yet the complexity of energy markets and a lack of accessible tools have made it difficult for most companies to take meaningful action. Verse was created to change that. Our mission is to make the case for clean energy irrefutable. Through our AI-powered platform, Aria, we help organizations plan, procure, and operate clean energy to achieve their financial and sustainability goals. Verse transforms clean energy ambition into action — giving businesses the clarity and confidence to lead in a rapidly evolving energy landscape. The Role As a Software Engineer focused on Fleet Telemetry & Control at Verse, you will be working closely with our energy solutions partners to design, implement, and test distributed energy resource controls and telemetry software on customer hardware at sites around the world. You will be part of a dynamic, high-performance team building applications directly on bare-metal or on hardware-level virtualization platforms. As an advanced technical leader in network programming and state management development, engineering teams will look to you for best standards and practices for interfacing with on-premises grid assets using solutions you will build and maintain. Key Responsibilities • Foster a culture and mindset of well-designed systems, test-driven software, and transparent communication with a high caliber of mutual respect and consideration for stakeholders, • Mentor and support career and junior level engineers in their fleet telemetry and control software career development, • Collaborate closely with energy solutions providers on their proprietary hardware and on-premises software stacks, • Design, implement, and test software for supervisory distributed energy resource control and telemetry applications with heterogeneous OEM hardware, sensor/actuator networks, and remote terminal units, • Develop high-performance, production-grade applications optimized for resource- and bandwidth-constrained environments, • Provide specifications for over-the-air (OTA) update of on-prem software and remote access solutions for customers, • At least 5+ years of experience, • Advanced Rust programming knowledge, • Technical leadership and commitment to delivering high quality software on time or ahead of schedule, and adhering to best software development practice, • Advanced knowledge of communications solutions at all layers (L1-L7) in the OSI networking model, • A bachelor's degree or higher in a STEM field, • Proficient with electric power systems and bulk electricity grid hardware (e.g. transmission, distribution, generation, storage), • Comfortable building software on the Intel Atom family of processors or similar low-powered CPU environments, • Working knowledge applying first principles of model-predictive control, optimal control, robotics, and/or reinforcement learning, • Deep knowledge working with Modbus TCP or similar L5-L7 application layer networking protocol, • Technical proficiency working with industrial SCADA communications protocols such as DNP3 and the IEC 60870 and 61850 family of protocols, • Experience building resilient, fault tolerant applications on inherently unreliable / mesh networks with Ethernet, Wi-Fi, Zigbee, 4G/5G cellular, broadband, fiber, or satellite links, • Lead with Empathy: We lift each other up with humility and kindness, always putting colleagues and customers first, • Be Honest & Transparent: We prioritize effective communication to build trust with our team, customers, and stakeholders, • Move with Balance & Precision: We believe speed and perseverance must be accompanied by thoughtfulness and reflection $160,000 - $194,000 This is the estimated base salary range for this position, which does not include the value of benefits or a potential equity grant. A wide range of factors are considered in making compensation decisions, including but not limited to level, skill sets, market conditions, experience and training, licensure and certifications, and business and organizational needs. Benefits and Employee Perks • Competitive compensation and equity grant at a high-growth start up, • Comprehensive benefits package including medical, dental and vision insurance, and 401k, • Flexible hours and unlimited PTO

Job DescriptionAbout Taskrabbit: Taskrabbit is a marketplace platform that conveniently connects people with Taskers to handle everyday home to-do's, such as furniture assembly, handyman work, moving help, and much more. At Taskrabbit, we want to transform lives one task at a time. As a company we celebrate innovation, inclusion and hard work. Our culture is collaborative, pragmatic, and fast-paced. We're looking for talented, entrepreneurially minded and data-driven people who also have a passion for helping people do what they love. Together with IKEA, we're creating more opportunities for people to earn a consistent, meaningful income on their own terms by building lasting relationships with clients in communities around the world. Taskrabbit is a hybrid company with employees distributed across the US and EU and a Built In — Best Places to Work (2022, 2023, 2024) continually ranked across multiple national and regional categories. Join us at Taskrabbit, where your work will be meaningful, your ideas valued, and your potential unleashed! This role operates on a hybrid schedule requiring two days of in-office collaboration per week. The position can be based in either our San Francisco office or our new New York City office (opening January 2026). About the Team We're problem-solvers and self-starters, working at a fast pace to design solutions with our customers and users in mind. Here, you'll work across teams to dig deep into impactful projects that are changing the way people get their tasks done and enjoy opportunities to advance your career in a diverse, inclusive environment. About the Role: Taskrabbit is looking for an experienced Senior Cloud Infrastructure Engineer to drive the next phase of our Platform Modernization ("PlatMod") initiative. In this high-impact role, you won't just keep the lights on; you will build the next generation of infrastructure from scratch to support both Taskrabbit and Dolly. We are moving fast to decommission legacy tooling (i.e Jenkins) in favor of a modern, cloud-native stack (Kubernetes, ArgoCD, Crossplane). You will be a hands-on owner—taking vague requirements and turning them into resilient, scalable solutions while advocating for your technical designs to the wider engineering organization. As a core member of a lean, collaborative team, you will also play a critical role in stabilizing our environment. You will participate in the on-call rotation, drive incident response, and implement the fixes necessary to ensure our services remain highly available (99.9%) for our users worldwide. What You'll Work On: • Build and maintain new modern infrastructure such as Kubernetes, new CI/CD tools and assisting with application teams on adapting., • Building and maintaining CI / CD pipelines from scratch for testing and releasing configuration and software., • Monitor and resolve issues in all environments using tools such as DataDog, PagerDuty, and AWS logs., • Engage in capacity planning and demand forecasting, anticipating performance bottlenecks, and scaling the environment as needed using DataDog and other tools., • Design and implement a zero-downtime solution to accomplish a highly available service (99.9%)., • Ensure systems are secure against cyber threats and implement fixes for Security vulnerabilities., • Automate tasks and develop tools to increase engineering efficiency and visibility., • Design and implement disaster recovery (DR) between different regions in cloud providers such as AWS., • Manage web domain and certificates., • Troubleshoot production and testing environment issues, including performance and function issues., • Provide support to the organization through on-call, resolving issues and driving infrastructure changes., • Identify, define, and document system requirements and recommend solutions to management., • At least 5+ years of experience in the Infrastructure and DevOps Space., • Experience with build automation and configuration management tools (e.g. Ansible, Puppet, Chef.), • Strong knowledge of the Amazon Web Services (AWS) ecosystem and other core AWS technologies, ElasticSearch Service, RDS, WAF, CloudFront, Kubernetes etc., • You have worked with common infrastructure tools like Docker, Terraform, Helm, GitHub Actions, and ArgoCD., • Experience with a microservice architecture running in containers (Docker or other containerisation technology)., • Experience supporting 24x7, high-availability internet application environments that include web, application, and database servers and load balancing systems., • Experience working with a product that has end-users., • Bachelor's degree or higher in Computer Science, or equivalent experience., • AWS Certification is a plus., • Excellent written and communication skills., • A strong ownership attitude and a track record of taking responsibility for problems and pushing through to resolution., • Software development background is a plus. The base pay range for this position is $147,000 - $196,000. This range is representative of base pay only, and does not include any other total cash compensation amounts, such as company bonus or benefits. Final offer amounts may vary from the amounts listed above and will be determined by factors including, but not limited to, relevant experience, qualifications, geography, and level. You'll love working here because: • Taskrabbit is a Hybrid Company. We value flexibility and choice but also stay committed to regular in-person connection., • The People. You will be surrounded by some of the most talented, supportive, smart, and kind leaders and teams -- people you can be proud to work with!, • The Diverse Culture. We believe that we make better decisions when our workforce reflects the diversity of the communities in which we operate. Women make up half of our leadership team and our diversity representation is above that of the tech industry average. Taskrabbit is an equal opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, ancestry, citizenship, sex, gender, gender identity, sexual orientation, age, marital status, military/veteran status, or disability status. Taskrabbit is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities. Taskrabbit will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law. Taskrabbit will never use text or chat applications to conduct interviews. We have a thoughtful and interactive interview process that includes an initial recruiter phone screen and several video-based interviews with our hiring teams. Communications will always be conducted by taskrabbit.com domain names.

