Trabajos cybersecurity en Piscataway, New JerseyCrear alertas

Job Description About CompoSecure Founded in 2000, CompoSecure (Nasdaq: CMPO) is a technology partner to market leaders, fintechs and consumers enabling trust for millions of people around the globe. The company combines elegance, simplicity, and security to deliver exceptional experiences and peace of mind in the physical and digital world. CompoSecure's innovative payment card technology and metal cards with Arculus security and authentication capabilities deliver unique, premium branded experiences, enable people to access and use their financial and digital assets, and ensure trust at the point of a transaction. For more information, please visit and . Position Overview: The Digital Marketing Manager will be a strategic leader in defining and driving our global digital presence, shaping how our brand is experienced across key online touchpoints. Reporting directly to the Global Head of Marketing, this individual will serve as the powerhouse of our digital platforms: composecure.com and getarculus.com; and play a pivotal role in transforming them into high-performing, conversion-focused growth engines. As a key member of the Marketing team, this role will collaborate across business functions and with our external agency, ensuring that our websites are optimized to meet evolving customer expectations and deliver measurable business results. The Digital Marketing Manager will be expected to work on-site five days a week in our Somerset, NJ office. Key Responsibilities: • Own and manage all aspects of two websites (company site: composecure.com; technology brand site: getarculus.com), • Develop overall website strategy and KPIs, • Create and manage user experience across the sites to drive customer engagement with product and brand, • Create and manage content (copy, photography, product updates, videos, blogs), • Oversee and manage SEO/SEM, • Manage relationship with external agency that maintains websites - working across product, IT, cybersecurity, legal/compliance, • Help manage website unit sales from an e-commerce functionality to optimize unit sales, • Add additional product pages for customized products, co-marketing deals, and new products, • Expecting to double unit sales in 2026, • Manage external agency to ensure browser and mobile responsiveness, accessibility, and performance are continuously optimized; troubleshoot technical issues, working with developers or external vendors as needed, • Monitor and report on website KPIs (traffic, bounce rate, conversion rate, page load time, etc.) and pivot as needed to ensure meeting goals/objectives, • Working with agency to manage and monitor cookies and additional compliance/regulations on ongoing basis, • Lead website redesigns as needed, • Stay up-to-date with latest trends and emerging tools, • Additionally, will own content creation to support growth for campaigns, events, sales team., • A minimum of 5 years of proven and demonstrated experience managing websites ideally in a B2B environment or with eCommerce platforms, • Proven track record of growing and managing digital presence for technology or financial brand, • Proficiency in digital marketing tools (Google Analytics, CRM systems/marketing automation, SEO/SEM, OneTrust), • Experience with eCommerce platforms (BigCommerce), • Creative thinker with attention to detail and analytical skills, • Understand the importance of measurement and ROI, excels at providing insights from digital reporting and other analytics, • Strong copywriting, editing, and communication skills, • Ability to multitask, meet deadlines, and work independently., • Passion / interest /experience in fintech, digital security, and crypto space preferred, • Proactive team-player with the ability to multi-task, think creatively, and learn quickly, • Experience working in a start-up atmosphere and/or a fast-changing, hands-on work environment is ideal, • Bachelor's degree in Marketing, Communications, or similar field required At CompoSecure, we believe in supporting our employees with a comprehensive benefits package that promotes health, financial well-being, and work-life balance. Our full-time team members enjoy access to: • Medical, Dental & Vision Coverage, • Flexible Spending Accounts (FSA), • Company-Paid Life and Disability Insurance, • 401(k) with Company Match, • Paid Time Off & Paid Holidays, • Annual Bonus Opportunities, • Employee Assistance Program (EAP), • Career Advancement Opportunities Benefits eligibility and details will be shared during the hiring process. We're excited to support you in building a rewarding career with us. Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to . CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin. We are also an equal opportunity employer of individuals with disabilities and protected veterans.

Job DescriptionDescription: Endpoint Management Engineer with advanced engineering, architecture, and Tier 3/4 expertise in DoD hybrid IT environment. This role is responsible for delivering forward-looking, compliant, and standardized endpoint solutions across virtual, physical, mobile, and cloud-based platforms. The engineer will play a key role in application integration, endpoint security, desktop engineering, mobile device management, and enterprise application packaging. Requirements: Education & Experience • A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science OR Certifications • Expertise in Microsoft Endpoint Configuration Manager (MECM/SCCM), Microsoft Intune, Active Directory, Azure AD, Group Policy, and MDM solutions., • Design, engineer, and support enterprise endpoint management frameworks that enable standardized application delivery, monitoring, and lifecycle support., • Architect and maintain Enterprise Management tools (e.g., MECM, Intune, Azure AD, MDM platforms)., • Provide automation, scripts, and configurations to support application lifecycle management., • Ensure compliance with DISA STIGs, NIST guidance, and IAVM requirements., • Conduct security risk assessments and vulnerability analyses for endpoints and applications., • Maintain and modernize desktop image libraries, OS builds, task sequences, and baseline configurations., • Enhance end-user experience through optimized OS delivery, application provisioning, and endpoint standardization., • Engineer migration plans from legacy MDM tools to modern cloud/SaaS-based solutions., • Ensure secure and compliant delivery of mobile services aligned with DoD and DHA standards.

