Devsecops jobs in Union City, New JerseyCreate job alerts

Job Description Agile Coach Employment Type: Full-Time, Experienced Department: Project Management CGS is seeking an experienced, enthusiastic team member to act as an Agile Coach within our team supporting a large federal agency. The agency is committed to an operating model based on Agile, Product-focus, and DevSecOps in pursuit of increasing efficiency, efficacy, and overall success of various IT verticals and missions. The ideal candidate should embody an Agile mindset and be passionate about empowering an Agile culture through experience coaching, guiding, and supporting executives, managers, product owners, Scrum Masters, and others. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success: - Oversee the Agile transformation for multiple teams at both the team and program level to enable successful delivery of large strategic system development initiatives. - Facilitate team workshops to help new teams understand Agile and Lean principles, Scrum, Kanban, individual and team roles and responsibilities. - Lead in the creation, delivery, and strategy of Agile Training to government stakeholders and contractors regarding agency Agile processes, tools, and policies - Help teams with sprint planning and implementation, as well as provide ongoing Agile Coaching support for new Agile teams throughout multiple iterations. - Provide ad hoc coaching to teams that have implemented Agile but need assistance to refine their processes. - Provide practical hands-on mentoring to Scrum Masters, Product Owners, and team members of new and existing Agile teams. - Help teams set up their team boards, workflow automation, and automated reporting. Assist organizations to define, prioritize, and decompose requirements in Product and Program Backlogs - Evolve and maintain the Agile Maturity Assessment model, Assess team performance and Agile maturity, and report findings. - Provide feedback on processes, policies, procedures, training, and tooling changes to better support the enterprise's Agile transformation. - Facilitate and coordinate cross-team planning workshops and coach other scrum masters to facilitate cross-team planning workshops. - Facilitate and coordinate cross-team grooming sessions. Lead and participate in Agile communities of practices. Prepare and/or update organization-wide Agile artifacts and methodology documentation. - Help iterate on and provide recommendations to advance the Agile Transformation Roadmap. - Embed an agile culture using techniques from a wide range of agile and lean methodologies and frameworks. - Ensure Agile project metrics are being tracked and monitored for indications of potential problem areas and assist teams in identifying and implementing solutions to address the problems. - Oversee the coaching and planning of multiple high-performing Agile development teams and large-scale programs across the enterprise. Qualifications: - Familiar with DevSecOps tools and techniques such as modern IDE's, GitHub, containerization, everything as code, and zero-trust. - Ability to demonstrate superior organizational skills with an acute attention to detail. - Ability to work effectively under pressure in time-sensitive situations and prioritize multiple projects with similar deadlines. - Agile coaching experience. - Minimum of 5 years of practical Agile experience. - Strong understanding of Agile concepts with an emphasis on SAFe including Scrum, Kanban, Product Ownership, and Agile Scaling. - Experience as a hands-on organizational change agent working across multiple teams - Experience with assisting leadership and team members with removing barriers and embracing transformation by assisting each organization to customize its own path, approach, and solutions to becoming Agile.. - Experience with launching Agile Release Trains, building a Continuous Delivery Pipeline with DevOps culture, empowering a Lean Portfolio, and clearly understanding what it takes to successfully implement SAFe in the enterprise (starting with teams’ / Program levels and scaling up to Large Solutions and Portfolio levels). - Experience supporting and executing PI Planning events and coordinating multiple Agile Release Trains (ARTs). Ideally, you will also have: - Master’s degree or other higher education degree in Information Technology-related field. - Certifications including or equivalent to Scaled Agile Framework – SPC - ScrumAlliance – CST - ICAgile – ICE-AC / ICP-CAT- Equivalent Expert / Senior Coaching Certifications. - Secure coding knowledge. - Open-source tools management. - SEI-CMMI and NIST experience. - Project Management Training or Education such as PMP program. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package. - Health, Dental, and Vision - Life Insurance - 401k - Flexible Spending Account (Health, Dependent Care, and Commuter) - Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email: info@cgsfederal.com #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionJob Requirement – DevOps Engineer Title: DevOps Engineer Location: Hybrid (Newark) – 1-2 times per week (Only local candidates will be considered) Type: Contract-to-Hire NOTE: We cannot utilize third parties for this position. Please do not contact about this position.Overview We are seeking a DevOps Engineer to support enterprise-wide CI/CD pipeline adoption and infrastructure automation. This role will focus on building, onboarding, and maintaining shared frameworks and deployment processes across multiple teams and environments (AWS, Databricks, Snowflake, Kubernetes). The engineer will work under senior architects and play a key role in scaling DevOps best practices across the organization. Key Responsibilities • Design, build, and maintain CI/CD pipelines (Jenkins, Git)., • Onboard application teams onto enterprise-wide CI/CD pipelines., • Develop and maintain shared frameworks and libraries to support scalable deployments., • Implement Infrastructure as Code (IaC) using Terraform, Ansible, Helm, and CloudFormation., • Support deployment processes for Databricks and/or Snowflake applications (not as a data engineer, but ensuring pipeline-driven deployments)., • Configure and manage Kubernetes deployments using Helm charts., • Ensure secure, automated provisioning and configuration in AWS., • Support event-driven processes with familiarity in Kafka and related architectures., • Collaborate with senior developers and architects to expand adoption of DevOps practices across the enterprise.DevOps Engineer Required Skills & Experience, • 3–5 years of experience in DevOps engineering or related roles., • Strong experience with CI/CD tools: Jenkins, Git., • Proficiency in scripting/programming languages: Python, Java, Groovy., • Hands-on experience with Infrastructure as Code: Terraform, Ansible, Helm, CloudFormation., • Familiarity with AWS cloud services., • Experience with Kubernetes deployments., • Exposure to event-driven architectures and Kafka., • Experience supporting deployment pipelines for data platforms such as Databricks or Snowflake (one is sufficient).DevOps Engineer Nice to Have, • Experience managing and scaling shared libraries/frameworks across multiple teams., • Prior work in event-driven enterprise ecosystems., • Ability to contribute to DevSecOps practices.DevOps Engineer Ideal Candidate Profile, • A mid-level engineer (3–5 years) who can work independently but also grow under senior architect supervision., • Strong problem-solver with the ability to scale processes across multiple teams., • Not necessarily a “career architect” but skilled in automation and framework building. #Contech

Job Description Job Description: The Cloud Security Consultant will provide hands on security design, engineering, and oversight for the PeopleSoft OCI architecture. This role ensures the environment is hardened, compliant, monitored, and aligned with MTA cybersecurity standards. The consultant will partner with Application Security, IAM, Network, Data Security, and Cloud Engineering teams to deliver a secure OCI landing zone and PeopleSoft deployment. Additional Skills and Information: " Strong experience with Oracle Cloud Infrastructure (OCI): o Policies, Compartments, Security Zones o OCI WAF, Load Balancing, Vault, Key Management o Network Security (subnet design, firewalls, NAT, private endpoints) " Cloud Security engineering background (Azure/AWS acceptable as secondary). " CSPM tools (Oracle Cloud Guard, Prisma, Wiz, or similar). " Experience securing enterprise applications in cloud. " Exceptional communication skills. " Familiarity with PeopleSoft architecture is preferred. " Strong understanding of Application Security, DevSecOps, and API security. " Knowledge of logging/monitoring: SIEM, cloud audit logs, event metrics. " Ability to collaborate with architecture, DBA, AppSec, IAM, and network teams. Skills: Category Name Required Importance Experience Software Skills Oracle OCI No 1 4 - 6 Years Software Skills PeopleSoft No 3 4 - 6 Years Technical Skills Cyber Security No 2 4 - 6 Years Technical Skills Security No 4 4 - 6 Years

Job Description SAP BTP/C4C Engineer 6 month contract to hire, this will convert to FTE 3 days onsite in Columbus OH or Merrillville IN – relocation ok as long as not extremely far Internal Notes: The day to day will be techno-functional design and test result reviews for SAP systems. This will especially involve identifying best practice opportunities and fit-gap analysis to determine whether customizations are needed.” Technologies utilized: SAP S/4 HANA, SAP BTP/Integration Suite, SAP C4C, FICA modules, BASIS, ABAP programming interfacing with current standard SAP APIs and older BAPIs, amongst other modules.” Experience: Minimum 7 years of experience in SAP solution delivery, including design, configuration, and testing activities.” Preferred Skills 1. SAP S/4 HANA, 2. SAP BTP/Integration Suite Nice to Have 1. ABAP, 2. C4C, 3. BASIS, 4. SAP GRC Work Schedule: Hybrid at either our Columbus Arena office or Merrillville, Indiana office. M/F home, T/W/R in office. * Required: • Currently authorized to work in the United States via citizenship or green card., • Minimum 7 years of experience in SAP solution delivery, including design, configuration, development, and integration activities., • Proven experience with SAP implementations in complex, multi-vendor enterprise environments., • Strong functional knowledge of SAP S/4HANA, SAP Service Cloud, SAP BTP, Fiori, and related SAP products., • Experience with one or more of the following specialized SAP areas: FICA, Billing, Regulatory, C4C, etc., • Experience with integration technologies including RESTful APIs and middleware platforms., • Familiarity with DevSecOps tools and practices, including CI/CD pipelines, automated testing frameworks, and code quality tools., • Solid understanding of SAP security models, SAP GRC Access Control, and related compliance requirements., • Experience with SAP testing activities including unit testing, SIT, UAT, regression, and performance testing., • Strong communication and organizational skills with the ability to coordinate across team boundaries. Preferred: • Bachelor's degree in Computer Science, Information Technology, Business Administration, or related field., • SAP certifications such as SAP Certified Associate, SAP Certified Professional, etc., • Experience in utility or energy industry digital transformation programs., • Knowledge of the integration of non-SAP products with SAP (MuleSoft, API architectures, IAM tools, etc.)., • Familiarity with SAP Analytics Cloud and SAP Business Data Cloud., • Experience with AI-powered SAP tools (i.e. – Joule)., • Understanding of regulatory and compliance requirements relevant to utilities and customer data privacy., • Experience with enterprise data migration and master data management in SAP environments., • Knowledge of people enablement and change management practices related to SAP adoption., • Experience with Jira, qTest, and other project management and test management tools, or similar technical stacks. Responsibilities: • Collaborate on end-to-end SAP functional oversight for Meter-to-Cash (M2C) and Customer Service processes, including SAP S/4HANA Utilities and SAP Service Cloud., • Oversee the design, configuration, customization, and integration of SAP applications to meet business requirements. This will be done in conjunction with both NiSource and third-party teams., • Oversee progress on SAP-specific RICEFW (Reports, Interfaces, Conversions, Enhancements, Forms, and Workflows) delivery and ensure traceability and alignment with overall program requirements., • Guide unit, SIT, UAT, regression, and performance testing for SAP components, ensuring test cases and results are documented in tools such as Jira and qTest., • Coordinate with vendors and third-party service providers to ensure timely delivery and integration of SAP solutions (including but not limited to installation and configuration activities)., • Assist in deployment, cutover, and hyper care activities, including knowledge transfer to and mentoring of NiSource operational teams and managed service providers., • Ensure SAP security roles, access models, and compliance requirements are designed, implemented, and tested in alignment with NiSource policies and per industry-standard SAP practices., • Drive adherence to SAP-standard DevSecOps practices including automated CI/CD pipelines, unit test coverage, and static/dynamic security analysis for SAP applications and configurations., • Facilitate communication and collaboration across workstreams to ensure SAP solutions integrate effectively (for example, with identity and access management systems)., • Establish industry-standard SAP monitoring (including but not limited to error handling, performance, abnormal use, etc.)., • Participate in program governance, status reporting, risk management, and issue resolution related to SAP delivery.

Job Description We are looking for an experienced Application Security Engineer to take a hands-on role in improving security across a broad portfolio of web applications and APIs. This person will partner closely with software engineering teams to identify security weaknesses, determine which issues present meaningful risk, and drive remediation through completion. The role requires someone who can go beyond automated scanner results. You should be comfortable investigating findings, reproducing vulnerabilities, assessing exploitability and business impact, and providing developers with practical guidance on how to resolve issues. Strong AWS security experience is required. This is primarily an application and API security position rather than a traditional infrastructure or DevOps role. Responsibilities • Assess security across web applications, APIs, and supporting cloud environments., • Investigate and validate vulnerabilities identified through automated security tools, penetration testing, and internal assessments., • Manually reproduce potential vulnerabilities to determine exploitability and eliminate false positives., • Perform hands-on testing of APIs and applications, with particular attention to authentication, authorization, access controls, session management, injection, and business-logic weaknesses., • Evaluate issues such as IDOR/BOLA, privilege escalation, authorization bypasses, and other OWASP-related vulnerabilities., • Prioritize findings based on technical severity, exploitability, data exposure, and business impact., • Partner with development teams to provide practical remediation guidance and verify that fixes fully address identified vulnerabilities., • Conduct secure code reviews and participate in threat modeling for new applications, APIs, and features., • Manage and improve SAST and DAST capabilities, including tool configuration, tuning, quality gates, and false-positive reduction., • Incorporate application security testing into software development workflows and establish appropriate security gates., • Assess application risks associated with AWS services and configurations, including IAM, S3, Lambda, API Gateway, secrets management, and WAF., • Evaluate cloud-to-application attack paths and determine how AWS configurations may increase the impact of application vulnerabilities., • Identify recurring vulnerability patterns and recommend broader engineering or architectural improvements., • Track remediation progress and communicate vulnerability trends, risk, and security posture to engineering and security leadership., • Continuously identify opportunities to improve application security processes, tooling, and standards.Required Qualifications, • 5+ years of experience in application security, product security, penetration testing, vulnerability research, or a related security discipline., • Strong hands-on experience assessing web applications and APIs., • Deep understanding of the OWASP Top 10 and OWASP API Security Top 10., • Experience manually validating vulnerabilities rather than relying solely on automated scanner results., • Experience testing REST APIs; GraphQL security experience is beneficial., • Hands-on experience with Burp Suite or similar manual application security testing tools., • Experience operating and tuning SAST and DAST technologies., • Ability to read and review application code in at least one modern programming language such as Java, Python, JavaScript/TypeScript, or Go., • Strong working knowledge of AWS security, particularly IAM and application-related AWS services., • Experience with vulnerability management and cloud/application security platforms., • Ability to translate technical security findings into clear remediation recommendations., • Strong communication skills and the ability to influence engineering teams when security changes are required.Preferred Experience Experience with Wiz, Qualys, Snyk, SonarQube, or comparable cloud security, vulnerability management, SAST, and DAST technologies is preferred. Devsecops - JD-silversearch Additional experience with security automation/SOAR, automated or AI-assisted security testing, custom application security rules, threat modeling, and offensive security testing is beneficial. Certifications focused on AWS security or offensive/application security are also a plus.

Job Description Founding Infrastructure Engineer (New York) At Solve Intelligence, we’re building AI for the global IP industry. We’re now building our first engineering team in New York. The Role You’ll be our first engineer in New York, working closely with our London infrastructure team. You’ll own how Solve is deployed, secured and run for our largest customers in the US. Many of them need fully isolated environments that meet strict security requirements. This isn’t a ticket queue. You’ll make architectural decisions, write a lot of Terraform, and work directly with the founders and with customers’ security teams. What you’ll own Repeatable enterprise deployments: Turn our infrastructure into a repeatable process for single-tenant, isolated and air-gapped customer environments. Secure cloud architecture: Design and run our AWS environments with Terraform, including regulated and government-grade environments. Security and compliance engineering: Build controls into the infrastructure itself (IAM, network segmentation, encryption, logging and audit trails). Be the technical owner when customers review our security posture. Reliability and observability: Instrument the stack (OpenTelemetry, Datadog) so we find issues before customers do, and own incident response for US environments. Developer velocity: Improve CI/CD (GitHub Actions, Docker) so the whole team can ship quickly and safely. What you’ll work on first Make our custom enterprise deployment process repeatable across customers and environments. Harden and document security controls for our US regulated environments. Set up on-call, monitoring and runbooks for US customers. What You Bring Must-haves: Terraform expertise: You use it every day and it’s your default tool for infrastructure. Production infrastructure experience: You’ve owned production cloud infrastructure, ideally on AWS, beyond configuring it. CI/CD and containers: Kubernetes or ECS, and deployment pipelines you’ve built yourself. Security fundamentals: IAM, cloud networking, secrets management and least-privilege design. Software engineering ability: Strong Python, and comfortable building backend services and wiring infrastructure into the product. US work authorization: You’re authorized to work in the US. Nice-to-haves: Experience with FedRAMP, NIST 800-53, SOC 2 or ISO 27001 environments Early-engineer experience at a startup, or infrastructure work at a hedge fund or quant firm Distributed task queues (Celery/SQS), OpenSearch, or AI/ML infrastructure DevSecOps experience We care about what you’ve built more than certificates. Tell us about the hardest infrastructure problem you’ve owned. About Solve Intelligence Traction: 20–30% month-on-month revenue growth, selling to more than 700 IP teams worldwide, including leading US law firms. Proven value: Users report 50–90% efficiency gains. Backing: $55M raised to date, including a $40M Series B, from investors including Y Combinator, 20VC and Visionaries. Your Team You’ll work directly with our founding team: Chris (CEO): PhD in AI (UCL), ex-Dyson and the Alan Turing Institute. Angus (CTO): MEng Computer Science, ex-Qualcomm and Coremont (Brevan Howard). Sanj (CRO): PhD in AI (Gatsby Unit, UCL), ex-Huawei R&D. What We Offer Salary: Competitive base, plus significant equity. Founding impact: You’ll shape our US engineering team and infrastructure from day one. Benefits: Comprehensive health, dental and vision cover, a 401(k), enhanced parental leave and meals in the office. Location: In person in New York, 5 days a week. Compensation Range: $120K - $250K

Job Description Ethical Hacker Job Title Ethical Hacker / Penetration Tester Job Summary We are seeking a skilled Ethical Hacker to identify, analyze, and help remediate security vulnerabilities across applications, networks, systems, and cloud environments. The ideal candidate will perform authorized security assessments, penetration testing, vulnerability analysis, and security research to strengthen organizational defenses. You will collaborate with security engineers, developers, infrastructure teams, and compliance professionals to improve overall cybersecurity posture. Key Responsibilities Conduct authorized penetration testing across web applications, mobile applications, APIs, networks, cloud environments, and infrastructure. Identify, exploit, validate, and document security vulnerabilities using ethical hacking methodologies. Perform vulnerability assessments, security reviews, and risk analysis. Execute security testing aligned with industry frameworks such as OWASP, PTES, and NIST guidelines. Conduct web application security testing including authentication, authorization, injection, session management, and business logic testing. Perform network security assessments, including configuration reviews and vulnerability analysis. Analyze security findings and prepare detailed reports with risk ratings and remediation recommendations. Collaborate with developers, system administrators, and security teams to validate fixes and improve security controls. Conduct threat research and stay updated on emerging vulnerabilities, exploits, and attack techniques. Support red team exercises, security audits, and incident response investigations when required. Maintain documentation of testing methodologies, findings, and security improvements. Required Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field (or equivalent practical experience). 2 5 years of experience in ethical hacking, penetration testing, vulnerability assessment, or security engineering. Strong understanding of networking concepts, TCP/IP, DNS, HTTP/HTTPS, VPNs, and firewalls. Hands-on experience with web application security testing and OWASP Top 10 vulnerabilities. Proficiency with Linux-based security environments such as Kali Linux or Parrot OS. Experience using penetration testing and vulnerability assessment tools. Knowledge of scripting languages such as Python, Bash, or PowerShell. Strong understanding of security principles, authentication mechanisms, encryption, and access controls. Preferred Qualifications Experience performing penetration tests for web applications, APIs, mobile applications, and cloud platforms. Knowledge of cloud security testing for AWS, Azure, or Google Cloud environments. Familiarity with Active Directory security assessments and enterprise network testing. Experience with vulnerability management platforms and security reporting tools. Understanding of malware analysis, exploit development, or reverse engineering concepts. Experience with bug bounty programs or responsible vulnerability disclosure. Knowledge of DevSecOps and application security practices. Technical Skills Kali Linux Burp Suite Metasploit Framework Nmap Wireshark Nessus OpenVAS OWASP ZAP SQLMap Nikto Gobuster Hydra Python Bash PowerShell Git Linux Windows Security Web Application Security API Security Cloud Security Soft Skills Strong analytical and investigative skills. Excellent problem-solving abilities. Clear technical writing and reporting skills. Ability to communicate security risks to technical and non-technical stakeholders. Strong attention to detail and ethical judgment. Curiosity and passion for cybersecurity research and continuous learning. Nice to Have Experience with red team operations, adversary simulation, or threat emulation. Knowledge of Active Directory attacks and defenses. Familiarity with container and Kubernetes security testing. Experience with AI security, LLM application security, or prompt injection testing. Contributions to security research, vulnerability disclosures, or cybersecurity communities. Professional certifications such as OSCP, CEH, PNPT, GPEN, GWAPT, CISSP, or Security . Benefits Competitive salary and performance-based incentives. Comprehensive health and wellness benefits. Flexible or hybrid work arrangements. Cybersecurity training, certification, and conference support. Opportunity to work on advanced security assessments and real-world cybersecurity challenges. Collaborative environment focused on continuous security improvement.

