Trabajos nist en Bayonne, New JerseyCrear alertas

We are seeking a Sales Engineer to partner with a Named Account Manager in a defined territory. This role is designed for a technically strong but strategically minded individual who thrives in customer-facing engagements. The Systems Engineer will act as a trusted advisor, guiding large enterprise organizations through cybersecurity transformation initiatives that span SecOps, Zero Trust, cloud, and network security. Responsibilities • Partner with sales to qualify opportunities, define solution strategy, and align technical capabilities with customer business outcomes., • Lead discovery sessions, workshops, and security assessments that uncover operational and architectural requirements in complex enterprise environments., • Design and present secure architectures that incorporate networking, cloud, and SecOps components., • Serve as the primary technical expert in sales cycles, guiding enterprise accounts through evaluation and decision processes., • Advise on cybersecurity strategies such as Zero Trust, SASE, cloud security, and SecOps modernization., • Build and maintain long-term trusted relationships with C-level executives and senior leadership, positioning yourself as a strategic advisor., • Support smooth deployment transitions by working closely with professional services, support, and customer success teams., • Provide roadmap guidance, operational reviews, and strategic check-ins to reinforce customer value realization., • Continue as a trusted advisor to enterprise leadership, ensuring ongoing alignment of their evolving needs with solution capabilities. Required Skills & Experience • 5-8 years experience in pre-sales or systems engineering roles in enterprise-scale cybersecurity, networking, or cloud environments., • Strong understanding of networking (LAN/WAN, routing, switching, VPNs, TCP/IP) and core security protocols (IPSec, TLS/SSL, PKI, SAML, OAuth, RADIUS, etc.)., • Ability to articulate and design solutions across:, • SecOps modernization (SIEM, SOAR, XDR), • Zero Trust and SASE architectures, • Cloud and hybrid security (IaaS, SaaS, containerized workloads), • Identity and access management (MFA, SSO, PAM), • Excellent presentation, communication, and storytelling skills-capable of engaging both deeply technical audiences and executive decision-makers., • Proven track record of leading architectural discussions and aligning technical solutions with business priorities at the enterprise level. Preferred Qualifications • Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience)., • Industry certifications such as CISSP, CCSP, or vendor-specific credentials (e.g., NSE, CCNP Security, AWS Security Specialty)., • Experience in consulting or advisory roles for large enterprise customers, especially in CISO/CIO-level conversations., • Familiarity with compliance and security frameworks (MITRE ATT&CK, NIST CSF, ISO 27001, SOC 2). Why Join Us This is an opportunity to operate at the intersection of cybersecurity strategy, executive engagement, and customer success, influencing large-scale enterprise organizations as they modernize operations and adopt cutting-edge solutions. If you excel at combining technical depth with executive presence, this role will allow you to shape customer outcomes while growing your career in a dynamic security landscape. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program. Wage ranges are based on various factors including the labor market, job type, and job level. On target earnings for this position is expected to be $235,000 - $375,000 per year. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location. All roles are eligible to participate in the Fortinet equity program, and this position is also eligible for commissions based on the terms of the Sales Compensation Plan

We are seeking a Technical Project Manager to support a new, large-scale government cloud initiative delivering a secure, hybrid Microsoft Azure environment (on-prem + cloud). This is a program-level role focused on driving execution across multiple technical workstreams within a highly regulated enterprise environment. This role requires strong governance discipline, cloud fluency (conceptual Azure knowledge), and the ability to drive cross-functional teams to deliver on time. Key Responsibilities • Coordinate across 7–8 technical workstreams (2–3 assigned per PM), • Drive execution across Cloud Engineering, Identity & Access, Security, Network, Database, and Risk & Compliance teams, • Own RAID management, milestone tracking, and change control, • Provide executive-level reporting and risk escalation, • Remove blockers and enforce accountability, • Ensure operational readiness and structured handoff to support teams, • Maintain documentation in Jira and Confluence Required Experience • 8+ years of enterprise project management experience, • Experience delivering large-scale cloud programs (Azure strongly preferred), • Strong governance and executive reporting background, • Proven ability to manage cross-functional technical teams, • Conceptual understanding of Azure architecture and hybrid deployments, • Proficiency with Jira and Confluence Preferred • Government program experience, • Familiarity with FedRAMP, NIST, or compliance-driven environments, • PMP or PRINCE2 certification, • Technical background transitioning into project management

Responsibilities: • Own security architecture and control frameworks across self-built data centers, OCI, AWS, Azure, and GCP in hybrid/multi-cloud environments., • Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM for infrastructure., • Lead threat modeling and architecture reviews to identify and mitigate risks before production., • Embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines., • Build scalable IaC frameworks to enforce security baselines and eliminate configuration drift., • Partner with engineering, infrastructure, and business teams to shift security left in the design lifecycle., • Drive control maturity through regular assessments and a roadmap focused on automation and operational efficiency. Minimum Qualifications: • Proven expertise in designing and implementing security controls across Hybrid and Multi-Cloud environments (e.g., Data Centers, AWS, Azure, GCP, OCI)., • Hands-on experience with key cloud security tooling and concepts (CSPM, CNAPP, CASB, DLP)., • Solid experience with threat modeling, risk assessment methodologies, and security validation techniques., • Demonstrated ability to automate security control implementation and validation using tools or scripting., • 5+ years of professional experience in cybersecurity, with a primary focus on cloud and infrastructure security., • Master’s degree in a technical field or holding a relevant professional security certification (e.g., CISSP, CCSP, CCSK, or Cloud Security Specialty certifications)., • Proven experience working within a large-scale, global enterprise or highly agile, fast-paced technology environment., • Deep hands-on experience developing internal security tools and utilities in Python or Go for security validation, observability, and enforcement across hybrid cloud landscapes., • Deep familiarity with securing modern infrastructure technologies, including containerization (Kubernetes/Docker), Zero Trust Architecture, SASE, and CI/CD security integration., • Demonstrated expertise in advanced automation and validation techniques, such as Policy-as-Code (e.g., OPA/Rego, Sentinel) and continuous control validation platforms.

About the Role We are seeking a Bilingual Global Incident Response (GIR) Analyst to join a large, enterprise-level security operations team supporting a global environment. This is a hands-on incident response role where you will actively investigate, analyze, and respond to cybersecurity threats across multiple systems and regions. This position is ideal for someone who thrives in a fast-paced SOC/IR environment and is passionate about identifying and mitigating real-time security threats. Key Responsibilities • Investigate and respond to cybersecurity incidents across enterprise environments, • Analyze security artifacts to determine attack vectors and recommend remediation, • Monitor, triage, and escalate security alerts from SIEM and other tools, • Correlate data across multiple sources (logs, endpoints, network traffic) to identify threats, • Perform threat hunting, forensic analysis, and root cause investigations, • Remediate compromised systems and restore to a secure state, • Develop and improve incident response playbooks, detections, and automation, • Support security monitoring across Windows, Linux, MacOS, and cloud environments, • Create reports on security incidents, trends, and emerging threats, • Partner with compliance, risk, and audit teams to ensure adherence to security frameworks, • Assist with internal and external investigations as needed, • Stay current on evolving threats, vulnerabilities, and industry best practices Required Qualifications • Fluent in Japanese and English (required), • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, • 5+ years of experience in Cybersecurity Operations, Incident Response, or Information Security, • Hands-on experience with incident detection, investigation, and response, • Strong understanding of operating systems (Windows, Linux, MacOS) and cloud environments, • Experience with SIEM, EDR, and security monitoring tools, • Knowledge of common attack methods and threat vectors, • Strong analytical, problem-solving, and communication skills Preferred Qualifications • Industry certifications (CISSP, GIAC, GCIH, GCFA, CEH, CISM, etc.), • Experience with threat hunting and digital forensics, • Familiarity with security frameworks (NIST, ISO 27001, SOC2, FFIEC, etc.), • Experience supporting audits, risk assessments, and compliance initiatives, • Prior experience mentoring junior analysts or contributing to team processes What You’ll Get • 4-day work week (better work-life balance), • Opportunity to work in a global, enterprise security environment, • Hands-on exposure to real-world cybersecurity incidents, • Collaborative, fast-paced team environment

Senior Technology Risk Management Associate Location: New York (Hybrid – 3 days onsite) I’m working with a well-established global alternative investment firm that is looking to add a Senior Technology Risk Management Associate to their technology organization. This role sits at the intersection of technology, security, and risk, working closely with infrastructure, security, and business teams to help strengthen governance and risk management practices across the environment. The position is a mix of hands-on risk assessment, audit support, and process improvement, with exposure to both traditional infrastructure and cloud-based systems. What You’ll Be Doing • Partner with technology and security teams to identify and manage technology risks, • Support external audits and regulatory reviews, including documentation and walkthroughs, • Evaluate technology controls and security processes and help improve them, • Conduct risk assessments of applications, infrastructure, and third-party services, • Track and coordinate risk remediation efforts with internal teams, • Help maintain an inventory of systems and services while identifying potential control gaps, • Contribute to automation and process improvement initiatives, • ~5+ years of experience in technology risk, information security, IT audit, or compliance, • Strong understanding of technology environments (infrastructure, applications, cloud), • Experience working with risk frameworks or audit processes, • Ability to translate technical risks into business impact, • Exposure to cloud environments (Azure or AWS), • Familiarity with Windows infrastructure or database environments, • Experience with automation or scripting (PowerShell or Python), • Knowledge of frameworks like SOC, ISO, NIST, or SOX Base salary typically falls in the $150k – $175k range, plus bonus and strong benefits. The Phoenix Group Advisors is an equal opportunity employer. We are committed to creating a diverse and inclusive workplace and prohibit discrimination and harassment of any kind based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. We strive to attract talented individuals from all backgrounds and provide equal employment opportunities to all employees and applicants for employment.