Job DescriptionDescription: Support in identifying cybersecurity deficiencies in information systems by performing technical assessments of assigned systems and applications to determine the severity of weaknesses; Supports the Security Authorization (SA) and Continuous Monitoring (CM), Risk Management Framework (RMF) process. Results of the assessments will be documented in the MGMT compliance tool, (e.g., IACS, CSAM, etc.), utilizing a standard report format with the results and findings from the assessment, along with recommended mitigations. Results will also be entered into the compliance tool. The contract team perform the following tasks: Duties/Responsibilities: • Create, manage, and utilize Assessment Standard Operating Procedures and Testing Templates and ensure that assessments are conducted accurately, efficiently, and consistently., • Create, manage, and utilize Assessment Guides and Training Material documents that assist system stakeholders in preparing for upcoming assessments. Includes, but is not limited to Frequently Asked Question guides, workflows, and Training Materials., • Create, manage, and utilize Check-Point Reviews to determine the readiness of the system for assessments. Includes the status of POA&Ms for the system, review of control implementations for applicability and the state of the Body of Evidence (BOE) materials to support the assessment., • Manage Assessment Entrance Conference Briefing, creating agenda and meeting minutes for the system stakeholders on what to expect and when during the upcoming assessments., • Draft Security Assessment Report (SAR) for review by the stakeholders to prepare for the Exit Conference., • Manage Assessment Exit Conference Briefing, creating agenda and meeting minutes for the system stakeholders on the results of the Exit conference to determine the final SAR., • Create Final Security Assessment Report for review by the stakeholders to prepare for the Exit Conference., • Develop and maintain an overall Security Assessment Schedule that forecasts system assignments for contractor and stakeholder staff over the period of performance. The Assessment schedule needs to include assessments that meet the requirements of current DHS policy. Systems in Ongoing Authorization (OA) need to be assessed once a year. Systems not in the OA program need to be assessed at a minimum every three years or when a major change occurs. The schedule also needs to support new systems utilizing the Authority to Proceed (ATP) memo. New systems utilizing the ATP process assess the critical controls prior to being placed in production and then require a full assessment within one year after receiving the ATP., • Develop testing artifacts for each system to include, as appropriate, the technical assessment plan, the Rules of Engagement (ROE), the Security Requirements Traceability Matrix (SRTM), the Security Assessment Report, and any other necessary documentation., • Update and maintain all testing templates and Standard Operating Procedures (SOP) as needed, or on an annual basis per DHS guidelines, to include the utilization of the compliance tool., • Create Assessment Guides to assist ISSOs, ISSMs, System Owners and other stakeholders to prepare for upcoming assessments. This includes but is not limited to Frequently Asked Questions (FAQs) guides, and Training Materials., • Conduct and/or review vulnerability scans, review device configurations, and review system architecture. The Contractor will utilize vulnerability assessment tools as provided by the government. Test tools used to support the assessment process may include but is not limited to Nessus (Vulnerability Scanner), WebInspect (performs web application security testing and assessment), IACS, CSAM, and AppDetective (database vulnerability scanner). These tools are subject to change., • Provide advisement and recommendations to the Government for assessment and security best practices including tools that are used for assessment activities., • Arrange for physical access to the system, if applicable, with the specific System Owner and the specific facility manager(s). All contact information will be provided by the system’s Information System Security Officer (ISSO). Alternatives to physical access to the system may be utilized if it does not compromise the assessment of the controls needed to be accomplished., • Conduct an Assessment Kick-off meeting according to the Security Assessment Schedule that reviews the MGMT Compliance requirements, process, and artifacts to prepare the stakeholders for the scheduled assessment., • Conduct up to two check point reviews after the kickoff, and prior to the planned assessment date to review the status of the artifacts in the compliance tool. Provide the checkpoint information to the assessment division and conduct reviews with the stakeholders as needed. As part of the check point review, the assessor will provide detailed criteria that would result in significant findings on the assessment or prevent the assessors from conducting an accurate assessment., • Conduct an assessment entrance conference according to the Security Assessment Schedule that does a final overview of what is expected during the assessment., • Execute the assessment through the review of system security documentation, vulnerability scan results, audit logs, configuration guides, and any other additional materials provided by the system and system stakeholders., • Document the results of the technical assessments in the draft Security Assessment Report (SAR) with the criteria of the tests, testing methods, findings of the assessment and recommended mitigations. The draft SAR will be sent to the stakeholders one week prior the exit conference as defined in the Security Assessment Schedule., • Conduct an assessment exit conference according to the Security Assessment Schedule to review of the findings of the draft SAR and address any final agreed changes., • Based on the results of the exit conference, produce the Final SAR within 5 business days of the conference. The Final SAR will document the results of the technical assessments with the criteria of the tests, testing methods, findings of the assessment and recommended mitigations., • Collect and securely store all final materials and media submitted by the system test team according to the SOP in the DHS compliance system. Draft systems assessment may use other DHS MGMT owned systems as appropriate. Requirements: Experience: (MUST HAVE): • At least 4 years of NIST Security Control Assessor (SCA) experience., • Must have led Assessment teams from planning through execution and finalization an of assessment., • Capable of performing in a fast-paced environment., • Strong communication skills both verbally and in written form., • Mastery of control assessment requirements based on the NIST 800-53A., • Technical expertise in assessing environments such as but not limited to Applications, Operating Systems, Databases, Appliances, Cloud Environments, and Physical environments to validate a full deployment of a defense in depth strategy. ??, • In depth understanding on how to read Nessus scan reports and identifying security vulnerabilities, configuration settings, and security compliance. ???, • Proficient technical writing skills developing control findings, detailed assessment reports, technical requests for the system engineers,?and other security assessment documentation., • Extensive experience conducting assessment interviews of system engineers, administrators, and other support personnel including demonstrations to accurately validate system configurations. ??, • Work well within and leading teams with a positive attitude and can solve problems without supervision., • Deep knowledge of Security Control testing and validation on both technical and policy areas., • CSAM experience, • At least 1 year of Splunk experience or Splunk certification, • Required Education bachelor’s degree in computer science or related field., • Security Clearance Secret

Job DescriptionDescription: Senior Identity & PKI Engineer to design, implement, and maintain enterprise-class identity, credential, and access management (ICAM) solutions. Deep expertise in directory services, PKI/PKE engineering, cryptographic key management, and privileged access solutions — with proven experience delivering secure, compliant, and forward-looking architectures in DoD environments. Requirements: Education & Experience A BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science OR A BBA in the same technical fields is also acceptable, provided it is not pursued as a minor. The degree must include courses in applied and natural science, computing, engineering, and engineering technology. Secret Clearance Required Certifications: Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Windows Server Hybrid Administrator Associate OR Microsoft Certified: Cyber Security Architect Expert or Microsoft Certified: Azure Solutions Architect Expert Key Tasks: • Engineer, design, update, and maintain Microsoft Active Directory Services (ADDS/ADLDS) and integrated secure DNS roles., • Ensure compliance with DISA STIGs, DoD ICAM Reference Design, and DoDI 8520.03., • Engineer solutions for identity automation, attribute aggregation, and policy-driven access control across cloud, SaaS, and enterprise systems., • Engineer and maintain implementation of DoD PKI and DHA PKI Internal Medium Assurance (IMA) infrastructures., • Provide technical documentation, engineering packages, and risk assessments for PKI modernization efforts., • Manage cryptographic key lifecycle processes, certificate validation suites, and cross-certifications., • Engineer and support Privileged Identity and Access Management (PIM/PAM) solutions, enforcing least privilege principles., • Expertise in DoD security directives, DISA STIGs, and DHA cybersecurity requirements.