Job Description *THIS IS AN SENIOR LEVEL CLOUD ARCHITECT ROLE* THIS POSITION WILL REQUIRE THE CONSULTANT TO WORK 3 DAYS ONSITE & 2 DAYS REMOTE. Job Title: Senior Enterprise Architect Application Modernization & Cloud Location: New York, NY (Hybrid 3 Days Onsite, 2 Days Remote) Agency: Metropolitan Transportation Authority (MTA) Headquarters Certification/Experience Preferred: AWS Solutions Architect Expert, TOGAF, ITIL Key Responsibilities • 1. Architecture Standards, Patterns & Modernization Frameworks " Develop, publish, and maintain application and integration architecture standards. " Create reusable modernization patterns (microservices, APIs, event-driven, containerization). " Contribute to reference architectures and ensure consistency across engineering teams. " Support solution architects and delivery teams in applying approved standards. • 2. Application Modernization Execution " Design modernization paths for legacy applications: rehost, replatform, refactor, retire. " Architect cloud native and hybrid solutions primarily on Azure (AKS, Functions, APIM, PaaS). " Work hands on with engineering teams during design, PoCs, and early build phases. " Guide workload decomposition, domain boundaries, service design, and modernization roadmaps. • 3. Cloud Architecture & Platform Enablement " Build and evolve Azure landing zone components and cloud governance configurations. " Define infrastructure, integration, API, and data patterns for cloud adoption. " Support hybrid cloud integrations with Azure, AWS, and GCP where applicable. " Evaluate new cloud capabilities (AI, observability, DevSecOps, automation tools). • 4. Application Portfolio Management & Rationalization " Perform architecture led assessments using frameworks such as TIME or 6R. " Identify consolidation, migration, and retirement opportunities to reduce redundancy. " Partner with ServiceNow APM/CMDB to ensure accurate application inventory and lifecycle data. " Develop architecture metrics and dashboards supporting modernization progress. • 5. Technical Debt Analysis & Remediation Support " Maintain application level technical debt insights across the portfolio. " Partner with product teams to prioritize remediation aligned with risk, business value, and modernization sequencing. " Provide guidance on remediation strategies, patterns, and target-state architecture alignment. • 6. Infrastructure as Code (IaC) & Automation Enablement " Contribute to IaC templates using Terraform, Bicep/ARM, or Pulumi. " Support CI/CD pipeline architecture using GitHub Actions, GitLab, or Jenkins. " Partner with DevOps teams to apply automation and configuration management practices (Ansible, Chef, Puppet). • 7. Security, Compliance & Optimization " Apply cloud security best practices and integrate IAM/RBAC, network security, and Key Vault usage into designs. " Ensure alignment with CIS, NIST, ISO 27001, and MTA security requirements. " Support cloud cost optimization efforts using Azure Advisor and FinOps guidelines. • 8. Cross Functional Collaboration & Communication " Work closely with DevOps, Networking, Cybersecurity, Infrastructure, Finance, and Procurement teams. " Translate complex modernization concepts into clear, actionable guidance for business and technical stakeholders. " Participate in strategic planning, cloud strategy working sessions, and solution design workshops.

Job Description NJ - Can be remote or hybrid Primary Skill : Network Security Controls, Secrets Management, SABSA Framework We are looking for someone with over 12 years of experince, as, The Security Engineer - Risk & Controls, who will be responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions. This role spans hands-on security expertise, risk management, governance, and control oversight across blockchain, cloud, and enterprise platforms. Conduct security risk assessments, identify control gaps across applications, infrastructure, cloud, and blockchain environments, and design/assess effective security controls. Drive the remediation of security findings, vulnerabilities, audit issues, and control deficiencies through to closure. Partner with engineering, architecture, and operations teams to integrate security into system design/delivery, perform threat modeling, and participate in solution reviews. Support identity and access management (IAM), secrets management, encryption, and key management practices. Support internal audits, regulatory reviews, compliance assessments, evidence collection, and issue remediation. Develop security policies, standards, procedures, and control documentation while monitoring risk metrics to report to management. Expertise in conducting security risk/control evaluations and driving remediation activities. Strong understanding of standard frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards. Core understanding of cloud security principles and major providers (AWS, Azure, or GCP) Solid knowledge of Identity and Access Management (IAM), secrets management, encryption, and key management practices. Hands-on experience supporting audits, regulatory assessments, or compliance reviews. Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (e.g., Ethereum, Hyperledger Besu, Canton, Solana, Polygon).. Proficiency in modern JavaScript/TypeScript frameworks (e.g., React.js, Angular, or Vue.js).Experience with Secure Software Development Lifecycle (SSDLC), DevSecOps practices, and CI/CD pipeline integration. Familiarity with Governance, Risk, and Compliance platforms such as Archer, ServiceNow GRC, or MetricStream. Experience managing vulnerability management and security testing programs. Ability to develop risk metrics, dashboards, and executive-level reporting.

Job Description At Electric Mind, Engineering is where strategy meets action. Our team helps organizations cut through complexity—aligning business ambition with technology execution to unlock real, lasting change. You’ll work alongside curious, driven people tackling high-impact challenges for everyone from scaling startups to global enterprises. Each engagement is different, pushing you to learn, adapt, and grow. Electric Mind’s Technology Practice brings together deep engineering expertise, modern delivery disciplines, and pragmatic architectural thinking to help clients execute complex, mission-critical transformation. We design and implement scalable, secure, high-impact technology solutions that accelerate business outcomes. About the role We are hiring a Senior IT Security Specialist to protect our networks, endpoints, applications and cloud environments, and to keep us compliant with the frameworks our business and clients depend on. You will own day-to-day security operations across firewalls, intrusion prevention, wireless, email and endpoint protection, while leading our vulnerability testing and compliance programs. This is a hands-on senior role. You will configure and tune security controls yourself, guide junior staff, and advise leadership on risk. What You'll Do Network and perimeter security • Deploy, manage and tune next-generation firewalls, including rule reviews, segmentation and change control., • Operate and tune intrusion prevention systems (IPS), investigate alerts and reduce false positives., • Secure enterprise WiFi, including WPA3/802.1X authentication, rogue access point detection and guest network isolation.Endpoint, email and data protection, • Administer antivirus and endpoint protection (EPP/EDR) across servers and workstations, and respond to detections., • Manage anti-spam and email security controls, including phishing filtering, SPF, DKIM and DMARC., • Own data loss prevention (DLP) policies across email, endpoints and cloud storage, and handle policy incidents., • Run two-factor and multi-factor authentication (2FA/MFA) rollout, enforcement and exception management.Application security and testing, • Plan and conduct penetration tests, and coordinate and scope third-party pen tests., • Integrate static (SAST) and dynamic (DAST) application security testing into development pipelines., • Triage findings with development teams, track remediation and verify fixes.Compliance and risk, • Maintain controls and evidence for frameworks such as ISO 27001, SOC 2, NIST CSF, PCI DSS and applicable privacy laws., • Prepare for and support internal and external audits, client security questionnaires and risk assessments., • Write and update security policies, standards and procedures.Operations and leadership, • Participate in incident response, including investigation, containment and post-incident reviews., • Mentor junior team members and deliver security awareness training., • Report on security posture, metrics and risks to IT leadership.What You'll Bring, • 5 to 10 plus years of experience in IT security, with significant time in security and compliance roles., • Hands-on experience configuring and managing enterprise firewalls and intrusion prevention systems., • Practical experience securing enterprise WiFi networks., • Experience administering DLP, antivirus/endpoint protection and anti-spam/email security platforms., • Experience deploying and supporting 2FA/MFA solutions., • Proven ability to perform penetration testing and to run SAST and DAST tools, interpret results and drive remediation., • Working knowledge of compliance frameworks (for example ISO 27001, SOC 2, NIST CSF or PCI DSS) and audit preparation., • Solid understanding of TCP/IP, routing, VPNs, Active Directory/identity management and Windows and Linux systems., • Clear written and verbal communication, including explaining risk to non-technical audiences.Nice to Haves, • Experience with Palo Alto Networks firewalls managed through Panorama, including device groups, templates, security policy and threat prevention profiles., • Cloud security knowledge in AWS, Azure or Google Cloud: identity and access management, network security groups, logging and cloud security posture management (CSPM)., • Experience with ITIL change management standards., • Familiarity with SIEM platforms and log correlation., • Experience with DevSecOps practices and embedding security in CI/CD pipelines., • Exposure to zero trust architecture and secure remote access.Education and Certifications, • Degree or diploma in Computer Science, Information Security or a related field, or equivalent experience., • One or more certifications is an asset: CISSP, CISM, CompTIA Security+, OSCP, CEH, PCNSE (Palo Alto), or a cloud security certification such as AWS Security Specialty, Azure Security Engineer (AZ-500) or CCSP.About Electric Mind Electric Mind is a fast-growing, AI-native advisory and digital engineering firm built for those who want to shape the future, not just watch it happen. We blend premium strategy expertise with cutting-edge AI-centric engineering to solve complex, meaningful problems for industry-leading clients. We pride ourselves on a high-touch delivery model and a culture that values diverse talent, innovation, and true client partnership — creating an environment where your ideas matter and your impact is visible. If you’re looking for a place where you can grow fast, collaborate with exceptional teammates, and help build a company scaling its capabilities and global footprint at speed — Electric Mind is the place to ignite your career. The future is bright! For more info on Electric Mind, check out our Careers Page and Instagram. Electric Mind is committed to diversity in the workplace. We are an inclusive employer and welcome and encourage applications from all qualified candidates. Applicants’ needs will be accommodated during our recruitment and selection process so please advise us if you require accommodation. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Summary Vertical Relevance is looking for an AWS Cloud Security Engineer to join our team as a full-time employee in New York Metro area and be available for Hybrid work. This person is responsible for the end-to-end planning, building, and deploying of software systems. He/she will be able to drive the programming of well-constructed, testable code. As an AWS Cloud Security Engineer, you will implement technical solutions as part of a team for customer engagements. This role requires strong teamwork, communication, patience and organization skills needed to drive customer success. We are seeking experienced AWS Cloud Security Engineers to support a large-scale AWS governance and security transformation initiative. This role focuses on SCP and RCP implementation across AWS Organizations using Terraform and Control Tower AFT. Professional experience architecting/operating automated Security & Compliance / DevSecOps solutions built on AWS. We are seeking experienced AWS Cloud Security Engineers to support a large-scale AWS governance and security transformation initiative. This role focuses on SCP and RCP implementation across AWS Organizations using Terraform and Control Tower AFT. At Vertical Relevance we deliver with excellence through teamwork, automating everything, constantly learning and taking ownership for the outcomes our customers experience. Are you ready to join the team? Responsibilities Help customers shape their journey to adopting the cloud and provide our customers with technical and strategic guidance on their “cloud journey”. Consult, plan, design, and implement security solutions on the cloud customers Design and automate security and compliance solutions Become a deep technical resource that earns our customer's trust Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our customers build on the cloud Innovate on behalf of customers and translate your thoughts into action yielding measurable results. Support solution development by conveying customer needs and feedback as input to technology roadmaps. Share real world implementation challenges and recommend expansion of capabilities through enhanced and new offerings. Assist with technical briefs that document solutions Assist with reference architecture implementations Support internal and external brand development through thought leadership: Work with Marketing/Alliances to write blog posts Work with Marketing/Alliances to develop internal case studies Qualifications Author SCP and RCP policy rule sets in Terraform. Implement and deploy policies through Control Tower AFT pipelines. Execute policy testing and blast radius analysis in sandbox environments. Deploy policies from Sandbox OU to NCZ and DPZ/Critical Zone. Build VPC endpoint, S3, and KMS resource-based policies. Develop runbooks and conduct knowledge transfer. Hands-on AWS SCP and RCP authoring experience Terraform and Infrastructure-as-Code expertise AWS Organizations and multi-account governance experience IAM Access Analyzer and IAM policy evaluation VPC Endpoint, Amazon S3, and AWS KMS policy experience AWS Certified Security - Specialty AWS Control Tower AFT experience Runbook authoring and knowledge transfer experience. Experience in software/technology customer facing experience. Must be able to code with Python. Sample Activities You’ll Do Creating a Self-Service Account Framework Assist Customer with organizational hierarchy design and configuration templates. Assist Customer in the development of referenceable playbooks, supported by relevant code examples. Assist Customer in the development of sample runbooks to automate the implementation of AWS account setup and configuration. Account Framework - Developing an automated Continuous Delivery Pipeline framework that will be used to establish AWS Accounts to configured, tested infrastructure on AWS in a repeatable, reliable and secure manner eliminating the need for manual intervention. Security Control Policies - Development of the Service Control Policies and account baselines associated with the Customer’s security and compliance requirements. Assist Customer with the development of a report and supporting sample code addressing the controls as part of the playbook. U.S. work authorization required. Candidates must be legally authorized to work in the United States without current or future employer sponsorship. Creating Security Threat Analytics and Dashboard Solutions Creating a framework to automatically gather, transform and interpret security event data in AWS. Selecting, defining, identifying security requirements and determine where: Macie can be leveraged. GuardDuty can be leveraged. Inspector can be leveraged. Security Hub can be leveraged. Alternative security products can be leveraged. Codify the provisioning of security analytics and reporting workflow: Implement Security Hub with in a central account with inputs from all accounts. Implement GuardDuty for global security events. Implement Macie for detection of sensitive data in 23 buckets. Develop AWS Config rules to enforce security configurations in CIS AWS Foundations standard. Implementing Inspector to gather findings from EC2 instances. Enable CloudTrail for monitoring API activity. Enable FlowLogs for VPC traffic Creating a Self-Service Compliance Framework Selecting tools for building Policy-as-Code controls (preventative, detective, and responsive) Development of referenceable playbooks, supported by relevant code examples for controls Development of sample runbooks to automate the implementation of controls: Policy Definition – Identification and documentation of Customer Policy in the form of specific statements that must be true about configuration of AWS resources Policy-as-Code Development – Development of the logical tests associated with each of the policies established to be used to assert the configuration state of infrastructure on AWS in order to block a build in the pipeline, take automated reactive action, or alert on violations to the policy Framework Development – A design allowing for the execution of logical tests against infrastructure code or running AWS infrastructure in order to assert the configuration state of infrastructure resources on AWS and block a build in the pipeline, take automated reactive action, or alert on violations to the policy Development of a report and supporting sample code addressing the controls as part of the playbook U.S. work authorization required. Candidates must be legally authorized to work in the United States without current or future employer sponsorship. Relevant Technical Tools Primary Languages – Python, Java, Bash Tooling, Services & Libraries – Jenkins, Gitlab, Terraform, Vault, Git, Splunk, OWASP, Trend Micro, Palo Alto, Fortify, Twistlock, Aqua Security Relevant AWS Services AWS Infrastructure Scripting – CloudFormation, AWS CLI, AWS CDK AWS Storage Services – S3 AWS Compute Services – Lambda, EC2, EKS, ECS, ECR AWS Networking Services – VPC, Route53, API Gateway, Direct Connect AWS Developer Services – CodePipeline, CodeBuild, CodeCommit, CodeDeploy AWS Management and Governance Services – Control Tower, Organizations, CloudWatch, Auto Scaling, Config, CloudTrail, Service Catalog, Systems Manager AWS Security, Identity, Compliance Services – IAM, Inspector, KMS, Secrets Manager, Security Hub, Detective, GuardDuty, Macie, HSM, Certificate Manager, WAF & Shield, Firewall Manager, Detective AWS Frameworks – Landing Zone The Company Vertical Relevance was founded to help business leaders drive value through the design and delivery of effective transformation programs across people, processes, and systems. Our mission is to help firms at any stage of their journey develop custom solutions for success and growth. We provide a full range of services from strategy and design through to implementation and training. Our collective industry expertise is our greatest asset - our professionals have an average of 20+ years’ experience within Financial Services, across Wealth Management, Asset Management, Insurance, and Banking. Within our Customer Experience practice, we add complementary industry expertise (technology and media) synergizing the most relevant and successful customer trends. We focus wholly on your success by first rigorously assessing your business and technology challenges, and then right-sizing solutions that provide a meaningful ROI. With our industry experts hitting the ground running and focusing on nimble, quality delivery, we can see rapid, tangible improvements with our clients in productivity and effectiveness. When it makes sense for your company, we leverage our product partnerships in the areas of CRM, Sales Acceleration, Predictive Analytics, Digital Knowledge Management, and Cloud Transformation. We are committed to a fair and transparent hiring process. Any application containing false information, misrepresented experience, fabricated credentials, AI-generated content presented as personal work, or applications submitted on behalf of another individual without disclosure may be disqualified. Verification of employment history, education, certifications, and identity may be conducted during the recruitment process. Vertical Relevance is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. Powered by JazzHR GpxQuRGrBs