Job DescriptionAsian Health Services, founded in 1974, provides medical, dental, and behavioral health services to more than 50,000 patients. Our approach to well-being focuses on “whole patient health” for all. We go beyond our clinic walls and invest in our community’s overall health. We know that income, housing, and environmental struggles lie at the heart of poor health. That’s why we also address food insecurity, youth leadership, and culturally competent care while working towards supporting safer streets and vibrant communities. Job Summary: This position plays a critical role to oversee Cybersecurity processes in a healthcare setting and produce appropriate security response and outcomes which are HIPAA compliant within an overall agency-wide cybersecurity program. Under general direction of the IT Director, the Cybersecurity Analyst is responsible for protecting an organization’s computer systems, networks, and data from security breaches and cyber threats. Their role also includes education and overseeing organization-wide cyber related trainings/education, such as monthly phishing campaigns. This role will be based in the IT department and also interact with IS Department regarding technology systems, cybersecurity tools and data with a focus on problem solving, cybersecurity analysis, detection, response and reporting utilizing cybersecurity analysis tools within a context of health information systems and standards, operational objectives, and with a goal of continuously improving AHS’ cybersecurity posture. This role collaborates with other disciplines and works at a cybersecurity systems level utilizing one’s abilities to problem solve. Cybersecurity Management • Conduct Security Audits., • Monitor Security Access to track, document and report security breaches., • Responsible for conducting cybersecurity-related incident investigations and threat analysis against external threat actors., • Develop and document IT tactics and procedures to mitigate risk from emerging threats and reduce attack vectors., • Research, recommend, evaluate, and implement cybersecurity solutions that identify and/or protect against potential threats with multi-departmental teams and cross-discipline expertise utilizing off-the-shelf and custom-built utilities where applicable., • Resolves complex cybersecurity issues and tracks through internal ticketing and project management systems, • Create, plan, and implement cybersecurity, incident response, and disaster recovery policies that best fit the organization’s environment and capabilities utilizing NIST and CISA guidelines., • Research and demonstrate new cybersecurity tools for the organization, including functions with AI and automated features., • Perform system security administration on designated technology platforms, including operating systems, applications, and network security devices, under defined policies, standards, and procedures of the organization, as well as with industry best practices and vendor guidelines., • Evaluate scans, logs, and alerts from various sources such as Microsoft 365, Barracuda Email Gateway KnowBe4, and SentinelOne to pinpoint key critical vulnerabilities and apply corrective actions., • Collaborate with relevant contractors and other internal and external stakeholders., • Other duties as assigned by supervisor.Communication, • Communicate daily with the IT Director and regularly provides reports and status to the Chief Administrative Officer, other stakeholders, and operational leadership as appropriate., • Serve as a trusted partner working with staff to analyze needs and develop cross-functional solutions to enhance AHS’ cybersecurity posture, improve cybersecurity processes, detection, response, and reporting., • Other duties as assigned by supervisorUser Training, • Identifies, assesses and analyzes user training needs; develops IT training programs and materials; facilitates routine user trainings as needed., • Works in conjunction with the HR department, develops, updates and facilitates IT onboarding and off-boarding processes and procedures for new employees to align with AHS policies and guidelines. Administrative Duties, • Meet regularly with the Information Technology department to discuss issues, project and future planning; Attends meetings and represents the IT department on committees as necessary including but not limited to IT/IS weekly meeting and monthly HIPAA Meeting., • Advise in AHS’ infrastructure systems, Business Continuity Plan and Contingency Plan by creating redundant systems, quality control measures, security review, testing and documentation., • Generates reports related to cybersecurity education, monthly testing and trends in cybersecurity related incidents., • May also received other duties as assigned. General Agency/AHS Duties, • Provides highest quality of customer service in accordance with the agency’s Guide to Service Excellence and Corporate Compliance Plan, • Foster an environment that promotes trust and cooperation among patients and staff., • Enforce clinic policies and procedures, including maintenance of patient confidentiality, to ensure that the principles of AHS are implemented., • Attend AHS general membership meetings, fundraisers, and other public events as required., • Participate in outreach activities, agency advocacy, and serve on ad hoc committees, as requested., • Attend AHS staff retreats.Minimum Qualifications, • Commitment to public health care services and mission of the community health care clinics., • Bachelor’s degree with equivalent experience; minimum 3-5 years of cybersecurity related experience and /or health care experience; or equivalent combination of degree in progress and pertinent healthcare experience., • Experience and understand project management with a focus on cybersecurity-related domains., • Excellent interpersonal & behavioral skills to liaison with other team members, departments, and external organizations., • Demonstrate ability to identify and understand problems, work collaboratively with team to bring to resolution, and balance when to escalate issues in order to meet project timelines., • Must have an up-to-date working knowledge of current cybersecurity processes, detection, and response procedures, • Demonstrate ability to work effectively with cross-functional staff, including IT, other project managers; multiple levels of leadership, business partners, and vendors. Preferred Qualifications, • Familiarity with cybersecurity analysis platforms, • Familiarity with EHRs e.g. Epic, Dentrix is a plus, with preference given to candidates with additional experience in current state-of-the-art systems for Pharmacy, Lab systems, Optometry, and Behavioral Health (IBH and Specialty)., • Knowledge of Cybersecurity Analysis, processes, and tools and reporting

Job DescriptionAbout UsAt Resilience, we’re creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the US military and intelligence communities – and built by prominent leaders and innovators from the insurance, technology, and cybersecurity industries – Resilience is rewriting the rules of how cyber risk is assessed, measured, and managed. Our integrated cyber risk solutions connect risk quantification software, cybersecurity experts, and A+ rated cyber insurance, all purpose-built for middle and large organizations. Guided strongly by our mission and four core values - transparency, excellence, grit, and humility, our culture uniquely blends many different backgrounds, experiences, and skills from across industries and geographies - all focused on helping our clients and partners stay ahead of the bad guys. We are a cybersecurity company, a Cyber and Tech E&O-focused MGA, a fintech startup, and a data science powerhouse, all purposefully built into one. Resilience is proud to be backed by leading technology investment firms, including General Catalyst, Lightspeed Venture Partners, Intact Ventures, Founders Fund, CRV, and Shield Capital. With headquarters in San Francisco, Resilience’s team is globally dispersed, with offices in New York, Chicago, Baltimore, Los Angeles, Toronto, and London. Resilience offers insurance coverage through its licensed and appointed insurance agents and security services through its expert security team. Resilience is seeking a strategic, customer-centric Senior Product Manager to lead the evolution of our Portfolio Risk Management product within our enterprise cyber risk platform. In this role, you’ll drive end-to-end product development across discovery, definition, delivery, and iteration—ensuring our portfolio risk management product successfully helps customers manage a complex set of risks across their entire enterprise. As companies face increasing exposure to cyber risks they need to effectively track, mitigate, and manage their security posture and their risk exposure on an ongoing basis. Companies are often made up of a variety of subsidiaries, business units, branches and other organizational entities that each have a unique risk profile which then creates a need to be able to analyze and manage cyber risk at both the individual entity level as well as at an aggregate level, hence the need for Portfolio Risk Management. This role is ideal for a product manager who thrives in a fast-paced B2B SaaS environment, enjoys working cross-functionally, and is passionate about translating complex risk challenges into intuitive, high-impact product experiences.Responsibilities: • Product Discovery & Definition, • Conduct user research with internal teams and external enterprise SaaS users to understand workflows, data needs, and platform requirements., • Translate technical and operational needs into clear product specs, user stories, and acceptance criteria., • Support market and competitive analysis, focusing on enterprise SaaS, workflow automation, and platform architecture trends., • Use analytics, SaaS usage data, system logs, and operational metrics to inform prioritization and product decisions., • Roadmap Execution, • Manage and maintain the product backlog with clear prioritization across application and platform initiatives., • Partner with application, data, and platform engineering teams to scope, prioritize, and deliver SaaS platform and workflow improvements., • Work closely with customer success, sales engineering, and operations to gather requirements and optimize enterprise workflows., • 4+ years of product management experience supporting B2B SaaS products, enterprise business applications, platform capabilities, or internal tooling., • Experience with cyber security & risk, IT management, or enterprise IT systems is a plus., • Strong skills in writing clear product requirements, workflow specs, and managing backlogs in an agile SaaS environment., • Comfort working closely with engineering teams on product architecture requirements, integrations, APIs, and automation tooling., • Strong analytical skills and a data-driven, metrics-oriented decision-making approach., • Excellent communication, organization, and cross-functional collaboration skills.