Position Summary: The Scientific Computing and Data group at the Icahn School of Medicine at Mount Sinai partners with scientists to accelerate scientific discovery. To achieve these aims, we support a cutting-edge high-performance computing and data ecosystem along with MD/PhD-level support for researchers. The group is composed of a high-performance computing team, a clinical data warehouse team and a data services team. The Lead HPC Architect, Cybersecurity, High Performance Computational and Data Ecosystem, is responsible for designing, implementing, and managing the cybersecurity infrastructure and technical operations of Scientific Computing’s computational and data science ecosystem. This ecosystem includes a 25,000+ core and 40+ petabyte usable high-performance computing (HPC) systems, clinical research databases, and a software development infrastructure for local and national projects. The HPC system is the fastest in the world at any academic biomedical center (Top 500 list). To meet Sinai’s scientific and clinical goals, the Lead brings a strategic, tactical and customer-focused vision to evolve the ecosystem to be continually more resilient, secure, scalable and productive for basic and translational biomedical research. The Lead combines deep technical expertise in cybersecurity, HPC systems, storage, networking, and software infrastructure with a strong focus on service, collaboration, and strategic planning for researchers and clinicians throughout the organization and beyond. The Lead is an expert troubleshooter, productive partner and leader of projects. The lead will work with stakeholders to make sure the HPC infrastructure is in compliance with governmental funding agency requirements and to promote efficient resource utilizations for researchers This position reports to the Director for HPC and Data Ecosystem in Scientific Computing and Data. Key Responsibilities: HPC Cybersecurity & System Administration: • Design, implement, and manage all cybersecurity operations within the HPC environment, ensuring alignment with industry standards (NIST, ISO, GDPR, HIPAA, CMMC, NYC Cyber Command, etc.)., • Implement best practices for data security, including but not limited to encryption (at rest, in transit, and in use), audit logging, access control, authentication control, configuration managements, secure enclaves, and confidential computing., • Perform full-spectrum HPC system administration: installation, monitoring, maintenance, usage reporting, troubleshooting, backup and performance tuning across HPC applications, web service, database, job scheduler, networking, storage, computes, and hardware to optimize workload efficiency., • Lead resolution of complex cybersecurity and system issues; provide mentorship and technical guidance to team members., • Ensure that all designs and implementations meet cybersecurity, performance, scalability, and reliability goals. Ensure that the design and operation of the HPC ecosystem is productive for research., • Lead the integration of HPC resources with laboratory equipment for data ingestion aligned with all regulatory such as genomic sequencers, microscopy, clinical system etc., • Develop, review and maintain security policies, risk assessments, and compliance documentation accurately and efficiently., • Collaborate with institutional IT, compliance, and research teams to ensure all regulatory, Sinai Policy and operational alignment., • Design and implement hybrid and cloud-integrated HPC solutions using on-premise and public cloud resources., • Partner with other peers regionally, nationally and internationally to discover, propose and deploy a world-class research infrastructure for Mount Sinai., • Stay current with emerging HPC, cloud, and cybersecurity technologies to keep the organization’s infrastructure up-to-date., • Work collaboratively, effectively and productively with other team members within the group and across Mount Sinai., • Provide after-hours support as needed., • Perform other duties as assigned or requested. Requirements: • Bachelor’s degree in computer science, engineering or another scientific field. Master's or PhD preferred., • 10 years of progressive HPC system administration experience with Enterprise Linux releases including RedHat/CentOS/Rocky Systems, and batch cluster environment., • Experience with all aspects of high-throughput HPC including schedulers (LSF or Slurm), networking (Infiniband/Gigabit Ethernet), parallel file systems and storage, configuration management systems (xCAT, Puppet and/or Ansible), etc., • Proficient in cybersecurity processes, posture, regulations, approaches, protocols, firewalls, data protection in a regulated environment (e.g. finance, healthcare)., • In-depth knowledge HIPAA, NIST, FISMA, GDPR and related compliance standards, with prove experience building and maintaining compliant HPC system, • Experience with secure enclaves and confidential computing., • Proven ability to provide mentorship and technical leadership to team members., • Proven ability to lead complex projects to completion in collaborative, interdisciplinary settings with minimum guidance., • Excellent analytical ability and troubleshooting skills., • Excellent communication, documentation, collaboration and interpersonal skills. Must be a team player and customer focused., • Scripting and programming experience. Preferred Experience • Proficient with cloud services, orchestration tools, openshift/Kubernetes cost optimization and hybrid HPC architectures., • Experience with Azure, AWS or Google cloud services., • Experience with LSF job scheduler and GPFS Spectrum Scale., • Experience in a healthcare environment., • Experience in a research environment is highly preferred., • Experience with software that enables privacy-preserving linking of PHI., • Experience with Globus data transfer., • Experience with Web service, SAP HANA, Oracle, SQL, MariaDB and other database technologies. Strength through Unity and Inclusion The Mount Sinai Health System is committed to fostering an environment where everyone can contribute to excellence. We share a common dedication to delivering outstanding patient care. When you join us, you become part of Mount Sinai’s unparalleled legacy of achievement, education, and innovation as we work together to transform healthcare. We encourage all team members to actively participate in creating a culture that ensures fair access to opportunities, promotes inclusive practices, and supports the success of every individual. At Mount Sinai, our leaders are committed to fostering a workplace where all employees feel valued, respected, and empowered to grow. We strive to create an environment where collaboration, fairness, and continuous learning drive positive change, improving the well-being of our staff, patients, and organization. Our leaders are expected to challenge outdated practices, promote a culture of respect, and work toward meaningful improvements that enhance patient care and workplace experiences. We are dedicated to building a supportive and welcoming environment where everyone has the opportunity to thrive and advance professionally. Explore this opportunity and be part of the next chapter in our history. About the Mount Sinai Health System: Mount Sinai Health System is one of the largest academic medical systems in the New York metro area, with more than 48,000 employees working across eight hospitals, more than 400 outpatient practices, more than 300 labs, a school of nursing, and a leading school of medicine and graduate education. Mount Sinai advances health for all people, everywhere, by taking on the most complex health care challenges of our time — discovering and applying new scientific learning and knowledge; developing safer, more effective treatments; educating the next generation of medical leaders and innovators; and supporting local communities by delivering high-quality care to all who need it. Through the integration of its hospitals, labs, and schools, Mount Sinai offers comprehensive health care solutions from birth through geriatrics, leveraging innovative approaches such as artificial intelligence and informatics while keeping patients’ medical and emotional needs at the center of all treatment. The Health System includes more than 9,000 primary and specialty care physicians; 13 joint-venture outpatient surgery centers throughout the five boroughs of New York City, Westchester, Long Island, and Florida; and more than 30 affiliated community health centers. We are consistently ranked by U.S. News & World Report's Best Hospitals, receiving high "Honor Roll" status. Equal Opportunity Employer The Mount Sinai Health System is an equal opportunity employer, complying with all applicable federal civil rights laws. We do not discriminate, exclude, or treat individuals differently based on race, color, national origin, age, religion, disability, sex, sexual orientation, gender, veteran status, or any other characteristic protected by law. We are deeply committed to fostering an environment where all faculty, staff, students, trainees, patients, visitors, and the communities we serve feel respected and supported. Our goal is to create a healthcare and learning institution that actively works to remove barriers, address challenges, and promote fairness in all aspects of our organization.

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! The Enterprise Account Executive is responsible for actively driving and managing new direct and channel business with large enterprise prospects, 5,000 employees and up. We are looking for a candidate who combines a sales background with the technical skills of an engineer. Strong sales skills are a must, and the ability to lead the prospects through the sales cycle without additional technical assistance. The ideal candidate should have a strong technical background. Responsibilities: • Hunt, develop, and close new business opportunities, • Delivery of high-level and detailed sales presentations, • Respond to functional and technical elements of RFIs/RFPs, • Provide functional and technical support to prospects and customers, • Responsible for attending conferences, seminars virtually, in-region and nationally, • Ability to manage a realistic sales funnel, follow up on inbound leads quickly, and cold call into large Fortune 500 / S&P 500 size organizations Qualifications: • Ideal candidate must be self-motivated with strong knowledge in security and compliance space: Vulnerability Management, Policy Compliance, Web Application Scanning, Threat Hunting / EDR, File Integrity Monitoring, and other enterprise security solutions. Strong track record of hunting, consulting, and closing new business, • Experience with Qualys is a plus, but not required, • Familiarity with compliance benchmarks such as CIS level 1 & 2, PCI, HIPAA, HITRUST, NERC, CIP, NIST, etc., • Must possess strong presentation skills and be able to communicate professionally in response to emails, RFPs and when submitting reports, • 5-7 years relevant experience, • Excellent written and oral communication skills, • Able to travel throughout sales territory, • Able to comfortably present to prospects and clients using video conferencing solutions in a work-from-home environment #LI-REMOTE The salary range for this position is $245,000 - $275,000 [OTE] per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects both base salary and incentive compensation but does not include potential equity grants. We also offer a comprehensive and highly competitive benefits package. Qualys is an Equal Opportunity Employer, please see our ___.

Fortinet is seeking a Consulting Data Security Architect within the Advanced Consulting Security Engineering (CSE) organization. This role serves as a senior technical authority supporting strategic data security initiatives across endpoint, user risk, and data protection domains. The position partners closely with Product Management, Field Sales, Professional Services, and customers to deliver high-impact proof-of-concept engagements, advanced architectural designs, and sales enablement. This is a hands-on engineering and architecture role requiring deep operating system knowledge, data security domain expertise, scripting and automation proficiency, and the ability to translate complex business requirements into secure, scalable technical designs. Responsibilities • Architect and design complex data security and endpoint protection environments, • Develop and maintain automation scripts for endpoint and agent deployment, • Translate regulatory and business requirements into enforceable technical policy frameworks, • Develop reference architectures and best-practice deployment patterns, • Lead technical sales engagements in collaboration with Field SEs and Account Teams, • Develop and deliver technical enablement and training programs, • Support Product Management with market-driven feature prioritization, • Provide technical mentorship across the CSE organization Technical Protocol & Security Specificity Requirements • Encryption at Rest: BitLocker, LUKS, FileVault, EFS, TPM integration, Secure Boot chains, • Endpoint OS Internals (Linux): SELinux, AppArmor, eBPF, inotify, PAM, Auditd, POSIX ACLs, • macOS Security: Endpoint Security Framework, System Extensions, TCC Experience Requirements • 5-10 years of experience in data security, endpoint protection, or user risk solutions, • Strong scripting and automation capabilities (Python, PowerShell, Bash), • Deep Windows and Linux operating system knowledge; macOS familiarity, • Experience designing secure enterprise architectures across hybrid environments, • Ability to communicate complex engineering decisions to executive and technical stakeholders Preferred Qualifications • Experience with Fortinet solutions including FortiDLP, • Experience with competitive platforms (Cyberhaven, CrowdStrike, Symantec), • Public cloud architecture experience (AWS, Azure, GCP), • Technical sales leadership and engineering mentorship experience Education • Advanced degree preferred Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program. Wage ranges are based on various factors including the labor market, job type, and job level. On target earnings for this position is expected to be $185,000 - $315,000 per year. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location. All roles are eligible to participate in the Fortinet equity program, and this position is also eligible for commissions based on the terms of the Sales Compensation Plan

Posting Type Hybrid Job Overview At Relativity we make software to help users organize data, discover the truth, and act on it. Our e-discovery platform is used by more than 13,000 organizations around the world to manage large volumes of data and quickly identify key issues during litigation, internal investigations, and compliance projects. The Product Management team is looking for a Product Manager to drive security strategy and shape the future of our platform. In this pivotal role, you'll define the vision for our security capabilities, anticipate emerging threats and market opportunities, and collaborate across the organization to deliver a best-in-class security platform that customers trust and rely on. Job Description and Requirements Role Responsibilities * Good understanding of cloud native security. Speaks to our technical implementation in a way that internal stakeholders and clients can understand. * Owns product roadmap for Cloud Security, Identity Access Management and the Security Center features of RelativityOne * Works directly with Security Leads to help build a strategy and goals for all areas of security with a specific emphasis on the following domains:Azure Policies, Cyber Operations tools, Kubernetes role management, Identity & Access management platforms such as Okta and Microsoft Entra, Privileged Access Management tooling, Azure Cloud Security Posture Management, RelativityOne Security Center application, Microsoft 365 Security Suite * Define and execute the product roadmap for our platform's security capabilities * Translate complex technical capabilities into compelling value propositions for diverse audiences. * Align stakeholders around a unified security vision and priorities. * Familiarity with security frameworks like NIST, ISO 27001, or OWASP * Proactively identify security gaps before they become industry-wide problems, build products that customers advocate for, and establish Relativity as the most trusted, scalable, and innovative security platform in the eDiscovery industry. * Understand technical requirements for completion of new initiatives and ensure team is set up for success. * Operate as an indirect leader, facilitating communication across internal stakeholders and effectively communicate 'why' and gain buy in. Also responsible for driving conflict resolution amongst product development stakeholders. * Provide direct feedback to peers and be skilled at understanding multiple points of view. Preferred qualifications: * Generates excitement and curiosity when working with highly complex systems. * Is a team player with proven ability to deliver features from inception to delivery. * Excellent written and verbal communication skills. * Detail-oriented, enthusiastic self-starter with ability to work both independently and in a team environment. * Knowledge of Cloud Infrastructure * Expertise in Information Security * Strong project manager able to handle multiple projects simultaneously. * Strong facilitation and analysis skills. * Strong business acumen. Minimum qualifications: * 5+ years of experience in product management at a technology company. * Solid understanding of software development lifecycle and agile methodologies. * Knowledge and experience doing discovery & usability testing to gather customer feedback. Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $115,000 and $173,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position. Required Skills: Agile Methodology, Cross-Functional Teamwork, Market Research, Market Strategy, Product Lifecycle, Product Lifecycle Management (PLM), Product Management, Product Strategies, Stakeholder Management, Team Leadership