Job DescriptionWe are looking for a detail-oriented GRC Analyst to join our team in Woodbridge, New Jersey. In this role, you will support audit processes, oversee cybersecurity training initiatives, and ensure compliance with industry regulations and standards. This position offers a unique opportunity to collaborate across departments and contribute to maintaining the organization's security and risk management framework. Responsibilities: • Collect and organize evidence to support annual audits conducted internally and externally., • Manage and monitor a centralized repository for audit-related documentation to ensure accessibility and accuracy., • Respond promptly to audit requests, ensuring that all submissions meet required standards., • Develop and deliver training programs on cybersecurity awareness, including onboarding sessions, periodic newsletters, and phishing simulations., • Administer the organization's cybersecurity compliance training program to reinforce best practices., • Conduct risk assessments using established frameworks to identify control strengths, weaknesses, and areas for improvement., • Utilize the organization's platform to track and resolve security exceptions, violations, incidents, and other risk-related issues., • Maintain updated documentation of procedures to enhance team knowledge and industry expertise., • Assist in reviewing and updating security policies, standards, and practices annually to align with current operational needs., • Collaborate with various business units to address new and existing regulatory requirements.• Strong understanding of compliance frameworks such as GLB Act, SOX, PCI DSS, and eGRC., • Proven experience in cybersecurity compliance and risk management., • Ability to conduct detailed risk assessments and identify actionable solutions., • Familiarity with audit processes and documentation management., • Excellent communication skills for delivering training programs and collaborating with stakeholders., • Proficiency in managing cybersecurity platforms and tracking risk-related issues., • Capability to develop and maintain comprehensive procedural documentation., • Knowledge of industry standards and regulatory obligations in the banking sector.

Summary The Security Architect main role is to design, implement, and oversee our cybersecurity strategy, ensuring robust protection against evolving threats. The ideal candidate will have 7-10 years of experience in cybersecurity architecture, security operations, and risk management with a strong focus on enterprise security solutions, cloud security, identity & access management (IAM), and security best practices. The Security Architect must have hands-on experience with internet secure gateway, EDR, MDR, ITDR, secure email gateway, firewalls, MFA, scripting, policies, data classification, and cloud security controls. This role requires deep expertise in security frameworks, architecture principles, security automation, and compliance standards (NIST, CIS, ISO 27001, Zero Trust, etc.). Essential Functions • Develop and maintain a comprehensive security architecture covering on-premises, cloud, and hybrid environments., • Design security solutions that align with business objectives while mitigating risk., • Ensure Zero Trust principles, network segmentation, and security best practices are enforced across the enterprise., • Architect cloud security strategies, leveraging best practices for Azure and GCP., • Lead security investigations, conduct root cause analysis, and document incident response actions., • Provide threat intelligence and recommend proactive security measures to mitigate risk., • Implement and maintain cloud security controls in Azure and GCP., • Optimize cloud security solutions for web and network protection., • Ensure Active Directory (AD) and IAM policies align with best practices., • Support identity governance, access reviews, and privileged access management (PAM)., • Oversee the continuous best practice is leveraged for data classification policies and enforce data protection controls., • Conduct security assessments and ensure compliance with industry standards (PCI, NIST, CIS)., • Recommend, evaluate, and implement new security technologies based on business needs and threat landscape., • • Work with DevOps and IT teams to integrate security automation, security-as-code, and DevSecOps principles. Additional Functions • Threat Modeling & Risk Management:, • Conduct threat modeling, risk assessments, and security reviews for applications, infrastructure, and networks., • Provide technical leadership in responding to security incidents, forensic analysis, and root cause investigations., • Develop and maintain security policies, standards, and playbooks for security operations., • Collaborate with IT and business units to ensure security compliance with regulatory frameworks (PCI DSS, NIST, ISO 27001, SOC 2)., • Identity & Access Management (IAM) & Authentication:, • Design and enhance IAM policies, privileged access management (PAM), and role-based access control (RBAC)., • Enforce strong authentication and MFA strategies using Okta, Microsoft Authenticator, and AD., • Define identity threat detection and response (ITDR) strategies., • Security Governance & Compliance:, • Ensure security controls align with industry frameworks (NIST CSF, ISO 27001, CIS, Zero Trust, MITRE ATT&CK)., • Assist with audit, regulatory compliance, and security assessments., • Conduct penetration testing, red/blue teaming exercises, and vulnerability management programs., • Provide security guidance for third-party risk management and vendor security evaluations., • Leadership & Collaboration:, • Act as a subject matter expert (SME) in cybersecurity architecture and best practices., • Provide mentorship and training to security engineers and analysts., • Work cross-functionally with IT, DevOps, and executive leadership to align security strategy with business goals., • Develop security roadmaps and strategic initiatives for continuous security improvement., • Maintain and fine-tune security configurations across various security platforms., • Identify security gaps and recommend security enhancements and process improvements., • Develop playbooks and automation scripts to enhance security operations efficiency., • Conduct vulnerability assessments and penetration testing to identify security weaknesses in systems and applications., • Develop and implement security policies, procedures, and standards to ensure compliance with industry’s best practices and regulatory requirements., • Investigate security breaches and other security incidents to determine the root cause and implement corrective actions., • Stay up-to-date on the latest security threats and vulnerabilities and recommend appropriate security measures., • Collaborate with other IT teams to ensure that security is integrated into all aspects of the organization's IT infrastructure., • Participate in security audits and assessments to identify and address security gaps., • Develop and maintain incident response plans and procedures., • Evaluate and recommend security technologies and solutions to improve the organization's security posture. Qualifications • 7-10 years of experience in cybersecurity architecture, security operations, or cloud security., • Deep understanding of:, • Enterprise security architectures, security frameworks (NIST, CIS, Zero Trust, ISO 27001), and best practices, • Email secure gateway (Proofpoint, Mimecast), • Firewalls (Palo Alto, Cisco) and network security principles, • Cloud security (Azure, GCP) and security automation, • IAM, MFA, AD, Okta, Microsoft Authenticator, • Endpoint security, EDR, ITDR, and threat intelligence, • Data classification, DLP, and information protection, • Experience designing secure architectures for large-scale enterprises and cloud environments., • Strong knowledge of DevSecOps, security automation, and scripting (Python, PowerShell, Terraform)., • Excellent communication and leadership skills, capable of influencing security strategies across the organization., • CISSP Certifications (Required): CISM and CCSP is plus, • A bachelor's degree in computer science, information systems, or a related experience., • 7-10 years of experience in cybersecurity, security operations, or network security., • Hands-on expertise with:, • Zscaler, CrowdStrike, Microsoft Defender, Sophos, • Proofpoint (Email Security Gateway), • EDR & ITDR solutions, • Palo Alto & Cisco Firewalls, • Okta, Microsoft Authenticator (MFA), Active Directory (AD), IAM, • Cloud Security (Azure and GCP), • Data classification and protection strategies, • Strong knowledge of threat intelligence, SIEM, vulnerability management, and incident response., • Experience with security frameworks such as PCI, NIST, ISO 27001, CIS Benchmarks., • Strong analytical, problem-solving, and communication skills., • Ability to work independently and collaboratively in a fast-paced environment., • Excellent communication and interpersonal skills, capable of collaborating effectively with cross-functional teams. Working Conditions & Physical Demands This position requires in person office presence at least 4x a week.