Job Description The Associate Scientist initiates and executes laboratory experiments to aid in product development. This position requires investigating the feasibility of applying a wide variety of scientific principles and concepts to potential inventions, products and problem solving. We are seeking an individual who maintains broad knowledge of state-of-the-art principles and theories and can work well in an exciting fast paced environment. PRIMARY RESPONSIBILITIES: * Autonomously and accurately design experimental plans and execute complex laboratory experiments such as analyte extractions, next-generation library preparation, hybrid capture and sequencing. * Evaluate and integrate new emerging technologies in genomics. * Write protocols and document results and scientific interpretations. * Contribute insight toward experimental findings and trouble-shoot laboratory processes and protocols. * Communicate and discuss results with a multidisciplinary team including biologists, bioinformaticians, statisticians, software engineers and managers. * Perform basic data analysis. * This role will have occasional access to PHI both in paper and electronic form and have occasional access to various technologies to access PHI (paper and electronic) in order to perform the job. * Employee must complete training relating to HIPAA/PHI privacy, General Policies and Procedure Compliance training and security training as soon as possible but not later than the first 30 days of hire. * Performs other duties as assigned. QUALIFICATIONS: * Bachelor's in molecular biology, biochemistry or closely related field with a minimum of 6 years of industry experience. Master's in molecular biology, biochemistry or closely related field, with 2 years of industry experience. KNOWLEDGE, SKILLS, AND ABILITIES: * Must have hands-on experience with basic molecular biology techniques, including PCR, QRT-PCR, digital PCR, nucleic acids extractions or sequencing. * Must be able to handle manual work/pipetting involving high throughput sample testing. * Must have experience in data analysis using Excel or other data analysis tools. * Demonstrated success in applying independent scientific judgment in experimental design and analysis. * Experience with next generation sequencing (NGS) methods and techniques. * Experience in optimizing laboratory methodologies and troubleshooting complex problems. * Experience in writing clear plans, reports and SOPs. * Experience in epigenetic/methylation, target enrichment, working with cfDNA/RNA/FFPE tissues and NGS data analysis is a plus. * Experience in programming and operating liquid handlers is a plus. * Experience in programming languages such as python is a plus. * Must have excellent communication, organizational, record-keeping, planning, attention to detail and time management skills. The pay range is listed and actual compensation packages are based on a wide array of factors unique to each candidate, including but not limited to skill set, years & depth of experience, certifications and specific office location. This may differ in other locations due to cost of labor considerations.San Carlos, CA $96,400—$120,500 USD OUR OPPORTUNITY Natera™ is a global leader in cell-free DNA (cfDNA) testing, dedicated to oncology, women's health, and organ health. Our aim is to make personalized genetic testing and diagnostics part of the standard of care to protect health and enable earlier and more targeted interventions that lead to longer, healthier lives. The Natera team consists of highly dedicated statisticians, geneticists, doctors, laboratory scientists, business professionals, software engineers and many other professionals from world-class institutions, who care deeply for our work and each other. When you join Natera, you'll work hard and grow quickly. Working alongside the elite of the industry, you'll be stretched and challenged, and take pride in being part of a company that is changing the landscape of genetic disease management. WHAT WE OFFER Competitive Benefits - Employee benefits include comprehensive medical, dental, vision, life and disability plans for eligible employees and their dependents. Additionally, Natera employees and their immediate families receive free testing in addition to fertility care benefits. Other benefits include pregnancy and baby bonding leave, 401k benefits, commuter benefits and much more. We also offer a generous employee referral program! For more information, visit . Natera is proud to be an Equal Opportunity Employer. We are committed to ensuring a diverse and inclusive workplace environment, and welcome people of different backgrounds, experiences, abilities and perspectives. Inclusive collaboration benefits our employees, our community and our patients, and is critical to our mission of changing the management of disease worldwide. All qualified applicants are encouraged to apply, and will be considered without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, age, veteran status, disability or any other legally protected status. We also consider qualified applicants regardless of criminal histories, consistent with applicable laws. If you are based in California, we encourage you to read this important information for California residents. Link: Please be advised that Natera will reach out to candidates with a @natera.com email domain ONLY. Email communications from all other domain names are not from Natera or its employees and are fraudulent. Natera does not request interviews via text messages and does not ask for personal information until a candidate has engaged with the company and has spoken to a recruiter and the hiring team. Natera takes cyber crimes seriously, and will collaborate with law enforcement authorities to prosecute any related cyber crimes. For more information: • BBB announcement on job scams, • FBI Cyber Crime resource page

Job DescriptionAbout Scality:Scality solves organizations’ biggest data storage challenges — security, performance, and cost. Designed to provide the strongest form of immutability plus end-to-end cyber resilience, Scality solutions safeguard data at five core levels for unbreakable ransomware protection. Delivering utmost resilience, Scality makes storage infrastructures limitlessly scalable in all critical dimensions. The world’s most discerning companies trust Scality so they can grow faster and execute AI data-driven ideas quicker — while increasing efficiency and avoiding lock-in. Recognized as a leader by Gartner, Scality S3 object storage software is reliable, secure and sustainable.Follow us on Twitter and LinkedIn. Visit and our blog. OverviewThe Director, Strategic Alliances will manage activities that drive collaboration between Scality’s US sales organizations and the sales teams of strategic hardware and application partners such as Supermicro, HPE, WEKA, Commvault and Veeam. This role is measured by joint go-to-market success and partner-driven revenue opportunities. The ideal candidate will bring proven strategic alliance expertise, demonstrated partner management skills, and field sales alignment experience in the data infrastructure ecosystem. Responsibilities • Alliance Management: Cultivate and maintain high-impact relationships with alliance sales leaders and regional teams, developing trust and ensuring strategic alignment for field initiatives., • Go-to-Market (GTM) Strategy: Develop and execute joint business plans, GTM campaigns, and sales plays that leverage each partner’s strengths and promote combined value propositions., • Sales Enablement: Oversee sales enablement efforts, including training, content development, and cross-company introductions to ensure field teams effectively represent joint solutions., • Joint Field Execution: Design, drive, and execute joint field activities—including pipeline generation, account mapping, and coordinated sales motions—between Scality and alliance sales teams to accelerate pipeline and closed opportunities., • Performance Metrics: Monitor key performance indicators and partner-driven revenue outcomes, reporting progress to executive stakeholders and adjusting strategies as needed., • Cross-functional Collaboration: Align with Scality product management, marketing, and partner technical teams to ensure messaging, integrations, and solutions are delivered successfully to market.Qualification, • Experience: Minimum of five years of relevant experience in strategic alliances, business development, or related field in the enterprise IT sector, preferably with direct experience working with or for HPE, Supermicro, WEKA, Commvault or Veeam., • Industry Expertise: Understanding of storage, data management, infrastructure, or adjacent software/hardware markets., • Relationship Building: Proven ability to build and manage field sales relationships in complex partner ecosystems., • Execution Skills: Track record of planning and executing joint field or GTM activities that led to measurable business results (pipeline/revenue growth)., • Communication: Excellent written and verbal communication, presentation, and negotiation skills.

Job Description Location: San Francisco, CA (Remote/Hybrid Available) What is Verse? Organizations today are under growing pressure to navigate the transition to clean energy — not just to meet sustainability goals, but to manage risk, control costs, and build long-term resilience. Yet the complexity of energy markets and a lack of accessible tools have made it difficult for most companies to take meaningful action. Verse was created to change that. Our mission is to make the case for clean energy irrefutable. Through our AI-powered platform, Aria, we help organizations plan, procure, and operate clean energy to achieve their financial and sustainability goals. Verse transforms clean energy ambition into action — giving businesses the clarity and confidence to lead in a rapidly evolving energy landscape. The Role As a Software Engineer focused on Fleet Telemetry & Control at Verse, you will be working closely with our energy solutions partners to design, implement, and test distributed energy resource controls and telemetry software on customer hardware at sites around the world. You will be part of a dynamic, high-performance team building applications directly on bare-metal or on hardware-level virtualization platforms. As an advanced technical leader in network programming and state management development, engineering teams will look to you for best standards and practices for interfacing with on-premises grid assets using solutions you will build and maintain. Key Responsibilities • Foster a culture and mindset of well-designed systems, test-driven software, and transparent communication with a high caliber of mutual respect and consideration for stakeholders, • Mentor and support career and junior level engineers in their fleet telemetry and control software career development, • Collaborate closely with energy solutions providers on their proprietary hardware and on-premises software stacks, • Design, implement, and test software for supervisory distributed energy resource control and telemetry applications with heterogeneous OEM hardware, sensor/actuator networks, and remote terminal units, • Develop high-performance, production-grade applications optimized for resource- and bandwidth-constrained environments, • Provide specifications for over-the-air (OTA) update of on-prem software and remote access solutions for customers, • At least 5+ years of experience working directly on bare metal applications, • Advanced Rust programming knowledge, • Technical leadership and commitment to delivering high quality software on time or ahead of schedule, and adhering to best software development practices, • Comfortable working with scripting languages such as Shell or Python (understanding of Rust bindings for Python or similar a big plus), • Advanced knowledge of communications solutions at all layers (L1-L7) in the OSI networking model, • Hands-on exposure to lightweight database engines such as SQLite, LevelDB, or similar, • Familiarity with SCADA systems, industrial automation software, PLCs, microcontrollers, and finite state machines, • A bachelor's degree or higher in a STEM field, • Proficient with electric power systems and bulk electricity grid hardware (e.g. transmission, distribution, generation, storage), • Comfortable building software on the Intel Atom family of processors or similar low-powered CPU environments, • Working knowledge applying first principles of model-predictive control, optimal control, robotics, and/or reinforcement learning, • Deep knowledge working with Modbus TCP or similar L5-L7 application layer networking protocol, • Technical proficiency working with industrial SCADA communications protocols such as DNP3 and the IEC 60870 and 61850 family of protocols, • Experience building resilient, fault tolerant applications on inherently unreliable / mesh networks with Ethernet, Wi-Fi, Zigbee, 4G/5G cellular, broadband, fiber, or satellite links, • Lead with Empathy: We lift each other up with humility and kindness, always putting colleagues and customers first, • Be Honest & Transparent: We prioritize effective communication to build trust with our team, customers, and stakeholders, • Move with Balance & Precision: We believe speed and perseverance must be accompanied by thoughtfulness and reflection $160,000 - $194,000 This is the estimated base salary range for this position, which does not include the value of benefits or a potential equity grant. A wide range of factors are considered in making compensation decisions, including but not limited to level, skill sets, market conditions, experience and training, licensure and certifications, and business and organizational needs. Benefits and Employee Perks • Competitive compensation and equity grant at a high-growth start up, • Comprehensive benefits package including medical, dental and vision insurance, and 401k, • Flexible hours and unlimited PTO