Posting Type Hybrid/Remote Job Overview At Relativity we make software to help users organize data, discover the truth, and act on it. Our e-discovery platform is used by more than 13,000 organizations around the world to manage large volumes of data and quickly identify key issues during litigation, internal investigations, and compliance projects. The Senior Manager of Enterprise Security is responsible for leading the strategy, execution, and continuous improvement of the organization's enterprise-wide security programs. This role oversees teams accountable for protecting corporate systems, data, and infrastructure from emerging threats, while enabling the business to operate securely and efficiently. The Senior Manager partners closely with Technology, Legal, Compliance, and business leaders to reduce risk, operationalize security controls, and mature organizational security posture. Job Description and Requirements Role Responsibilities Strategic Leadership * Develop and execute the enterprise security strategy aligned with organizationalobjectives. * Identifyrisks, emerging threats, and industry trends to inform longrange security planning. * Establish metrics, KPIs, and dashboards to measure and report on security posture and program maturity. * Champion a securitybydesign mindset across the enterprise. Team & Program Management * Lead, mentor, and grow a multidisciplinary security teamwhile partnering withother securityareas such as security operations, incident response, threat intelligence, identity security, vulnerability management, cloud security, and GRC. * Drive operational excellence through structured processes, documentation, automation, and continuous improvement. * Oversee securityprogramroadmaps, annual planning, staffing needs, and budget management. Security Operations & Risk Reduction * Createenterprise detection and response capabilitiesthatare fully operational by overseeing proper onboarding and configuration of security agents and tooling,validatingcoverage across all relevant environments, and ensuring telemetry, alerts, and data flows are reliable, complete, and actionable. * Executeenterprise vulnerability management programs, ensuringtimelyremediation of weaknesses across infrastructure, cloud, and enduser environments. * Oversee identity and access governance programs, including privileged access, identity lifecycle, and authentication standards. * Manage enterprise security tooling and technologies, ensuring the stack is integrated,optimized, and delivering measurable value. Governance, Compliance & Policy * Own and evolve security policies, standards, and guidelines to meet internal and external requirements. * Partner with Compliance and Legal to support audits, certifications, investigations, and regulatory obligations (e.g., SOC2, ISO27001, HIPAA, GDPR). * Drive alignment between risk management processes and business operations. CrossFunctional Collaboration * Serve as a trusted advisor to executives and business leaders on security risks and tradeoffs. * Embed security into technology roadmaps, product lifecycles, enterprise architecture, and vendor management. * Promote security awareness and training programs to strengthen organizational security culture. Minimum Qualifications * Minimum of5years ofprogressiveexperience in security, preferably in a high-security environment, with at least 5 yearsina leadershiprole. * Demonstrated ability to communicate security risks and strategies toexecutivesand nontechnical audiences. * Strong understanding of security frameworks (NIST CSF, ISO 27001, CIS Controls, Zero Trust). * Proven experience inmanaging multiple securityinitiativessimultaneously. * Hybrid-working role (2+ days in office)orRemotebased on company policy. Preferred Qualifications * Bachelor's degree in security management, business administration, Computer Science, Information Systems, or relatedfield. * Experience working in a SaaS, cloud-native, or regulatedenvironmentoperatingona global scale. * Experience in the legal space and with a high understanding of e-discovery and litigation. * Certificationsa plus,such as CISSP, CISM, GIAC, CCSP, or similar. * Generate excitement and curiosity when working withhighly complexsystems. * Team player with proven ability to deliver features from inception to delivery. * Excellent written and verbal communication skills. * Detail-oriented, enthusiastic self-starter with ability to work both independently and in a team environment. * Solid understanding of software development lifecycle and agile methodologies. * Knowledge and experience doing discovery & usability testing to gather customer feedback. Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $185,000 and $277,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position. Required Skills: Access Management, Network Security, Project Management, Risk Management, Security Architecture Design, Security Audit, Security Awareness, Security Engineering, Security Operations, Vulnerability Management

Presidio, Where Teamwork and Innovation Shape the Future AtPresidio, we're at the forefront of a global technology revolution, transforming industries throughcutting-edge digital solutions and next-generation AI. We empower businesses-and their customers-to achieve more through innovation, automation, and intelligent insights. The Role Presidio has an exciting opportunity for a Security Practice Lead to join our Cybersecurity National Practice. This individual's primary responsibility is to act as subject matter expert for Presidio's Cybersecurity Solutions, driving overall Cybersecurity service (consulting and vSOC) and product (market leading OEM's/ISV's) revenue, and leading Cybersecurity field enablement in region by working closely with the broader Presidio Sales and Engineering organization. Travel Requirements: 20-25% travel Responsibilities Include: • Proactively engage with clients as a trusted advisor to understand security challenges and requirements and identify how they can be addressed by Presidio and partner solutions., • Provide pre-sales support in collaboration with sales teams and ensure product and service selection meets customers' business and technology needs., • Present and articulate Presidio security value proposition to clients (including C-suite, with an emphasis on the CISO) on both a technical and business level., • Effectively communicate the capabilities of Presidio security services., • Proactively monitor and assess industry/technology advancements and alliances, looking for ways to leverage existing capabilities and emerging technologies., • Define requirements, solutions and value propositions to hand off to Solutions Architects., • Work with Account Managers and Sales Directors to proactively establish presence in key client accounts., • Develop security solution profiles for top accounts and identify key influencers and decision-makers., • Own and develop relationships with key vendor contacts to stay current on vendor updates and to facilitate account mapping, deal registration, discounting and escalations., • Conduct security trainings to build outside sales team's security and lead qualification capabilities., • Work with Presidio Cybersecurity team to identify opportunities for consulting and hardware/software integration services., • Monitor competition by gathering current marketplace information on pricing, products, services, and delivery schedule., • Professional security-related qualifications such as CISSP, CISM, CRISC, CISA, GIAC or equivalent are highly desirable., • Working knowledge and familiarity with GRC and Offensive Security consulting services (e.g., penetration testing, PCI audit, security assessment) is highly desirable (pre-sales perspective)., • Working knowledge and familiarity with Virtualization and Cloud technology is desirable., • Broad experience and understanding of industry standards, framework and best practices such as ISO27001, PCI DSS, NIST, etc., • Broad experience and understanding of security trends, threat landscape and frameworks like the cyber kill-chain., • Ability to listen and communicate effectively with vendors, prospects, clients, account managers and management., • Experience in vulnerability analysis procedures and deliverables., • Bachelor's degree or relevant work or military experience, • 5-10+ years of experience in IT Security and / or Managed Security Services., • Experience in providing guidance in strategic, program and project initiatives in cyber security., • Bachelor's degree in technology or sales related field Ready to innovate? Let's redefine what's next-together. About Presidio Presidio is committed to hiring the most qualified candidates to join our amazing culture. We aim to attract and hire top talent from all backgrounds, including underrepresented and marginalized communities. We encourage women, people of color, people with disabilities, and veterans to apply for open roles at Presidio. Diversity of skills and thought is a key component to our business success. At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit ___ Applications will be accepted on a rolling basis. Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state and local statutes, regulations and ordinances. To read more about discrimination protections under Federal Law, please visit: ___ If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to ___ for assistance. Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to ___. Notice to Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs. #LI-LM1 Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the ___ notice from the Department of Labor.

As the leading data and evaluation partner for frontier AI companies, Scale plays an integral role in understanding the capabilities and safeguarding AI models and systems. Building on this expertise, Scale Labs has launched a new team focused on policy research, to bridge the gap between AI research and global policymakers to make informed, scientific decisions about AI risks and capabilities. Our research tackles the hardest problems in agent robustness, AI control protocols, and AI risk evaluations to help governments, industry, and the public understand and mitigate AI risk while maximizing AI adoption. This team collaborates broadly across industry, the public sector, and academia and regularly publishes our findings. We are actively seeking talented researchers to join us in shaping this vision. As a Research Scientist focused on Frontier Risk Evaluations, you will design and create evaluation measures, harnesses and datasets for measuring the risks posed by frontier AI systems. For example, you might do any or all of the following: • Design and build harnesses to test AI models and systems (including agents) for dangerous capabilities such as security vulnerability exploitation, CBRN uplift, and other high-risk activities;, • Work with government agencies or other labs to collectively scope and design evaluations to measure and mitigate risks posed by advanced AI systems;, • Commitment to our mission of promoting safe, secure, and trustworthy AI deployments in the industry as frontier AI capabilities continue to advance., • Practical experience conducting technical research collaboratively. You should be comfortable building and instrumenting ML pipelines, writing evaluation harnesses, and quickly turning new ideas from the research literature into working prototypes., • A track record of published research in machine learning, particularly in generative AI., • At least three years of experience addressing sophisticated ML problems, whether in a research setting or in product development., • Experience in crafting evaluations and benchmarks, or a background in data science roles related to LLM technologies., • Experience with red-teaming or adversarial testing of AI systems. Compensation packages at Scale for eligible roles include base salary, equity, and benefits. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position, determined by work location and additional factors, including job-related skills, experience, interview performance, and relevant education or training. Scale employees in eligible roles are also granted equity based compensation, subject to Board of Director approval. Your recruiter can share more about the specific salary range for your preferred location during the hiring process, and confirm whether the hired role will be eligible for equity grant. You'll also receive benefits including, but not limited to: Comprehensive health, dental and vision coverage, retirement benefits, a learning and development stipend, and generous PTO. Additionally, this role may be eligible for additional benefits such as a commuter stipend. Please reference the job posting's subtitle for where this position will be located. For pay transparency purposes, the base salary range for this full-time position in the locations of San Francisco, New York, Seattle is:$216,000—$270,000 USD PLEASE NOTE:Our policy requires a 90-day waiting period before reconsidering candidates for the same role. This allows us to ensure a fair and thorough evaluation of all applicants. About Us: At Scale, our mission is to develop reliable AI systems for the world's most important decisions. Our products provide the high-quality data and full-stack technologies that power the world's leading models, and help enterprises and governments build, deploy, and oversee AI applications that deliver real impact. We work closely with industry leaders like Meta, Cisco, DLA Piper, Mayo Clinic, Time Inc., the Government of Qatar, and U.S. government agencies including the Army and Air Force. We are expanding our team to accelerate the development of AI applications. We believe that everyone should be able to bring their whole selves to work, which is why we are proud to be an inclusive and equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability status, gender identity or Veteran status. We are committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. If you need assistance and/or a reasonable accommodation in the application or recruiting process due to a disability, please contact us at . Please see the United States Department of Labor's ___ for additional information. We comply with the United States Department of Labor's ___. PLEASE NOTE: We collect, retain and use personal data for our professional business purposes, including notifying you of job opportunities that may be of interest and sharing with our affiliates. We limit the personal data we collect to that which we believe is appropriate and necessary to manage applicants' needs, provide our services, and comply with applicable laws. Any information we collect in connection with your application will be treated in accordance with our internal policies and programs designed to protect personal data. Please see our ___ for additional information.