Job Description CoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at www.coreweave.com. Role Overview CoreWeave is seeking an experienced Network Security Engineer for our network security initiatives to help protect our rapidly scaling cloud infrastructure hosting high-performance AI workloads. In this role, you will architect and implement cutting-edge security solutions focused on network security across our data center perimeter and internal networks. You will work in a high-scale environment (CoreWeave is positioning itself as the next major hyperscaler) and ensure our network and services remain secure, resilient, and trustworthy. The ideal candidate is a seasoned security expert (3–7 years experience) with a deep understanding of modern cloud/network architectures and a passion for educating cross-functional partners in a security-first culture. Key Responsibilities • Network Security Architecture: Design and deploy robust security measures across the network perimeter and internal fabrics (e.g., firewalls, IPS/IDS, segmentation, configuration health, best practicies) to protect CoreWeave's globally distributed hyperscale infrastructure hosting large-scale AI workloads. Ensure that all entry points, high-speed interconnects, and cloud services are fortified against unauthorized access and attacks., • Zero Trust Implementation: Champion a Zero Trust security model across CoreWeave's network and cloud environments. Architect solutions that enforce least-privilege access, continuous verification, and micro-segmentation of services – ensuring no implicit trust at any layer., • Security Monitoring & Incident Response: Establish robust monitoring for network security events and potential breaches across high-density AI cluster networks. Proactively identify vulnerabilities or indicators of compromise, and coordinate incident response efforts for any network-related security incidents to minimize impact., • Cross-Functional Collaboration: Work closely with Networking, Infrastructure, and Software Engineering teams to integrate security best practices into architecture, deployments, and processes. Provide expert guidance during design and code reviews to ensure new services and features are secure by design., • AI Infrastructure & Interconnect Security: Secure high-density GPU clusters and ultra-low latency backend fabrics. Implement security controls to protect customer data in transport., • Leadership & Education: Contribute to security initiatives and foster a security-first mindset across the organization. Educate partners in other teams on network security principles, conduct security training sessions, and lead by example in following and enforcing security policies and standards., • Policy Enforcement: Help refine, implement, and enforce security policies and standard operating procedures for a highly scalable, distributed environment. Regularly review network and cloud security postures, ensuring compliance with industry best practices and adapting policies as the company grows.Required Qualifications, • Experience: 3–7 years of hands-on experience in network security engineering, with exposure to large-scale cloud or hyperscaler environments. Proven track record protecting complex, distributed systems at scale., • Network Security Expertise: Deep understanding of network security principles and technologies – including experience mitigating DDoS attacks, securing high-speed data center fabrics, defending against web exploits, and implementing zero trust methodologies., • Cloud & Network Architecture: Strong conceptual and practical knowledge of securing modern cloud and network architectures. Proficient in network protocols (TCP/IP, DNS, BGP, HTTP/S, etc.), network segmentation, VPNs, and firewall configurations. Experience securing cloud platforms (AWS, GCP, Azure or custom hyperscale infrastructure) and containerized environments., • Security Contributions: Demonstrated ability to contribute key input to security initiatives and projects end-to-end. Experience educating peer engineers and partner teams, with a talent for instilling a security-first mindset across diverse teams., • Cross-Team Collaboration: Excellent communication and collaboration skills. Ability to work closely with cross-functional teams (Networking, Infrastructure, DevOps/SRE, Software) to design and implement security solutions that enable the business while protecting critical assets., • Policy and Compliance: Experience in implementing, refining, and enforcing security policies and controls for highly scalable, distributed systems. Familiarity with industry standards and compliance frameworks (e.g., NIST, ISO 27001, SOC2) and how they apply in a cloud environment.Preferred Skills & Qualifications, • Hyperscaler Environment: Prior experience working in a top-tier cloud provider or hyperscale environment is a strong plus (FAANG or similar organization). Understanding of the unique security challenges at massive scale., • Zero Trust & Identity: Experience designing zero trust networks, including identity and access management (IAM) systems, single sign-on, multi-factor authentication, and network access control solutions., • Automation & Scripting: Proficiency in scripting or programming (Python, Go, or similar) for automating security tasks, integrating security tools, and handling infrastructure-as-code. Experience with DevSecOps practices and CI/CD pipeline security is a plus., • Security Certifications: Relevant certifications such as CISSP, CCSP, GIAC (GSEC, GCIH, etc.), or cloud security certifications (AWS/Azure Security Specialty) are advantageous, demonstrating a strong foundation in security best practices., • Continuous Learning: Active involvement in the security community or contributions to open-source security projects. Up-to-date knowledge of the latest threats, vulnerabilities, and mitigation strategies in network and cloud security. The base salary range for this role is $153,000 to $204,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs. The benefits below reflect our US-based offerings for full-time employees; for roles in other locations, benefits vary and are shared during the hiring process. These include: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment, • A work culture focused on innovative disruption California Applicants California Consumer Privacy Act Equal Opportunity & Accommodations CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: careers@coreweave.com. Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job DescriptionSenior Platform Engineer Hybrid, requiring 2 days per week onsite in Newark, NJ NOTE: We are unable to consider Third Party candidates. Please do not contact or submit. Job Profile Summary The Senior Platform Engineer is integral to developing client middleware platforms and automations. This role involves architecting solutions, guiding junior engineers, and collaborating across teams to automate deployments. The Senior Platform Engineer utilizes the latest DevOps tools and services to create automation, reducing manual tasks and speeding up market delivery. Additionally, they document processes and procedures by writing SOPs while adhering to industry standards and best practices. Key Responsibilities • Design and implement highly available, resilient, and cost-effective platforms and middleware solutions., • Lead automation initiatives using Infrastructure as Code (IaC) and DevOps practices to enhance efficiency., • Build, maintain, and optimize CI/CD pipelines for containerized applications., • Engineer and support container platforms like RedHat OpenShift and other Kubernetes platforms (EKS/AKS/ECS)., • Implement and manage service mesh technologies (e.g., Istio) to improve traffic management and microservices security., • Establish monitoring, logging, and alerting standards to ensure platform reliability and performance., • Act as a subject matter expert for Middleware platforms, advising on architecture and best practices., • Collaborate with security teams to integrate governance, security controls, and DevSecOps practices., • Lead troubleshooting efforts and act as an escalation point for complex production issues., • Install, configure, and maintain middleware platforms, Kubernetes clusters, and supporting infrastructure., • Mentor and guide junior engineers, promoting best practices and technical growth., • Document architecture, operational procedures, and standard operating processes., • Participate in technical discussions, contributing to architectural decisions and cross-functional collaboration., • Evaluate emerging technologies and recommend improvements for platform performance and scalability.Education & Experience Education: • Bachelor's degree required or 12 years of relevant experience in lieu of a degree. Work Experience: • 10 years of related IT work experience., • Hands-on experience with RedHat OpenShift or similar Kubernetes/Container platforms., • Experience in automating CI/CD pipelines for Kubernetes/Container platforms., • Proficiency with Docker/Podman, Git, Jenkins, and other CI/CD tools., • Experience with Istio Service Mesh or similar technologies for microservices security., • Knowledge of DevSecOps concepts and tools is necessary., • Experience with Infrastructure as Code (IaC) tools, especially Terraform., • Hands-on experience with AWS or Azure cloud platforms., • Experience with IBM Event Streams or IBM App Connect Enterprise is highly preferred., • Knowledge of AWS Foundational Services like ECS, EC2, IAM, and VPCs., • Proficiency in scripting languages such as Shell scripting, Python, or PowerShell., • Experience with IBM CloudPak products is a plus., • Middleware experience with IBM WebSphere products is a plus., • Knowledge of distributed operating systems like Linux, Windows, or AIX., • Understanding of load balancers, DNS resolutions, and network troubleshooting related to Middleware technologies.Skills, • Strong problem-solving and analytical skills., • Excellent communication skills for discussing technical issues., • Strong interpersonal skills for interfacing with all levels of personnel., • Excellent customer service skills., • Ability to work independently and as part of a team., • Collaborate closely with development teams to containerize legacy applications and optimize performance on Kubernetes.

Job DescriptionRefer a friend: Referral fee program Career Developers Inc., a distinguished staffing and consulting firm, is proud to celebrate 30 years of service excellence. As a GSA Contract holder, we offer comprehensive staffing solutions for both commercial and government sectors nationwide. By selectively partnering with clients who share our values, we ensure productive collaborations that set us apart in the industry. Our dedication to candidates involves managing expectations with precision through business intelligence, thorough interview preparation, transparent communication, and exceptional feedback throughout the process. We are committed to advancing your career and look forward to supporting your professional growth. ----------------------------------------------------------------------------------------------------------------------------------------------- Information Security Engineer – Enterprise & Automation Focus (Must come out of a start-up type setting, doing Enterprise Security) Location: New York City, NY (Hybrid: Tues–Thurs onsite, Mon & Fri remote) Salary: OPEN, looking for the best in class Security Engineers, my client has no problem paying what it takes..... Must have the following: Should come out of a small to mid sized tech company where you controlled all security technically. Sr level Security engineering experience, Python or comparable scripting ability, security automation, incident investigation, vulnerability remediation, endpoint or infrastructure security, secure software practices, and the ability to evaluate security risks associated with modern AI-driven applications. About the Opportunity: My growing client is a technology-focused organization that combines advanced computing, software development, data-intensive research, and machine learning to solve complex real-world problems. The security team operates as an engineering function rather than a traditional compliance-focused organization. Engineers are expected to investigate difficult problems, build technical solutions, automate security operations, and partner closely with other technical teams. A growing area of focus involves understanding how AI-powered software, autonomous applications, and intelligent workflows change the security landscape. This creates opportunities to work on security challenges that may not yet have mature industry standards or established solutions. The environment is best suited for engineers who enjoy technical depth, experimentation, programming, and solving security problems from first principles. Responsibilities: • Build technical security solutions that improve protection across software, computing infrastructure, endpoints, and emerging AI applications., • Create automated security workflows that reduce manual investigation and remediation work., • Develop internal tools and scripts for identifying suspicious activity, security weaknesses, configuration issues, and operational risk., • Partner with software and infrastructure engineers to incorporate security earlier in application and system design., • Review technical environments for weaknesses and recommend practical controls based on risk and business impact., • Investigate security events and determine appropriate containment, remediation, and prevention strategies., • Improve the organization’s ability to identify abnormal behavior across endpoints, applications, and computing environments., • Conduct technical security reviews of new systems, services, tools, and internally developed technologies., • Evaluate how autonomous software and AI-enabled applications could introduce new attack paths or security concerns., • Help establish secure patterns for applications that interact with language models, automated decision-making systems, or machine-learning services., • Perform targeted testing to identify exploitable weaknesses before they become production issues., • Develop repeatable processes for vulnerability discovery, prioritization, ownership, and remediation., • Work closely with highly technical engineering teams on security problems that may not have established playbooks., • Research new security techniques, attack methods, and defensive technologies that could improve the organization’s security posture., • Contribute to technical standards and engineering guidance without creating unnecessary process or friction. Requirements: • Professional experience in cybersecurity, security engineering, application security, infrastructure security, detection engineering, incident response, or a closely related discipline., • Strong programming or scripting skills, ideally with Python or another language commonly used for automation., • Demonstrated ability to build security tooling or automate repetitive security activities., • Experience investigating technical security issues across systems, applications, endpoints, or networks., • Practical knowledge of vulnerability identification and remediation., • Understanding of attacker behavior, common exploitation techniques, and methods used to reduce exposure., • Familiarity with endpoint security, security monitoring, logging, or detection technologies., • Experience working with software engineers, infrastructure teams, or technical platform groups., • Understanding of secure development practices and how security controls fit into modern engineering workflows., • Ability to evaluate unfamiliar technologies and identify potential security implications., • Exposure to AI applications, language models, autonomous systems, machine-learning platforms, or AI security is beneficial but does not need to be the candidate’s primary background., • Experience with offensive security, adversarial testing, security research, or penetration testing is helpful., • Comfortable operating in environments where security problems require custom engineering rather than off-the-shelf solutions., • Strong analytical skills and the ability to explain technical security issues clearly., • Able to work successfully with technical teams in a collaborative hybrid environment., • Candidates with different levels of seniority may be considered depending on technical depth and demonstrated accomplishments. Cybersecurity engineer, security automation, AI security, security engineering, Python security, detection engineering, incident response, vulnerability remediation, application security, infrastructure security, endpoint security, threat detection, DevSecOps, secure software, security tooling, penetration testing, adversarial testing, machine learning security, LLM security, autonomous systems, AI applications, cyber defense, vulnerability management, security monitoring, threat analysis, engineering security, automation engineer, technical security, New York cybersecurity, Durham cybersecurity, Pittsburgh cybersecurity, hybrid security jobs, advanced computing, security research, software security, cyber automation, AI cybersecurity, security careers INDH Information Security Engineer, cybersecurity, enterprise security, Linux security, Python automation, DevSecOps, vulnerability management, threat detection, incident response, security engineering, automation tools, infrastructure security, endpoint security, security generalist, startup security, cloud security, security operations, SOC, scripting, Python security, risk mitigation, cyber defense, application security, security frameworks, ethical hacking, secure infrastructure, AI security, agentic AI, machine learning security, DevOps security, enterprise cybersecurity

Job DescriptionSr. Azure DevSecOps Engg. Location - NJ Need 2-3 days onsite ( Hybrid ) . Need candidates only with 12 + years experience . No H1B Transfer Candidates OR OPT/CPT This is a DevSecOps Role and not DevOps. Strong Azure Services, SAST/DAST , GitHub, Kubernetes, AKS , Terraform and Python Scripting experience is required. Our client is seeking a highly skilled DevSecOps Engineer to design, build, and maintain secure and scalable CI/CD pipelines for application and database deployments. Key Responsibilities: Design and maintain CI/CD pipelines for applications and databases using tools such as Azure DevOps, Jenkins, Smart City, GitLab CI, or GitHub Actions. Automate infrastructure provisioning and configuration management using tools like Terraform, Ansible, or Helm. Integrate automated testing frameworks (junit, Slenium etc) and code coverage tools (e.g., SonarQube etc). Embed static and dynamic security scanning tools (SAST/DAST) into pipelines. Implement and monitor database CI/CD workflows for version-controlled schema migrations. Ensure secure secrets management using Azure Key Vault. Continuously monitor pipeline performance and enforce compliance, code quality, and security policies. Collaborate with application and database developers to optimize release strategies and rollback mechanisms. Conduct incident response drills, threat modeling, and vulnerability assessments within CI/CD contexts. Document DevSecOps processes and provide training to development teams on security and best practices. Required Skills & Experience: Proven experience with DevSecOps practices and tools. Proficiency in CI/CD platforms like Azure DevOps, Smart City, GitHub Actions, GitLab CI, or Jenkins. Solid understanding of cloud platforms (Azure, ). Experience with IaC tools like Terraform, CloudFormation. Strong background in code testing frameworks and code quality tooling (JUnit, SonarQube, etc.). Hands-on with database CI/CD, schema versioning, and database migration practices. Experience with containerization (Docker) and orchestration (Kubernetes, AKS). Familiarity with secure coding principles and compliance standards. Strong scripting skills in Python, Bash. Preferred Qualifications: Certifications: Azure DevOps Engineer. Experience with monitoring and observability tools. Experience in multi-cloud or hybrid-cloud DevSecOps pipelines. Familiarity with data masking, auditing, and encryption in the database CI/CD context. Flexible work from home options available.

Job Description DevSecOps Engineer Job Description Job Title DevSecOps Engineer Job Summary We are looking for an experienced DevSecOps Engineer to integrate security practices throughout the software development and deployment lifecycle. The role involves building secure CI/CD pipelines, automating infrastructure and security testing, managing cloud environments, and identifying and remediating vulnerabilities. Key Responsibilities • Design, implement, and maintain CI/CD pipelines with security controls., • Integrate DevSecOps practices into development, testing, deployment, and operations., • Automate security scanning such as:, • SAST Static Application Security Testing, • DAST Dynamic Application Security Testing, • SCA Software Composition Analysis, • Container security scanning, • Infrastructure-as-Code security scanning, • Implement and manage DevOps tools such as Jenkins, GitLab CI/CD, GitHub Actions, Azure DevOps, or similar., • Manage cloud infrastructure across AWS, Azure, or GCP., • Implement Infrastructure as Code using Terraform, CloudFormation, or Ansible., • Secure containerized applications using Docker and Kubernetes., • Monitor applications and infrastructure for security threats and vulnerabilities., • Perform vulnerability assessment, remediation, and security compliance activities., • Implement secrets management using tools such as HashiCorp Vault, AWS Secrets Manager, or Azure Key Vault., • Configure IAM, RBAC, authentication, authorization, and least-privilege access., • Integrate security gates into CI/CD pipelines to prevent vulnerable code from reaching production., • Collaborate with developers, QA, DevOps, cloud, and security teams., • Automate security and compliance checks wherever possible., • Investigate security incidents and support root-cause analysis., • Maintain security documentation, standards, and operational procedures.

Job Description This software engineer role will be a key contributor to the Reporting Service, the software Engineer would work with Business / Technology / Architecture teams to understand requirements & develop cutting-edge digital products. The ideal candidate will have deep understanding & hands-on expertise in designing, developing, and implementing web-based reporting services in the cloud Responsibilities: • Collaborate with cross-functional teams, including business stakeholders, engineers, enterprise architects and IT teams, to develop and deliver high-quality software., • Leverage knowledge of industry trends to build best in class technology to provide competitive advantage., • Participate in code reviews, providing valuable feedback to maintain code quality and adherence to best practices., • Maintain detailed documentation of your work and changes following the best practices., • Ensure high operational efficiency and quality of your solutions to meet SLAs and support commitment to our customers., • Provide ongoing support, monitoring and maintenance of deployed applications. Skills: • Bachelor's or master's degree in computer science, software engineering or a related field., • Minimum of 8-10 years of experience in software engineering., • Expertise in Java programming language including frameworks like Spring Boot, Hibernate etc.,, • Expertise in REST API development., • Proficiency in implementing java rules engines such as Drools., • Proficiency in Enterprise java applications using EJB, JMS and server-side programming. Hands on experience with WebLogic application server, • Proficiency in migrating on-prem applications to cloud-native applications, • Expertise in implementing scalable containerized computing and solutions for example Kubernetes, Docker etc.,, • Good hands-on experience working with Oracle & MySql DB., • Proficiency in data formats such as JSON, HL7, and XML, • Agile Development, DevSecOps, and standard software development tools such as Git and Jira, • Deep technical knowledge of 1 public cloud services (preferably Azure), • Excellent problem-solving and analytical skills, • Strong communication and collaboration skills with both technical and non-technical stakeholders. Other requirements: • Experience in the healthcare industry, preferably focusing on clinical and billing data., • Experience with tools like Dynatrace.

Job Description Application Security Engineer ALPHARETTA OR NYC (2 roles) 12 months Department: Cloud Security & Developer Enablement, CDRR What You'll Do: Be part of a team of engineers to implement Brokerage specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications. Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes. Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages. With your development background and security knowledge, provide secure stable platform for enforcing application security controls. Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform. Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities. Required skillset: • Must have: 5 years software development experience using Python, • Working with APIs, including but not limited to ReST, • Unit testing frameworks, • Multi-process and multi-thread architecture, • Must have: 5 years in Linux, strong bash scripting skills., • Deep understanding of CI/CD pipelines, • Working knowledge of windows environment, simple scripting dos-batch etc., • Bachelor's degree with 10 years of work experience in the IT field, • Ability to process large datasets for reporting and analysis. Desired Skillset: A self-starter, with a strong desire for learning new technologies and applying them to solve problems Knowledge of SAST, OSS technologies Ability to perform Python code reviews with minimal assistance Expertise in monitoring, alerting, reporting, data analysis is desired. Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc. DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus

Job Description At Wilson Elser, we are redefining what it means to work at a national law firm. With more than 1,400 attorneys across 46 offices nationwide, we are recognized among the top 100 law firms by The American Lawyer and ranked #30 in the National Law Journal's survey of the nation's largest law firms. Our continued success is built on a culture of collaboration, innovation, client service, and mutual respect. We are committed to fostering an environment where employees are empowered to grow their careers, contribute meaningfully, and thrive professionally. The Position We are seeking a Senior Product Security Engineer to build and lead our secure software development and DevSecOps program. This is a program-building role for someone who has stood up application security from the ground up and can set its direction as the Firm continues its move to Azure. You will serve as the bridge between Information Security and Application Development, embedding security into the development lifecycle without slowing delivery. The work spans internally developed applications, CI/CD pipelines, integrations, low-code/no-code platforms, and Azure-hosted services, and includes carrying security practices from the Firm's traditional Windows infrastructure into cloud-native Azure patterns. The role reports to Information Security with a strong dotted-line partnership into Application Development and Engineering leadership. Key Responsibilities Application Security & Secure Development Lifecycle (SDL) • Build, lead, and mature the SSDLC program, including its roadmap, standards, and success measures, • Prioritize preventive controls designed into the build process ("baked in, not sprayed on"), using testing to validate secure design rather than replace it, • Perform application security reviews, threat modeling, secure architecture assessments, and source code review, • Establish secure coding standards, policies, and "paved road" patterns for common technologies and frameworks DevSecOps & CI/CD Security • Integrate and optimize SAST, DAST, SCA, API scanning, and IaC scanning within Azure DevOps pipelines, • Own vulnerability ingestion, triage, prioritization, remediation tracking, and reporting, • Build dashboards and metrics covering application security posture and remediation SLAs, • Script integrations to normalize findings across multiple security tools Security Tooling • Administer and tune Snyk, SonarQube, Azure DevOps, PowerShell scanning tools, and additional AppSec tooling as needed, • Suppress false positives, write custom detection rules, and identify gaps in tooling coverage, • Manage security exceptions and remediation timelines with development teams Cloud & Platform Security • Partner with cloud and infrastructure teams to secure Azure-hosted applications and services, • Support security reviews across Azure PaaS, containers, Databricks, MongoDB, Data Lake environments, Azure Data Factory, and Power Platform, • Help secure low-code/no-code platforms and their governance processes Developer Enablement • Launch and run a Security Champions program within engineering teams, • Deliver developer-focused training, workshops, and secure coding guidance, • Mentor developers and upskill Information Security staff on application security concepts and tooling Qualifications • 5+ years in Application Security, Product Security, DevSecOps, or Software Engineering, • Demonstrated experience building an application security or DevSecOps program from the ground up, • Experience leading or mentoring technical staff, formally or informally, • Hands-on experience securing Azure environments and Azure DevOps pipelines, and integrating security tooling into CI/CD, • Experience with Microsoft/Windows environments and .NET application stacks, • Strong grounding in secure coding principles, OWASP Top 10, secure SDLC, threat modeling, and vulnerability management, • Working experience with several of: Azure DevOps, Azure cloud services, Snyk, SonarQube, containers/Kubernetes, PowerShell, Python, .NET, JavaScript, React, PHP, • Ability to separate meaningful risk from low-value scanner findings, • Strong scripting and automation skills, with excellent communication and documentation Preferred Qualifications • Prior experience as a software developer or DevOps engineer, • Hands-on administration of Snyk and SonarQube, • Experience bridging on-premises infrastructure to Azure, including container and cloud-native application security, • Familiarity with low-code/no-code platform security and with OWASP ASVS, Azure Security Benchmark, or CIS Benchmarks, • Experience building Security Champion programs and presenting to both engineers and leadership, • Certifications such as CSSLP, OSWE, GWAPT, or Azure/Kubernetes security credentials Leadership presence, with the ability to set direction and influence without direct authority. Pragmatic, collaborative, and enablement-focused rather than friction-creating, with the judgment to balance security requirements against development velocity. Strong ownership mentality, comfortable learning new technologies and operating independently. Success Metrics (First 6-12 months) • Program roadmap defined and agreed with Information Security and engineering leadership, • Security tooling integrated consistently across pipelines, with vulnerability management workflows and dashboards operational, • Security Champions program launched and development teams actively engaging with security processes, • Secure coding standards and reusable templates established, • Measurable reduction in unresolved high-risk findings Wilson Elser offers a competitive salary and benefits package designed to support our attorneys both professionally and personally. A variety of factors are considered in making compensation decisions, including but not limited to experience, education, licensure and/or certifications, geographic location, market demands, other business and organizational needs, and other factors permitted by law. Final salary wages offered may be outside of this range based on other reasons and individual circumstances. This position is considered full-time and therefore qualifies for benefits including 401(k) retirement savings plan, medical, dental, vision, disability, and life insurance. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. Salary Range: $150,000—$180,000 USD Why Should You Apply? • Benefits: Outstanding benefits package, including 401k match and generous PTO plan, • Career Growth: Ample opportunities for professional development and advancement, • Employee Perks: Access to corporate discount plans and other benefitsWilson Elser welcomes submissions of candidates for our open positions exclusively from recruitment agencies with an active, signed fee agreement who have been granted access to a position through our dedicated Recruitment Agency Portal. We are unable to consider submissions from recruitment agencies without a current (dated as of 7/1/2024) agreement in place. We appreciate your understanding. For collaboration inquiries or to establish an agreement, please contact us at talentacquisition@wilsonelser.com. Wilson Elser is committed to a collegial work environment in which all individuals are treated with respect and dignity. It is the Firm's policy that employment will be based on merit, qualifications, and competence. Further, employment decisions will be made without regard to an applicants race, color, age, sex, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation or preference, gender identity, physical or mental disability, status as a victim of domestic violence, sex offenses, or stalking, past or present service in the uniformed services or application or obligation to serve in the uniformed services, or any other characteristic protected by law. Wilson Elser endeavors to make the Wilson Elser website accessible to any and all users. You may review our Accessibility Policy here. California Residents may review our CCPA notice for applicants and employees here. Wilson Elser participates in the federal E-Verify program. With respect to all new hires, we provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's Form I-9 to confirm work authorization. Please review the official posters for detailed information regarding your rights and protections • Download the E-Verify Participation Poster (English & Spanish), • Download the Right to Work Poster (English & Spanish)#ZR

Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. APPLICATION SECURITY ENGINEER, X MONEY We are seeking a skilled and innovative Application Security Engineer to join X Money. In this role, you will protect the security and integrity of our payments and financial products throughout the software development lifecycle, with a particular focus on code security, CI/CD pipelines, and systems that move and hold customer funds. Experience securing fintech, payments, digital wallet, ledger, or similar high-value platforms, where fraud, abuse, and unauthorized transfers are a constant concern, is strongly preferred. RESPONSIBILITIES: • Conduct in-depth code reviews and static analysis to identify and mitigate security vulnerabilities in financial applications, • Design and implement secure coding guidelines and best practices for development teams, • Collaborate closely with development teams to integrate security practices throughout the CI/CD pipeline, • Perform threat modeling and risk assessments for payments, wallets, ledgers, and related product surfaces, and develop mitigation strategies for fraud, abuse, and unauthorized movement of funds or credits, • Manage vulnerability tracking and remediation efforts, providing guidance to development teams, • Manage the bug bounty program, including intake, triage, researcher communication, and coordinated disclosure, • Support incident response activities related to application security, • Stay current on emerging threats against financial and cloud-native systems, and continuously strengthen our controls, • Evaluate and secure software supply chains, including producing and maintaining Software Bills of Materials (SBOMs), • Design and implement agentic and LLM-based solutions that help detect, investigate, or prevent security problems BASIC QUALIFICATIONS: • Bachelor's degree in computer science, cybersecurity, or scientific discipline, • 3+ years of experience in application security, with a focus on code security practices, • Experience in payments, money transmission, digital wallets, or other financial platforms PREFERRED SKILLS AND EXPERIENCE: • Deep understanding of secure coding practices, application security frameworks, and common vulnerabilities (e.g., OWASP Top 10), • Proficiency in Python or Rust and experience with secure coding practices in these languages, • Experience securing CI/CD pipelines and implementing DevSecOps practices, • Familiarity with software supply chain security and SBOM generation tools, • Experience with security testing tools (e.g., Burp Suite, OWASP ZAP) and static/dynamic code analysis, • Experience securing payments, wallets, ledgers, or other high-value transaction systems, including controls against fraud, abuse, and integrity issues, • Experience designing and implementing agentic and LLM-based solutions for security problems, • Excellent communication skills, able to explain complex security issues to both technical and non-technical audiences, • Hands-on experience securing applications on AWS; familiarity with other cloud platforms is a plus, • Relevant security certifications (e.g., BSCP, OSCP, OSWE), • Experience managing bug bounty programs, • Background in data privacy and compliance relevant to financial products and cloud-native applications, • Experience with GitOps and infrastructure-as-code security, • Experience building custom security tooling to enhance and automate security processes, • Contributions to open-source security projects or tools COMPENSATION AND BENEFITS: $100,000 - $258,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description About the Role We are seeking an experienced AI Security Architect to support the secure design, development, and deployment of AI/ML and Generative AI solutions across the enterprise. This role will work closely with data science and engineering teams, product owners, cloud/platform teams, and the security architecture and operations groups to define and implement security requirements that enable compliant, resilient, and trustworthy AI adoption. Key Responsibilities • Collaborate with AI/ML engineering, data engineering, platform, and application teams to gather and analyze AI security requirements (data sourcing, model training, inference, integrations, and operational workflows)., • Define and document secure reference architectures for AI/ML and GenAI workloads across cloud and enterprise environments, including patterns for model hosting, RAG, agents, API exposure, and third-party model consumption., • Perform threat modeling for AI systems (training and inference) including risks such as prompt injection, data leakage, model inversion/extraction, insecure plugins/tools, and supply chain risks., • Establish security controls for data protection across the AI lifecycle: dataset governance, data minimization, labeling/classification alignment, encryption, key management, secrets handling, and secure data access patterns., • Define requirements and guardrails for GenAI safety and misuse prevention, including content filtering, prompt/response logging strategy, abuse detection, and safe tool execution., • Partner with IAM teams to implement least-privilege access for AI platforms, model endpoints, feature stores/vector databases, and supporting pipelines (service-to-service auth, token handling, RBAC/ABAC)., • Review and approve AI solution designs, ensuring alignment with security policies, regulatory expectations, and enterprise standards (secure SDLC/DevSecOps)., • Define requirements for model governance and assurance (model provenance, versioning, artifact integrity, evaluation/validation controls, documentation, and auditability)., • Work with security operations to integrate AI platforms into monitoring and incident response, including logging requirements, detection use cases, and response playbooks for AI-specific incidents., • Contribute to security standards and best practices: "when to use enterprise controls vs platform-native controls,” secure configuration baselines, and reusable implementation guidance. Required Qualifications • 5 years of experience in security architecture/engineering, with demonstrated experience securing cloud-native applications and APIs (AI/ML experience required)., • Strong understanding of AI/ML and GenAI solution patterns (model training vs inference, RAG, vector databases, agents/tool use, model endpoints)., • Proven ability to translate business and technical requirements into actionable security controls and architecture decisions., • Experience with cloud security fundamentals (network segmentation, IAM, encryption, secrets management, logging/monitoring) in at least one major cloud provider (AWS/Azure/GCP)., • Hands-on experience with application security and API security (authN/authZ, OWASP Top 10, secure SDLC, threat modeling)., • Familiarity with AI/ML security risks and mitigations (prompt injection, data leakage, jailbreaks, model theft, poisoning, insecure dependencies)., • Strong communication skills—able to document and present complex technical topics to engineering and leadership audiences., • Ability to work independently and drive results in a fast-paced, multi-team environment.Preferred Qualifications, • Experience securing enterprise GenAI platforms and services (e.g., Azure OpenAI/OpenAI APIs, AWS Bedrock, SageMaker, Vertex AI) and/or popular frameworks (e.g., LangChain/LlamaIndex) and vector databases., • Experience with governance and compliance in regulated environments (financial services a plus)., • Familiarity with security evaluation/testing approaches for AI systems (red teaming, prompt testing, model risk assessments)., • Relevant certifications (examples): AWS/Azure/GCP security certifications, CISSP/CCSP, or equivalent experience., • Experience with policy-as-code and automation (e.g., Terraform scanning, CI/CD security controls).

Job Description Interview Mode: Video and Face to Face (Final) Mandatory Skills • 7–10 years of Release Management / DevOps experience., • Strong Release Management and CI/CD experience., • Hands-on Jenkins experience., • Strong Groovy scripting skills., • Experience creating and troubleshooting CI/CD pipelines., • Strong working knowledge of AWS and cloud deployments., • Strong communication, coordination, and stakeholder-management skills. Good to Have Skills • Media / Entertainment / Streaming industry experience., • Docker / Kubernetes., • Terraform / Infrastructure as Code., • Azure / GCP experience., • Jira, Confluence, ServiceNow., • DevSecOps experience.

Job DescriptionMandatory Skills: Devops Engineers are hybrid software and system engineers responsible for maintaining and enhancing client cloud footprint. As a DevOps Engineer you will be responsible for developing the efficient planning, provisioning, installation/configuration, and operations of systems hardware and software and related infrastructure in a hybrid cloud architecture. As well as developing all the necessary process with guidance from architecture to facilitate above actions. infrastructure architecture team and expected to lead by example the right way to deploy to the cloud. You will also be expected to serve as a mentor to our existing devops and newly formed cloud operations team. Working closely with architecture, operational, and security teams, you will play a key role in developing new teams and processes to support client cloud applications. Key Responsibilities: Act as a bridge between developers, architects and engineers to solve problems and enhance the security, reliability and performance of the platform. Provide subject matter expertise and guidance to the infrastructure operations teams. Automate all aspects of the technology lifecycle from deployment through to decommissioning. Build systems that proactively monitor the security, health and performance of cloud applications. Design and maintain CI/CD systems and processes to support smooth software releases. Be an ambassador for the DevSecOps mindset in both technical and non-technical settings. Required Skills & Qualifications Act as a bridge between developers, architects and engineers to solve problems and enhance the security, reliability and performance of the platform. Provide subject matter expertise and guidance to the infrastructure operations teams. Automate all aspects of the technology lifecycle from deployment through to decommissioning. Build systems that proactively monitor the security, health and performance of cloud applications. Design and maintain CI/CD systems and processes to support smooth software releases. Be an ambassador for the DevSecOps mindset in both technical and non-technical settings.

Job DescriptionCompany Description At Data Intellect it has never been just about data or technology, they are our tools. It’s about human intellect, collaboration and providing solutions for the most complex of challenges. We do this by living the [DI] code: We are Problem Solvers who are Humble, possess a Can-do Attitude with a focus on Togetherness. “We are not big on egos, but we’re not for the faint-hearted either” – Steve Turner, CEO Job Description We’re looking for an experienced Senior DevOps Engineer to join us in New York, working on an exciting client engagement focused on building, improving and supporting scalable cloud infrastructure. If you’re an experienced DevOps engineer who enjoys solving difficult infrastructure problems, automating everything you can and working closely with development teams, we want to hear from you. As a Senior DevOps Engineer at Data Intellect, you’ll work within a highly technical environment where reliability, scalability and performance matter. You’ll: • Build, improve and extend AWS infrastructure supporting production applications and services., • Implement and manage Kubernetes environments and create and upgrade Helm charts., • Build and improve CI/CD pipelines, automating build, testing and deployment processes., • Use Infrastructure as Code, including Terraform and Ansible, to create consistent and repeatable environments., • Improve monitoring and logging, helping teams identify issues and optimise application and infrastructure performance., • Automate infrastructure and operational processes using Bash and Python., • Troubleshoot complex infrastructure, networking, database and production issues., • Work closely with software engineers to improve development and deployment processes., • Help design scalable architecture for large customer environments., • Identify opportunities to improve performance, reliability, security and cloud cost efficiency., • Support incident management, root-cause analysis, disaster recovery and continuous improvement. Qualifications What You Bring: • 5+ years' DevOps / infrastructure engineering experience in production environments., • Strong hands-on experience with AWS., • Excellent knowledge of Linux administration., • Strong experience with Docker and Kubernetes., • Hands-on experience with Terraform and Ansible., • Experience building and managing CI/CD pipelines; GitLab CI/CD experience is particularly useful., • Strong scripting skills using Bash and/or Python., • Good understanding of cloud networking, routing and troubleshooting., • Experience working with web services such as NGINX, Apache and Tomcat., • Strong troubleshooting skills and the ability to diagnose complex production issues., • Excellent communication skills and the ability to explain complex technical concepts clearly. Bonus Points For: • Experience with Helm and managing Kubernetes deployments at scale., • Experience with logging and monitoring platforms., • Knowledge of SQL and NoSQL databases., • Experience implementing DevSecOps practices., • Cloud cost optimisation and performance engineering experience., • Experience designing infrastructure for PaaS or enterprise customer environments., • Previous experience within financial services or capital markets., • Must have right to work in US as we cannot offer visa sponsorship for this role., • Must be New York based or commutable and open to working up to 5 days a week in the office. Additional Information A little background on DI Simply put – we turn big data problems into smart data solutions At our core, Data Intellect is a data and technology consultancy firm. Our key area of expertise is financial and capital markets technology solutions. However, the utility of these solutions allow us to apply fintech data expertise to other industries such as smart energy and healthcare. This proprietary offering is complemented by a wealth of experience in data engineering, electronic trading systems, data capture applications, regulatory and compliance systems and middle and back-office enterprise web solutions. Fair employment and equal opportunities Data Intellect is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Accommodations are available on request throughout the assessment and selection process. Welcome to Data Intellect. #ChallengeAccepted

Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking an experienced and strategic Governance, Risk, and Compliance (GRC) team member to help scale our GRC program as SpaceXSI grows. This critical role will ensure that SpaceXSI operates within regulatory, ethical, and operational boundaries while fostering a culture of integrity and resilience. The primary focus of this role is to provide and sustain deep expertise in the NIST Risk Management Framework (RMF), FedRAMP, and Impact Level 4/5 (IL4/IL5) authorization processes. The ideal candidate will apply these frameworks end-to-end through the full authorization and certification lifecycle, with a strong command of the underlying technical implementation. In addition, this GRC team member will manage and maintain Continuous Monitoring artifacts and annual assessments for Grok for Government, and should be equally comfortable interpreting control requirements and partnering directly with engineers to design, implement, and validate the controls themselves. RESPONSIBILITIES: • Execute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev. 5 / CR2026), NIST 800-53, NIST 800-171/CMMC, Risk Management Framework)., • Oversee audits, certifications, third-party assessments, and vulnerability management to maintain compliance and operational credibility., • Design and implement risk mitigation strategies, including monitoring systems, contingency plans, vulnerability scans, Plan of Action and Milestones (POAMs), and STIGs., • Ensure the implementation, oversight, monitoring, and maintenance of security configurations, practices, and procedures throughout the project lifecycle., • Serve as a liaison between system owners, security personnel, and cross-functional teams to facilitate effective communication, collaboration, and control implementation., • Lead Risk Management Assessment and Authorization (A&A) processes, cloud system risk assessments, compliance reviews for new products/changes/features, and process enhancements., • Conduct regular risk assessments, scenario analyses, and proactive evaluations of emerging threats, certifications, requirements, and technologies in the AI landscape., • Act as a subject matter expert, providing guidance on risk, compliance, and cybersecurity matters; translate business and technical risks for leadership., • Create and present regular reports on GRC performance, risks, and compliance status to senior leadership and stakeholders.BASIC QUALIFICATIONS:, • Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field, • 3+ years of experience in governance, risk management, compliance, or technology audit roles., • At least 1 year of experience with FedRAMP/IL5 compliance, vulnerability management, and continuous monitoring., • Experience implementing and maintaining security compliance frameworks and cloud security controls., • Expert-level knowledge in at least one of the following domains: DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. and/or NIST 800-171/CMMC.PREFERRED SKILLS AND EXPERIENCE:, • 5+ years of security compliance or technology audit-related experience., • Hands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) and integrating compliance checks into CI/CD pipelines., • Exceptional analytical, problem-solving, organizational, and project management skills, with the ability to balance innovation, oversight, and taking projects from conception to launch., • Ability to evaluate control objectives with IT configurations., • Hands-on experience implementing technical controls (e.g., IAM, logging and monitoring, encryption, infrastructure hardening) — not just assessing them., • Experience in the tech or AI industry, particularly with startups or innovative organizations., • Experience with CI/CD pipelines and DevSecOps practices, including implementing compliance-as-code (e.g., policy-as-code frameworks like OPA, automated control validation, continuous compliance monitoring integrated into the deployment pipeline)., • Excellent communication, stakeholder management, and translation skills, with experience influencing cross-functional teams and communicating risks to leadership., • Experience with commercial compliance programs (e.g., ISO 27001, ISO 42001, SOC 2, NIST CSF, NIST 800-53, or similar compliance framework is a plus.COMPENSATION AND BENEFITS: $100,000 - $198,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description AgileEngine is an Inc. 5000 company that creates award-winning software for Fortune 500 brands and trailblazing startups across 17+ industries. We rank among the leaders in areas like application development and AI/ML, and our people-first culture has earned us multiple Best Place to Work awards. WHY JOIN US If you're looking for a place to grow, make an impact, and work with people who care, we'd love to meet you! ABOUT THE ROLE We are looking for a Technical Product Owner to manage the strategy, roadmap, and adoption of enterprise cybersecurity platforms and developer security workflows. The mandatory requirements are 5+ years of technical product ownership or management, AppSec/DevSecOps experience, technical fluency in code and APIs, autonomous product strategy execution, data-driven decision-making, cross-functional leadership, and upper-intermediate English. Software development or security architecture experience is a plus. WHAT YOU WILL DO • Product Strategy & Roadmap Ownership: Define and drive the multi-quarter roadmap for workstreams, aligning executive risk reduction goals with measurable developer adoption and workflow velocity., • Developer Experience (DevEx) & Adoption: Treat security tooling as a product; design scanning engines (ASPM ingestion, AI-SDLC scanning) and developer portals that minimize developer friction and eliminate build blockers., • Platform Architecture Collaboration: Partner directly with software engineers, cloud architects, and security researchers on API contracts, pipeline data flows, and automated policy modernization., • Identity & Access Alignment: Collaborate with enterprise teams to integrate robust identity, role modeling (RBAC/ABAC), and authorization standards into developer platforms and artifact repositories., • Cross-Functional Influence: Translate complex regulatory and cybersecurity policies into clear, user-centric feature specs and self-service automated workflows across global business units. MUST HAVES • You must be authorized to work for ANY employer in the US (e.g., Green card holders, TN visa holders, GC EAD, H4 EAD, U4U with EAD), as we are unable to sponsor or take over employment visa sponsorship at this time;, • 5+ Years in Technical Product Ownership or Management: Proven success driving strategy and delivery for cybersecurity products, developer platforms, or automated tooling from concept through broad adoption., • Deep Application & Platform Security Domain: Direct, working knowledge of AppSec/DevSecOps workflows and tooling—including SAST, DAST, SCA, ASPM, vulnerability lifecycle triage, and CI/CD security gating., • Hands-on Technical Fluency: Ability to read code, discuss system integrations, and evaluate API designs and data flows directly with engineering pods., • Fully autonomous in driving product strategy from inception to adoption. Excels at data-driven decision-making and cross-functional leadership without requiring day-to-day direction., • Upper-intermediate English level. NICE TO HAVES • Prior professional experience as a software developer, DevSecOps engineer, or security solutions architect prior to moving into product management., • Experience designing internal developer portals (IDPs), SRE/infrastructure tooling, or Golden Paths inside large, regulated enterprise environments., • Direct exposure to enterprise SecOps platforms (e.g., SIEM, SOAR, CrowdStrike, Splunk) or AI-assisted development and remediation tooling., • Software development or security architecture experience. PERKS AND BENEFITS • Professional growth: Mentorship, TechTalks, and personalized growth roadmaps., • Competitive compensation: USD-based pay with education, fitness, and team activity budgets., • Exciting projects: Modern solutions with Fortune 500 and top product companies., • Flextime: Flexible schedule with remote and office options.