Job DescriptionDescription: 1.Proposal Writing: · Architect, implement and write responses to RFIs and RFPs centered around cloud technology and security compliance services, and design graphics to streamline and explain the RMF compliance process. · Seamlessly integrate and synchronize cybersecurity tools such as Splunk, Qumlos, Axonius, and Tenable with enterprise platforms like ServiceNow, SharePoint and MS Teams, establishing a unified and efficient cybersecurity environment. · Excellent verbal and written communication skills. 2. Continuous Monitoring and Improvement: · Develop and implement cutting-edge continuous monitoring strategies for prompt detection and response to security incidents. · Foster a culture of continuous improvement by regularly reviewing and refining automation processes to adapt to the evolving cybersecurity landscape. 3. Training and Knowledge Transfer: · Orchestrate the development and delivery of comprehensive training materials and sessions, empowering security controls assessors with the knowledge to effectively utilize automated tools and interpret results. · Continue education and training to get certified in various security-related technologies. 4. Collaboration and Communication: · Foster a collaborative environment with internal and external Capture Teams. · Translate complex technical information into accessible language for non-technical audiences, effectively communicating the strategic benefits of automation. · Apply strong analytical and problem-solving skills. · Initiate and execute on multiple tasks, and work effectively, both independently and as a member of a cross-functional team. · Function effectively and efficiently within small teams as needed to gather information to support architecture analysis and design. 5. Policy and Procedure Development: · Contribute strategically to the development and updating of policies and procedures related to proposal and RFI response. · Develop graphics that succinctly describe Softek processes and approaches for proposals and RFI responses. PERFORMANCE METRICS: · Production and response to RFIs and RFPs leading up to 1 response per month. · Enhanced accuracy and efficiency in differentiating Softek from competitors in cybersecurity and cloud architectures. · Strengthened team collaboration and knowledge sharing, evidenced by working on capture teams to produce documentation and graphics for proposal preparation. REQUIRED SKILL SETS/EDUCATION/CERTIFICATES: · Bachelor's degree in Computer Science or Cybersecurity · 2+ years of experience in technology, automation and cybersecurity · Knowledge leading to proficiency in a subset of Splunk, Tenable (Nessus), Axonius, Qumlos, ServiceNow, SharePoint, MS Teams, Power Automate, Python. Requirements: 1.Proposal Writing: · Architect, implement and write responses to RFIs and RFPs centered around cloud technology and security compliance services, and design graphics to streamline and explain the RMF compliance process. · Seamlessly integrate and synchronize cybersecurity tools such as Splunk, Qumlos, Axonius, and Tenable with enterprise platforms like ServiceNow, SharePoint and MS Teams, establishing a unified and efficient cybersecurity environment. · Excellent verbal and written communication skills. 2. Continuous Monitoring and Improvement: · Develop and implement cutting-edge continuous monitoring strategies for prompt detection and response to security incidents. · Foster a culture of continuous improvement by regularly reviewing and refining automation processes to adapt to the evolving cybersecurity landscape. 3. Training and Knowledge Transfer: · Orchestrate the development and delivery of comprehensive training materials and sessions, empowering security controls assessors with the knowledge to effectively utilize automated tools and interpret results. · Continue education and training to get certified in various security-related technologies. 4. Collaboration and Communication: · Foster a collaborative environment with internal and external Capture Teams. · Translate complex technical information into accessible language for non-technical audiences, effectively communicating the strategic benefits of automation. · Apply strong analytical and problem-solving skills. · Initiate and execute on multiple tasks, and work effectively, both independently and as a member of a cross-functional team. · Function effectively and efficiently within small teams as needed to gather information to support architecture analysis and design. 5. Policy and Procedure Development: · Contribute strategically to the development and updating of policies and procedures related to proposal and RFI response. · Develop graphics that succinctly describe Softek processes and approaches for proposals and RFI responses. PERFORMANCE METRICS: · Production and response to RFIs and RFPs leading up to 1 response per month. · Enhanced accuracy and efficiency in differentiating Softek from competitors in cybersecurity and cloud architectures. · Strengthened team collaboration and knowledge sharing, evidenced by working on capture teams to produce documentation and graphics for proposal preparation. REQUIRED SKILL SETS/EDUCATION/CERTIFICATES: · Bachelor's degree in computer science or Cybersecurity · 2+ years of experience in technology, automation and cybersecurity · Knowledge leading to proficiency in a subset of Splunk, Tenable (Nessus), Axonius, Qumlos, ServiceNow, SharePoint, MS Teams, Power Automate, Python.