Manager of Identity and Access Management ("IAM") Cooley is seeking a Manager of Identity & Access Management to join the Security team. Position summary: Cooley Technology embraces a culture of customer service excellence, and all members of the department are expected to move this agenda forward. To that end the Manager of Identity and Access Management ("IAM") leads the firm's identity and access management program, providing strategic direction and operational oversight across identity platforms and access controls. This role is accountable for Microsoft Entra ID (Azure AD), Active Directory, Privileged Access Management, Identity Governance, Cloud Identity ("AWS"), and Certificate Lifecycle Management. IAM Management ensures secure, compliant, and efficient access to firm systems, applications, and data by managing user identities, authentication, authorization, and lifecycle processes. This role partners closely with Cyber Security, Technology, HR, and business stakeholders to reduce risk, support regulatory and audit requirements, and enable business operations. This hands-on leadership role will provide both strategic direction and day-to-day operational management. Specific duties and responsibilities include, but are not limited to, the following: Position responsibilities: • Lead the firm's Identity and Access (IAM) program, defining strategy, multi-year roadmap, and operating model across workforce, privileged, cloud, and directory identities, • Provider overall ownership of IAM risk, governance, and control effectiveness, ensuring access to systems and data is secure, compliant, and auditable, • Act as the primary IAM authority and escalation point, partnering with Cybersecurity, Technology, HR, and business stakeholders to enable access while reducing security and operational risk, • Oversee Microsoft Entra ID (Azure AD) and on-prem Active Directory, including identity lifecycle management, authentication and authorization models, directory hygiene, and enterprise account management processes, • Lead the Privileged Access Management ("PAM") program, including privileged account onboarding, credential vaulting and rotation, access approvals, break-glass procedures, and ongoing governance aligned to least privileged principles, • Establish and operate identity governance processes, including joiner/mover/leaver workflows, access requests, periodic access reviews, exception handling, and remediation tracking, • Define and enforce authentication standards including MFA strategy, coverage, exceptions, and conditional access controls, across workforce and privileged identities, • Define and govern cloud identity practices, with a focus on Entra ID and AWS IAM roles, policies, federation patterns, and secure access models for human and workload identities, • Own certificate lifecycle management, including inventory, ownership assignment, issuance standards, renewals, revocation, and automation to prevent outages and reduce cryptographic risk, • Establish IAM operational cadence and metrics, including intake and prioritization, change coordination, incident support, KPI reporting, and continuous process improvement, • Manage IAM vendors, tooling, documentation, and runbooks, ensuring solutions remain effective, scalable, and aligned with firm standards and evolving security needs, • Ensure high availability and resilience of IAM services to support 24/7 global legal operations, • Serve as direct supervisor and mentor to direct reports, • Provide day-to-day supervision of direct reports, ensure compliance with assigned work hours and monitor for compliance with all firm and department policies. Manage staffing coverage, review and process time logs/time off requests, • Support business professional development and continued educational opportunities, • In collaboration with immediate supervisor and central HR, participate in hiring, performance appraisals, counseling, termination and other employee lifecycle events, • All other duties as assigned or required Skills and experience: Required: • After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications, • Ability to work extended and/or weekend hours, as required, • Ability to travel, as required, • 5+ years applicable experience in the field (e.g., in Identity and Access Management (IAM), cybersecurity or related technical disciplines, with progressive responsibility across identity platforms and access controls). Senior candidates must have 7+ years experience., • Experience leading IAM programs, including setting priorities, managing delivery, and partnering across security, technology and business functions, • Demonstrated experience defining and executing IAM strategies and roadmaps, translating risk and regulatory requirements into scalable identity solutions, • Strong working knowledge of authentication and authorization models, including MFA strategy, conditional access controls, exception management, and legacy authentication risk reduction, • Hands-on experience with Entra ID (Azure AD) and on-prem Active Directory, including identity lifecycle management, group/role design, and enterprise account administration, • Experience leading or operating Privileged Access Management (PAM) programs, including privileged account governance, credential protection, and remediation tracking, • Bachelor's degree, • Supervisory experience, • Solid understanding of identity governance concepts such as joiner/mover/leaver processes, access request workflows, access certifications, and remediation tracking, • Experience building or maturing IAM functions and/or technologies, • Familiarity with IAM automation and integrations (HR systems, ITSM systems, CI/CD pipelines, or IaC), • Experience supporting regulatory, audit, or compliance programs (e.g., ISO 27001, NIST-aligned controls), • Experience managing IAM vendors, contracts, and third-party integrations, • Relevant certifications such as CISSP, CISM, CIAM, Azure, AWS, or other IAM-focused certifications, • Experience in a law firm or legal services organization, • Experience supporting urgent, high-risk legal workflows without service disruption Competencies: • Demonstrate leadership, accountability, and ownership of outcomes, • Thinks strategically and prioritizes work aligned to business and security goals, • Exercise sound judgement when balancing security risk, compliance, and business needs, • Build strong partnerships and influence stakeholders across technical and non-technical teams, • Communicate clearly with stakeholders at all levels, including leadership and auditors, • Ability to adapt effectively to change and drives continuous improvement, • Strong interpersonal skills and problem-solving skills, • Ability to communicate complex IAM concepts clearly to non-technical stakeholders, auditors, and senior leadership, • Entrepreneurial by nature, • Excellent attention to detail, • Ability to organize, prioritize and coordinate multiple activities often under tight timelines, • Ability to drive projects to completion and achieve goals, • Strong judgment, • Team-player with collaborative spirit, • Unwavering ability to handle and maintain confidentiality regarding firm information, projects,, • client data, • High level of professionalism at all times, • Demonstrated ability to lead through influence and develop talent, • Proactive, analytical mindset, • Effective presentation skills Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE. The expected annual pay range for this position with a full-time schedule is $155,000 - $225,000. Senior level candidates may be considered for this position and would be eligible for a higher salary range based on experience. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.

Job DescriptionAbout Thea Energy: Thea Energy is leveraging recent breakthroughs in stellarator physics and engineering to create a faster and simpler approach to commercializing fusion energy. The company is reinventing the stellarator using computer-controlled arrays of planar coils thereby replacing the intricate, complex modular magnets required in all other stellarator architectures. Thea Energy is on a mission to create a limitless source of zero emission energy for a sustainable future. Position Overview:We are seeking a highly motivated IT Systems Support Engineer to be based at our New Jersey headquarters. As our second IT hire, you will be a key bridge between hands-on user support and deep-tier systems engineering, reporting directly to and collaborating closely with Thea Energy’s Director - IT across all things infrastructure, security, and support. This is a high-impact, high-ownership role for someone who enjoys building robust systems from the ground up. You'll ensure our scientists, engineers, and executives have a frictionless path to the tools they need - with a leading role in shaping how the Company’s digital foundation is built.Key Responsibility Areas:This role spans both strategic and operational IT, from supporting our scientists and engineers day-to-day to building the systems and automation that scale with the Company. • Own day-to-day IT operations as a primary point of contact for user support, while continuously building and improving the underlying infrastructure., • Design and deploy automated workflows to ensure smooth employee onboarding, offboarding, and lifecycle transitions., • Manage physical and virtual server environments, ensuring high availability, consistent patching, and strong security practices., • Optimize cloud environments, manage identity and access, and maintain a strong security posture across the organization., • Maintain office and lab network infrastructure - including VPNs, firewalls, switches, and Wi-Fi - ensuring reliable, low-latency connectivity., • Build and maintain a thorough knowledge base: clear documentation and infrastructure diagrams that the whole team can rely on., • Manage hardware and software lifecycles, including inventory, procurement, and vendor relationships., • Administer and maintain our MDM environment: managing device enrollment, compliance policies, and configuration profiles across Windows and macOS., • Implement and uphold security best practices to protect mission-critical intellectual property and research data., • Proactively identify and reduce technical debt through automation and process improvement.Ideal Experience & Skillsets:, • 5+ years of experience in systems engineering and desktop support across Windows and macOS., • Proficiency in PowerShell, Python, or similar scripting/automation tools., • Experience managing network infrastructure, including firewalls, switches, and access points., • Hands-on experience with at least one major cloud platform (Azure, GCP, AWS, or Google Workspace/O365)., • Experience with modern IT ticketing systems (e.g., ServiceNow, Zendesk, Freshdesk) and structured support workflows., • Strong documentation skills - able to translate complex systems into clear diagrams and written guides., • Excellent communication skills - comfortable explaining technical issues to both engineers and non-technical stakeholders., • A collaborative, low-ego approach: equally comfortable supporting a user with a hardware issue and leading a server migration., • Ability to thrive in a fast-moving, high-growth environment where priorities can shift quickly., • Experience across multiple cloud platforms (Azure, GCP, AWS, Google Workspace/O365)., • Background working in a startup, research, or scientific/engineering environment., • Familiarity with compliance frameworks or security standards (SOC 2, NIST, etc.)., • Experience with email security platforms (e.g. Barracuda, Proofpoint, Mimecast)., • Familiarity with Security Awareness Training tools (e.g. NINJIO, KnowBe4, Proofpoint).Company Benefits:, • Salary range $85,000-$145,000, • Comprehensive health benefits (e.g. medical/dental/vision), • Employee equity stock options

Technical Program Manager - Data Governance. Coordinate technical teams, risk groups, and compliance stakeholders to ensure alignment with BNY governance standards, FedRAMP Moderate/High, NIST 800-53, and internal audit requirements. Experience managing data governance programs in a large financial