Job Description About the California Academy of Sciences The California Academy of Sciences is a globally renowned scientific and cultural institution located in the heart of San Francisco's Golden Gate Park. Home to a world-class planetarium, aquarium, research center, and natural history museum—all under one living roof—our mission is to regenerate the natural world through science, learning, and collaboration. Our extensive collections span plants, animals, fossils, and cultural artifacts from across the globe and throughout history. We are a diverse team of leading biodiversity scientists, educators, storytellers, designers, and communicators who work collaboratively to advance knowledge and inspire action through science and storytelling. When you join the California Academy of Sciences, you become part of a mission-driven community that values curiosity, collaboration, and innovation. Whether you're working behind the scenes in research or engaging the public on the museum floor, your work will help connect people to the natural world and empower them to protect it. About the Opportunity Reporting to the Director of Information Technology, the Senior Security Analyst is responsible for configuring, maintaining, and monitoring internal security controls to prevent, detect, and respond to cyber threats. The Analyst will focus on the needs of information security services, bringing information security expertise to integrate security tools into daily operations, contribute to the improvement of security architecture, and assess/improve security in departments across the Academy. Additionally, this position plays a critical role in maturing our IT and security programs at the Academy. Organizational Culture Join a team dedicated to the Academy's mission, vision, and values! Currently, the Academy has a new strategic plan including three initiatives – Hope for Reefs, Thriving California, and Islands 2030 – that leverage biodiversity science, environmental learning, and collaborative engagement to regenerate fragile ecosystems around the world. Learn more at . We hope you are inspired by what we do and are excited to contribute to our mission. The mission of the California Academy of Sciences is to regenerate the natural world through science, learning, and collaboration. The Academy is seeking candidates who consistently deliver exceptional work, and they may come from a variety of backgrounds and experiences. We encourage you to apply even if you do not believe you meet every qualification for the position. This position is based in San Francisco, California. The specific onsite/hybrid schedule for this position is listed below. [FOR CAWU ROLES] This position is part of a bargaining unit represented by Cal Academy Workers United, and will be subject to the terms and conditions of that contract. Key Responsibilities • Manage, coordinate, and implement the latest security best practices on network devices, firewalls, servers, and workstations to ensure continuous alignment with security standards and requirements., • Partner with the IT Infrastructure Manager to establish and maintain a system for ensuring that security policies are met and all staff are trained and informed fully on their role in security, • Evaluate the effectiveness of awareness and security training programs and make recommendations for improvement., • Analyze, research, and resolve security breaches and vulnerability issues for all implemented software and hardware platforms., • Evaluate, Prioritize, and coordinate patching., • Provide security expertise and consulting to the IT Team and CAS internal technology partners, • Partner with external security advisors to evaluate security posture and review/remediate issues, • Participate in team exercises to identify potential security risks and tabletop scenarios, • Maintain awareness/knowledge of industry-standard security trends/benchmarks/frameworks (e.g., NIST/CISA/ISO 27001) EXPERIENCE and/or EDUCATION: • 5+ years of experience in the Information Technology field, • 3+ years of enterprise IT security experience, • Experience with the administration/use of security software (e.g., Trellix/FireEye, Tenable, Nessus, Sophos, Splunk), • Experience assessing IT infrastructure and software to identify vulnerabilities, • BS/BA or equivalent training and experience, • Information Security Certifications - CISSP, CISM, GIAC - strongly preferred, • Hands-on experience with firewalls, network security, and VPNs - preferred, • SIEM Experience - preferred, • Strong problem-solving and troubleshooting skills, • Ability to interact with users of varying levels of technical knowledge, • Ability to work as part of a team or collaborate well with team members and external collaborators to accomplish mutual goals., • Ability to work efficiently and communicate with staff, cross-functional teams, and external customers from different identities and experiences. Compensation and Benefits: The salary range for this position is $121,762. Actual compensation will be commensurate with the final candidate's qualifications and experience, including skills, knowledge, relevant education, certifications and aligned with the internal peer group. We believe in fair and equitable compensation practices and are committed to providing competitive salaries within the industry and market standards. The Academy offers a total compensation package that emphasizes both base salary and comprehensive benefits based on the hours per week worked. Further details regarding compensation and benefits will be discussed during the interview process. Schedule: Full-time, 40 hours per week How to Apply: Interested candidates should submit a resume and application through our Careers Page portal. The California Academy of Sciences will give full consideration for employment to all qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance (SF Police Code, Article 49).

Job DescriptionLead Energy Storage Cybersecurity Engineer / Cybersecurity Architect Location: FULLY REMOTE (Anywhere in the USA) This is an opportunity to join an industry leading renewable energy venture with strong private equity backing that is focused on the development, execution, and operations of dynamic utility-scale energy storage projects. They are at the forefront of the industry, have accumulated over 9GW+ nationwide portfolio of projects that include a utility-scale fleet of grid-connected operating standalone battery storage assets. The Lead Energy Storage Cybersecurity Engineer will own our enterprise cyber strategy and hands-on execution—designing and delivering protections that measurably reduce risk. It will build and mature our InfoSec, AppSec, SecOps, IAM, and Data Privacy programs, translating industry frameworks into pragmatic controls, policies, and continuous testing. This is a cross-functional role that will partner across IT, Data Engineering/Science, Operational Technology, Asset Management, EPC, Legal, External Relations, and HR to embed security into both project delivery and corporate operations. You will set governance and standards, manage control implementation, and drive KPI-backed roadmaps with executive-ready communications. This role blends strategic leadership with deep technical acumen to safeguard the business and enable growth. They are committed to creating more renewable infrastructure solutions for the grid and are offering comprehensive compensation packages to their employees leading the drive to meet company goals. Other perks included a competitive base salary, open PTO policy, flex work hours, benefits, the opportunity to work with a transparent Executive Leadership Team..and more. RESPONSIBILITIES: • Drive the cybersecurity program: Partner daily with stakeholders to align activities to company security/compliance posture; champion secure-by-design and secure-by-default across the company., • Own threat & vulnerability management: Baseline, monitor, and assess risk across OT/IT/data environments; triage and resolve security events, control gaps, policy questions, and technical risks., • Build scalable security operations: Create repeatable frameworks to detect events, quantify feasibility, document risk, and model blast radius; project-manage implementation of security controls., • Lead compliance & posture management: Administer CSPM platforms; run automated evidence collection; develop, communicate, and assess compliance vs. internal/external policies; advance certifications/attestations (SOX, ISO, NERC-CIP, NIST CSF 2.0)., • Secure the ecosystem: Stand up and run a Third-Party Cyber Risk Management (TPRM) program to mitigate vendor and software supply-chain risk., • Elevate governance & reporting: Publish executive-ready cyber/risk metrics; partner with Legal & Compliance to operationalize controls and meet laws/regulations; collaborate with External Relations on proposed cyber legislation. QUALIFICATIONS: • Proven impact: 8+ years identifying vulnerabilities and deliver mitigation plans in fast-paced settings; juggle multiple priorities while operating independently or as part of a team., • Security certs (e.g., CISSP, CISM, CRISC, CISA, GIAC, EC-Council) desired, • Deep technical breadth: Hands-on expertise in 2+ areas (e.g., network or embedded/hardware security, cryptography, web/network protocols, SBOM, threat modeling, pen testing, vulnerability assessment); OT familiarity preferred., • Automation & measurement: Use Python/Rust to automate security workflows; establish and track KPIs/metrics that quantify security and risk performance., • Audit & compliance leadership: Run audits and certification programs end-to-end—scope, control design, testing, risk mapping, and reporting—across SOC 2, ISO 27001, NIST frameworks; experienced in SOX environments., • Stack fluency: Working knowledge of Email Security, DLP, CSPM, ZTNA, EDR/XDR and adjacent security technologies to strengthen enterprise posture., • Credentials & communication: BS/MS in IS/CS/SE (or related); strong written/verbal communicator with cross-functional teams (technical & non-technical); proficient with Microsoft Word, Excel, PowerPoint, Outlook, • Solid exposure to cybersecurity best practices for software development and distributed architecture systems., • Ideal candidates for this role will have experience working in Senior, Lead, Principal, Hands-on Manager, and Hands-on Director level roles as Principal Cybersecurity Engineer, Cybersecurity Architect, Enterprise Security Engineer, Cyber Security Manager, Platform Security Engineer, Security Solutions Architect, • HUGE PLUS - experience working in production ready coding environments in the energy trading or financial trading sector, • HUGE PLUS - solid understanding of national energy markets and renewable energy portfolios - PJM, ERCOT, SPP, MISO, NYISO, ISO-NE, and CAISO