Job Description About CompoSecure Founded in 2000, CompoSecure (Nasdaq: CMPO) is a technology partner to market leaders, fintechs and consumers, enabling trust for millions of people around the globe. The company combines elegance, simplicity, and security to deliver exceptional experiences and peace of mind in the physical and digital world. CompoSecure's innovative payment card technology and metal cards with Arculus security and authentication capabilities deliver unique, premium branded experiences, enable people to access and use their financial and digital assets, and ensure trust at the point of a transaction. For more information, please visit and . Position Overview: We're looking for a Manager, Cybersecurity who can run our SOC operations, vulnerability management, DFIR, and security tool health - while also managing our MSSP/MDR partners, running red team engagements, and integrating cyber threat intelligence into daily operations. This is not a checkbox role. You'll be the frontline leader making sure our defenses are sharp, our partners deliver value, and our playbooks are battle-tested. Key Responsibilities: • SOC & Security Operations, • Run day-to-day SOC ops (monitoring, alert triage, escalation), • Manage MSSP/MDR relationships - hold vendors accountable, ensure quality, and drive outcomes, • Ensure 24/7 coverage through smart playbook design and partner integration, • Vulnerability Management, • Own the vuln management lifecycle: scanning, prioritization, patching, reporting, • Work with IT/DevOps to ensure remediation sticks, not just tickets get closed, • Report enterprise risk posture and trendlines directly to leadership, • Threat Intel & Red Teaming, • Lead coordination of red team and purple team exercises to test resilience and validate controls, • Integrate Cyber Threat Intelligence (CTI) into SOC processes - from IOCs to TTPs, • Run threat hunting campaigns based on MITRE ATT&CK and emerging intel, • Security Tooling & AI/ML, • Deploy and maintain enterprise tools (SIEM, EDR, WAF, scanners, SOAR, etc.), • Ensure tools are tuned, integrated, and delivering value - not shelfware, • Explore AI/ML anomaly detection and automation opportunities to stay ahead of threats, • Digital Forensics & Incident Response (DFIR), • Lead investigations end-to-end - endpoints, servers, cloud, and OT/ICS when needed, • Run tabletops, refine playbooks, and ensure incident readiness, • Mentor analysts in forensics, hunting, and response, • Team Development & Coaching, • Lead the professional growth of SOC analysts and cybersecurity team members through regular coaching, feedback, and development plans. Foster a culture of continuous learning and skill advancement., • Required, • 7+ years in cybersecurity ops, with 3+ in a lead or senior role, • SOC management and vendor/MSSP oversight experience, • Proven vulnerability management success across hybrid environments, • Hands-on with SIEM, EDR, • Solid DFIR skillset: log/memory/packet forensics, endpoint investigations, hunt operations, • Experience coordinating red team engagements and actioning results, • Strong communicator: can brief execs and mentor juniors, • Preferred, • Threat intel analysis and integration experience, • Cloud security ops in AWS/Azure, • Certifications: GCIA, GCFA, GCIH, CISSP, CISM, • Financial services or manufacturing sector experience Why Join Us: • MSSP + In-house hybrid: You'll manage our MDR/MSSP partners and ensure elite outcomes, • Red & purple team action: Run live-fire tests and harden defenses against real-world adversary tradecraft, • AI/ML innovation: Help shape how anomaly detection and automation enhance our defenses, • Elite culture: We work hard and aim for the top 5% of secure manufacturers globally At CompoSecure, we believe in supporting our employees with a comprehensive benefits package that promotes health, financial well-being, and work-life balance. Our full-time team members enjoy access to: • Medical, Dental & Vision Coverage, • Flexible Spending Accounts (FSA), • Company-Paid Life and Disability Insurance, • 401(k) with Company Match, • Paid Time Off & Paid Holidays, • Annual Bonus Opportunities, • Employee Assistance Program (EAP), • Career Advancement Opportunities Benefits eligibility and details will be shared during the hiring process. We're excited to support you in building a rewarding career with us. Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to . CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin. We are also an equal opportunity employer of individuals with disabilities and protected veterans.