Job Description Security Test Engineer Job Description Job Title Security Test Engineer / Application Security Test Engineer Job Summary We are looking for a Security Test Engineer to identify, validate, and report security vulnerabilities in web applications, APIs, mobile applications, and enterprise systems. The role involves security testing throughout the SDLC and working with development, QA, DevOps, and security teams to improve application security. Key Responsibilities • Analyze requirements and identify security testing scenarios., • Create security test plans, test cases, and test data., • Perform Web Application Security Testing., • Perform API Security Testing., • Perform mobile application security testing when required., • Identify vulnerabilities such as:, • SQL Injection, • Cross-Site Scripting (XSS), • Cross-Site Request Forgery (CSRF), • Broken Authentication, • Broken Authorization, • IDOR, • Session management issues, • Security misconfiguration, • Sensitive data exposure, • File-upload vulnerabilities, • Perform authentication and authorization testing., • Validate role-based access control (RBAC)., • Test JWT, OAuth, cookies, sessions, and access tokens., • Perform vulnerability scanning and security assessments., • Analyze application logs and security findings., • Reproduce and validate reported vulnerabilities., • Perform regression security testing after vulnerabilities are fixed., • Collaborate with developers to understand and remediate security defects., • Prepare security test reports and vulnerability documentation., • Participate in threat modeling and risk assessment., • Integrate security testing into CI/CD pipelines., • Track vulnerabilities using JIRA or security-management tools., • Follow OWASP and organizational security standards. Security Testing Areas 1. Authentication • Valid/invalid credentials, • Password policy, • Account lockout, • MFA, • Session timeout, • Password reset, • Token expiration 1. Authorization • Horizontal privilege escalation, • Vertical privilege escalation, • Role-based access, • Unauthorized API access, • IDOR 1. Input Validation • SQL Injection, • XSS, • Command injection, • Path traversal, • Malicious file uploads 1. API Security • Authentication, • Authorization, • Token validation, • Rate limiting, • Input validation, • Sensitive information exposure, • API abuse scenarios Tools Common tools include: • Burp Suite, • OWASP ZAP, • Postman, • Nessus, • Nmap, • Wireshark, • Metasploit, • SonarQube, • Snyk, • Trivy, • Checkmarx, • Fortify Automation / Programming Knowledge of one or more: • Java, • Python, • JavaScript, • Selenium / Playwright, • REST Assured, • Bash/Shell scripting Security automation can include: CI/CD Security Scan Automated Security Tests Vulnerability Report Quality/Security Gate Deployment API & Database Skills • REST/SOAP APIs, • HTTP/HTTPS, • JSON/XML, • HTTP headers, • Cookies, • JWT, • OAuth 2.0, • SQL, • Database security basics DevSecOps Knowledge Good understanding of: • Secure SDLC, • CI/CD, • SAST, • DAST, • SCA, • Container security, • Dependency vulnerability scanning, • Secrets scanning, • Security gates, • Docker/Kubernetes security basics Certifications Good to Have, • Security, • CEH, • eJPT, • OSCP advanced penetration testing, • CISSP generally for experienced security professionals Experience Experience Typical Role 0 2 years Junior Security Test Engineer 2 5 years Security Test Engineer 5 8 years Senior Security Test Engineer 8 years Security Testing Lead / Security Architect Resume Keywords Security Testing | Application Security | Web Security | API Security | OWASP | OWASP Top 10 | Burp Suite | OWASP ZAP | SQL Injection | XSS | CSRF | IDOR | Authentication | Authorization | JWT | OAuth | SAST | DAST | SCA | DevSecOps | CI/CD | Vulnerability Assessment | Penetration Testing | REST API | Postman | Python | Java | Git | Jenkins

Job DescriptionWho We Are Qvest US is the global leader in technology and business consulting for the Media & Entertainment and Consumer Packaged Goods & Retail industries. We strategize, advise, design, develop and implement future-forward business & technology solutions. With expertise in digital media supply chain, data & analytics, IP & rights management, broadcast transformation, Salesforce and applied AI, our exceptionally talented teams partner with Fortune 1,000 companies to revolutionize markets and set new industry standards. About the IDC The IDC is our Innovation and Development Center. We build custom software using modern technologies to solve complex business problems for our clients. We believe the best products and services are realized by knowledgeable, tight-knit teams aligned to a shared purpose and understanding. Responsibilities Platform & Infrastructure as Code: Architect, provision, and maintain modular AWS infrastructure using Terraform or AWS CDK. Establish reusable modules and enforce policy-as-code across multiple environments. Continuous Delivery & GitOps: Design, build, and maintain automated delivery pipelines using GitHub Actions or GitLab CI, integrated with GitOps engines (e.g., Argo CD) for zero-downtime, progressive rollouts (Blue/Green, Canary). Container Orchestration: Manage production-grade containerized workloads on Kubernetes (Amazon EKS) or Amazon ECS. Optimize container image builds, build caching, and cluster resource scaling (e.g., Karpenter, Cluster Autoscaler). Observability & SRE: Instrument system-wide observability using OpenTelemetry, Datadog, Splunk, or AWS CloudWatch. Define and track SLIs, SLOs, and error budgets, while establishing actionable alerting pipelines that minimize alert fatigue. DevSecOps & Compliance: Integrate automated vulnerability scanning (container images, dependencies, IaC) using tools like Snyk or Trivy into CI/CD pipelines. Manage centralized identity, role-based access controls (RBAC), and secrets management (AWS Secrets Manager, HashiCorp Vault). Automation & Internal Tooling: Develop custom automation scripts and micro-tools using Python (boto3) or Go to eliminate manual toil, support automated backups, and validate disaster recovery procedures. Cloud Cost Governance (FinOps): Partner with engineering teams to monitor cloud consumption, optimize resource allocation, and implement automated scaling policies to maintain cost-efficient infrastructure. Role Requirements Cloud Architecture: 3+ years of hands-on experience designing, deploying, and supporting enterprise-grade systems on AWS (VPC, IAM, EKS/ECS, RDS, S3, EventBridge). Infrastructure as Code (IaC): Deep operational experience with Terraform (state management, module design) or AWS CDK. Containers & Orchestration: Strong background in Docker containerization and hands-on operational experience with Kubernetes (EKS) or AWS ECS, including Helm templating. CI/CD & Delivery: Extensive experience implementing CI/CD pipelines (GitHub Actions, GitLab CI) with automated testing, linting, security scanning, and artifact management (JFrog Artifactory, Sonatype Nexus, or GitHub Packages). Systems Programming / Scripting: Proficiency in Python (including AWS SDK/boto3) or Go, alongside Linux shell scripting (Bash). Telemetry & Reliability: Proven experience implementing logging, metrics, and tracing platforms (Datadog, OpenTelemetry, Splunk, Prometheus/Grafana) and designing structured on-call incident responses. Preferred Skills Experience implementing GitOps workflows with Argo CD or Flux. Familiarity with Policy-as-Code frameworks (Open Policy Agent/Gatekeeper, Kyverno, or Checkov). Understanding of MLOps pipelines and supporting infrastructure for machine learning workloads (e.g., Kubeflow, AWS SageMaker). Practical experience running OpenSearch/Elasticsearch clusters at scale. AWS Certified Solutions Architect or DevOps Engineer Professional (or other Cloud Certifications). Travel Requirements Employees are responsible for traveling to and from client sites as required by their project or assignment, regardless of location. Travel may include sites outside the employee’s primary office location, state, or region. Remote & Hybrid Work While remote or hybrid work may be permitted for certain projects, client needs take precedence. Employees are expected to report onsite at the client location when required by the project scope, client request, or management directive. Life at Qvest We were founded on a culture of collaboration and inclusiveness, and this permeates each of our initiatives, both client-facing and internal. We offer a wide selection of benefits including medical, dental & vision, 401k matching and flexible vacation; we sponsor training to advance our teams’ skill sets and we prioritize our employees’ professional growth paths. Qvest US is currently 300+ people strong and we’ve been recognized as a “Best Place to Work,” a “Great Place to Work,” “Fastest Growing,” and “A Jewel." Equal Employment OpportunityQvest is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Qvest applies this stance to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including internships, at all levels of employment.

Job Description Cybersecurity Engineer – Job Description (JD)Job Title Cybersecurity Engineer Job Summary We are looking for a highly skilled Cybersecurity Engineer to protect an organization's systems, networks, applications, and data from cyber threats. The ideal candidate will design, implement, monitor, and maintain security solutions, perform vulnerability assessments, incident response, and ensure compliance with security standards and regulatory requirements. Key Responsibilities Design and implement enterprise security architectures and controls. Monitor networks and systems for security incidents. Perform vulnerability assessments and penetration testing. Investigate and respond to cybersecurity incidents. Implement Identity and Access Management (IAM) solutions. Configure and manage firewalls, IDS/IPS, VPNs, and endpoint security. Conduct security risk assessments and recommend mitigation strategies. Perform security audits and ensure compliance with industry standards. Secure cloud infrastructure (AWS, Azure, GCP). Develop and maintain security policies, procedures, and documentation. Collaborate with IT, DevOps, and development teams to integrate security best practices. Automate security monitoring and incident response where possible. Required SkillsCybersecurity Fundamentals Network Security Information Security Application Security Endpoint Security Cloud Security Identity & Access Management (IAM) Zero Trust Architecture Security Operations (SecOps) Risk Assessment Threat Modeling Network Security Firewalls VPN Intrusion Detection Systems (IDS) Intrusion Prevention Systems (IPS) Web Application Firewall (WAF) Proxy Servers Network Access Control (NAC) TCP/IP DNS DHCP Routing & Switching Security Tools Wireshark Nessus Burp Suite Metasploit Nmap Splunk Microsoft Sentinel IBM QRadar CrowdStrike Falcon Microsoft Defender Palo Alto Networks Fortinet Qualys Cloud Security AWS Security Services Microsoft Azure Security Google Cloud Security IAM Security Groups Key Management Services (KMS) Cloud Security Posture Management (CSPM) Cloud Workload Protection Operating Systems Windows Server Linux (Ubuntu, Red Hat, CentOS) macOS (basic administration) Programming & Scripting Python PowerShell Bash JavaScript (basic) SQL Security Standards & Compliance ISO 27001 NIST Cybersecurity Framework CIS Controls SOC 2 PCI DSS HIPAA GDPR DevSecOps Git Jenkins Docker Kubernetes Terraform CI/CD Security SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) Software Composition Analysis (SCA) Incident Response Threat Detection Malware Analysis Digital Forensics Log Analysis SIEM Monitoring Root Cause Analysis Disaster Recovery Business Continuity Preferred Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field. 3–8 years of experience in cybersecurity or information security. Hands-on experience securing enterprise environments and cloud infrastructure. Knowledge of secure software development practices. Experience working in SOC (Security Operations Center) environments is a plus. Preferred Certifications CompTIA Security CompTIA CySA Certified Ethical Hacker (CEH) Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) GIAC Security Essentials (GSEC) Offensive Security Certified Professional (OSCP) Microsoft Certified: Cybersecurity Architect Expert AWS Certified Security – Specialty Google Professional Cloud Security Engineer Soft Skills Strong analytical and critical thinking skills. Excellent problem-solving abilities. Effective communication and documentation. Ability to work under pressure during security incidents. Collaboration with cross-functional teams. Continuous learning mindset. Nice to Have Skills Penetration Testing Red Team / Blue Team Operations Threat Intelligence Secure Coding Practices AI/ML in Cybersecurity Endpoint Detection & Response (EDR) Extended Detection & Response (XDR) Kubernetes Security Container Security API Security Sample Project Responsibilities Deploy SIEM solutions for centralized security monitoring. Implement Zero Trust security architecture. Secure cloud workloads across AWS, Azure, and GCP. Conduct vulnerability assessments and penetration testing. Configure enterprise firewalls and endpoint protection. Build automated incident response workflows. Perform phishing simulations and security awareness initiatives. Implement DevSecOps practices in CI/CD pipelines. Interview QuestionsCybersecurity Basics What is the CIA Triad? What is the difference between authentication and authorization? Explain the principle of least privilege. What is Zero Trust Architecture? Network Security What is the difference between IDS and IPS? How does a firewall work? Explain the TCP three-way handshake. What are common network attack types? Security Operations What is a SIEM, and why is it used? How would you investigate a suspected malware infection? What steps would you take during a ransomware incident? Cloud Security How do you secure cloud resources in AWS, Azure, or GCP? What is IAM, and why is it important? Explain the concept of least privilege in cloud environments. DevSecOps What are SAST and DAST? How do you integrate security into a CI/CD pipeline? Scenario-Based How would you respond to a phishing attack? How would you investigate unusual login activity? What would you do if a critical vulnerability was discovered in production? How would you secure a public-facing web application? Key Skills for Resume Cybersecurity Information Security Network Security Cloud Security IAM SIEM Splunk Microsoft Sentinel Wireshark Nessus Burp Suite Metasploit Nmap Python PowerShell Linux Windows Server AWS Security Azure Security Google Cloud Security Vulnerability Assessment Penetration Testing Incident Response DevSecOps Docker Kubernetes Terraform ISO 27001 NIST CIS Controls SOC 2

Job DescriptionAbout Client: Client is a multinational technology and consulting company known for its expertise in providing IT services and solutions. With a global presence, it offers a wide range of services including digital transformation, application development, infrastructure management, and business process outsourcing. The company has a strong focus on innovation, leveraging emerging technologies such as artificial intelligence, cloud computing, and data analytics to drive client success. Client is committed to delivering high-quality results and ensuring customer satisfaction through its team of skilled professionals and robust project management methodologies. Rate Range: $65-$70/Hr Job Description: • We are seeking a Senior Python Developer with strong experience in designing, developing, and deploying cloud-native software products and solutions., • The ideal candidate should have hands-on expertise in both front-end and back-end development, with proficiency in:, • Python, • JavaScript, • Django, • Vue.js Responsibilities:, • The Full-Stack Developer will work closely with clients, digital leaders, solutions architects, and technical/ functional leads across digital teams and market segments to support client projects and provide solutions for growth efforts and capabilities build-out., • Serve as a key member of the modernization team to support technical challenges/demos, building innovative solution prototypes using cloud architectures and software technologies., • Solutions architecture and hands-on engineering/full-stack development of scalable and secure distributed systems using modern software technologies and programming, Cloud Native and microservices architecture, containerization, and API-First design patterns., • Work collaboratively with user experience designers, platform engineers, product owners, solution architects, and business analysts, the Cloud Applications Full Stack Developer will design, build, test, and deploy high-value, operationally resilient software products on the AWS cloud platform that satisfy functional and non-functional requirements.Requirements:, • A bachelor's degree is required, or a Minimum of 10 years of relevant experience, • Minimum of SIX (6) years of prior relevant experience in full-stack application development, • Minimum of THREE (3) years of experience with cloud applications development to build /modernize applications and datasets on the AWS cloud, • Experience and proficiency in implementing frontend and backend services for cloud-native software products and solutions such as Python, JavaScript, Django and Vue.JS., • The must-have skills include proficiency in Python and JavaScript., • For Django experience, candidates can alternatively have experience with Flask, FastAPI, Falcon, or SQLAlchemy., • Similarly, for Vue.JS experience, alternatives include React, Svelte, or Angular (version 1.6 or higher)., • Proven ability to work autonomously and collaborate, mentor, help, and support other team members, as needed, to solve complex technical problems., • Proven ability to develop software products and solution prototypes and use prototypes to validate technical solution strategies and communicate and explain the pros and cons of complex design alternatives., • An in-depth understanding of Agile and Scaled Agile practices and principles, with experience. Must be an experienced Agile practitioner with proven ability to plan and implement software products with agility. Nice To Have:, • Certification: AWS Certified Developer Amazon Web Services, • Flask, Docker, EKS/Kubernetes, AWS Step Functions, Event Bridge, AWS Lambda, AWS API Gateway, Elasticsearch, Caching frameworks, Redis, Memcached, the Amazon Relational Database Service (RDS) for Postgres, and/or the MongoDB NoSQL database service., • Certification: AWS Certification Solutions Architect - Amazon Web Services, • Solution architecture support for technical volumes of proposals and white papers for RFPs/RFIs and thought leadership initiatives., • Familiarity with the AWS Serverless Application Model (SAM) and proven design patterns, like Model-View-Controller, is required, as is the ability to design and build cloud-based software products that conform to the AWS Well-Architected Framework design principles., • Proficiency in delivering cloud-based software products using contemporary CI/CD pipeline tooling and the ability to continuously collaborate with development, operations, and security (DevSecOps) team members to deliver secure and operationally resilient software products and solutions., • This is a hands-on cloud software developer/engineering position and requires the ability to proficiently and predictably build and deploy custom applications in the AWS cloud., • Proven ability to design, build, test, and deploy software products and solutions on the AWS cloud platform., • Excellent written and verbal communication skills with an ability to handle customer requirements and engineer solutions. About ApTask: ApTask is a leading global provider of workforce solutions and talent acquisition services, dedicated to shaping the future of work. As an African American-owned and Veteran-owned company, ApTask offers a comprehensive suite of services, including staffing and recruitment solutions, managed services, IT consulting, and project management. With a focus on excellence, collaboration, and innovation, ApTask provides unparalleled opportunities for professional growth and development. As a member of the ApTask team, you will have the chance to connect businesses with top-tier professionals, optimize workforce performance, and drive success across diverse industries. Join us at ApTask and be part of our mission to empower organizations to thrive while fostering a diverse and inclusive work environment. Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview. Candidate Data Collection Disclaimer: At ApTask, we prioritize safeguarding your privacy. As part of our recruitment process, certain Personally Identifiable Information (PII) may be requested by our clients for verification and application purposes. Rest assured, we strictly adhere to confidentiality standards and comply with all relevant data protection laws. Please note that we only collect the necessary information as specified by each client and do not request sensitive details during the initial stages of recruitment. If you have any concerns or queries about your personal information, please feel free to contact our compliance team at compliance@aptask.com. Applicant Consent: By submitting your application, you agree to ApTask's (www.aptask.com) Terms of Use and Privacy Policy, and provide your consent to receive SMS and voice call communications regarding employment opportunities that match your resume and qualifications. You understand that your personal information will be used solely for recruitment purposes and that you can withdraw your consent at any time by contacting us at 732-355-8000 or help@aptask.com. Message frequency may vary. Msg & data rates may apply.

Job DescriptionWho We Are Qvest US is the global leader in technology and business consulting for the Media & Entertainment and Consumer Packaged Goods & Retail industries. We strategize, advise, design, develop and implement future-forward business & technology solutions. With expertise in digital media supply chain, data & analytics, IP & rights management, broadcast transformation, Salesforce and applied AI, our exceptionally talented teams partner with Fortune 1,000 companies to revolutionize markets and set new industry standards. About the IDC The IDC is our Innovation and Development Center. We build custom software using modern technologies to solve complex business problems for our clients. We believe the best products and services are realized by knowledgeable, tight-knit teams aligned to a shared purpose and understanding. Responsibilities Platform & Infrastructure as Code: Architect, provision, and maintain modular AWS infrastructure using Terraform or AWS CDK. Establish reusable modules and enforce policy-as-code across multiple environments. Continuous Delivery & GitOps: Design, build, and maintain automated delivery pipelines using GitHub Actions or GitLab CI, integrated with GitOps engines (e.g., Argo CD) for zero-downtime, progressive rollouts (Blue/Green, Canary). Container Orchestration: Manage production-grade containerized workloads on Kubernetes (Amazon EKS) or Amazon ECS. Optimize container image builds, build caching, and cluster resource scaling (e.g., Karpenter, Cluster Autoscaler). Observability & SRE: Instrument system-wide observability using OpenTelemetry, Datadog, Splunk, or AWS CloudWatch. Define and track SLIs, SLOs, and error budgets, while establishing actionable alerting pipelines that minimize alert fatigue. DevSecOps & Compliance: Integrate automated vulnerability scanning (container images, dependencies, IaC) using tools like Snyk or Trivy into CI/CD pipelines. Manage centralized identity, role-based access controls (RBAC), and secrets management (AWS Secrets Manager, HashiCorp Vault). Automation & Internal Tooling: Develop custom automation scripts and micro-tools using Python (boto3) or Go to eliminate manual toil, support automated backups, and validate disaster recovery procedures. Cloud Cost Governance (FinOps): Partner with engineering teams to monitor cloud consumption, optimize resource allocation, and implement automated scaling policies to maintain cost-efficient infrastructure. Required Skills Cloud Architecture: 3+ years of hands-on experience designing, deploying, and supporting enterprise-grade systems on AWS (VPC, IAM, EKS/ECS, RDS, S3, EventBridge). Infrastructure as Code (IaC): Deep operational experience with Terraform (state management, module design) or AWS CDK. Containers & Orchestration: Strong background in Docker containerization and hands-on operational experience with Kubernetes (EKS) or AWS ECS, including Helm templating. CI/CD & Delivery: Extensive experience implementing CI/CD pipelines (GitHub Actions, GitLab CI) with automated testing, linting, security scanning, and artifact management (JFrog Artifactory, Sonatype Nexus, or GitHub Packages). Systems Programming / Scripting: Proficiency in Python (including AWS SDK/boto3) or Go, alongside Linux shell scripting (Bash). Telemetry & Reliability: Proven experience implementing logging, metrics, and tracing platforms (Datadog, OpenTelemetry, Splunk, Prometheus/Grafana) and designing structured on-call incident responses Preferred Experience Experience implementing GitOps workflows with Argo CD or Flux. Familiarity with Policy-as-Code frameworks (Open Policy Agent/Gatekeeper, Kyverno, or Checkov). Understanding of MLOps pipelines and supporting infrastructure for machine learning workloads (e.g., Kubeflow, AWS SageMaker). Practical experience running OpenSearch/Elasticsearch clusters at scale. AWS Certified Solutions Architect or DevOps Engineer Professional (or other Cloud Certifications). Travel Requirements Employees are responsible for traveling to and from client sites as required by their project or assignment, regardless of location. Travel may include sites outside the employee’s primary office location, state, or region. Remote & Hybrid Work While remote or hybrid work may be permitted for certain projects, client needs take precedence. Employees are expected to report onsite at the client location when required by the project scope, client request, or management directive. Life at Qvest We were founded on a culture of collaboration and inclusiveness, and this permeates each of our initiatives, both client-facing and internal. We offer a wide selection of benefits including medical, dental & vision, 401k matching and flexible vacation; we sponsor training to advance our teams’ skill sets and we prioritize our employees’ professional growth paths. Qvest US is currently 300+ people strong and we’ve been recognized as a “Best Place to Work,” a “Great Place to Work,” “Fastest Growing,” and “A Jewel." Equal Employment OpportunityQvest is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Qvest applies this stance to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including internships, at all levels of employment.