About the Role TecVeris is seeking a Senior Technical Program Manager (TPM) to lead our customer’s DoD Impact Level 4 (IL4) and FedRAMP certification initiatives. This is a direct hire position, and the selected candidate will be employed full-time by our customer. This role will be responsible for managing all aspects of the certification and authorization processes, ensuring alignment across security, engineering, product, and go-to-market teams. The Senior Technical Program Manager will oversee program milestones, maintain timelines, track dependencies, and ensure that deliverables meet both regulatory and business requirements. This role requires a detail-oriented leader who thrives in a cross-functional environment, can translate technical and compliance requirements into actionable plans, and keeps stakeholders aligned to achieve mission-critical outcomes. How You Will Make an Impact: ● Develop and maintain comprehensive project plans for IL4 and FedRAMP certification efforts ● Oversee documentation development (SSPs, POA&Ms, policies, controls evidence). Coordinate readiness assessments, gap analyses, and remediation efforts ● Manage audit and assessment schedules, ensuring timely and successful completion ● Track continuous monitoring and post-authorization obligations ● Partner with VP of Public Sector and GTM teams to ensure certification milestones are aligned with customer and business commitments ● Translate complex compliance milestones into business-facing updates and enablement materials ● Support pre-sales and customer success teams with compliance-related information and artifacts ● Establish clear and consistent communication channels ● Provide regular updates on program status, progress, and blockers to all stakeholders, including senior leadership ● Proactively identify and manage cross-team dependencies, ensuring seamless integration and coordination ● Identify, assess, and mitigate risks throughout the program lifecycle ● Develop contingency plans and escalate issues as appropriate What You Bring to the Team: ● 8+ years of program or project management experience, ideally in cloud security, compliance, or enterprise SaaS ● Strong familiarity with FedRAMP, DoD Impact Levels (IL4/IL5), NIST 800-53 controls, or similar compliance frameworks ● Strong understanding of software development lifecycle (SDLC), agile methodologies (Kanban), and modern software architectures (e.g., microservices, cloud-native applications) ● Proven ability to manage cross-functional programs involving security, engineering, product, and GTM ● Excellent organizational skills with the ability to manage multiple priorities and deadlines ● Strong written and verbal communication skills, including executive-level reporting ● Demonstrated leadership skills with the ability to influence and motivate cross-functional teams without direct authority ● Experience with project management tools (e.g., JIRA,), collaboration platforms (e.g., Confluence), and version control systems (e.g., Git) ● Certifications in program management, service management, and/or security (e.g., PMP, PgMP, CSM, SAFe, ITIL, CISSP) Benefits & Compensation ● Exceptional health, vision, and dental care ● Life and AD&D, short- and long-term disability ● Employee Assistance Program ● Employee Resource Groups ● Unlimited PTO ● 401K with company match ● $190-$209k annual + variable bonus Location ● NYC metro preferred - hybrid or remote considered (must work EST hours)

Take ownership of a Risk and Controls Matrix and ensure it is designed in such a way to address key technology risks and optimal audit outcomes while aligning to NIST, SOC, COBIT, ITIL. This role involves managing the annual SOX examination, coordinating with external auditors, and ensuring that IT

Prior knowledge leading and executing IT risk consulting, IT process re-engineering, IT audit, and IT internal controls engagements, leveraging IT governance and control frameworks such as Control Objectives for Information and Related Technologies (COBIT), NIST Cybersecurity framework (CSF), NIST 8

Job Description Be Part Of A High-Performing Team: Join a globally recognized financial institution operating at the forefront of innovation, risk management, and digital transformation. This team sits within a specialized research and security division focused on advancing cryptographic resilience in response to emerging quantum threats. The environment is highly collaborative, working across security architecture, infrastructure, and application teams to drive enterprise-wide initiatives. The group is actively shaping future-ready cryptographic strategies, aligning with regulatory expectations while enabling secure, scalable systems in a complex, regulated financial ecosystem. What’s In Store For You: • Engagement: W2 only (no C2C/1099), • Opportunity to work on cutting-edge post-quantum cryptography initiatives within a global financial institution, • Exposure to enterprise-scale security architecture and cryptographic transformation programs, • Assess enterprise readiness for post-quantum cryptography across infrastructure, applications, PKI, IAM, and data-in-transit environments, • Identify and evaluate cryptographic vulnerabilities, including certificates, keys, and cipher suites susceptible to quantum threats, • Partner with encryption and key management teams to support centralized cryptographic initiatives, • Develop PQC transition strategies, including crypto-agility frameworks and prioritized remediation roadmaps, • Support vendor evaluations, technical requirements definition, and comparative solution analysis, • Translate complex technical findings into actionable, risk-based insights for leadership and governance stakeholders, • 10+ years of experience in cybersecurity, cryptography, or security architecture roles, • Strong expertise in applied cryptography, including PKI, TLS, certificate management, and key lifecycle management, • Working knowledge of post-quantum cryptography concepts and familiarity with NIST PQC standards, • Experience conducting cryptographic inventory and risk assessments in enterprise environments, • Proven ability to operate within highly regulated industries and communicate across technical and non-technical stakeholders, • Experience supporting risk-based prioritization and remediation of security vulnerabilities, • Familiarity with security policies, cryptographic standards, and change management processes, • Awareness of third-party and supply chain cryptographic risks

Job Description Major International Bank, located in Mid-Manhattan, seeks a self motivated IT Auditor, with the following experience. --Requires a fluent Spanish & English Speaker.--Extensive background in auditing technology processes and evaluating .--compliance with US financial sector regulations --Proficient in assesing cybersecurity IT infrastructure (AIX, Windows, DB-2,SQL and core banking systems (Temenos) Ex, ESO/TEC --Skilled in evaluating ESO/TEC. Experience in reviewing and validating control frameworks NIST FFIEC, IT Examination Handbook ,Cobol-- --Skilled in evaluating business Continuity strategies, IT and IS risk management practices and third party vendor controls. --Advanced knowledge of network security(LAN WAN,Wi-Fi, VPN, routers, switches, firewalls) --Competent in using computer assisted audit (CAATs, such as ACL and Arbutus, for data analysis and control testing. Requires Bachelor's in IT or related area. This is a 2 to 3 month Temp to Hire position. --Very high visibility. Company DescriptionOur client, can offer is stable, employee friendly, and offers a pleasant, creative, professional work atmosphere, as well as a very visible role, a Work for an outstanding and supportive management team.Our client, can offer is stable, employee friendly, and offers a pleasant, creative, professional work atmosphere, as well as a very visible role, a Work for an outstanding and supportive management team.

Job DescriptionCompany Description Sia is a next-generation, global management consulting group. Founded in 1999, we were born digital. Today our strategy and management capabilities are augmented by data science, enhanced by creativity and driven by responsibility. We’re optimists for change and we help clients initiate, navigate and benefit from transformation. We believe optimism is a force multiplier, helping clients to mitigate downside and maximize opportunity. With expertise across a broad range of sectors and services, our 3,000 consultants serve clients worldwide from 48 locations in 19 countries. Our expertise delivers results. Our optimism transforms outcomes. Sia’s Cybersecurity team is the powerhouse of our firm’s innovation. With over 350 experts worldwide, we tackle projects from proof-of-concept to large-scale deployment, always pushing the boundaries of AI capabilities. By joining Sia’s Cybersecurity team, you’ll step into a vibrant, collaborative environment that nurtures professional growth and empowers you to shape the future of consulting. Job Description You will join Sia Partners’ Cybersecurity, Data Protection and Resilience Global Business Line. In accordance with your skills and expertise, you will work - in Consulting, Implementation and Audit - on one or more of our following offers: Strategy, Risk, Compliance, Operations, Data Protection, Offensive Security, Resilience and Training. Key Responsibilities • Manage end-to-end projects or be responsible for sub-projects of a complex and/or international project, on which you will ensure relevant, proactive and regular reporting to the Manager and Client to ensure that our commitments are met., • Take part in business development through the design and development of commercial proposals, as well as by identifying new opportunities and clients., • Manage the client relationship on your missions and build a solid relationship with your contacts on the client side, at middle management level, who recognize you as an expert for your assigned tasks., • Innovation within our Sia CyberLab, where you will work on the development of new offers and SaaS solutions around advanced technologies and capitalizing on our unique know-how in AI. You will also carry out benchmarks and PoC of Cyber solutions on the market, while participating in the active monitoring of Cyber news., • The firm's eminence, around our Cybersecurity expertise, by actively contributing to the publication plan (articles, white papers, studies, webinars, etc.), and represent the firm at various professional clubs, trade shows and events. Qualifications Graduated with a Cybersecurity degree or a related field from an accredited college/university, you have at least 3 years of experience with a consulting firm or a Cybersecurity solutions/services provider/integrator. • You master some Cybersecurity standards, norms and/or reference systems of the market, notably ISO 270xx, SANS, NIST, etc., • You have actively participated in successful projects/missions where you have developed a solid knowledge of at least two of our 8 offerings listed above;, • You have a general knowledge of IP networks, operating systems (Unix/Linux, Windows and/or MacOs), Cloud (AWS, Azure and/or GCP), applications (Web Server, DB, Middleware, etc.) as well as cryptography; knowledge in Blockchain would be a real plus;, • You are familiar with the major market solutions and technologies of: Endpoint Security, VPN, VSX, Proxy/Reverse Proxy, EDR, IAM, MDM, DLP, CASB, Office 365 Security, etc.; Attributes for Success • You actively participated in successful projects where you have developed expertise around the missions listed in the job description, • You have an excellent culture in Cybersecurity and dispose of a strong appetite for solving complex technical problems, • You are a supportive team player who actively develops relationships and is eager to share knowledge with colleagues and our clients, • You are intellectually curious and have the entrepreneurial spirit to invest in the development of innovative offers and solutions, • You wish to join a stimulating and fulfilling professional environment, where you will share the values of expertise, innovation, customer satisfaction and a results-oriented culture, • You wish to evolve quickly and take responsibilities on high stakes subjects within a young, dynamic and supportive team, • You have a strong drive and commitment to deliver high quality work while ensuring that client expectations and deadlines are met. Additional Information Compensation & Benefits We believe in supporting our team professionally and personally. Here’s a snapshot of the comprehensive benefits you’ll enjoy as part of Sia. Competitive Compensation * Annual base salary between $130,600 to $135,700 (commensurate with experience and qualifications) * Annual performance based discretionary bonus Robust Health Coverage * 3 Medical plans * Dental and Vision * Life, AD&D and other voluntary insurance Tax-Advantaged Accounts * 401K retirement plan * 4% matching and 100% vested upon enrollment * Health Savings Account (HSA) * Flexible Spending Account (FSA) * Health, Dependent Care, Commuter Family Friendly Benefits * 100% paid parental leave for all new parents with eligible tenure * Building Healthy Families program if enrolled through Medical plan Time Off to Recharge * Generous Paid Time Off (PTO) policy * 9 company holidays plus 1 floating holiday Extras that Make Life Easier * College savings and student loan repayment assistance * Monthly cell phone stipend * Access to wellness programs at no cost if enrolled through Medical plan, including: * Gym membership reimbursement * LiveHealth Online virtual care * Personalized support from a Well-being Coach * Employee Assistance Program at no cost * Free confidential counseling and emotional support services * On-demand access to Emotional Well-being resources (ranging from relaxation techniques to stress management) Diversity, Equity, Inclusion & Belonging At Sia, we believe in fostering a diverse, equitable and inclusive culture where our employees and partners are valued and thrive in a sense of belonging. We are committed to recruiting and developing a diverse network of employees and investing in their growth by providing unique opportunities for professional and cultural immersion. Our commitment toward inclusion motivates dynamic collaboration with our clients, building trust by creating an inclusive environment of curiosity and learning which affects lasting impact. Please visit our website for more information. Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs. Office Workplace Guidelines Sia is committed to providing a flexible workplace environment that supports client, business, and market needs. Consultants located in our primary market office locations—New York City, Charlotte, Seattle, and San Francisco- are expected to live within a reasonable commuting distance and attend the office at least three days or more per week. For Consultants outside of our primary markets, we can offer more flexible in-person requirements in accordance with your location. Work Authorization & Sponsorship At this time, Sia does not intend to employ any applicant who will require, either now or in the future, employment visa sponsorship or sponsorship for work authorization (i.e., H1-B visa, F-1/OPT) or STEM OPT, TN, etc). Sia is an equal opportunity employer. All aspects of employment, including hiring, promotion, remuneration, or discipline, are based solely on performance, competence, conduct, or business needs.