Job DescriptionSalary: About Us: Atlas Systems Inc. is a Software Solutions company headquartered in East Brunswick, NJ. Incorporated in 2003, Atlas provides comprehensive range of solutions in the area of GRC, Technology, Procurement, Healthcare Provider and Oracle to customers across the globe. Combining our unparalleled experience of over a decade in the software industry and global reach, we have grown with extensive capabilities across industry verticals. For more information, please visit our website Please click on the link below to apply for this position: Position Summary: We are seeking an experienced Information Security Manager to lead the organizations cybersecurity strategy, operations, and compliance programs. This role ensures the confidentiality, integrity, and availability of information systems while driving continuous improvement in security posture and risk management. Key Responsibilities: • Develop, implement, and maintain information security strategy, policies, and standards., • Align security programs with regulatory requirements and frameworks (NIST CSF, ISO 27001, HIPAA, SOC 2)., • Oversee daily security operations including monitoring, incident detection, response, and remediation., • Manage vulnerability assessments, penetration testing, patching, and threat intelligence., • Lead cloud and infrastructure security initiatives across Microsoft Azure, Microsoft 365, and hybrid environments., • Implement and manage identity and access controls, endpoint protection, and data loss prevention., • Oversee SIEM, SOAR, and security monitoring platforms (Azure Sentinel, Defender, etc.)., • Conduct third-party/vendor risk assessments and application security reviews., • Ensure compliance through internal audits, client assessments, and timely remediation., • Deliver enterprise-wide security awareness and training programs., • Collaborate with IT, DevOps, Legal, and business teams to embed security in projects and solutions., • Lead, mentor, and develop security team members while fostering a culture of security awareness., • Act as the escalation point for critical incidents and client-facing security discussions. Qualifications: • Bachelors degree in Cybersecurity, Information Technology, Computer Science, or related field, • 710+ years of progressive experience in information security with at least 3 years in a leadership role., • Hands-on expertise in Microsoft Azure security ecosystem (Azure AD, Conditional Access, Sentinel, Defender, Key Vault)., • Strong knowledge of SIEM, SOAR, endpoint security, and vulnerability management tools., • Proven track record managing incident response and SOC operations., • Excellent leadership, stakeholder management, and communication skills. Preferred Certifications: • CISSP (Certified Information Systems Security Professional), • CISM (Certified Information Security Manager), • Microsoft Certified: Azure Security Engineer Associate (AZ-500), • Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Job DescriptionDescription: POSITION TITLE: Cybersecurity Specialist -Mid LCAT/POSITION #: Enterprise Risk Reporting DEPT/CONTRACT: Enterprise Cybersecurity Risk Tracking & Reporting/ RMF CLEARANCE LEVEL: Secret REPORTING TO: _Project Manager LOCATION: National Capital Region/ DC Metropolitan area WORK SCHEDULE/HOURS: __40 hrs/week JOB DUTIES: · Create and maintain dashboards and reports for all necessary cybersecurity functions utilizing CDM dashboard, Splunk, Crystal Reports, PowerBI or other authorized platforms. · Create a draft and final cybersecurity report by coordinating, consolidating and collecting the data and reports from multiple sources (for example, SERR, Cyber Hygiene, CDM). · Create component quarterly specific trending Scorecard. · Generate quarterly and annual trending of DHS performance in the measured metrics. · Generate draft and final monthly Cybersecurity Scorecards of HQ components and the Department as defined by the annual DHS ISPP from data resident in the DHS databases and other sources. The scorecards are used for reporting progress in information security to the Chief Information Office (CIO) Council, CISO Council and senior DHS management. Based on data captured on the last day of each month, the scorecards shall be completed with five (5) business days thereafter. · Provide installation and technical support for DHS CISPD and DHS HQ components regarding issues and data feed submissions and interfaces to the DHS FISMA Compliance Tool suite. · Plan of Actions & Milestones (POA&M) Reporting. · Provide weekly/monthly reports, meeting minutes, user feedback and propose process improvements accordingly to project PM. SKILLS: · Provide support in Enterprise Risk Reporting. · Excellent verbal and written communication skills. · Ability to meet deadlines and work independently. EDUCATION/EXPERIENCE: Bachelor degree in Computer Science or related field 4 years’ experience Requirements: POSITION TITLE: Cybersecurity Specialist -Mid LCAT/POSITION #: Enterprise Risk Reporting DEPT/CONTRACT: Enterprise Cybersecurity Risk Tracking & Reporting/ RMF CLEARANCE LEVEL: Secret REPORTING TO: _Project Manager LOCATION: National Capital Region/ DC Metropolitan area WORK SCHEDULE/HOURS: __40 hrs/week JOB DUTIES: · Create and maintain dashboards and reports for all necessary cybersecurity functions utilizing CDM dashboard, Splunk, Crystal Reports, PowerBI or other authorized platforms. · Create a draft and final cybersecurity report by coordinating, consolidating and collecting the data and reports from multiple sources (for example, SERR, Cyber Hygiene, CDM). · Create component quarterly specific trending Scorecard. · Generate quarterly and annual trending of DHS performance in the measured metrics. · Generate draft and final monthly Cybersecurity Scorecards of HQ components and the Department as defined by the annual DHS ISPP from data resident in the DHS databases and other sources. The scorecards are used for reporting progress in information security to the Chief Information Office (CIO) Council, CISO Council and senior DHS management. Based on data captured on the last day of each month, the scorecards shall be completed with five (5) business days thereafter. · Provide installation and technical support for DHS CISPD and DHS HQ components regarding issues and data feed submissions and interfaces to the DHS FISMA Compliance Tool suite. · Plan of Actions & Milestones (POA&M) Reporting. · Provide weekly/monthly reports, meeting minutes, user feedback and propose process improvements accordingly to project PM. SKILLS: · Provide support in Enterprise Risk Reporting. · Excellent verbal and written communication skills. · Ability to meet deadlines and work independently. EDUCATION/EXPERIENCE: Bachelor degree in Computer Science or related field 4 years’ experience

The ideal candidate will have 7-10 years of experience in cybersecurity architecture, security operations, and risk management with a strong focus on enterprise security solutions, cloud security, identity & access management (IAM), and security best practices. Identify security gaps and recommend s

Familiarity with IT/OT cybersecurity best practices. Develop and evolve Manufacturing IT architecture to align with business objectives and priorities. We are seeking a Functional Consultant / IT/OT SME to support the design and implementation of manufacturing systems and IT/OT architecture for a ne