Job DescriptionSoftware Guidance & Assistance, Inc., (SGA), is searching for an Application Security Engineer for a contract assignment with one of our premier Investment Banking clients in Alpharetta, GA or New York, NY. Responsibilities: • The mission of the Cloud Security & Developer Enablement team is to implement the Firm's Cybersecurity Strategy by architecting, engineering, deploying and operating technical security controls and capabilities for the Enterprise. This is achieved by continued focus on architectural rigor, automation, agile delivery and adoption of Cloud and application security control implementations by development community., • Be part of a team of engineers to implement firm specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications., • Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes., • Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages., • With your development background and security knowledge, provide secure stable platform for enforcing application security controls., • Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform., • Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities. Required Skills: • Must have: 5+ years software development experience using Python, • Working with APIs, including but not limited to ReST, • Unit testing frameworks, • Multi-process and multi-thread architecture, • Must have: 5+ years in linux, strong bash scripting skills., • Deep understanding of CI CD pipelines, • Working knowledge of windows environment, simple scripting dos-batch etc., • Bachelor’s degree with 10+ years of work experience in the IT field, • Ability to process large datasets for reporting and analysis. Preferred Skills:, • A self-starter, with a strong desire for learning new technologies and applying them to solve problems, • Knowledge of SAST, OSS technologies, • Ability to perform Python code reviews with minimal assistance, • Expertise in monitoring, alerting, reporting, data analysis is desired., • Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc., • DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus, • Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/. SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy #LI-PB1

Job Description Security Architect Job Title Security Architect Job Summary We are seeking an experienced Security Architect to design, implement, and oversee secure enterprise architectures that protect applications, infrastructure, networks, and data. The ideal candidate will define security standards, evaluate emerging technologies, conduct risk assessments, and collaborate with engineering, infrastructure, cloud, and compliance teams to build secure, scalable, and resilient systems. This role plays a key part in embedding security throughout the software development lifecycle and enterprise technology landscape. Key Responsibilities Design and maintain enterprise security architecture for cloud, on-premises, hybrid, and multi-cloud environments. Define security principles, standards, reference architectures, and technical roadmaps. Conduct security architecture reviews, threat modeling, and risk assessments for applications, infrastructure, and cloud services. Develop secure solutions for identity and access management (IAM), network security, endpoint security, application security, and data protection. Collaborate with software engineering, DevOps, infrastructure, and cloud teams to integrate security into the software development lifecycle (DevSecOps). Evaluate new technologies, cloud services, and third-party solutions for security risks and compliance. Implement and recommend security controls aligned with industry standards and regulatory requirements. Support vulnerability management, penetration testing remediation, and security incident response initiatives. Guide encryption, key management, secrets management, and certificate lifecycle strategies. Prepare architecture documentation, security policies, and technical standards. Provide technical leadership, mentoring, and security guidance across engineering teams. Required Qualifications Bachelor's degree in Computer Science, Information Security, Cybersecurity, Information Technology, Software Engineering, or a related field. 5 10 years of experience in cybersecurity, security engineering, cloud security, or enterprise architecture, with at least 2 years in a security architecture role. Strong understanding of security architecture frameworks and secure system design principles. Experience securing cloud platforms such as AWS, Microsoft Azure, or Google Cloud. Strong knowledge of Identity and Access Management (IAM), Zero Trust architecture, encryption, PKI, and secrets management. Experience with network security, firewalls, VPNs, web application firewalls (WAFs), intrusion detection/prevention systems (IDS/IPS), and endpoint security. Familiarity with application security practices including secure coding, threat modeling, SAST, DAST, and software supply chain security. Knowledge of security standards and frameworks such as NIST Cybersecurity Framework, ISO/IEC 27001, CIS Controls, OWASP Top 10, and MITRE Telecommunication&CK. Strong understanding of networking protocols, operating systems, virtualization, and container security. Preferred Qualifications Experience with Kubernetes, Docker, and cloud-native security. Familiarity with Infrastructure as Code (IaC) security using Terraform, AWS CloudFormation, or Pulumi. Experience with SIEM, SOAR, and security monitoring tools such as Microsoft Sentinel, Splunk, QRadar, or Elastic Security. Knowledge of DevSecOps pipelines and CI/CD security. Experience with data governance, privacy regulations, and compliance frameworks such as GDPR, HIPAA, PCI DSS, or SOC 2. Experience performing cloud security posture management (CSPM) and vulnerability management. Technical Skills AWS / Microsoft Azure / Google Cloud Identity and Access Management (IAM) Zero Trust Architecture Kubernetes Docker Terraform CloudFormation Python PowerShell Bash Git SIEM (Splunk, Microsoft Sentinel, QRadar) WAF IDS/IPS PKI Encryption Technologies HashiCorp Vault SAST / DAST Tools OWASP NIST CSF ISO/IEC 27001 Soft Skills Strong analytical and strategic thinking abilities. Excellent communication and stakeholder management skills. Leadership and mentoring capabilities. Strong problem-solving and decision-making skills. Ability to balance security, usability, and business objectives. Commitment to continuous learning and staying current with emerging cybersecurity threats. Nice to Have Experience with AI/ML security, LLM security, or cloud AI platforms. Knowledge of container runtime security and Kubernetes policy enforcement. Familiarity with Secure Access Service Edge (SASE), Software-Defined Perimeter (SDP), and Confidential Computing. Experience supporting security audits and regulatory assessments. Professional certifications such as CISSP, CCSP, SABSA, AWS Certified Security Specialty, Google Professional Cloud Security Engineer, Microsoft Certified: Cybersecurity Architect Expert, or TOGAF. Benefits Competitive salary and performance-based incentives. Comprehensive health and wellness benefits. Flexible or hybrid work arrangements. Learning, certification, and conference sponsorship opportunities. Opportunity to lead enterprise security initiatives and influence strategic technology decisions. Collaborative, innovative, and security-first work environment.

Job DescriptionWho We Are Qvest US is the global leader in technology and business consulting for the Media & Entertainment and Consumer Packaged Goods & Retail industries. We strategize, advise, design, develop and implement future-forward business & technology solutions. With expertise in digital media supply chain, data & analytics, IP & rights management, broadcast transformation, Salesforce and applied AI, our exceptionally talented teams partner with Fortune 1,000 companies to revolutionize markets and set new industry standards. About the IDC The IDC is our Innovation and Development Center. We build custom software using modern technologies to solve complex business problems for our clients. We believe the best products and services are realized by knowledgeable, tight-knit teams aligned to a shared purpose and understanding. Responsibilities Platform & Infrastructure as Code: Architect, provision, and maintain modular AWS infrastructure using Terraform or AWS CDK. Establish reusable modules and enforce policy-as-code across multiple environments. Continuous Delivery & GitOps: Design, build, and maintain automated delivery pipelines using GitHub Actions or GitLab CI, integrated with GitOps engines (e.g., Argo CD) for zero-downtime, progressive rollouts (Blue/Green, Canary). Container Orchestration: Manage production-grade containerized workloads on Kubernetes (Amazon EKS) or Amazon ECS. Optimize container image builds, build caching, and cluster resource scaling (e.g., Karpenter, Cluster Autoscaler). Observability & SRE: Instrument system-wide observability using OpenTelemetry, Datadog, Splunk, or AWS CloudWatch. Define and track SLIs, SLOs, and error budgets, while establishing actionable alerting pipelines that minimize alert fatigue. DevSecOps & Compliance: Integrate automated vulnerability scanning (container images, dependencies, IaC) using tools like Snyk or Trivy into CI/CD pipelines. Manage centralized identity, role-based access controls (RBAC), and secrets management (AWS Secrets Manager, HashiCorp Vault). Automation & Internal Tooling: Develop custom automation scripts and micro-tools using Python (boto3) or Go to eliminate manual toil, support automated backups, and validate disaster recovery procedures. Cloud Cost Governance (FinOps): Partner with engineering teams to monitor cloud consumption, optimize resource allocation, and implement automated scaling policies to maintain cost-efficient infrastructure. Required Skills Cloud Architecture: 3+ years of hands-on experience designing, deploying, and supporting enterprise-grade systems on AWS (VPC, IAM, EKS/ECS, RDS, S3, EventBridge). Infrastructure as Code (IaC): Deep operational experience with Terraform (state management, module design) or AWS CDK. Containers & Orchestration: Strong background in Docker containerization and hands-on operational experience with Kubernetes (EKS) or AWS ECS, including Helm templating. CI/CD & Delivery: Extensive experience implementing CI/CD pipelines (GitHub Actions, GitLab CI) with automated testing, linting, security scanning, and artifact management (JFrog Artifactory, Sonatype Nexus, or GitHub Packages). Systems Programming / Scripting: Proficiency in Python (including AWS SDK/boto3) or Go, alongside Linux shell scripting (Bash). Telemetry & Reliability: Proven experience implementing logging, metrics, and tracing platforms (Datadog, OpenTelemetry, Splunk, Prometheus/Grafana) and designing structured on-call incident responses. Preferred Skills Experience implementing GitOps workflows with Argo CD or Flux. Familiarity with Policy-as-Code frameworks (Open Policy Agent/Gatekeeper, Kyverno, or Checkov). Understanding of MLOps pipelines and supporting infrastructure for machine learning workloads (e.g., Kubeflow, AWS SageMaker). Practical experience running OpenSearch/Elasticsearch clusters at scale. AWS Certified Solutions Architect or DevOps Engineer Professional (or other Cloud Certifications). Travel Requirements Employees are responsible for traveling to and from client sites as required by their project or assignment, regardless of location. Travel may include sites outside the employee’s primary office location, state, or region. Remote & Hybrid Work While remote or hybrid work may be permitted for certain projects, client needs take precedence. Employees are expected to report onsite at the client location when required by the project scope, client request, or management directive. Life at Qvest We were founded on a culture of collaboration and inclusiveness, and this permeates each of our initiatives, both client-facing and internal. We offer a wide selection of benefits including medical, dental & vision, 401k matching and flexible vacation; we sponsor training to advance our teams’ skill sets and we prioritize our employees’ professional growth paths. Qvest US is currently 300+ people strong and we’ve been recognized as a “Best Place to Work,” a “Great Place to Work,” “Fastest Growing,” and “A Jewel." Equal Employment OpportunityQvest is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Qvest applies this stance to all employment actions, including but not limited to recruitment, hiring, upgrading, promotion, transfer, demotion, layoff, recall, termination, rates of pay or other forms of compensation and selection for training, including internships, at all levels of employment.

Job Description The P&C Core Insurance Transformation Engagement Director is responsible for leading transformation initiatives for property and casualty insurance. This role demands a visionary leader who can innovate and drive change while collaborating effectively with stakeholders across various functions. The Director will manage large-scale programs, ensuring alignment with the company's strategic objectives and operational efficiencies. The Engagement Director will also strengthen relationships with key clients, providing expert guidance and insights into industry trends and best practices. The Engagement Lead / Program Director is the accountable executive for a large-scale insurance transformation spanning multiple jurisdictions and lines of business. This leader directs program governance, financial stewardship, and value realization while orchestrating the full SDLC—from Strategy and Inception through Design, Build, Testing, Deployment, Hypercare, and Continuous Improvement. Success requires a mix of deep insurance domain knowledge, estimation mastery, scaled-agile delivery, and executive stakeholder influence across business and technology. The Engagement Lead is responsible for implementing a structured, end-to-end estimation and governance process that ensures predictability, transparency, and control across the entire program lifecycle. This begins with defining clear scope boundaries, delivery assumptions, and productivity baselines, followed by decomposing work into manageable components and applying consistent sizing standards. Estimates are validated through collaborative reviews and integrated into financial planning, translating effort into cost projections with contingency buffers. Continuous calibration occurs at key milestones to reflect actual performance, ensuring forecasts remain accurate and risks are proactively managed. All estimation outputs feed into program dashboards and Earned Value Management for full traceability. In parallel, the role establishes robust program governance through Steering Committees, Architecture and Change Advisory Boards, and Testing Councils, supported by a PMO for planning, reporting, risk management, and vendor coordination. Governance enforces RACI, RAID, OKRs, and quality gates across phases, while maintaining strict controls for scope, change management, configuration, and go-live readiness. Auditability is ensured through end-to-end traceability from requirements to business outcomes. The Engagement Lead oversees the full SDLC, including initiation and visioning, requirements and design validation, build and integration, testing and quality assurance, release and cutover, hypercare stabilization, and legacy decommissioning. Compliance with multi-jurisdictional regulations (NAIC, DOI, GLBA, HIPAA, PCI-DSS) and strong data governance practices are embedded throughout. Finally, the role drives delivery across core platforms (Guidewire, Duck Creek, Majesco) and their ecosystem integrations, ensuring alignment with enterprise architecture and operational readiness. This structured approach enables predictable delivery, financial transparency, regulatory compliance, and measurable business value, positioning the program for success from inception through optimization. A successful candidate will bring deep insurance domain expertise across both personal and small commercial lines. They will understand the full breadth of personal lines products, including Auto (BI, PD, UM/UIM, PIP, MedPay), Homeowners, Renters, Condo, Landlord, Umbrella, Boat/Marine, Valuable Personal Property, Flood (NFIP), and Earthquake coverage. They will also have hands-on knowledge of the claims value chain, from First Notice of Loss (FNOL) through coverage verification, investigation, evaluation, negotiation, settlement, salvage and subrogation, fraud detection, litigation, and recovery. In addition, they will be well-versed in policy and billing processes, including rating, underwriting, endorsements, renewals, cancellations, reinstatements, payment methods, dunning, and refunds. On the commercial side, the candidate will understand Business Owners Policy (BOP), Commercial Auto, Workers’ Compensation, General Liability, Commercial Property, Inland Marine, Cyber, and Professional Liability. They should be familiar with commercial-specific workflows, such as multi-location risks, schedules, certificates, audits, loss control, and producer/agency integration. Beyond technical and domain knowledge, the candidate will demonstrate exceptional behavioral competencies. They will think strategically and systemically, seeing interdependencies across business, technology, risk, and operations. They will exhibit executive presence and influence, simplifying complexity and driving decisions at the C-suite level. They will be outcome-oriented, anchoring delivery on measurable value and using data-driven insights to guide progress. Adaptability is key—balancing agile speed with governance rigor and thriving in ambiguity. They will navigate conflicts pragmatically, maintain resilience under pressure, and communicate with clarity and confidence. As a talent builder, they will foster high-performing, distributed teams and create an environment of psychological safety. Integrity and compliance will be non-negotiable, ensuring controls and auditability throughout. Finally, the candidate will have extensive experience leading large-scale insurance transformations, with at least 15 years in the industry and 10 years in program leadership for core platform implementations. They will have delivered programs across multi-state regulatory contexts and multi-vendor ecosystems, with hands-on experience in platforms like Guidewire, Duck Creek, or Majesco, and expertise in scaled agile (SAFe), DevSecOps, and data migration. Strong financial stewardship skills, including Earned Value Management and forecasting, are essential. A bachelor’s degree in business or technology is required; a master’s degree and certifications such as PMP, PgMP, SAFe SPC/RTE, Agile, ITIL, or cloud architecture are highly preferred. Requirements Key Responsibilities & Expectations: • Lead Enterprise Transformation – Drive large-scale P&C insurance core system modernization initiatives across personal and small commercial lines, ensuring successful design and execution aligned with strategic objectives., • Develop Strategic Plans – Create and maintain program charters, roadmaps, budgets, and release strategies, ensuring deliverables meet quality standards and business goals., • Establish Robust Governance – Implement governance structures (Steering Committee, Architecture Review Board, Change Advisory Board, Testing Council) and enforce RACI, RAID, OKRs, and quality gates across all phases., • Implement Structured Estimation & Financial Control – Apply an end-to-end estimation process integrated with financial planning, maintain transparency through Earned Value Management, and continuously calibrate forecasts., • Direct Full SDLC Lifecycle – Oversee all phases from inception through design, build, testing, deployment, hypercare, and optimization, ensuring predictable delivery and operational readiness., • Ensure Regulatory & Compliance Adherence – Embed controls for NAIC, state DOI, GLBA, HIPAA, PCI-DSS, and other regulatory requirements; maintain auditability and strong data governance., • Drive Technology Delivery – Lead implementation of core platforms (Guidewire, Duck Creek, Majesco) and ecosystem integrations for billing, claims, document management, payments, and analytics., • Collaborate & Communicate – Establish clear communication channels with internal teams and stakeholders, manage expectations, and ensure alignment across business and technology., • Foster Client Relationships – Engage with clients to understand needs and challenges, provide tailored solutions, and leverage industry expertise to advise on best practices and innovative approaches., • Monitor & Optimize Performance – Track KPIs, validate benefits against business case, and use metrics and analytics to inform decisions and drive continuous improvement., • Build & Lead High-Performing Teams – Recruit, develop, and motivate distributed teams across onshore, nearshore, and offshore locations; foster collaboration and psychological safety., • Demonstrate Strategic & Adaptive Leadership – Balance agile speed with governance rigor, thrive in ambiguity, resolve conflicts pragmatically, and maintain resilience under pressure., • Generative AI - have a strong understanding of the use of Gen-AI across the SDLC. Experience & Qualifications • 15+ years leading large-scale insurance transformations, • 10+ years in program leadership for core platform implementations., • Proven delivery across multi-state regulatory contexts and multi-vendor ecosystems., • Hands-on experience with Guidewire / Duck Creek / Majesco, scaled agile (SAFe), DevSecOps, and data migration at scale., • Track record in financial stewardship (EVM, ETC/FTC, cost-of-delay) and estimation frameworks listed above., • Bachelors in Business/Technology (Master’s preferred)., • Preferred Certifications - PMP or PgMP, SAFe SPC/RTE, CSM/PSM, ITIL, AWS/Azure/Google (Architect/Cloud), Lean Six Sigma (for process). Benefits This position comes with competitive compensation and benefits package: • Competitive salary and performance-based bonuses, • Comprehensive benefits package, • Home Office model, • Career development and training opportunities, • Flexible work arrangements (remote and/or office-based), • Dynamic and inclusive work culture within a globally known group, • Private Health Insurance, • Retirement Benefits, • Paid Time Off, • Training & Development, • *Note: Benefits differ based on employee level About Capgemini Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of over 340,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group €22.5 billion in revenues in 2024.

Job Description Software Guidance & Assistance, Inc., (SGA), is searching for an AWS Cloud Infrastructure Engineer for a contract assignment with one of our premier Financial Services clients in New York, NY. The Enterprise Support Infrastructure Engineering team within the Bank's Technology Group is seeking a Senior Cloud SRE to build and maintain resilient, secure AWS infrastructure supporting business applications. This is a hands-on role focused on Terraform, GitLab CI/CD, and deploying custom applications and commercial off-the-shelf (COTS) software in AWS. Responsibilities : • Build, maintain, and troubleshoot AWS infrastructure., • Write and maintain Terraform infrastructure as code to provision AWS services and deploy custom applications and COTS tools., • Build and troubleshoot GitLab CI/CD pipelines for automated deployment and infrastructure rehydration., • Containerize application code and commercial software., • Deploy unfamiliar software into AWS using its installation and operational requirements., • Collaborate with customers and service providers to deliver secure, resilient cloud platforms. Required Skills:, • Strong, demonstrated hands-on proficiency with Terraform for AWS infrastructure provisioning and troubleshooting., • Strong, demonstrated hands-on proficiency with automated GitLab CI/CD pipelines., • Strong AWS infrastructure experience across:, • Compute and containers : EC2, Lambda, ECS, and Fargate., • Storage and databases : S3, EFS, RDS PostgreSQL, and SQL Server on RDS., • Networking : VPC, transit gateways, Direct Connect, ALB/ELB, Route 53, DNS, and data gateways., • Messaging and monitoring : SNS, CloudWatch, and Grafana., • Strong knowledge of IAM, Okta integration, encryption, key management, certificates, vulnerability management, and infrastructure rehydration., • Working knowledge of Java, Python, and Scala., • Familiarity with containerized application stacks, including NGINX, JBoss, Tomcat, and Amazon Corretto., • Knowledge of DevSecOps, Agile/Scrum, and Jira., • Ability to work independently and collaboratively, with a focus on customer outcomes. Preferred Skills:, • Experience with Databricks, Starburst, AWS Glue, and EKS., • Knowledge of AWS Multi-AZ and Multi-Region architectures., • Bachelor's degree in Computer Science., • AWS certifications. By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at info@sgainc.com to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations. SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/ . SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.