Job Description Vistrada is seeking a highly motivated and experienced candidate to serve as a Subject Matter Expert (SME) / Tech PM on Identity & Access Management (IAM) planning and implementation engagements supporting key clients. The ideal candidate must have extensive experience (7+ years) implementing, configuring, and deploying global Identity and Access Management (IAM) programs and related projects for clients, including training for clients in an agile, continuous delivery manner including but not limited to experience with the following: • IAM business processes, defining requirements, and implementing and recommending control based business processes, • End-to-end access (re)certification experience with a strong understanding of completeness and accuracy validation procedures, • Working with 3rd parties providing management oversight of IAM processes and controls, • Advance understanding of business processes, internal control risk management, security and IT controls and related standards, • Interpreting architecture, designs, and business requirements to develop and implement IT security solutions that span multiple technologies, businesses, geographies, and user types (both internal employees and external customers, partners, etc.)., • Experience engineering and designing IAM platforms, solutions, and services, • Integrating applications and business services with IAM solutions, • Hands-on experience with multiple IAM platforms, • Knowledge of Web technologies such as XML, SPML/SOAP, Web and Application Servers, HTML, • Databases (MSSQL, MySQL), • Extensive experience working with leading IAM protocols and directory structures (LDAP, AD) and Federation protocols (SAML/OIDC), • Experience with Microsoft-based IAM platforms (e.g., Azure AD; Entra ID), • Familiarity with various NIST security frameworks, • Scripting skills (JavaScript/Python), • Significant program / project management expertise, • Strong facilitation and communication skills (both verbal and written), • Experience with interacting comfortably with client executives, • Global SI / Big 4 consulting experience (e.g., Accenture; Deloitte; IBM), • Excellent written and verbal communications, • Advanced skillset in time management and task prioritization, • Passion for managing teams and driving results Powered by JazzHR l8Adnh56SC

Job Description eDiscovery and Cyber Forensics Specialist Douglas Elliman Real Estate Overview: Douglas Elliman is seeking a dynamic eDiscovery and Cyber Forensics Specialist to join our team. This role has corporate-wide responsibilities, interfacing with Legal, Human Resources, and Internal Audit leadership to fulfill eDiscovery and cyber forensic requests with the utmost accuracy and urgency. The position involves identifying, collecting, reviewing, and producing technology-related details for both internal and external stakeholders in a fast-paced, high-stakes environment. This is a 100% remote role, and candidates must be based in the U.S. Key Responsibilities: • Utilize corporate eDiscovery tools to extract emails, texts, and other communications as required by Legal, Human Resources, or Internal Audit teams., • Leverage the Security Incident and Event Manager (SIEM) to extract user login and activity data for investigations and audits., • Collaborate with Internal Audit to support investigations of internal threats or fraud., • Create custom queries using Regular Expressions (RegEx) to analyze cyber event data and extract key information for investigations., • Work with both internal and external legal counsel on forensics and eDiscovery tasks., • Create detailed event timelines, including login, data access, email, payment activities, and other critical technology actions., • 1-2 years of hands-on experience with eDiscovery tools such as Purview, OpenText, Encase, Relativity, or Disco., • Experience extracting audit log details from SIEMs such as Sentinel, LogRhythm, or Cloud Trail., • Proficiency in Regular Expressions (RegEx) and creating pattern-matching code., • Knowledge of the NIST Risk Management Framework and NIST 800-53 Cyber Security best practices., • Working knowledge of TCP/IP and networking protocols., • Understanding of Single Sign-On (SSO) processes, including methods from OKTA, Microsoft, or DUO., • Strong skills in Microsoft Office applications., • Excellent documentation and verbal communication skills. Due to the sensitive nature of the work involved, the selected candidate will be required to sign a Non-Disclosure Agreement (NDA) as a condition of employment. This ensures the protection of confidential information and aligns with company policies regarding data privacy and security. Additional Information: • Location: This is a 100% remote role, and applicants must be based in the United States., • Experience: We are looking for candidates with 1-2 years of relevant experience.

Job Description Incisive. Inclusive. Invested. We’re Axinn. Experienced, tenacious, and always trial-ready, we are committed to understanding complex legal challenges that impact the future of our clients' businesses, globally. Focusing on antitrust, intellectual property, and high-stakes litigation, our extensive teams in the U.S. possess deep knowledge and client-side experience across a range of sectors, including technology, healthcare, life sciences, and consumer products. At Axinn, inclusivity is central to who we are. We have a purpose that goes beyond profit, which includes fostering a fair, welcoming workplace and supporting the communities where we live and work. We actively recognize talent and promote opportunities for all team members. By embracing the unique experiences and perspectives of our people, we fuel creativity and deliver results for our clients. The Firm’s Manager of Information Security is responsible for developing, implementing, and maintaining a comprehensive information security program to protect the firm’s data, systems, and client information. This role ensures the confidentiality, integrity, and availability of all information assets across the firm’s technology and operational infrastructure. The position involves close collaboration with IT leadership, legal professionals, and firm management to maintain compliance with client, regulatory, and industry standards. The position will serve as a strategic advisor to leadership, a hands-on technical manager, and a mentor to security staff, ensuring the Firm’s success in a highly evolving threat landscape. Responsibilities and Duties: • Develop and maintain the firm’s information security policies, standards, and procedures., • Develop, implement, and maintain a comprehensive information security program that aligns with the firm’s strategic objectives and client confidentiality obligations, • Establish metrics to monitor program effectiveness and present updates to Firm leadership, • Assess and manage cybersecurity risks; conduct vulnerability assessments and penetration testing, • Lead incident response efforts, including investigation, remediation, and reporting, • Develop playbooks and run regular tabletop exercises to ensure readiness, • Ensure compliance with NIST, ISO, HIPAA, and client confidentiality obligations, • Oversee (develop and maintain) security policies, procedures, training, and awareness programs for attorneys and staff, • Manage security tools (firewalls, endpoint protection, SIEM, IAM, etc.), • Collaborate with IT, Legal, and Compliance teams on security integration, vendor oversight, and cloud management, • Conduct regular risk assessments and vulnerability testing; manage mitigation and remediation efforts while presenting findings and reports to leadership, • Manage and mentor security staff, • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required (advanced degrees are preferred), • CISSP, CISM, CISA, GIAC, COMPTia Security+, GISO, certifications are a plus, • Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role, • Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA, • Strong understanding of law firm technology environments, including document management systems, practice management tools, cloud-based platforms, and eDiscovery systems, • Demonstrated ability to lead incident response, risk management, and compliance efforts, • Excellent interpersonal and communication skills, both verbal and written, with experience presenting complex security topics to senior leadership and non-technical stakeholders, • Effective time management skills, with the ability to handle a variety of tasks simultaneously and manage multiple projects while prioritizing assignments, • Ability to build rapport with attorneys, professional staff, and vendors, • Self-motivated, with the ability to work independently but within a team environment At Axinn, we offer market competitive wages and generous benefit options to our valued employees. This includes, but is not limited to, the following: • Competitive starting pay and annual discretionary bonus and raise eligibility, • Generous paid time off benefits (vacation, personal days, holidays, and sick leave), • Firm paid short and long-term disability, plus life and accident insurance, • 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with generous employer contributions (please ask for further details re: eligibility requirements), • Comprehensive medical, dental, and vision insurance options, • Flexible spending and health savings accounts (medical plan dependent), • Firm paid comprehensive Employee Assistance Program (EAP), • Student loan refinancing discounts, • Lifestyle reimbursement program This is a full-time, benefits eligible, exempt level position. Final rate of pay and title will be commensurate with the incumbent’s experience, with a targeted hiring range of $160,000 - $175,000 (the upper range reserved for highly qualified applicants). This position is currently available in either our NY, CT, or DC office locations. Axinn is an equal employment opportunity employer and is committed to creating an environment that draws upon the strength of the diversity of its workforce to achieve excellence in the Firm's field and beyond

Job DescriptionInformation System Security Officer (ISSO) Employment Type: Full-Time, Mid-Level Department: Administrative and Logistics Support As a FSR ISSO, you will be embedded on-site with U.S. Government customers to ensure the secure, compliant operation of a production-grade data and application platform used in mission-critical environments. You will serve as the primary authority for system security and compliance—working hands-on with live systems while partnering closely with engineers, operators, and customer security teams. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Act as the primary on-site point of contact for security and compliance requirements across one or more U.S. Government customers. - Support system accreditation and authorization activities using frameworks such as RMF or DIACAP. - Collaborate with software, systems, and field engineers to ensure required security controls, configurations, and policies are correctly implemented. - Analyze deployed software implementations and assess alignment with applicable security requirements. - Build, standardize, and maintain security documentation, including SSPs, POA&Ms, control narratives, and supporting artifacts. - Generate, validate, and organize evidence of compliance once security settings are applied. - Assemble accreditation artifacts into a structured, auditable repository. - Support audits, assessments, and ongoing compliance activities throughout the system lifecycle. - Maintain the ongoing security and trust of customers through hands-on system access and coordination with engineering and operations teams. - Support software operating across AWS, Azure, on-premises, and at multiple classification levels. - Operate in environments where the platform, threat landscape, and operational needs are continuously evolving. Qualifications:- Background in systems administration, software development, systems engineering, or deep familiarity with Linux-based systems. - Experience accrediting IT systems against U.S. Government standards such as NIST SP 800-53, CNSSI 1253, and DISA STIGs. - Hands-on experience supporting accreditation using eMASS or Xacta. - Experience collaborating with engineering teams to implement and validate security configurations. - Understanding of configuration management and automation tools (e.g., Puppet, Terraform, CloudFormation, Chef, Ansible). - Comfort using version control systems such as Git. - Ability to independently use vulnerability scanning tools such as Nessus and OpenSCAP. - Experience working in cloud and on-premises environments, including AWS. - Strong ability to produce clear, concise technical documentation, stay organized, and maintain attention to detail. - Curiosity, critical thinking, and the ability to evaluate real-world implementations against formal security requirements. - Active TS/SCI Clearance or Eligibility Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past nine years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Position: Security Business Analyst Position Summary: Responsible for gathering and documenting requirements, analyzing business and security needs, creating workflows/SOPs, and supporting risk assessment documentation. Working closely with the Project Manager, this role independently engages stakeholders to define, validate, and document business rules and functional requirements that meet DOE security objectives. Key Duties and Responsibilities: • Serve as a Security Business Analyst supporting enterprise cybersecurity and IT risk initiatives, translating CISO priorities, regulatory requirements, and business needs into clear, actionable requirements., • Elicit, analyze, and document security and risk requirements, including functional, technical, and compliance needs across Security Operations, Infrastructure, Cloud, Data Protection, GRC, Privacy, and business units., • Support risk and POA&M management activities, assisting in tracking remediation plans for internal systems and third-party vendors, validating milestones, and ensuring alignment with regulatory and policy requirements., • Act as a liaison between business stakeholders, technical teams, and senior leadership, ensuring shared understanding of risks, controls, dependencies, and implementation impacts., • Develop and maintain security-related documentation and artifacts, including business requirements documents (BRDs), process flows, gap analyses, and control mapping aligned to frameworks such as NIST and FISMA., • Provide analytical support for executive reporting, contributing to dashboards, metrics, and decision-ready summaries that communicate security posture, risk trends, and remediation progress., • Risk & Compliance Knowledge: Deep understanding of frameworks like NIST SP 800-53/37 (RMF), NYC Education Law 2-d, CIPA, FERPA, and HIPAA., • Enable delivery of measurable security outcomes, supporting project and program teams by identifying gaps, clarifying requirements, and helping ensure solutions meet defined risk, compliance, and business objectives., • 5+ years of Security Analyst experience in a similar role, • Required certifications: CBAP, PMI-PBA, PMP, CAPM, ITIL-F, CRISC, CompTIA Project +or CGRC, • Experience with the following technologies: JIRA, Confluence, MS Visio, Lucid chart, MS Project, SQL Query, MS Power BI, Archer/ServiceNow (GRC), and MS Office Suite.