Enterprise Security Architecture Manager Location: Iselin, NJ Compensation: $160-220k Responsibilities: • Responsible for the development and implementation of the enterprise security architecture strategy, ensuring alignment with the organization's business objectives, risk appetite, and regulatory requirements., • Define security architecture standards, frameworks, and best practices, ensuring they are consistently applied across the enterprise., • Ensure that security architecture designs are scalable, flexible, and future-proof to accommodate changing business needs and evolving threat landscapes., • Champion security across multiple divisions, ensuring security is embedded into the design and implementation of products, services, and technology solutions., • Provide thought leadership and guidance on security risks, policies, and controls to senior management and stakeholders, influencing key business decisions., • Familiarity with SABSA framework and its six layers, particularly in risk management and security strategy development, • Lead efforts to assess and mature security practices across the enterprise, • Stay abreast of industry trends, frameworks, and regulations (e.g., GDPR, ISO 27001/2, SANS Top 20 Critical Security Controls, NIST CSF, SP 800-53, PFMI, CPMI ISOCO and FFIEC handbook, SABSA) to ensure the organization is proactive in addressing emerging security threats and compliance challenges, • Foster relationships with key functional teams such as IT, Compliance, Operations, Finance, HR, Internal Audit, and Enterprise Risk to support current and future initiatives, • Keep informed of new and emerging security threats & assess effectiveness of current controls to identify opportunities for program improvement, • Provide expert-level security architecture design, analysis, and consultation to enterprise-wide programs, ensuring security risks are appropriately mitigated during the planning and design stages., • Lead, manage, and mentor a team of security architects, ensuring they have the necessary skills, knowledge, and resources to effectively design and implement security solutions., • Foster a collaborative and high-performance team culture, promoting innovation, accountability, and continuous learning., • Manage team performance, provide regular feedback, and ensure professional development opportunities for all team members., • Define clear goals and objectives for the team, ensuring alignment with the broader security strategy and organizational goals., • Work closely with technology teams, including Infrastructure, Cloud, Development, and Security, to embed security into solutions from the outset., • Oversee and guide assessments of new technologies, vendors, and third-party services to ensure compliance with enterprise security standards and reduce potential risk exposure., • Lead and guide project and program managers to ensure the integration of security architecture across various initiatives, with a focus on scalability, compliance, and risk management., • Define, monitor, and enforce security architecture governance processes to ensure that security standards and controls are met across the enterprise. Qualifications:, • 10+ years of experience in information security architecture, with at least 3-5 years in a leadership role, managing and mentoring security architects or technical teams., • Strong background in designing and implementing security architectures across complex enterprise environments, including cloud, infrastructure, and application security., • Extensive experience with enterprise architecture frameworks and security standards such as NIST, ISO 27001, SABSA, and Cloud Security Alliance (CCM)., • Extensive experience working with senior leadership and stakeholders to drive strategic security initiatives, influencing decisions at the enterprise level., • Proven ability to lead cross-functional teams and collaborate with senior management, business stakeholders, and technical teams to deliver secure solutions that align with business objectives., • Degree in a technology discipline (Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent), • Professional certifications such as CISSP, CISA, CISM, CRISC, SABSA, or equivalent., • Deep expertise in risk management frameworks, including ISO 27001, NIST SP 800-53, and SANS Top 20 Critical Security Controls., • Experience with cloud security solutions and services

Job Description About CompoSecure Founded in 2000, CompoSecure (Nasdaq: CMPO) is a technology partner to market leaders, fintechs and consumers, enabling trust for millions of people around the globe. The company combines elegance, simplicity, and security to deliver exceptional experiences and peace of mind in the physical and digital world. CompoSecure's innovative payment card technology and metal cards with Arculus security and authentication capabilities deliver unique, premium branded experiences, enable people to access and use their financial and digital assets, and ensure trust at the point of a transaction. For more information, please visit and . Position Overview: At CompoSecure, we're not a legacy factory. We're a publicly traded industry leader manufacturing premium metal payment cards for the world's top banks while advancing crypto, Web3, and digital security solutions. We're seeking an OT Security Specialist | Technical Lead to build our OT security program from the ground up. This is a greenfield role with direct access to the VP of Cybersecurity and CISO, and the chance to influence how one of the most advanced metal payment card manufacturing facilities in the world secures its future. This is an on-site position in Somerset, NJ (no remote). Key Responsibilities: • Immediate Priorities, • Secure production HSMs and key management systems for EMV/NFC personalization, • Implement IT/OT network segmentation, • Deploy effective OT monitoring/detection systems, • Write and test OT-specific incident response playbooks, • Ongoing Responsibilities, • Evaluate AI/ML and Web3 initiatives for security risk, • Lead OT incident response and conduct forensics, • Maintain compliance with NIST SP 800-82, IEC 62443, PCI DSS, • Present OT security posture and risks to senior leadership, • Required, • 5+ years in cybersecurity with significant OT/ICS experience, • Direct experience with HSMs and cryptographic key management, • OT IR and forensics expertise, • Ability to communicate complex risks clearly to non-technical audiences, • Preferred, • Payment card or secure manufacturing background, • Experience securing AI/ML and Web3 systems, • GICSP, CISSP, or CISM certifications CompoSecure is growing fast, and we're aiming to be in the top 5% of the most secure manufacturers in the world. Here's what you'll get: - • A blank slate to design an OT security program with executive backing, • The chance to work with AI/ML and advanced fintech innovations while mastering the fundamentals of OT security, • A role with impact and influence at a publicly traded company trusted by global financial institutions, • Medical, Dental & Vision Coverage, • Flexible Spending Accounts (FSA), • Company-Paid Life and Disability Insurance, • 401(k) with Company Match, • Paid Time Off & Paid Holidays, • Annual Bonus Opportunities, • Employee Assistance Program (EAP) Please note: CompoSecure does not accept unsolicited resumes from staffing agencies or third-party recruiters. Any unsolicited resumes sent to CompoSecure, including to our employees, will become the property of CompoSecure and may be used without any obligation to pay referral or placement fees. Any agency or recruiter seeking to work with CompoSecure's Talent Acquisition Team should contact our team directly by sending an email to . CompoSecure is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or national origin. We are also an equal opportunity employer of individuals with disabilities and protected veterans.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Up-to-date awareness of cybersecurity trends, tools, and emerging threats.

Skills required - 12 to 15 years of experience in Cybersecurity Solid understanding of overall Cybersecurity Architecture, principles like Security by Design, Zero Trust Framework, least privilege, security incident response). Cybersecurity Architects Responsibilities - Conduct Cybersecurity Technol

Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field. Up-to-date awareness of cybersecurity trends, tools, and emerging threats.

Experience managing cybersecurity projects is required.

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Up-to-date awareness of cybersecurity trends, tools, and emerging threats.

Experience managing cybersecurity projects is required.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Up-to-date awareness of cybersecurity trends, tools, and emerging threats.