Key Responsibilities Investigate and respond to escalated security incidents across Microsoft cloud and on-premises environments Perform advanced incident analysis using Microsoft Defender suite and Azure Sentinel Conduct security assessments of Azure/Microsoft 365 configurations and implement h

Information Security Need Local to San Francisco, CA Onsite role Looking for independent folks. Top Skills: KQL - kusto query language - used by different Microsoft security tools like sentinel or defender SPL that Splunk uses General incident response actual incident tickets - resolve actual security incident tickets Requirements • Self-starter, able to readily explore and learn new areas and concepts., • Knowledge and experience normally acquired through, or equivalent to, the completion of a Computer Science or Computer Engineering Bachelor's degree with a minimum of 5 years of job-related experience., • Degrees in Computer Science or Engineering and/or relevant technically focused certifications in Cloud and/or enterprise security architecture such as GCAD or GDSA are advantageous Experience with • AWS commercial or government cloud, • Experience securing critical workloads in a cloud environment., • Knowledge and experience with Databricks, Starburst, Collibra and Immuta is advantageous. Job Role Summary Lead and produce system threat models for integration of commercial components into a data lake platform. Help design secure cloud architectures. Propose effective security controls within the environment and identify and mitigate security vulnerabilities. Simplify complex security topics, lead discussion in technical and business teams, communicate risk accurately. Skills • Able to create AWS secure cloud architecture designs, • Understand current security threats, techniques, and landscape, • System threat modeling of applications and platforms, • Able to identify and provide mitigation for security vulnerabilities within applications and application environments based on threat models., • Able to simplify complex security topics for consumption and critical decision making., • Clear and accurate communication, • Able to lead/direct discussions with technical and business teams to achieve common goals., • Able to work well within a team and support team goals, • Understand cyber security frameworks such as NIST 800-53, • Ability to work on a geographically distributed team across multiple time zones, • Familiarity with SAFe a plus Responsibilities • Evolve and mature our models, templates, standards and procedures related to secure application development and secure application and cloud architecture. Ensure these artifacts are in alignment with FRS policy and standards., • Consult with our development teams to help them align with FRS policy and standards and meet the risk appetite of the customer., • Work with members of application development teams to review and create secure application and infrastructure designs and patterns., • Assist development teams by reviewing threat models related to applications and related systems. Analyze potential business impact and exposure leading to risk, based on emerging security threats, vulnerabilities, configurations, threat actor TTPs, etc., • Evaluate CICD pipeline design, and related development team processes and help to mature and secure creation, management and utilization of pipelines., • Assist in identification and integration of security focused tooling into development and operations processes., • Support secure application architecture within the Federal Reserve System by fostering constructive dialogue and seeking resolution when confronted with discordant views., • Solicit feedback and continuously improve your knowledge, skills and capabilities related to the position., • Assist with recruiting activities and administrative work.

Prestigious Enterprise Company is currently seeking a Cyber Security Architect with strong Threat, Vulnerabilities, and Risk Compliance Architecture and Engineering experience. Candidate will be responsible for the planning, development and implementation of enterprise information security solutions to address the current and emerging security needs of the business. This role requires the solution of complex enterprise-scale information security problems. The role will design and develop new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Responsibilities: • Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions., • Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats., • Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors., • Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices., • Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture., • Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements., • Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks., • Shared Responsibility model, • Secure services in the cloud, • Infrastructure security in the cloud, • Secure boundaries, • Authentication & Authorization, • security services in the Cloud, • Cloud Native VS Third party security capabilities, • Container Security, • Container security lifecycle, • Strong knowledge of network security protocols, best practices, and perimeter security tools, • Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping, • Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management, • Understanding of common data protection technologies such as cryptography, tokenization, and hashing, • Understanding of Azure native security services and best practices, • Strong knowledge of threat modelling and risk assessment technologies or frameworks, • The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications, • ability to lead the exercise of collecting the required data to produce the deliverables, • Ability to articulate the requirements in technical and non technical language, • Ability to defend secure design and support it with real life scenarios, • Ability to articulate the risk and findings in business language, • Explain vulnerabilities and threats, • Threat modeling, • Recent attacks, • Application Security Focus Areas, • Secure Code Development, • Secure SDLC, • Secure Agile development, • Testing Security requirements, • Writing security stories, • Web Application Security, • Owasp 10, • SAST and DAST Scan, • API Security, • CI/ CD pipeline, • Integrate security tools, • Security testing

NO SPONSORSHIP - NO OPT Cybersecurity Engineer / Architect BILL RATE: Open - C2C or W2 LOCATION: REMOTE DURATION: 1 YEAR OR LONGER The manager is looking for someone out of a large enterprise environment and is a true architect with engineering skills. Highly technical and applications and infrastructure focused is key platform applications storage network virtualization cloud azure and mobile security The Cyber Security Engineer will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current and emerging security needs of the business. This role requires the solution of complex enterprise-scale information security problems. The role will design and develop new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Skills/Experience: Contributes to a team that ensures the security of enterprise data and systems by developing enterprise information security solutions. Creates and updates a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats. Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors. Serves as a security expert in one or more of application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements. Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Serves as an expert in one or more of platform, application, storage, network, virtualization, cloud and mobile security best practices. Mandatory Technical Skills: Experience with healthcare data systems or claims management platforms Strong knowledge of network security protocols, best practices, and perimeter security tools Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management Understanding of common data protection technologies such as cryptography, tokenization, and hashing Additional Technical Skills: Understanding of Azure native security services and best practices Strong knowledge of threat modelling and risk assessment technologies or frameworks

Senior Full Stack Engineer - Backend Focus / Security / Node (Hybrid) Overview A Senior Engineer is required to join an exciting early-stage startup in the San Francisco East Bay. This is a high-impact opportunity to architect a security-critical cloud platform from scratch, powering a new generation of electric vehicles and financial services for global markets. Why join? • Stable Funding: Enjoy the agility of a startup without the instability of the typical venture capital cycle., • Elite Team: Work alongside founders with backgrounds in high-volume manufacturing and top-tier tech consulting., • Real Impact: Solve complex logistics and asset-protection challenges that have a tangible, positive impact on global mobility., • Salary: Base salary up to $210,000 DoE, plus equity., • Benefits: Medical, Dental, and Vision insurance, 401(k) with company match and 20 days PTO + 11 holidays. The Company A mission-driven hardware and software company revolutionizing personal transportation. By combining rugged, purpose-built electric vehicles with innovative financing solutions, they make mobility accessible in underserved economies. They foster a collaborative, hands-on culture where software directly interacts with the physical world. The Role You will own the end-to-end architecture of the fleet management and asset tracking system. This role is weighted approximately 75% Backend/Security and 25% Frontend. You will: • Architect and build secure backend services to handle financial transactions, vehicle telemetry, and user identity., • Implement rigorous security standards for IoT data flows, ensuring tamper-proof logging and encryption., • Build the necessary web interfaces for fleet administration (React), while ensuring the underlying API surface is robust and scalable. The Essential Requirements • 5+ years of experience shipping production software, with a heavy emphasis on Backend Engineering., • Proven experience architecting security-critical systems (e.g., handling payments, PII, medical data, or access management)., • Deep proficiency in Node.js, TypeScript, Go, or Python., • Competence in Frontend development (React, Vue, or similar) to support internal tools and dashboards., • Experience managing cloud infrastructure (AWS/GCP/Azure) and designing scalable APIs., • Must be willing to work on-site in the San Francisco East Bay area., • Must possess legal authorization to work in the United States. What will make you stand out • Background in Fintech, Banking, Healthcare (HIPAA), or Defense sectors., • Deep expertise in Applied Cryptography, Identity Access Management (IAM), or Secure IoT., • Experience with mobile development (React Native) is a plus, but not required., • Previous experience as a founding or early-stage engineer., • A passion for EVs, automotive tech, or hardware-software integration. If you are interested in this role, please apply with your resume through this site. SEO Keywords for Search Senior Backend Engineer, Security Engineer, Staff Software Engineer, Full Stack Engineer, IoT Security, Fintech Engineer, Node.js Architect, TypeScript, Cryptography, Identity Management, IAM, HIPAA Compliance, Payment Systems Developer, Secure Systems Architect, Fleet Management, API Developer, Cloud Security, AWS, Hardware Integration, San Francisco Jobs, East Bay Developer, Python, Golang, Asset Tracking, Cyber Security Engineer, Backend Lead. Disclaimer Attis Global Ltd is an equal opportunities employer. No terminology in this advert is intended to discriminate on any of the grounds protected by law, and all qualified applicants will receive consideration for employment without regard to age, sex, race, national origin, religion or belief, disability, pregnancy and maternity, marital status, political affiliation, socio-economic status, sexual orientation, gender, gender identity and expression, and/or gender reassignment. M/F/D/V. We operate as a staffing agency and employment business. More information can be found at attisglobal.com.