Job DescriptionPosition Summary The AI/Cloud Security Engineer is responsible for testing, installing, configuring, and maintaining cloud security solutions/tools. Additionally, AI/Cloud Security Engineer communicates findings, incidents, and concerns to security team members and leadership in a timely manner. The AI/Cloud Security Engineer should possess a strong background in AI usage to secure MedReview’s Cloud and AI Infrastructure. This role is onsite Monday - Thursday and remote on Fridays. Job Responsibilities: • Standardizing Azure Security best practices, processes, and procedures., • Experience using AI/ML-driven security tools for anomaly detection, behavioral analysis, bias testing, and threat intelligence correlation., • Ability to design, deploy, and tune AI-based security models to identify malicious traffic, lateral movement, and zero-day threats., • Proficiency in integrating AI-powered SIEM, SOAR, NDR, and XDR platforms to automate incident detection and response., • Knowledge of adversarial AI risks, including model poisoning, evasion attacks, and data integrity threats, and how to mitigate them., • Experience using AI to reduce false positives, prioritize alerts, and improve mean time to detect (MTTD) and respond (MTTR)., • Extensive Knowledge of utilizing and implementing Microsoft Purview and all its features. DLP, Auditing, etc., • Microsoft Entra Internet Access, Microsoft Entra Private Access, and Global Secure Access, • M365 Compliance and Security Centers, • Collaborating with team members to develop and document security standards and policies that align with industry’s best practices., • Finding gaps with the current security posture and assisting with finding new security products, installation, configuration, and policies & procedures., • Monitoring cloud infrastructure for security breaches. Security incident response and forensic investigation., • Investigations into how incidents and/or breaches occur and Root Cause Analyses (RCA) as a member of the incident response team., • Participation in security tabletop exercises.Required Experience:, • Very strong hands on 5-10 years' experience in Cloud Information Security and AI Security Engineering., • Must demonstrate hands-on experience levering AI and machine learning technologies to enhance overall security., • Strong Identity and Access Management (IAM), Role-Based access Control (RBAC) experience, • Strong Purview Environment Experience, • Experience monitoring Cloud Infrastructure and systems for security breaches or intrusions and working with SOC team to remediate., • Experience in some specific vertical industry (Healthcare) preferred., • Documentation of security tools, deployment configuration, incident reports, etc., • CISSP, CISM, CISA, CCSP, ITIL, IaaS, PaaS, SaaS, Azure Security Engineer Associate, or other related certification preferred., • Ability to communicate technical information in a clear manner, both written and verbally, to end users, • Experience with HIPAA, HITRUST, ISO 42001 ISO 27001, ISO 27002, URAC regulations and awareness and/or experience with CMS, NIST and other healthcare related regulations preferred., • Availability to work nights and weekends during (un)planned outages and other special circumstances, with 24/7 accountability., • Availability to enter on call rotation. FZS0onPR06

Job DescriptionDescription: TASKS: ? Perform comprehensive cybersecurity risk analysis, identifying and prioritizing risks specifically related to application security. ? Develop, socialize, and implement security strategies to address vulnerabilities in web applications, microservices, APIs, and mobile applications. ? Track and manage progress against security plans, ensuring timely remediation of identified vulnerabilities. ? Lead the security implementation in application development projects, ensuring "secure by design" practices. ? Create and maintain architecture diagrams, outlining secure communication flows, and develop both high-level and low-level security design documents. ? Troubleshoot and resolve application security issues in collaboration with internal teams and external vendors. ? Translate application compliance requirements into specific security controls, recommending compensating measures where appropriate. ? Regularly report on the organization’s security posture, with a focus on application vulnerabilities, to senior management. ? Perform/coordinate application vulnerability assessments and ensure timely remediation in collaboration with the Development, IT, and Systems teams. ? Implement secure coding practices, perform static and dynamic application security testing (SAST/DAST), and support developers with secure code reviews. ? Monitor security incidents and respond to application-level threats, ensuring quick resolution of potential vulnerabilities. ? Establish and enforce secure configurations for applications and their underlying infrastructure, such as databases and APIs. ? Perform threat simulations to detect risks and recommend improvements for securing application designs, API security, identity management, and access control measures. ? Collaborate with teams to ensure continuous integration and continuous deployment (CI/CD) pipelines incorporate security control Requirements: Senior Application Security Engineer Mandatory Skills/Experience • 12 years of experience in application security, with a proven track record of conducting vulnerability assessments, penetration testing, and secure code reviews. • Extensive experience in secure application development, including knowledge of security frameworks like OWASP Top 10, and the ability to guide development teams in implementing secure coding practices. • Proficiency in Software Composition Analysis (SCA) tools (e.g., Veracode, AppSec) for identifying and managing vulnerabilities in open-source libraries and third-party components. • Advanced knowledge of static and dynamic application security testing (SAST/DAST) tools (e.g., Veracode, AppSec, Burp Suite) and integrating these tools into CI/CD pipelines for automated security checks. • Strong cloud security expertise, including securing applications and workloads on AWS, Azure, or GCP, and experience with Web Application Firewalls (WAF) and cloud-native security services. Desirable Skills/Experience • Advanced cloud security experience: Experience securing cloud environments (AWS, Azure, GCP) with tools like Web Application Firewalls (WAF), and implementing IAM, encryption, and monitoring tools. • Experience with scripting and automation, using Python, Bash, or PowerShell, to automate security tasks, integrate security testing tools, and improve the efficiency of security operations. • Strong communication skills: Ability to effectively explain complex security concepts and risks to both technical teams and non-technical stakeholders, ensuring alignment on security measures. • Leadership and mentoring skills: Experience leading security teams or initiatives, mentoring junior engineers, and fostering a culture of security awareness within the organization. • Collaboration and cross-functional teamwork: Proven ability to work effectively with development, DevOps, and IT teams to integrate security into all aspects of the business, ensuring security goals align with business objectives. • Highly flexible/willing to learn new technologies. • Highly organized with excellent analytical, problem solving and decision-making skills. Additional Qualifications: • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), or GIAC Web Application Penetration Tester (GWAPT) are highly preferred., • Knowledge of compliance standards like NIST, PCI-DSS, and GDPR and how they apply to application security.

Job DescriptionAbout the Company e.l.f. Beauty, Inc. stands with every eye, lip, face and paw. Our deep commitment to clean, cruelty free beauty at an incredible value has fueled the success of our flagship brand e.l.f. Cosmetics since 2004 and driven our portfolio expansion. Today, our multi-brand portfolio includes e.l.f. Cosmetics, e.l.f. SKIN, pioneering clean beauty brand Well People, Keys Soulcare, a groundbreaking lifestyle beauty brand created with Alicia Keys, Naturium, high-performance, biocompatible, clinically-effective and accessible skin care, and our newest brand, rhode, a line of curated skincare essentials, formulated for a variety of skin types and needs with high performance ingredients, it’s a daily routine that nourishes your skin barrier over time. In our Fiscal year 25, we had net sales of $1 Billion and our business performance has been nothing short of extraordinary with 28 consecutive quarters of net sales growth. We are the #2 mass cosmetics brand in the US and are the fastest growing mass cosmetics brand among the top 5. Our total compensation philosophy offers every full-time new hire competitive pay and benefits, bonus eligibility (200% of target over the last six fiscal years), equity, flexible time off, year-round half-day Fridays, and a hybrid 3 day in office, 2 day at home work environment. We believe the combination of our unique culture, total compensation, workplace flexibility and care for the team is unmatched across not just beauty but any industry. Visit our Career Page to learn more about our team: Position Summary: We are seeking a highly skilled Sr. Engineer, IT Security to lead enterprise-wide cybersecurity initiatives and strengthen our security posture across on-premises and cloud environments. This role involves designing and implementing advanced security solutions, including Zero Trust, DLP, Cloud Security, Network Segmentation, IAM, and Security Automation. The ideal candidate will collaborate with cross-functional teams to identify risks, develop mitigation strategies, ensure regulatory compliance, and proactively defend against evolving threats while safeguarding our systems, data, and infrastructure.Responsibilities: • Design, build, deploy, and maintain enterprise security technologies and solutions aligned with business objectives, compliance requirements, and the cybersecurity program., • Develop, document, and enforce security policies, standards, and procedures based on frameworks such as NIST, CIS, ISO 27001, and SOX while advancing overall security maturity, governance, and processes., • Lead strategic security initiatives, including Zero Trust architecture, Data Loss Prevention (DLP), Cloud Security, Network Segmentation, IAM, Endpoint Security modernization, and security automation., • Manage and improve email security, DNS security, and other protective controls to defend against phishing, malware, data exfiltration, and domain-based threats., • Lead vulnerability management programs and drive remediation efforts, providing visibility into risks and progress to stakeholders., • Oversee incident response lifecycle—detection, analysis, containment, remediation, post-incident review—and continuously enhance disaster recovery and business continuity plans., • Monitor and analyze security events and network activity (e.g., traffic analysis, host behavior, forensics, kill chain, Windows event analysis), tuning tools, and event correlation for accurate threat detection., • Collaborate with IT, DevOps, and digital teams to embed security into system design, application development, deployment pipelines, and cloud infrastructure., • Evaluate and review vendor and partner security practices to ensure alignment with organizational standards., • Produce regular security dashboards and metrics to report on incidents, threats, and operational effectiveness., • Lead security awareness training, mentor junior engineers, and guide cross-functional teams on secure design principles and best practices., • Stay current on emerging threats, vulnerabilities, and technologies to enhance enterprise resilience.Requirements:, • Bachelor’s degree in Computer Science, Cybersecurity, or related field; Master’s preferred., • 7+ years of experience in information security engineering, architecture, or operations., • Expertise in cloud security (AWS, Azure, GCP), data protection, IAM/SSO/MFA, email and DNS security, and secure network architecture., • Hands-on experience with key security technologies: firewalls, VPN, NAC, EDR/MDR, IPS/IDS, SIEM, DLP, vulnerability management, and email security platforms (Proofpoint, Mimecast, Microsoft 365 Defender)., • Strong understanding of Zero Trust, endpoint protection, DevSecOps, security automation, and scripting (Python, PowerShell, Bash)., • Proven ability to lead incident response, risk assessments, threat detection, and remediation efforts., • Experience implementing DNS protection solutions (Cisco Umbrella, Cloudflare, Infoblox, Valimail)., • Knowledge of security frameworks and compliance standards: NIST CSF, CIS Controls, ISO 27001, SOX., • Demonstrated success in leading security awareness programs, mentoring team members, and advancing security program maturity., • Relevant certifications preferred: CISSP, CISM, CISA, GIAC, Microsoft Security certifications, AWS Security Specialty, Azure Security Engineer Associate., • Strong communication, leadership, and ability to manage multiple security initiatives.Must Have:Strong Technical Security Foundation & Architecture, • Deep knowledge of network, cloud, and endpoint security., • Hands-on experience with firewalls, SIEM tools (e.g., Splunk, Sentinel), EDR/XDR, IAM, and vulnerability management., • Understanding of encryption, authentication, and secure architecture design.Incident Response & Threat Management Skills, • Ability to detect, analyze, and respond to security incidents effectively., • Skilled in log analysis, threat hunting, and forensics., • Familiarity with MITRE ATT&CK, common attack techniques, and SOC operations.Risk Assessment & Communication, • Strong ability to assess vulnerabilities, prioritize risks, and implement mitigations., • Can translate technical findings into business impact and communicate clearly with both technical and non-technical teams.