Job Description About Lantern Lantern is the specialty care platform connecting people with the best care when they need it most. By curating a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more, Lantern delivers excellent care with significant cost savings to employers and their workforces. Lantern also pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey, helping them get back to good health, back to their families and back to work. With convenient access to specialists nationwide, Lantern means quality care is within driving distance for most. Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country. Learn more about us at lanterncare.com. Lantern is the specialty care platform, connecting people with high-quality, affordable specialty care close to home. We operate in a regulated healthcare environment (HIPAA, HITRUST, SOC 2), we handle protected health information at scale, and we are becoming an AI healthcare company, with AI adoption a top company priority. The Director, Application & AI Security owns application and AI security end to end: the security of the software and the AI systems Lantern builds. It is the seat most directly tied to our AI strategy. The job is to make it safe to move fast, building the golden paths and secure defaults that let teams ship product and adopt AI without waiting in a permission queue, while keeping PHI and external-model data egress genuinely protected. You will lead a growing function. At hire, the team includes a senior application security engineer, with several open roles to fill across security architecture, AI/ML security, DevSecOps, and product security. You will build that team and set the secure-design standards the whole engineering organization builds against. Our security philosophy is open by default, secure by design. Security exists to help the business move fast, safely, and the default answer is "yes, safely," because guardrails are built into the platform, pipelines, and tooling rather than enforced by someone saying no. Gates exist only where risk genuinely warrants them, and even then they are automated, fast, and transparent. Location: Hybrid - at least 3 days/wk in our NYC, NY offices Responsibilities: • Own application security across the development lifecycle, covering static, dynamic, and interactive analysis (SAST/DAST/SCA/IAST), code and dependency security, API security, and runtime protections such as WAF and API gateways, all delivered through engineering teams rather than filed as findings., • Own AI and ML security, including model and agent security, prompt-injection and tool-use risk, and data-egress controls for third-party model providers, plus continuous AI security posture management informed by the OWASP LLM Top 10, MITRE ATLAS, and AI risk-management standards (NIST AI RMF, ISO/IEC 42001)., • Own security architecture and threat modeling, including secure-by-design review and ownership of cryptographic standards., • Own DevSecOps and pipeline security, with scanning as a default in CI/CD and MLOps/LLMOps pipelines, release gating calibrated to risk, and software supply chain and SBOM practice., • Own the security-review intake as a single front door with risk-based triage, reported against a turnaround commitment, so security accelerates the business rather than bottlenecking it., • Own the application and AI security tool stack and the secure-design standards behind it. Key Deliverables in Your First Year: • An AI golden path: an approved-model catalog and automated data-egress controls, so teams adopt AI on a governed route instead of case-by-case approvals., • A secure SDLC paved road, with scanning in the pipeline by default and critical findings resolved within SLA., • A single security-review intake that delivers fast, risk-based answers on a published turnaround., • A built-out team, with the open roles filled and performing. How You Will Work: Much of this scope is delivered in partnership. Engineering carries remediation on application, API, and dependency findings. Platform Engineering operates the CI/CD pipelines you secure. AI Engineering builds the model integrations you govern on the security side, while the Governance, Risk & Compliance team owns AI use governance, meaning acceptable use, model inventory, and third-party model data-egress scoping, as the companion to your security accountability. Setting and holding clear service expectations across these partners is part of the role. Requirements: • A minimum of 8 years application or product security., • A minimum of 3 years leading a team with function-level accountability., • Demonstrated AI and ML security ownership at production scale, including model and agent security, prompt-injection and tool-use risk, and data-egress control for third-party model providers, with working fluency in the OWASP LLM Top 10, MITRE ATLAS, and AI risk-management standards (NIST AI RMF, ISO/IEC 42001)., • Secure SDLC leadership across static, dynamic, and interactive analysis (SAST/DAST/SCA/IAST), dependency and software supply-chain risk, SBOM practice, and remediation delivered through engineering teams., • Security architecture and threat-modeling depth, with the standing to review a design and be heard by senior engineers., • DevSecOps and pipeline security experience, including scanning as a default in CI/CD, risk-calibrated release gating, and pipeline secret handling., • API security experience on a platform handling regulated data., • A track record of delivering security as paved roads and secure defaults rather than review gates, with evidence of adoption., • Bachelor's degree in a relevant field, or equivalent professional experience. Strong Candidates Will: • Healthcare or another regulated domain where PHI or comparable data flows through AI systems., • Experience standing up an AI golden path, including an approved-model catalog, a governed adoption route, and automated egress controls., • Experience building a single security-review intake with risk-based triage and a turnaround commitment., • Cryptographic standards ownership, including customer-managed key models., • Hands-on familiarity with tools such as Snyk, GitHub Advanced Security, AI security posture management (for example, Wiz), and AI-assisted code scanning., • Familiarity with AI red-teaming and adversarial-testing tooling (for example, Garak, PyRIT, Promptfoo)., • Product security experience shipping customer-facing security features as differentiators., • Experience hiring and building a team from a single senior individual contributor., • CSSLP, OSWE, GWAPT, or equivalent. Who Thrives in This Role: • Guardrails over gates. You instinctively ask how to remove a queue rather than how to staff one., • Engineering credibility. You earn influence with builders through technical depth, not process authority., • Risk calibration. You reserve genuine gates for what earns them, namely PHI exposure, external model egress, and privileged access, and you keep even those automated and fast., • Delivery orientation. You treat a roadmap as a commitment with dates., • Team building. You can grow a function from one senior IC and a set of open roles. Benefits • Medical Insurance, • Dental Insurance, • Vision Insurance, • Short & Long Term Disability, • Life Insurance, • 401k with company match, • Flexible Time Off, • Paid Parental Leave The salary range for this position is $200,000 - $275,000 annually, based on experience, skills, and qualifications. This position is also eligible for an annual bonus, separate from and in addition to the base salary range listed above. Lantern provides this range in good faith in compliance with New York's pay transparency requirements. About You: • You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins., • INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with., • You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas., • You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren't just the individuals using your product. They are the driving factor in your motivation to make a change., • Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear., • You thrive in a Team Environment. Collaboration is key in innovation and creating change. These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources, and support they need to get back to life. If this sounds like you, we would love to connect to speak further about career opportunities at Lantern. Please apply to our role & someone from our Talent Acquisition Team will reach out to help you navigate our interview process. Lantern does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Job DescriptionOur client, a 3rd-generation management consulting firm. They are now looking to add to their team and are hiring an AWS Security & Compliance Consultant. New York or New Jersey office or work remotely Summary The client is looking for an AWS SecOps Consultant, to join our team as a full-time employee in our New York or New Jersey office or work remotely. This person is responsible for the end-to-end planning, building, and deploying of software systems. He/she will be able to drive the programming of well-constructed, testable code. As an AWS SecOps Consultant, you will implement technical solutions as part of a team for customer engagements. This role requires strong teamwork, communication, patience and organization skills needed to drive customer success. Responsibilities • Help customers shape their journey to adopting the cloud and provide our customers with technical and strategic guidance on their "cloud journey”., • Consult, plan, design, and implement security solutions on the cloud customers o Design and automate security and compliance solutions o Become a deep technical resource that earns our customer's trust o Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our customers build on the cloud o Innovate on behalf of customers and translate your thoughts into action yielding measurable results. • Support solution development by conveying customer needs and feedback as input to technology roadmaps. Share real world implementation challenges and recommend expansion of capabilities through enhanced and new offerings. o Assist with technical briefs that document solutions o Assist with reference architecture implementations • Support internal and external brand development through thought leadership: o Work with Marketing/Alliances to write blog posts o Work with Marketing/Alliances to develop internal case studies Qualifications • Professional experience architecting/operating automated Security & Compliance / DevSecOps solutions built on AWS, • Experience in software/technology customer facing experience, • You must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Sample Activities You'll Do Creating a Self-Service Account Framework • Assist Customer with organizational hierarchy design and configuration templates, • Assist Customer in the development of referenceable playbooks, supported by relevant code examples, • Assist Customer in the development of sample runbooks to automate the implementation of AWS account setup and configuration, • Account Framework - Developing an automated Continuous Delivery Pipeline framework that will be used to establish AWS Accounts to configured, tested infrastructure on AWS in a repeatable, reliable and secure manner eliminating the need for manual intervention., • Security Control Policies - Development of the Service Control Policies and account baselines associated with the Customer's security and compliance requirements, • Assist Customer with the development of a report and supporting sample code addressing the controls as part of the playbook Creating Security Threat Analytics and Dashboard Solutions • Assist Customer in creating a framework to automatically gather, transform and interpret security event data in AWS., • Assist Customer in selecting defining Identify security requirements and determine where: o Macie can be leveraged o GuardDuty can be leveraged o Inspector can be leveraged o Security Hub can be leveraged o Alternative security products can be leveraged • Codify the provisioning of security analytics and reporting workflow: o Implement Security Hub with in a central account with inputs from all accounts o Implement GuardDuty for global security events o Implement Macie for detection of sensitive data in 23 buckets o Develop AWS Config rules to enforce security configurations in CIS AWS Foundations standard o Implementing Inspector to gather findings from EC2 instances o Enable CloudTrail for monitoring API activity o Enable FlowLogs for VPC traffic Creating a Self-Service Compliance Framework • Assist in selecting tools for building Policy-as-Code controls (preventative, detective, and responsive), • Assist Customer in the development of referenceable playbooks, supported by relevant code examples for controls, • Assist Customer in the development of sample runbooks to automate the implementation of controls: o Policy Definition – Identification and documentation of Customer Policy in the form of specific statements that must be true about configuration of AWS resources o Policy-as-Code Development – Development of the logical tests associated with each of the policies established to be used to assert the configuration state of infrastructure on AWS in order to block a build in the pipeline, take automated reactive action, or alert on violations to the policy o Framework Development – A design allowing for the execution of logical tests against infrastructure code or running AWS infrastructure in order to assert the configuration state of infrastructure resources on AWS and block a build in the pipeline, take automated reactive action, or alert on violations to the policy • Assist Customer with the development of a report and supporting sample code addressing the controls as part of the playbook Relevant Technical Tools • Primary Languages – Python, Java, Bash, • Tooling, Services & Libraries – Jenkins, Gitlab, Terraform, Vault, Git, Splunk, OWASP, Trend Micro, Palo Alto, Fortify, Twistlock, Aqua Security Relevant AWS Services • AWS Infrastructure Scripting – CloudFormation, AWS CLI, AWS CDK, • AWS Storage Services – S3, • AWS Compute Services – Lambda, EC2, EKS, ECS, ECR, • AWS Networking Services – VPC, Route53, API Gateway, Direct Connect, • AWS Developer Services – CodePipeline, CodeBuild, CodeCommit, CodeDeploy, • AWS Management and Governance Services – Control Tower, Organizations, CloudWatch, Auto Scaling, Config, CloudTrail, Service Catalog, Systems Manager, • AWS Security, Identity, Compliance Services – IAM, Inspector, KMS, Secrets Manager, Security Hub, Detective, GuardDuty, Macie, HSM, Certificate Manager, WAF & Shield, Firewall Manager, Detective, • AWS Frameworks – Landing Zone

Job DescriptionJob Description: "PLEASE NOTE THIS POSITION WILL REQUIRE CONSULTANT TO WORK ONSITE* M-F 37.50 hours weekly .30 Minute Unpaid Lunch Break No Holiday work, Overtime or travel required No Parking Provided The Cloud Security Consultant will provide hands on security design, engineering, and oversight for the PeopleSoft OCI architecture. This role ensures the environment is hardened, compliant, monitored, and aligned with MTA cybersecurity standards. The consultant will partner with Application Security, IAM, Network, Data Security, and Cloud Engineering teams to deliver a secure OCI landing zone and PeopleSoft deployment. • Strong experience with Oracle Cloud Infrastructure (OCI): o Policies, Compartments, Security Zones o OCI WAF, Load Balancing, Vault, Key Management o Network Security (subnet design, firewalls, NAT, private endpoints) • Cloud Security engineering background (Azure/AWS acceptable as secondary)., • CSPM tools (Oracle Cloud Guard, Prisma, Wiz, or similar)., • Experience securing enterprise applications in cloud., • Exceptional communication skills., • Familiarity with PeopleSoft architecture is preferred., • Strong understanding of Application Security, DevSecOps, and API security., • Knowledge of logging/monitoring: SIEM, cloud audit logs, event metrics., • Ability to collaborate with architecture, DBA, AppSec, IAM, and network teams. Salary commensurate with scope of work job experience Perform other reasonably related duties as required. New Wave People is an Equal Opportunity Employer (EEO). #ITIND123

Job Description Job Title: Senior AI Tech Lead Location: JERSEY CITY NJ Employment Type: Full Time Strong hands-on capability in Python, TypeScript/JavaScript, REST APIs, microservices, event-driven patterns, and containerized deployments. Experience with AWS Bedrock, SageMaker, Lambda, Step Functions, ECS/EKS, API Gateway, S3, CloudWatch, and CI/CD tooling Python, TypeScript/JavaScript, REST APIs, microservices, Event-driven patterns, AWS Bedrock, SageMaker, Lambda, Step Functions, ECS/EKS, API Gateway, S3, CloudWatch, prompt engineering, agent orchestration, tool integration, Vector stores, embeddings, model evaluation, and AI guardrails, AI agent capabilities, API layers, RAG services, tool connectors Experience Required 10 Years Must Have Technical/Functional Skills • Strong hands-on capability in Python, TypeScript/JavaScript, REST APIs, microservices, event-driven patterns, and containerized deployments., • Experience with AWS Bedrock, SageMaker, Lambda, Step Functions, ECS/EKS, API Gateway, S3, CloudWatch, and CI/CD tooling., • Deep understanding of prompt engineering, agent orchestration, tool integration, vector stores, embeddings, model evaluation, and AI guardrails., • Ability to enforce engineering standards, code quality, secure coding, performance tuning and observability practices., • Strong leadership, mentoring, estimation, planning, and stakeholder communication skills., • Familiarity with compliance, audit logging, model risk controls, and responsible AI practices. Responsibilities • Lead technical delivery of AI agent capabilities, reusable platform components, integrations and automation workflows., • Translate solution architecture into detailed engineering designs, sprint plans, and implementation tasks., • Guide developers on AI patterns, cloud-native implementation, secure coding, testability & performance optimization., • Build and review core components such as agent orchestration services, API layers, RAG services, tool connectors, and model interaction modules., • Coordinate with architects, product owners, UX designers, security SMEs, and QA to drive end-to-end delivery., • Establish technical best practices, coding standards, review processes, and reusable accelerators., • Support environment readiness, deployment planning, defect triage, production readiness reviews & knowledge transition. Generic Qualifications • Bachelor's degree in Computer Science Engineering, Data Science, or related discipline; advanced degree preferred., • 10 years of software engineering experience with 3 years in AI/ML, Gen AI, or intelligent automation delivery., • Hands-on experience building LLM-based applications, AI agents, RAG pipelines, APIs & cloud-native services., • Experience leading engineering teams in agile delivery models for enterprise-scale platforms., • Strong exposure to AWS cloud services and modern DevSecOps practices., • Insurance or financial services technology delivery experience preferred.

Job Description Application Security Engineer Job Description (JD) Job Title Application Security Engineer (AppSec Engineer) Job Summary We are seeking an experienced Application Security Engineer to ensure the security of software applications throughout the Software Development Life Cycle (SDLC). The ideal candidate will identify security vulnerabilities, conduct secure code reviews, perform application security testing, implement DevSecOps practices, and collaborate with development teams to build secure applications. Key Responsibilities • Integrate security practices into the SDLC (Secure SDLC)., • Perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA)., • Conduct secure code reviews for web, mobile, and backend applications., • Identify, assess, and remediate application security vulnerabilities., • Perform threat modeling and security risk assessments., • Implement DevSecOps security controls in CI/CD pipelines., • Conduct penetration testing and vulnerability assessments., • Validate authentication, authorization, session management, and API security., • Secure cloud-native and containerized applications., • Collaborate with developers, DevOps, QA, and infrastructure teams., • Develop security standards, guidelines, and best practices., • Support compliance with industry regulations and security frameworks. Required Skills Application Security, • Secure Software Development Life Cycle (SSDLC), • Secure Coding Practices, • Threat Modeling, • Secure Design Principles, • Risk Assessment, • Vulnerability Management, • Security Architecture, • Security Code Reviews Security Testing, • Static Application Security Testing (SAST), • Dynamic Application Security Testing (DAST), • Interactive Application Security Testing (IAST), • Software Composition Analysis (SCA), • Runtime Application Self-Protection (RASP), • Mobile Application Security Testing (MAST), • API Security Testing Security Tools, • Burp Suite, • OWASP ZAP, • Checkmarx, • Veracode, • Fortify, • SonarQube, • Snyk, • GitHub Advanced Security, • Semgrep, • Trivy, • Nessus, • Nmap Programming Languages Knowledge of one or more: • Java, • Python, • C#, • JavaScript, • TypeScript, • Go, • PHP, • Kotlin, • Swift Understanding of: • Object-Oriented Programming (OOP), • Secure Coding Standards, • Input Validation, • Error Handling Web Security, • OWASP Top 10, • SQL Injection (SQLi), • Cross-Site Scripting (XSS), • Cross-Site Request Forgery (CSRF), • Server-Side Request Forgery (SSRF), • XML External Entity (XXE), • Insecure Direct Object References (IDOR), • Remote Code Execution (RCE), • Command Injection, • Clickjacking, • Content Security Policy (CSP) API Security, • REST API Security, • GraphQL Security, • OAuth 2.0, • OpenID Connect (OIDC), • JWT, • API Gateway Security, • Rate Limiting, • API Authentication & Authorization

Job Description SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust. This role sits at the intersection of cybersecurity GRC, vendor management, and sales enablement: you will act as a security-minded presales engineer for the sales team, develop enough depth in the SpaceXSI technical environment to accurately complete customer vendor security questionnaires, join customer meetings as the security and compliance subject matter expert, and help operate third-party risk and vendor management processes. The ideal candidate brings a cybersecurity and GRC perspective — fluent in how AI LLMs, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance actually work in production — and can translate that understanding into clear, credible answers for enterprise buyers without slowing deals or overstating our posture. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: • Support the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment., • Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates., • Build and maintain working fluency across the SpaceXSI environment — AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments — sufficient to answer customer questions and escalate appropriately to engineering when needed., • Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve., • Translate customer security requirements into actionable internal asks; help distinguish must-have contractual or control commitments from unreasonable or out-of-scope demands., • Contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence., • Coordinate with the broader GRC and security teams on overlapping frameworks and evidence (e.g., SOC 2, ISO 27001, ISO 42001, privacy commitments) so external answers remain consistent with our internal control environment and GRC tooling (e.g., Vanta)., • Identify patterns in customer questionnaires and deal blockers; feed those insights back into product, engineering, and GRC roadmaps to reduce friction over time., • Create and present concise status updates on questionnaire volume, deal-impacting security asks, vendor risk posture, and emerging customer assurance themes to sales leadership and GRC stakeholders., • Champion clear, honest customer communication — building trust by explaining what we do, how we govern AI and infrastructure, and where we are intentionally scoping risk.BASIC QUALIFICATIONS:, • Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field., • 5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities., • Demonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers., • Working technical fluency across several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure) — enough to understand control implications and speak credibly with engineers and customers., • Solid understanding of common security and compliance frameworks used in customer assurance (e.g., SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language., • Strong written and verbal communication skills, with the ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences.PREFERRED SKILLS AND EXPERIENCE:, • 7+ years of cybersecurity, GRC, third-party risk, or customer trust / security assurance experience (mid-to-senior scope)., • Prior experience in a presales security, solutions engineering (security), customer trust, or sales-enablement GRC role at a technology, cloud, or AI company., • Hands-on or deeply adjacent experience with vendor risk management programs — onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting., • Familiarity with AI governance topics relevant to customer diligence (e.g., model data handling, prompt/output controls, training-data boundaries, ISO 42001 / NIST AI RMF concepts, EU AI Act awareness)., • Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar is a plus., • Ability to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives., • Comfort operating in fast-moving deal cycles while protecting accuracy — knowing when to say "I'll confirm with engineering" versus answering from established evidence., • Working knowledge of data privacy frameworks (e.g., GDPR, CCPA) as they appear in enterprise security and vendor assessments., • Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar preferred., • Experience supporting public sector, financial services, or other highly regulated customer diligence processes is a plus.COMPENSATION AND BENEFITS: $100,000 - $228,000 USD Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks. ITAR REQUIREMENTS: • To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceXSI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Job Description Job Title: Java/Node.js Engineer – Security Remediation & Technical Debt Automation Location: NJ or STL (Hybrid) Employment Type: Contract Experience Level: 7+ years Rate : 55-60$/Hr on 1099 / C2C About the Role We are seeking a highly skilled Java/Node.js Engineer with expertise in application security remediation, technical debt reduction, and automated vulnerability fixes. This role involves identifying, triaging, and remediating security vulnerabilities across Java, Node.js, Ruby on Rails, and WordPress applications. You will also drive automated remediation workflows and work with Generative AI tools (e.g., AWS Bedrock) to accelerate secure coding and vulnerability fixes. This position requires collaboration with InfoSec, QA, DevOps, Architecture, and development teams to continuously improve our security posture. Key Responsibilities Vulnerability Remediation & Secure Coding • Analyze, triage, and remediate vulnerabilities identified through SAST, DAST, and SCA tools (SonarQube, Veracode, Checkmarx, Snyk, OWASP ZAP)., • Refactor insecure Java, Node.js, Ruby on Rails, and WordPress codebases to fix issues such as:, • SQL Injection, XXE, XSS, • CSRF, SSRF, • Insecure Deserialization, • Authentication & session management flaws, • Path traversal or file upload vulnerabilities, • Patch and upgrade vulnerable third-party dependencies (Maven, Gradle, npm, Bundler, Composer) and validate remediation results., • Harden and secure configurations across:, • Spring Boot APIs, • Node.js/Express.js services, • Ruby on Rails frameworks, • WordPress environments and plugins, • Ensure fixes do not impact app functionality by performing regression testing and user flow validation. Automation & GenAI-Driven Security • Integrate security checks and automated remediation into CI/CD pipelines (Jenkins, GitHub Actions)., • Build or enhance AI-driven security workflows using AWS Bedrock or equivalent GenAI platforms:, • Auto-generate secure code patches, • Summarize vulnerability reports, • Suggest prioritized fixes, • Provide real-time security recommendations for developers, • Develop custom scripts to automate scanning, remediation, and validation processes. Technical Debt & Platform Modernization • Identify and fix legacy security issues across Java, Node.js, Rails, and WordPress applications., • Modernize outdated components, remove deprecated libraries, and refactor insecure patterns., • Harden Docker images, Linux environments, Kubernetes configurations, and AWS cloud setups. Collaboration & Continuous Improvement • Work closely with InfoSec and QA teams to validate fixes, perform rescans, and close vulnerability tickets., • Partner with development teams to promote secure coding best practices., • Stay current on OWASP Top 10, CWE/SANS 25, CVEs, and emerging security threats across multiple tech stacks. Required Skills • Strong hands-on experience with Core Java, Spring Boot, REST APIs, Tomcat, and secure Java coding., • Proficiency in Node.js, Express.js, JavaScript/TypeScript., • Exposure to Ruby on Rails and WordPress, with the ability to assist in vulnerability remediation and secure configuration., • Strong understanding of application vulnerabilities and mitigation techniques (e.g., XSS, CSRF, SQL Injection)., • Experience with Veracode, Checkmarx, SonarQube, Snyk, or similar scanning tools., • Familiarity with OAuth2/JWT, encryption, secure session management, and API security., • Experience with Docker, Kubernetes, Linux hardening, and AWS cloud security., • Experience using or integrating Generative AI (AWS Bedrock, CodeWhisperer) in security workflows., • Hands-on experience with CI/CD pipelines and automated security integration. Preferred Qualifications • Experience with microservices, API gateways, and cloud-native security., • Understanding of OWASP ASVS, threat modeling, and DevSecOps best practices., • Experience with automating remediation workflows using GenAI., • Certifications: CEH, CSSLP, OSCP, GSSP-Java, or similar. Soft Skills • Strong analytical, debugging, and problem-solving skills., • Excellent communication and documentation abilities., • Collaborative mindset with the ability to work across security, development, and DevOps teams., • Self-driven, proactive, and detail-oriented with a commitment to secure, high-quality code.