Job DescriptionCyber/Data/Privacy Associate Attorney – Midlevel Location: Chicago | Washington, DC | New York | San Francisco Practice Area: Cyber, Data & Privacy Direct Counsel is seeking a midlevel associate (4th-6th year) with experience in litigation and/or regulatory enforcement investigations involving privacy and data security matters. This is an opportunity to join an award-winning Cyber/Data/Privacy practice with a strong international presence. Key Responsibilities: • Represent clients in regulatory investigations involving consumer protection issues (State AG, FTC, and other regulatory agencies)., • Defend privacy and data security class actions, including cases involving:, • Stored Communications Act, • Wiretapping claims, • Unfair and deceptive trade practices, • Data breach class actions, • Engage directly with clients and lead significant projects.Qualifications:, • 4-6 years of litigation or regulatory investigation experience in privacy and data security matters., • Strong academic background from a nationally recognized law school., • Ability to manage complex legal issues and collaborate with cross-functional teams., • Strong technical fluency and analytical skills., • Exceptional writing and advocacy skills.Compensation & Benefits:, • Salary Range: $310,000 - $390,000 (Final offer based on experience and location)., • Comprehensive benefits package, including medical, dental, vision, and commuter benefits., • Generous leave policies, including vacation, sick leave, and parental leave. Apply today to learn more.

Get to Know Us ___ is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs. We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn-it-alls, committed to a culture of respect, collaboration, ownership, and results. As a remote first company, we require minimum 25Mbps consumer grade broadband connection. What You’ll Do The Senior Backend Engineer will be joining one of our world-class software engineering teams, and will be a key contributor to both user-facing product launches as well as platform enhancements and stability. *This job description covers roles available across multiple teams. During the interview process, we’ll work with you to determine the best team fit based on your experience, interests, and career goals. Responsibilities: * Develop core product features in ETL (Extract, Transform, Load) and GraphQL to support data processing and retrieval. * Design and implement backend APIs in GraphQL to facilitate data interactions between different components of the product. * Build and maintain ETL pipelines for efficient data processing and analytics. * Collaborate with frontend team members to present data in a clear and user-friendly format, enhancing the product's user experience. What You’ll Bring * Ability to own and manage concurrent initiatives, demonstrating effective judgment in prioritization and time management. * Driven, self-managed, capable of conceiving and implementing solutions on your own and with a team * A strong desire to continuously improve and learn new technologies in a fast-paced Agile development environment * Excellent analytical and problem-solving skills, effective communication, attention to detail and high-quality work * Strong technical documentation ability to support the development process. * Effective communication and collaboration with designers, developers, and product managers. * Ability and interest in mentoring junior and mid-level engineers to foster their growth and development. Required Education / Experience: * Bachelor's Degree in Computer Science, Computer Engineering or related field. * 7+ yrs professional software engineering experience using modern object-oriented or functional languages (Python, Java, Go, Scala, C++, TypeScript, etc). * Experience building applications on cloud computing platforms such as AWS, Azure, GCP, using container technologies such as Docker and Kubernetes. Preferred Education/Experience: * Expert proficiency in SQL and experience with various database architectures including relational (PostgreSQL) and graph (Neo4j). * Experience building GraphQL backends. * Experience managing and maintaining production infrastructure. * Experience building platform capabilities for internal teams. Travel Required We are a fully remote company with a strong preference for candidates in the Bay Area. This job may require up to 5% of travel to be successful. Compensation and Values At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations. In accordance with various State’s transparency regulations, we provide the following salary range information for this position: * Base salary range: $155,000 - $200,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills. * Additional compensation: This role may also be eligible for an equity package (in the form of stock options). If any other compensation benefits apply, they will be discussed during the interview process. Perks of ___ * Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive. * Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities. * Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking. * Remote Work: We are a 100% remote company. Enjoy the flexibility to work in the way that supports you and brings out your best. * Competitive Compensation: We offer competitive salary and benefits which includes health, vision & dental care for you and your family, a flexible vacation policy, and generous parental leave. You Belong Here Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, hair length or any other legally protected status by law. Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth. We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice. Application Note In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Job Description Associate – Privacy & Cyber (Transactional) Locations: Austin | Houston | San Francisco | Silicon Valley | Washington, D.C. Experience Level: 2–5 years Practice Area: Corporate – Data Privacy & Cybersecurity Direct Counsel is representing an Am Law 100 firm seeking a Privacy & Cyber Associate (3rd–5th year) to support its thriving Transactional Privacy Practice. This is an opportunity to work on cutting-edge privacy and cybersecurity issues at the intersection of technology, law, and business. You Will: * Advise on CCPA/CPRA, GDPR, and other privacy laws * Support M&A, IPOs, and other corporate deals with privacy components * Negotiate privacy and security terms in commercial agreements * Work with top-tier clients on fast-evolving regulatory matters and tech innovations You Have: * 2+ years of legal experience in privacy, data security, or cyber law * Solid transactional background (especially in tech, commercial contracts, or M&A) * Exceptional writing, communication, and negotiation skills * A passion for privacy and tech—CIPP is a plus! * Strong law firm training and excellent academic credentials Join a collaborative, fast-paced team tackling complex privacy challenges for clients across industries.

Job DescriptionCompany Description Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are We believe collaboration thrives in person. That’s why most of our teams work from the office full time, with flexibility when it’s needed. This model supports real-time problem-solving, stronger relationships, and the kind of precision that drives great outcomes. Job Description Your Career The Palo Alto Networks Sr. Director - Oracle is a Global Alliance Leader acting as the strategic leader for our joint business with Oracle Cloud. This person is responsible for providing strategy and leadership for the sell-with/go-to-market engagement and all joint activities with Oracle Cloud. Responsibilities include working with Oracle Cloud on shared marketing priorities, joint customer engagements, joint pipeline development, and ultimately growing our bookings on the Oracle Cloud Marketplace. Global activities include establishing joint targets, defining incentives, building business plans, and identifying customer targets. They will work closely with our in-field channel organization (a dotted-line relationship) to connect the Palo Alto Networks Sales organization with Oracle Cloud’s Sales teams. The Global Alliance Leader will report directly to the VP of Cloud and will manage teams that functionally work across a large, cross-functional geographic team of Integration and Business Development leaders. They will also manage several relationships with theater-based Channel Engagement Managers, Partner Marketing, Inside Sales, and Product Marketing/Development. This person will be the knowledge expert and relationship owner across all of Oracle Cloud and will be asked to present at QBRs, executive meetings, trainings, and events. This role has frequent contact with senior executives, up to and including the C-suite of both organizations. Your Impact * Develop and deliver against the annual strategic plan and performance goals for the Oracle and OCI. * Innovate and define strategic initiatives, including but not limited to joint marketing activities, tri-party agreements, product integrations, and Sales incentive programs. * Drive Oracle Co-Sell activities with an emphasis on incremental and new opportunities for Palo Alto Networks. Ability to develop with prior experience of working across AI, Cloud, and Security sales activities * Establish strategy and provide oversight for Palo Alto participation in Oracle Cloud events. * Build and maintain relationships with key personnel in Oracle Cloud to solidify Palo Alto Networks’ standing and awareness within Oracle Cloud; assist in developing key relationships with the extended Palo Alto Networks cloud team and executives. * Act as an escalation point for Palo Alto Networks’ field sales organization on engagement management with Oracle Cloud in pre- and post-sales engagements. * Assist with providing content for Oracle Cloud training curriculum and sales enablement. * Understand and articulate Oracle Cloud’s strategic initiatives and gain a deep understanding of the activities, roadmap, and vision of Oracle Cloud. Qualifications Your Experience * BA, BS (or equivalent work experience), MBA/BA in Business/Economics preferred or equivalent military experience required * 10+ years of experience in GTM Sales and Leadership roles with a minimum of 5+ years preferably working at, or with, a cloud service provider and Security Technology company; 3+ years in a global role preferred * Industry knowledge of security product market trends, including awareness of Palo Alto Networks’ roadmap and technology development efforts, and understanding of competitive cybersecurity products * Industry knowledge of Cloud Service Provider strategy and roadmap, Oracle Cloud required; Knowledge should include how they partner with ISVs * Demonstrated ability to work in a virtual and matrixed environment * Strong communication (written and verbal) and presentation skills * Demonstrated history of managing complex 360-degree relationships across sell-to, sell-with, and buy-from. * "Whatever it takes" attitude and motivation to do whatever is necessary to assist in winning business Additional Information The Team Our Alliance team works hand-in-hand with large organizations around the world to keep their digital environments protected. We educate, inspire, and empower our potential clients in their journey to security. As part of our team, you are empowered with unmatched systems and tools, constantly updated research and sales libraries, and a team built on joint success. You won’t find someone at Palo Alto Networks that isn’t committed to your success – with everyone pitching in to assist when it comes to solutions selling, learning, and development. As a member of our alliance team, you are motivated by a solutions-focused sales environment and find fulfillment in working with clients to resolve incredibly complex cyber threats. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $215000 - $322500/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Job DescriptionCyber/Data/Privacy Associate Attorney – Advisory (4th–7th Year) Location: San Francisco, New York, or Washington, DC Direct Counsel is seeking a Cyber/Data/Privacy Associate to join a nationally recognized law firm with a strong technology and regulatory practice. This opportunity is ideal for a mid-level associate (4th–7th year) who is interested in a counseling and advisory-focused role within a collaborative, global team. The Cyber/Data/Privacy group works with a wide range of clients—from startups to public companies, including leaders in the technology, life sciences, media, and financial services sectors. Attorneys in this group advise on compliance with U.S. and international privacy laws (such as CCPA, CPRA, and GDPR), information security programs, incident response preparedness and execution, regulatory investigations, and the privacy aspects of corporate and commercial transactions. Qualifications: * 4–7 years of relevant experience in cyber/data/privacy matters, gained at a law firm or in-house. * Demonstrated expertise in privacy law compliance, data breach response, and privacy diligence for corporate transactions. * Experience drafting and negotiating data processing agreements and privacy schedules in commercial contracts. * Strong academic credentials from a nationally recognized law school. * Excellent communication, analytical, and writing skills. * Ability to lead significant projects and engage directly with clients. Compensation: The expected annual salary range for this position is $310,000–$420,000, depending on location, experience, and qualifications. Benefits: The firm offers a comprehensive benefits package, including medical, dental, vision, life, and disability insurance; flexible spending accounts; commuter benefits; generous vacation and sick leave; paid holidays; parental and fertility benefits; and backup care support. New employees are provided a detailed orientation to learn about all available resources and benefits.