Ramp is a financial operations platform designed to save businesses time and money.Combining corporate cards with expense management, bill payments, vendor management, accounting automation, and more, Ramp's all-in-one solution frees finance teams to do the best work of their lives.More than 30,000

Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related field. Up-to-date awareness of cybersecurity trends, tools, and emerging threats.

We are seeking an experienced healthcare IT leader to serve as Interim Director of Clinical Systems & Informatics, with oversight of Meditech Client/Server, Athena One, and Clinical Informatics initiatives.The Interim Director will provide hands-on leadership in system administration, clinical w

Senior Director Of Crypto Compliance.SEC registered broker-dealers alongside a cryptocurrency brokerage all operating under the reputable wing of Futu Holdings Limited (Nasdaq: FUTU).Our core mission revolves around innovating the investing landscape through a digitized brokerage and wealth managem

An exciting opportunity awaits for a PayPal Risk Operations Associate to perform daily responsibilities with dedication.Provide excellent interactions with customers and colleagues.Stay adaptable in a dynamic, fast-paced environment.Perks include competitive pay, flexible schedules, hands-on trainin

To support the development of audits aligned to the bank's standards and objectives by working collaboratively with colleagues, providing accurate information and recommendations, and complying with policies and procedures.Audit development and delivery support, including financial statements, accou

Team Lead IT Operations (DevSecOps) Hybrid.About the Role: We're seeking a Team Lead Operations to oversee IT Operations across a diverse application portfolio.This is a leadership role focused on process transformation, operational excellence, and team management.

The self-employed workforce is a rapidly growing, resilient, and colorful 60 million Americans.But self-employment comes with its own set of challenges: navigating taxes, accounting, bookkeeping, and business banking are just a few.Found is building tools that give self-employed people the security

Champion cybersecurity and resilience: Take command of the Digital Pgs Network's response to cybersecurity threats and incidents. Champion cybersecurity and resilience by heading the Network Operations team, safeguarding operations against emerging threats.

Cybersecurity Education & Training Solutions. Be part of a pioneering team within a high-growth cybersecurity education platform. Collaborate with thought leaders and innovators in cybersecurity and education.

Join OCI's Edge Security team as a Principal Engineer to architect and deliver cloud-scale DDoS protection.You'll lead design for high-performance detection and mitigation systems, drive automation and operational excellence, and set the technical direction for customer-facing DDoS capabilities acro

Sei is the first parallelized layer 1 blockchain.By re-writing the most widely adopted execution environment in Web3, Sei is setting a new standard in blockchain performance and scalability.Apps on Sei benefit from both the performance of web2 and the decentralization and sovereignty of web3.As an o

The Security Architect main role is to design, implement, and oversee our cybersecurity strategy, ensuring robust protection against evolving threats. The ideal candidate will have 7-10 years of experience in cybersecurity architecture, security operations, and risk management with a strong focus on

We aim to build a modern and digital-first transaction banking solution to serve our clients.Our business combines the strength, heritage, and expertise of a 150-year-old firm with the agility and entrepreneurial spirit of a tech start-up.Our goal is to provide a best-in-class digital product that h

Domiciled in Bermuda, with offices in London, Miami, New York, and Dubai, Relm Insurance Ltd.Relm") is the first IIGB (Innovative Insurer General Business) insurer regulated by the Bermuda Monetary Authority ("BMA").Since inception, Relm has remained focused on its Vision of "Making Innovation Resil

Director of Enterprise Stress Testing - Director.Working at Citi is far more than just a job.A career with us means joining a team of more than 230,000 dedicated people from around the globe.At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.

VP FPA Cryptocurrency Or Fintech Experience Required.My client is an innovative fintech cryptocurrency firm experiencing high growth.Develop a deep understanding of the client's various business lines (e.Own/develop reporting frameworks to maintain comprehensive coverage of business line specific ac

Director Cyber Resiliency, Business Continuity & Disaster Recovery.Banking New York City, NY or Commack, Long Island, NY (Hybrid) Full Time Video & Onsite Final Interview $250K/Yr.CANDIDATES MUST BE COMING OUT OF WORKING FOR AN OCC CERTIFIED BANK.THIS IS A HEAVY BANKING REQUIREMENT.We need a senior

Lithic creates card issuing and payment infrastructure for technology companies that just works.We help some of the worlds fastest-growing digital banks, fintech companies, and software companies process billions in transactions annually.Lithic is hiring a seasoned Risk Operations Lead to own planni

Ellipsis Labs is a profitable, venture-backed New York-based startup building differentiated products and infrastructure in decentralized finance.The company is the developer of Phoenix, the leading order book spot exchange on the Solana blockchain, and a top 10 DEX (decentralized exchange) with >.B

VP Trading Business Management.We're looking for a technically skilled and business-savvy VP to join our Equities Client Strategy & Analytics / Front Office Global Markets team.This is a high-impact role at the intersection of data engineering, analytics, and front-office decision-making.You'll work

What part will you play? If you're looking for a place where you can make a meaningful difference, you've found it.The work we do at Markel gives people the confidence to move forward and seize opportunities, and you'll find your fit amongst our global community of optimists and problem-solvers.We'r

Risk Head Investor Services Digital Assets (MD).Working at Citi is far more than just a job.A career with us means joining a team of more than 230,000 dedicated people from around the globe.At Citi, you'll have the opportunity to grow your career, give back to your community and make a real impact.T

Leadership Role For Tech & Ops Risk Management.This position is a leadership role responsible for leading first line of defense risk management for Tech & Ops teams, in adherence with Company's Risk Management Framework and Corporate Strategy.The role has responsibility over a wide range of Tech&Ops

Checking the proxy and the firewall.Check your Internet connection.Check any cables and reboot any routers, modems, or other network devices you may be using.Allow Chrome to access the network in your firewall or antivirus settings.If it is already listed as a program allowed to access the network,

Focus on the core content of the job post.Remove all extra metadata, navigation mentions, and redundant headers.Keep the content beautiful and condensed.

Qualifications: 10+ years of experience in IT infrastructure, cloud engineering, and DevOps, with at least 3 years in a leadership role.