Job DescriptionGenesis10 is seeking a DevOps Engineer for a contract position with a financial services client located in New York, NY. This is a hybrid position and requires being onsite 3 days per week. Summary: We are seeking a DevOps Engineer with hands-on, production-level experience designing, securing, and operating enterprise CI/CD pipelines for modern cloud-based applications. This role requires far more than GitLab source control experience—you will own automated software delivery pipelines, implement governance and security best practices, and enable reliable deployments across multiple application stacks and cloud environments. The ideal candidate has a strong background in GitLab CI/CD, cloud-native application deployments, container technologies, Azure, DevSecOps, and infrastructure automation, with experience supporting enterprise software delivery at scale. Key Responsibilities: GitLab CI/CD Engineering • Design, build, maintain, and troubleshoot multi-stage GitLab CI/CD pipelines using .gitlab-ci.yml, • Configure and manage GitLab runners, artifacts, caching, CI/CD variables, deployment environments, approvals, and deployment gates., • Develop reusable pipeline templates, shared components, include files, and parent/child pipelines to standardize delivery across teams., • Implement GitLab governance, including branching strategies, merge request workflows, CODEOWNERS, protected branches/tags, merge trains, and approval rules., • Monitor and optimize pipeline performance, reliability, observability, and maintainability., • Integrate automated testing, security scanning, dependency scanning, secret detection, container scanning, and policy-based quality gates into delivery pipelines.Application Build & Deployment, • Build, test, package, and deploy enterprise applications across one or more of the following technology stacks:, • .NET / C#, • Java, • Python, • Node.js / JavaScript / TypeScript, • Candidates should understand the unique CI/CD requirements of each platform, including dependency management, build optimization, testing frameworks, artifact creation, security scanning, containerization, and deployment strategies.Cloud & Container Deployment, • Deploy and manage containerized applications through GitLab CI/CD into Azure-based environments., • Build, tag, scan, and publish Docker container images using Azure Container Registry (ACR) or comparable cloud registries., • Configure deployment workflows across Development, Test, UAT, and Production environments with approvals, promotions, rollback strategies, and health validation., • Manage Docker images, networking, runtime configuration, logging, monitoring, and release processes., • Integrate Infrastructure-as-Code solutions such as Terraform, Bicep, ARM Templates, or CloudFormation into CI/CD pipelines.Azure & AWS Cloud Technologies, • Support cloud-native deployments using foundational Azure and AWS services., • Azure, • Azure Container Registry (ACR), • Azure Key Vault, • Microsoft Entra ID, • Azure RBAC, • Azure Storage, • Azure Monitor, • Virtual Networks, • Resource Groups, • Service Principals and Managed IdentitiesAWS, • EC2, • IAM, • VPC, • S3, • CloudWatch, • ECR, • ECS, • Amazon Machine Images (AMIs) / Golden ImagesSecrets Management & Identity, • Integrate Azure Key Vault into CI/CD workflows for secure management of secrets, certificates, API keys, and connection strings., • Implement secure credential management using masked GitLab variables, environment isolation, least-privilege access, and credential rotation., • Configure GitLab authentication to Azure using Service Principals, Microsoft Entra ID, Azure RBAC, and secure identity practices., • Experience with Workload Identity Federation/OpenID Connect (OIDC) is a plus.AI-Assisted Engineering, • Utilize AI-assisted development tools such as Claude Code or comparable solutions to improve development, testing, documentation, debugging, and code quality., • Ensure AI tools are used responsibly within enterprise governance standards while maintaining human oversight, secure coding practices, and protection of proprietary code and sensitive information.DevSecOps & Enterprise Governance, • Support enterprise release governance, auditability, access controls, and separation-of-duties requirements., • Collaborate with software engineering, cloud infrastructure, platform engineering, and security teams to establish scalable CI/CD standards and improve developer productivity., • Champion DevSecOps best practices across the software development lifecycle. Required Qualifications: • 5+ years of experience designing and supporting enterprise CI/CD pipelines., • Strong hands-on experience with GitLab CI/CD in production environments., • Experience creating reusable GitLab pipeline templates and deployment automation., • Experience deploying containerized applications using Docker and Azure container services., • Strong knowledge of Azure cloud services, identity, networking, monitoring, and security., • Working knowledge of AWS cloud services and container deployment concepts., • Experience integrating Infrastructure-as-Code into CI/CD pipelines., • Solid understanding of DevSecOps principles, automated testing, and application security., • Experience implementing secure secrets management and identity integration., • Strong troubleshooting, automation, and scripting skills., • Excellent communication and collaboration skills. Preferred Qualifications: • Experience supporting enterprise financial services or other highly regulated environments., • Experience with Azure Kubernetes Service (AKS), Kubernetes, or other container orchestration platforms., • Experience with Terraform, Bicep, ARM Templates, or CloudFormation., • Familiarity with OpenID Connect (OIDC) and Workload Identity Federation., • Experience using AI-assisted developer tools such as Claude Code, GitHub Copilot, or similar enterprise AI coding platforms., • Experience driving CI/CD standardization and platform engineering initiatives across multiple development teams. The pay rate range for this position is $70 - $90 per hour If you have the described qualifications and are interested in this exciting opportunity, apply today! Genesis10 Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals. For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10: • Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years., • The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years., • Access to an experienced, caring recruiting team (more than 7 years of experience, on average.), • Behavioral Health Platform, • Medical, Dental, Vision, • Health Savings Account, • Voluntary Hospital Indemnity (Critical Illness & Accident), • Voluntary Term Life Insurance, • 401K, • Sick Pay (for applicable states/municipalities), • Commuter Benefits (Dallas, NYC, SF), • Remote opportunities available For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all our available career opportunities, please visit us at our website. Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. #LI-EA1 #DIG10-NY

Job DescriptionSenior Release Manager – Release Management & DevOps - Onsite Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications. As we continue to grow, we're looking for a skilled to join our dynamic team and contribute to our mission of transforming business processes through technology. This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential. Summary: Seeking a Senior Release Manager with 7–10 years of experience in Release Management and DevOps. The candidate should have strong hands-on experience with AWS, Jenkins, Groovy scripting, CI/CD pipeline creation, and deployment automation, along with strong stakeholder-management and communication skills. Role: Senior Release Manager – Release Management & DevOps Location: Jersey City, NJ Mode of Work: Hybrid (3 days from office is mandatory) Industry: Media / Entertainment / Streaming preferred Experience: 7–10 years Roles & Responsibilities: • Manage end-to-end software release planning, coordination, and production deployments., • Coordinate across Engineering, QA, DevOps/SRE, Product, and Infrastructure teams., • Manage release schedules, dependencies, risks, blockers, and Go/No-Go activities., • Create, maintain, and troubleshoot Jenkins CI/CD pipelines using Groovy., • Support application deployments and release activities across AWS environments., • Drive deployment automation and continuous improvement of release processes., • Coordinate hotfixes, rollback activities, and post-release validation., • Provide release status and risk updates to technical and business stakeholders.Mandatory Skills:, • 7–10 years of Release Management / DevOps experience., • Strong Release Management and CI/CD experience., • Hands-on Jenkins experience., • Strong Groovy scripting skills., • Experience creating and troubleshooting CI/CD pipelines., • Strong working knowledge of AWS and cloud deployments., • Strong communication, coordination, and stakeholder-management skills.Good to Have Skills:, • Media / Entertainment / Streaming industry experience., • Docker / Kubernetes., • Terraform / Infrastructure as Code., • Azure / GCP experience., • Jira, Confluence, ServiceNow., • DevSecOps experience. Would you like to know more about this opportunity? For immediate consideration, please send your resume directly to jaya@bvteck.com At BVTeck, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status. If you require accommodations during the recruitment process, please let us know. Position offered by "No Fee agency.”

Job Description Senior Azure Solution Architect Position Summary We re looking for a Senior Azure Solution Architect to lead the design, governance, and delivery of scalable cloud and application solutions on Microsoft Azure. This role partners with engineering, cybersecurity, infrastructure, data, and business teams to modernize platforms, improve operational resilience, and accelerate cloud adoption across the enterprise. The role requires strong knowledge of modern web application architecture across both frontend and backend technologies, along with the ability to align enterprise standards, business goals, and technical delivery. Key Responsibilities • Design end-to-end Azure architectures covering compute, networking, identity, storage, integration, security, and application services., • Analyze the current technology environment, enterprise standards, business requirements, and technical constraints to define scalable solution architectures., • Document functional, technical, integration, and non-functional requirements for cloud and application solutions., • Establish and lead collaboration frameworks across architecture, engineering, cybersecurity, infrastructure, and business teams., • Create solution prototypes, proof-of-concepts, and reference architectures to validate technical approaches., • Participate in technology evaluation and selection processes, including platforms, frameworks, integration patterns, and tooling., • Lead architecture and modernization efforts for enterprise web applications, APIs, microservices, and cloud-native platforms., • Define frontend and backend architecture standards for scalable, secure, and maintainable applications., • Guide development teams on best practices for responsive web applications, API design, authentication flows, state management, and performance optimization., • Architect secure solutions using Azure Entra ID, Key Vault, Defender for Cloud, Sentinel, and Zero Trust principles., • Oversee solution development to ensure alignment with architecture standards, security controls, scalability requirements, and business objectives., • Design and oversee CI/CD pipelines and Infrastructure as Code implementations using Terraform, Bicep, Azure DevOps, or GitHub Actions., • Support project and product management activities including technical planning, delivery coordination, risk management, and stakeholder communication., • Conduct architecture reviews, technical assessments, and cloud readiness evaluations., • Mentor architects and developers while driving technical standards and governance., • Evaluate emerging Azure and web development technologies and recommend adoption strategies aligned to business needs. Required Qualifications • 8 years of experience in IT architecture, infrastructure engineering, cloud development, software engineering, or solution architecture., • 5 years of hands-on Microsoft Azure architecture experience., • Strong experience designing and supporting modern web applications across frontend and backend stacks., • Solid experience in cloud engineering, software architecture design, business analysis, and DevOps practices., • Experience leading enterprise solution delivery across multiple teams and stakeholders., • Expertise with RESTful APIs, microservices, event-driven architectures, and distributed systems., • Experience with frontend frameworks such as React, Angular, or Vue.js., • Experience with backend technologies such as .NET, Node.js, Java, or Python., • Deep expertise in Azure services including App Services, AKS, Functions, API Management, Azure SQL, Cosmos DB, Storage, and Monitor., • Strong understanding of DevSecOps, CI/CD, Infrastructure as Code, automated testing, and release management practices., • Strong project management, product management, communication, and stakeholder engagement skills., • Knowledge of security frameworks, disaster recovery, high availability, and governance controls., • Bachelor s degree in Computer Science, Information Systems, Engineering, or related field. Preferred Qualifications • Azure Solutions Architect Expert certification., • Experience with container orchestration and Kubernetes in production environments., • Experience with multi-cloud environments (Azure, Google Cloud)., • Familiarity with enterprise architecture frameworks such as TOGAF., • Experience supporting regulated or large-scale enterprise environments.

Job Description Job Title: Director of Engineering Location: Hoboken, NJ Division: Technology Department: Engineering About Us Quantum Computing Inc. (QCi) (Nasdaq: QUBT) is an innovative, integrated photonics company that provides accessible and affordable quantum machines to the world today. QCi products are designed to operate at room temperature and low power at an affordable cost. The Company’s portfolio of core technology and products offer unique capabilities in the areas of high-performance computing, artificial intelligence, cyber security as well as remote sensing applications. Job Summary The Director of Engineering leads the engineering team to deliver high-quality, innovative, and scalable technology solutions aligned with the company's strategic goals. This role balances technical depth with leadership excellence, fostering a high-performance engineering culture while ensuring timely and successful execution of engineering projects. Key Responsibilities • Leadership & Strategy, • Define and drive the engineering roadmap in alignment with company goals., • Provide technical guidance, mentorship, and career development to engineering managers and engineers., • Collaborate with executive leadership, product, and operations to define priorities and scope., • Execution & Delivery, • Oversee project execution, ensuring delivery timelines, budget, and quality standards are met., • Establish and enforce engineering best practices, coding standards, and quality assurance processes., • Drive continuous improvement in development processes, tools, and systems., • Team Building & Talent Development, • Build and retain a world-class engineering team by recruiting, developing, and retaining top talent., • Promote a culture of ownership, innovation, and accountability., • Conduct regular performance evaluations and set growth objectives., • Cross-Functional Collaboration, • Partner closely with cross-functional teams of Tech leads, Product, Manufacturing and other teams to deliver cohesive product experiences., • Represent engineering team in strategic planning, business reviews, and customer engagements as needed., • Technology Oversight, • Stay current with technology trends and evaluate their applicability to business needs., • Make architectural decisions and oversee implementation of scalable, secure, and maintainable systems., • Champion the use of modern technologies and development methodologies (e.g., Agile, CI/CD, DevSecOps). Minimum Qualifications • Bachelor’s or Master’s degree in Engineering, Computer Science, or a related field., • 10+ years of engineering experience, including 3–5 years in a senior leadership role., • Proven experience leading distributed, high-performing engineering teams., • Strong understanding of systems architecture, software engineering, and development operations., • Excellent communication, collaboration, and decision-making skills., • Experience working in a fast-paced, scaling environment (e.g., startups, tech-focused enterprises). Preferred Qualifications • Experience with multiple engineering domains (FPGA, Embedded firmware, Software& applications, Electrical, Mechanical), • Background in deep tech industry (FPGA, Quantum, Silicon Photonics)., • Familiarity with budget management and vendor negotiations. Quantum Computing Inc. (QCi) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. Incumbent(s) in this position may be required to perform other duties and special assignments not specifically stated above. Statements outlined in this section are designated as essential job functions in accordance with the Americans with Disabilities Act of 1990.

Job Description Title: AI Data and Application Architect - Wealth Management Location: Remote Duration: 3 months, temp-to-perm for the right candidate Overview The role is responsible for designing and delivering end-to-end technology solutions that support wealth advisory, client engagement, portfolio management, and operational efficiency. This role partners with business and technology stakeholders to translate strategic objectives into scalable, secure, and compliant architectures across the wealth management ecosystem. Key Responsibilities • Solution Architecture & Design, • Define end-to-end solution architectures for wealth management platforms, including advisor tools, client portals, and operational systems., • Develop architecture blueprints, reference patterns, and roadmaps aligned with enterprise standards., • Ensure solutions are scalable, resilient, secure, and cloud enabled., • Wealth Management Platform Integration, • Architect integrations across CRM platforms (e.g., Salesforce FSC)., • Knowledgeable of integration patterns and solution designs including synchronous/asynchronous Web API, Graph API, API Gateways/Management, Messaging, and Event based architectures and streaming technologies., • Portfolio management and trading systems., • Financial planning tools., • Client onboarding/KYC platforms., • Enable seamless data flow across front, middle, and back-office systems., • Digital & Client Experience Enablement, • Design solutions supporting omnichannel client engagement (web, mobile, Conversational AI, advisor-assisted)., • Enable personalized client experiences through data-driven insights., • Support modernization of advisor desktop and digital workplace tools., • Data & Analytics Architecture, • Define architecture for client data platforms and 360°ree; views, investment analytics and reporting, data governance and lineage., • Collaborate with data teams on data lakes, warehouses, and real-time data streaming using Databricks, Snowflake, and Azure Data Fabric to build scalable and reusable solutions., • Define patterns for data quality, lineage, and governance, data partitioning, performance optimization, and cost efficiency., • AI, Automation & Innovation, • Integrate AI/ML capabilities: Advisor assist (Copilot, recommendations), Predictive analytics (client segmentation, next-best action), Document automation and workflow orchestration., • Identify and drive automation opportunities across wealth operations., • Collaborate with business and technical stakeholders to translate real-world research and workflow needs into AI-powered solutions that are measurable, reliable, and safe in production., • Knowledge of multi-agent workflows (planner/supervisor specialist agents) with explicit state management and routing, and interoperability via emerging agent protocols (MCP for tool integration, A2A for agent-to-agent delegation) designed for non-deterministic behavior and real operational constraints., • Security, Risk & Compliance, • Ensure adherence to financial services regulations (SEC, Client, GDPR)., • Incorporate data privacy, cybersecurity, and identity/access controls in all solutions., • Partner with risk and compliance teams on governance., • Knowledge, background, understanding of fundamental security concepts including data encryption, AuthN/AuthZ, SSO, and managed identities., • Delivery Oversight & Governance, • Provide architecture oversight across programs and projects., • Participate in Architecture Review Boards (ARB), ARC, and design reviews., • Ensure adherence to enterprise architecture standards and best practices., • Technology Ecosystem & Integration, • Define integration approaches using APIs and microservices, Event-driven architecture, Middleware and integration platforms., • Align solutions with cloud strategy (Azure/AWS), DevSecOps, and platform engineering. Required Qualifications • Education & Experience, • Bachelor's or Master's degree in Computer Science, Engineering, Finance, or related field., • 10 years of experience in solution or enterprise architecture., • Proven experience in wealth management or financial services domain., • Technical Expertise, • CRM platforms (Salesforce Financial Services Cloud preferred)., • Cloud platforms (Azure preferred; AWS/GCP acceptable)., • API/microservices architecture and integration patterns., • Data platforms (data lake-Databricks, warehouse, real-time streaming)., • AI Technologies – Azure Foundry, Claude, Open AI., • Security and identity frameworks., • Domain Expertise, • Deep understanding of wealth advisory lifecycle, retirement lifecycle, investment products (equities, fixed income, mutual funds, annuities), client onboarding, servicing, and reporting workflows. Preferred Qualifications • Experience with AI/GenAI solutions (Copilot, NLP, recommendation engines)., • Familiarity with advisor workstation modernization and digital workplace tools., • Knowledge of contact center platforms (e.g., Genesys)., • Industry certifications (TOGAF, Azure Architect, etc.). Key Competencies • Strategic and systems thinking., • Strong stakeholder engagement and executive communication., • Business–technology alignment., • Innovation mindset with focus on AI and automation., • Problem-solving and decision-making.