Job Description About Figure Figure (NASDAQ: FIGR) is transforming capital markets through blockchain. We're proving that blockchain isn't just theory - it's powering real products used by hundreds of thousands of consumers and institutions. By combining blockchain's transparency and efficiency with AI-driven automation, we've reimagined how loans are originated, funded, and traded in secondary markets. From faster processing times to lower costs and reduced bias, our technology is helping borrowers, investors, and financial institutions achieve better outcomes. Together with our 170+ partners, we've originated over $17 billion in home equity loans (HELOCs) on our blockchain-native platform, making Figure the largest non-bank provider of home equity financing in the U.S. Figure's ecosystem also includes YLDS, an SEC-registered yield-bearing stablecoin that operates as a tokenized money market fund, and several other products and platforms that are reshaping consumer finance and capital markets. We're proud to be recognized as one of Forbes' Most Innovative Fintech Startups in 2025 and Fast Company's Most Innovative Companies in Finance and Personal Finance. About the Role This cyber compliance & risk management role protects the organization's digital assets and resilience by identifying, assessing, and mitigating cybersecurity risks while ensuring adherence to laws, regulations, and industry standards to protect business continuity. You'll champion security controls, policies, and reporting that align security practice with business needs. What You'll Do • Align cybersecurity practices with external regulations (e.g., GDPR, HIPAA) and internal policies., • Conduct risk assessments and threat/vulnerability analyses across systems and networks., • Partner with SecOps to continuously monitor systems for threats and validate control effectiveness., • Recommend, implement, and validate security controls and best practices to reduce risk., • Develop, maintain, and socialize security policies, standards, and procedures. Contribute to incident response planning and post-incident reviews., • Document findings, quantify risk, and present recommendations to technical and executive stakeholders., • Familiarity with enterprise IT, networks, common threats, and core security tools., • Working knowledge of frameworks such as NIST and NICE for risk and capability mapping., • Understanding of data privacy laws and industry-specific regulations., • Ability to perform risk assessments, analyze data, and conduct threat modeling., • Compensation Range: $80,000 - $100,000/yr, • 25% annual bonus target, paid quarterly, • Equity RSU package, • Comprehensive health, vision, and dental insurance with 100% employer-paid premiums for employees and their dependents on select plans, • Company HSA, FSA, Dependent Care, 401k, and commuter benefits, • Employer-funded life and disability insurance coverage, • 11 Observed Holidays & PTO plan, • Up to 12 weeks paid family leave Figure will not sponsor work visas for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. #LI-SB1 #LI-Hybrid

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

GovCIO is currently hiring for Information Systems Manager. Practical experience in information systems, Mission Command systems, Local Area Network, and or Cyber Security/Computer Network Defense administration. Develops policy recommendations and provides technical guidance on the management of Ar

Cogent Security is on a mission to stop breaches and prevent cybercrime by innovating at the frontier of generative AI systems.We are building the world’s first AI cyber taskforce, composed of AI agents capable of human-caliber reasoning and execution of cybersecurity tasks, that autonomously prot

Key Responsibilities Provide technical and administrative expertise in Information/Cyber Security Design private connectivity patterns and ensure secure network operations Oversee security monitoring, logging integrations, and compliance across environments Required Qualifications Deep techni

Key Responsibilities Implement and manage network security tools, including Palo Alto firewalls and Prisma services Administer web application firewalls such as F5 ASM and Fastly WAF Leverage AI technologies for controlled access to tools and services Required Qualifications Experience with n

Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Engages with security specialists and other functional area architects to ensure adequate enterprise securit

A global technology company is looking for an experienced security practitioner in San Francisco to secure its global network. The ideal candidate should have a Bachelor's degree, 3+ years of cyber security experience, and a strong ability to build relationships across teams. Responsibilities includ

Web Security/Penetration Testing Engineer (Web Application).Fremont, CA remote (Local candidate who can be in the client office weekly or Bi-weekly).Must have advanced knowledge web application penetration testing.Extensive knowledge of and proven experience with penetration testing of web applicati

Web Security/Penetration Testing Engineer (Web Application).Fremont, CA remote (Local candidate who can be in the client office weekly or Bi-weekly).Must have advanced knowledge web application penetration testing.Extensive knowledge of and proven experience with penetration testing of web applicati

Cybersecurity Engineer / Architect. The manager is looking for someone out of a large enterprise environment and is a true architect with engineering skills. The role will design and develop new technologies, architectures, and security products that will support security requirements for the enterp

The Sales Account Manager will be responsible for following up with potential new customers and closing deals for our cybersecurity product offerings. The ideal candidate will have strong negotiation skills, the ability to convince potential customers, and a deep understanding of our cybersecurity s

At PwC, our people in brand management, marketing and sales focus on collaboration to develop and execute strategic sales and marketing initiatives.These individuals focus on driving revenue growth, promoting the Firm's services, enhancing brand visibility, and capturing new business opportunities.T

Job Description:\n\nCompany Description The Department of Public Health prioritizes equitable and inclusive access to quality healthcare for its community and values the importance of diversity in its workforce. All employees at the Department of Public Health work to advance equity, inclusion, and diversity with a specific lens and focus on race, ethnicity, gender, sex, sexuality, disability, and immigration status. This is a Position-Based Test conducted in accordance with CSC Rule 111A. Learn more about the City’s hiring process here: Opening: Friday, November 21, 2025Application Deadline: Application filing will close on or after Friday, January 9, 2026.Salary: $180,440 - $230,308 Annually (Range A)Appointment Type: Permanent Civil ServiceRecruitment ID: PBT-0933-160818 Becoming a City employee means being a part of a team that cares about making a difference. Your work will shape both the present and future of San Francisco. When you work for the City, you’re choosing a job with purpose. The mission of the San Francisco Department of Public Health (SFDPH) is to protect and promote the health of all San Franciscans. SFDPH strives to achieve its mission through the work of several divisions - the San Francisco Health Network, Population Health Division, Behavioral Health Services, and Central Administration. The San Francisco Health Network is the City’s only complete system of care and has locations throughout the City, including Zuckerberg San Francisco General Hospital and Trauma Center, Laguna Honda Hospital and Rehabilitation Center, and over 15 primary care health centers. The Population Health Division (PHD) provides core public health services for the City and County of San Francisco: health protection, health promotion, disease and injury prevention, disease surveillance, and disaster preparedness and response. Behavioral Health Services operates in conjunction with SFHN and provides a range of mental health and substance use treatment services. Central Administration houses core support organizations, including Finance, Information Technology (IT), Human Resources, Privacy and Compliance, Business Office, Facilities Management, and Security Services.Job Description The San Francisco Department of Public Health is seeking a dynamic and experienced cybersecurity professional to join its IT leadership team. As a key strategic leader, the Chief Information Security Officer (CISO) (0933 Manager V) will be responsible for developing and executing a comprehensive information security strategy that safeguards the department’s systems, data, and services. This role leads the implementation of an enterprise-wide security program that promotes collaboration, strengthens governance, and aligns cybersecurity initiatives with organizational goals. The CISO serves as a trusted advisor to senior leadership, providing expert guidance on risk management, security investments, and policy development. The CISO oversees a team of cybersecurity professionals within the SFDPH IT division and collaborates extensively with the CISO for the City and County of San Francisco. We are looking for a visionary and collaborative leader who can balance innovation with risk mitigation, and who thrives in a complex, mission-driven environment. The CISO reports directly to the Chief Information Officer (CIO). The Chief Information Security Officer (0933 Manager V) performs the following essential job functions:Provides strategic leadership in evaluating and mitigating information security threats across the organization using a structured, risk-based methodology. Advises executive leadership on identified risks and ensures timely execution of mitigation and remediation plans with integrity and discretionDirects the ongoing development of the department’s information security program, including project portfolio management, incident response, policy frameworks, compliance activities, threat and vulnerability management, and third-party risk managementAllocates and manages resources to support a robust security strategy. Identifies and advocates for strategic investments, oversees capital and operating budgets, and delivers ROI analyses and budget recommendationsPartners with the Office of Compliance and Privacy Affairs to assess data security risks related to contracts, projects, artificial intelligence solutions, and other initiatives. Develops tools and interventions to mitigate risks, establishes performance metrics, and monitors compliance through audits and assessmentsBuilds alignment and support for security goals and initiatives across internal and external stakeholders. Communicates effectively with leadership at all levels on trends, risks, and the overall effectiveness of the security programPromotes awareness and understanding of regulatory requirements across the organization. Leads or collaborates on testing and auditing activities to ensure ongoing compliance and successful certificationsAnalyzes security requirements and ensures compliance with industry standards such as HIPAA, NIST, and PCI-DSSEstablishes and maintains comprehensive policies and procedures to support effective and sustainable security operationsServes as the department’s representative in security-related matters with City agencies and partnersContinuously monitors emerging trends, technologies, and best practices in cybersecurity to ensure the department’s security posture remains current and effective The Chief Information Security Officer (0933 Manager V) may perform other duties as assigned/required.Qualifications 1. Education: Bachelor’s degree from an accredited college or university; AND 2. Experience: Five (5) years of professional healthcare information systems security experience, of which three (3) years must include supervising IT professionals. Education Substitution: Additional experience as described above may be substituted for the required degree on a year-for-year basis. One (1) year is equivalent to thirty (30) semester units / forty-five (45) quarter units. Applicants must meet the minimum qualification requirements by the final filing date unless otherwise noted. One-year full-time employment is equivalent to 2,000 hours (2,000 hours of qualifying work experience is based on a 40-hour work week). Desirable Qualifications: The stated desirable qualifications may be considered at the end of the selection process when candidates are referred for hiring:Possession of a Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM) certification Verification of Education and Experience: Every application is reviewed to ensure that you meet the minimum qualifications as listed in the job ad. Review SF Careers Employment Applications for considerations taken when reviewing applications. Applicants may be required to submit verification of qualifying education and experience at any point during the recruitment and selection process. If education verification is required, information on how to verify education requirements, including verifying foreign education credits or degree equivalency, can be found at . Note: Falsifying one’s education, training, or work experience or attempted deception on the application may result in disqualification for this and future job opportunities with the City and County of San Francisco.Additional Information Selection Procedures: After application submission, candidates deemed qualified must complete all subsequent steps to advance in this selection process, which includes the following: Supplemental Questionnaire (SQ) Examination (Weight: 100%) Candidates that meet the minimum qualifications will be invited to participate in a Supplemental Questionnaire (SQ) examination that is designed to measure the knowledge, skills, and abilities in job related areas which may include but not be limited to: Knowledge of local, State and Federals laws and regulations relating to information security, including but not limited to HIPAA and HITECH; Knowledge of information security technology frameworks and standards, including but not limited to NIST, HITRUST, COBIT, ISO 27001, PCI-DSS or similar cyber security frameworks; Knowledge of technology relating to enterprise wide information security protection; Knowledge of structured systems analysis and design practices and techniques; common operating systems software and relational database systems; hospitals or community health network environments; Ability to apply principles and practices of management, administration, budgeting, training, and personnel management; Ability to manage, supervise, train and coordinate complex functional area of responsibility and groups of employees; Ability to analyze and report on activities, issues and problems and recommend appropriate solutions; Ability to communicate effectively orally; Ability to communicate effectively in writing; Ability to exercise judgement, decisiveness and creativity required in situations involving the direction, control and planning of a program(s); manage critical timelines effectively; Ability to establish and maintain good working relationships with department personnel, staff, vendors, peers, and management, and engage and influence a broad range of stakeholders (e.g. HR, IT, Legal, Compliance, senior management, etc.) Candidates must achieve a passing score on the Supplemental Questionnaire exam in order to continue in the selection process and will be placed on the confidential eligible list in rank order according to their final score. Additional selection processes may be conducted by the hiring department prior to making final hiring decisions. Certification The certification rule for the eligible list resulting from this examination will be the Rule of the List. Eligible List/Score Report: A confidential eligible list of applicant names that have passed the civil service examination process will be created and used for certification purposes only. An examination score report will be established, so applicants can view the ranks, final scores, and number of eligible candidates. Applicant information, including names of applicants on the eligible list, shall not be made public unless required by law. However, an eligible list shall be made available for public inspection, upon request, once the eligible list is exhausted or expired and referrals resolved. The eligible list/score report resulting from this civil service examination process is subject to change after adoption (e.g., as a result of appeals), as directed by the Human Resources Director or the Civil Service Commission. The duration of the eligible list resulting from this examination process will be of six months and may be extended with the approval of the Human Resources Director. To find Departments which use this classification, please see the city’s Position Counts by Job Codes and Departments. Terms of Announcement and Appeal Rights: Applicants must be guided solely by the provisions of this announcement, including requirements, time periods and other particulars, except when superseded by federal, state or local laws, rules, or regulations. Clerical errors may be corrected by the posting the correction on the Department of Human Resources website at . The terms of this announcement may be appealed under Civil Service Rule 111A.35.1. The standard for the review of such appeals is ‘abuse of discretion’ or ‘no rational basis’ for establishing the position description, the minimum qualifications and/or the certification rule. Appeals must include a written statement of the item(s) being contested and the specific reason(s) why the cited item(s) constitute(s) abuse of discretion by the Human Resources Director. Appeals must be submitted directly to the Executive Officer of the Civil Service Commission within five business days of the announcement issuance date. Additional information regarding Employment with the City and County of San Francisco:Information about the Hiring ProcessConviction HistoryEmployee Benefits OverviewEqual Employment OpportunityDisaster Service WorkersADA AccommodationRight to WorkCopies of Application DocumentsDiversity StatementVeterans PreferenceSeniority Credit in Promotional Exams Where to Apply All job applications for the City and County of San Francisco must be submitted through our online portal. Please visit to begin your application process. Applicants may be contacted by email about this recruitment. Please consider using a personal email address that you check regularly rather than a work or school account. Computers are available for the public (9:00 a.m. to 4:00 p.m. Monday through Friday) to file online applications in the lobby of the Dept. of Human Resources at 1 South Van Ness Avenue, 4th Floor and at the City Career Center at City Hall, 1 Dr. Carlton B. Goodlett Place, Room 110. Ensure your application information is accurate, as changes may not be possible after submission. Your first and last name must match your legal ID for verification, and preferred names can be included in parentheses. Use your personal email address, not a shared or work email, to avoid unfixable issues. Applicants will receive a confirmation email from that their online application has been received in response to every announcement for which they file. Applicants should retain this confirmation email for their records. Failure to receive this email means that the online application was not submitted or received. If you have any questions regarding this recruitment or application process, please contact the analyst, Marielle Saldajeno at or (628) 271-6820. We may use text messaging to communicate with you on the phone number provided in your application. The first message will ask you to opt in to text messaging. The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.

Cyber Security Job Duties: Safeguards information system assets by identifying and solving potential and actual security problems. Determines security violations and inefficiencies by conducti

The Cyber Security Engineer will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current

Web Security/Penetration Testing Engineer (Web Application).

The Cyber Security Engineer will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current

Serves as a cybersecurity subject matter expert, assessing the business impact of cybersecurity risks to the enterprise and identifying options and recommendations for mitigating those risks. Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and con

The Cyber Security Engineer will be responsible for the planning, development and implementation of enterprise information security solutions (such as authentication and authorization, public key infrastructure, data loss prevention, and security event information management) to address the current