Job Description Job Title: Security Engineer/Architect - IAM Duration: 12+ Months (Possible extension) Location: New York, NY 10286 Onsite Role (4 days a week) Responsibilities: • Seeking a hands-on Security Engineer/Architect to design, implement, and govern identity and access management for a FedRAMP-compliant Azure environment using native Microsoft security tooling., • Will own the IAM architecture and control lifecycle—policy design, privileged access, identity threat protection, lifecycle governance, and evidence generation—ensuring NIST SP 800-53 control coverage and audit readiness., • Define and maintain Azure IAM architecture and guardrails: tenant segmentation, RBAC strategy, least privilege, managed identities, Conditional Access, and Just-In-Time access via PIM., • Establish standardized access patterns for workloads, service principals, Managed Identities, and human identities across multi-tenant/multi-subscription Azure footprints., • Design and enforce secure key/secret management using Azure Key Vault (FIPS 140-2 validated modules), including rotation, access policies, and monitoring., • Integrate identity threat protection signals (Entra ID Protection, Defender for Identity) into detection and response workflows; ensure coverage for high-risk scenarios (privilege escalation, token theft, MFA fatigue, legacy protocols). Implementation and Control Enforcement, • Build and maintain Azure Policy/Blueprints to enforce IAM baselines (e.g., MFA requirements, disallow legacy auth, privileged role constraints, Key Vault access policies, managed identity usage)., • Configure Conditional Access, Authentication Strengths, and token controls; manage role assignments, custom roles, and privileged workflows consistent with FedRAMP requirements., • Partner with SecOps to ensure logging/telemetry completeness (Audit logs, Sign-In logs, Entra ID Risk events, Azure Activity logs) and Sentinel ingestion; author KQL-based detections/playbooks for IAM threats., • Maintain IAM control narratives, SSP sections, and evidence packages; support POA&M lifecycle for IAM-related findings and corrective actions., • Lead periodic access certification campaigns for privileged roles and sensitive applications; implement automated recertification workflows and exception governance., • Quantify residual risk and document compensating controls; partner with risk/compliance and 3PAOs on assessments, interviews, and artifact reviews., • Identity & Access: Microsoft Entra ID (Azure AD), PIM, Conditional Access, Authentication Strengths, RBAC, Managed Identities, • Threat Protection: Entra ID Protection, Microsoft Defender for Identity, Microsoft Defender XDR signals, • SIEM/SOAR: Microsoft Sentinel (Log Analytics, Workbooks, Playbooks/Logic Apps), • Posture & Policy: Azure Policy, Azure Blueprints, Azure Automation, • Secrets & Crypto: Azure Key Vault (FIPS 140-2), Key Vault HSM (as applicable), • Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field; equivalent experience considered., • 7+ years in security engineering/architecture, with 3+ years focused on IAM in Azure using native tooling., • Deep hands-on experience with Entra ID (Azure AD), RBAC, PIM, Conditional Access, Managed Identities, and Key Vault—including policy design and enforcement at scale., • Practical knowledge of FedRAMP baselines (Moderate/High), NIST SP 800-53 control families, and audit/assessment processes; experience contributing to SSP/ConMon evidence., • Strong proficiency in Azure Policy/Blueprints and policy-as-code approaches; experience embedding controls into CI/CD., • Ability to design high-fidelity detections and automate incident response for identity threats using Sentinel and Logic Apps., • Experience operating in Azure Government or GCC High tenants and understanding telemetry/control nuances in those environments., • Background in Zero Trust principles, privileged identity strategy, and secure service-to-service authentication patterns., • Familiarity with Microsoft Purview and data access governance for sensitive workloads., • Scripting/automation skills (KQL, PowerShell, Bicep/Terraform basics) to manage identities, enforce policies, and generate evidence., • Certifications: AZ-500 (Azure Security Engineer Associate), SC-300 (Identity and Access Administrator), SC-200 (Security Operations Analyst), CISSP/CCSP, or equivalent.

Job Description Position: Cybersecurity Analyst Position Summary: Proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive data and maintain enterprise resilience. Drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization’s security posture. Key Duties and Responsibilities: • Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of Department of Education (DOE) systems, applications, and data assets., • Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments., • Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization., • Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact., • Ensure alignment with federal and regulatory security standards (e.g., NIST, FISMA) and internal cybersecurity policies and control frameworks., • Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments., • 5+ years of Cybersecurity Analyst experience in a similar role, • Required certifications: CISSP, CompTIA Security+, CompTIA CySA+, CEH, GCIA, CISA, GCIH, CCSP, CCSP, • Experience with the following technologies: SIEM (Devo/Splunk), Vulnerability Scanners (Rapid7/Armis), Cloud Security Platforms (AWS/Azure), Wireshark, SQL, Python, MS Power BI, and Microsoft Office Suite

Job DescriptionCareer Renew is recruiting for one of its clients a Senior Site Reliability Engineer - this is a fully remote role for US or Europe based candidates (as long as they can work EST hours) We are a fast-growing software company supporting and developing Hedera, an open-source, proof-of-stake, EVM-compatible public ledger built for enterprise and Web3 use cases. Hedera is governed by a global council of industry-leading organizations across multiple sectors and regions, ensuring long-term stability, decentralization, and sustainability. About the Role We are hiring a Senior Site Reliability Engineer to join the HashSphere engineering team. HashSphere is a greenfield, enterprise-focused distributed ledger platform built on Hiero, designed for private and consortium deployments with a strong emphasis on security, privacy, and scalability. This role is hands-on and high impact. You will own the design, deployment, and reliability of mission-critical, multi-region infrastructure used by large organizations across financial services, supply chain, and healthcare. You will partner closely with product, security, and platform leadership to shape architecture, reliability strategy, and operational standards from the ground up. This is not a support role. We are looking for someone who has operated real systems at scale, measured outcomes, and taken end-to-end ownership. What You’ll Do * Design, build, and operate highly available, multi-region distributed systems with clear recovery strategies and tested RTO/RPO. * Partner with the Head of SRE to define the reliability roadmap, platform architecture, and operational standards. * Own large-scale Infrastructure as Code using Terraform, including reusable modules, multi-account patterns, and policy guardrails. * Operate and scale Kubernetes environments (EKS, GKE, or AKS) using GitOps practices (ArgoCD), Helm, and strong RBAC and network policies. * Build and maintain secure CI/CD pipelines, including blue/green and canary deployments, promotion and rollback strategies, and artifact integrity (SBOM, signing). * Define and improve SRE practices, including SLOs, error budgets, observability, and measurable reductions in MTTR/MTTA. * Work closely with product and engineering teams to translate customer and business requirements into reliable, secure platform services. * Contribute to the operational support and continuous improvement of customer-facing HashSphere deployments. Required Qualifications * 7+ years of experience in SRE, platform engineering, or infrastructure engineering operating production distributed systems. * Strong multi-cloud experience (AWS, GCP, or Azure), with SME-level depth in AWS or GCP. * Proven experience running multi-region production systems, including disaster recovery testing, runbooks, and real incident ownership. * Deep, hands-on experience with Kubernetes at scale (EKS/GKE/AKS), including GitOps workflows and production-grade security controls. * Extensive experience with Terraform-first Infrastructure as Code in large, real-world environments (not POCs). * Strong security and compliance mindset, including Zero Trust principles, secrets management (Vault or cloud-native equivalents), and exposure to regulated environments (PCI, SOC 2, HIPAA, NIST). * Comfortable owning systems end to end, with clear metrics and outcomes to show impact. Nice to Have * Experience with distributed ledger or blockchain systems, particularly private or consortium deployments. * Familiarity with Hedera services such as HCS, HTS, Hedera SDKs, or the Smart Contract Service. * Understanding of EVM-based systems and smart contract tooling (Solidity, Hardhat). * Experience operating active-active, globally distributed architectures. * Prior experience supporting financial services or other highly regulated industries. Compensation & Package Equity & Tokens Performance Bonuses Health insurance & 401k for US employees only.

Job DescriptionWho we are. Reality Defender is an award-winning cybersecurity company helping enterprises and governments detect deepfakes and AI-generated media. Utilizing a patented multi-model approach, Reality Defender is robust against the bleeding edge of generative platforms producing video, audio, imagery, and text media. Reality Defender's API-first deepfake detection platform empowers teams and developers alike to identify fraud, disinformation campaigns, and harmful deepfakes in real time. Backed by world class investors including DCVC, Illuminate Financial, Y Combinator, Booz Allen Hamilton, IBM, Accenture, Rackhouse, and Argon VC, Reality Defender works with leading enterprise clients, financial institutions, and governments in order to ensure AI-generated media is not used for malicious purposes. Youtube: Reality Defender Wins RSA Most Innovative Startup The Manager of Solutions Engineering (Presales) Role. As Manager of Solutions Engineering (Presales), you will lead a team of technical experts who serve as the critical bridge between our sales organization and prospective customers. You will ensure that technical evaluations are executed flawlessly, that our deepfake detection platform is properly positioned to solve customer challenges, and that your team becomes trusted technical advisors to enterprise and government buyers. This role requires deep technical acumen, strong leadership capabilities, and the ability to translate complex AI and cybersecurity concepts into business value. You will build and scale a high-performing team that drives technical wins, accelerates sales cycles, and ensures customers understand the full capabilities of our multi-modal detection platform. Responsibilities include: * Build a repeatable demo and POC/Trial program which enables the GTM team with self-serve capability * Oversee complex technical evaluations, proof-of-concepts (POCs), and pilot programs that demonstrate the value of Reality Defender's detection capabilities * Partner closely with Account Executives to qualify opportunities, conduct technical discovery, and architect solutions that address customer use cases across fraud prevention, brand protection, and content integrity * Define the technical sales motion and pre-sales methodology, ensuring alignment with the overall go-to-market strategy * Deliver and enable compelling technical demonstrations and presentations to technical and executive audiences, showcasing detection across video, audio, image, and text modalities * Lead, mentor, and scale a team of Solutions Engineers supporting enterprise and government sales cycles * Serve as the technical voice during customer engagements, articulating our API-first architecture, integration patterns, and deployment models * Drive the technical win strategy for strategic deals, including developing custom solutions, integration architectures, and security documentation * Establish best practices for technical qualification using frameworks like MEDDPICC to ensure proper vetting of opportunities * Build and maintain technical collateral, including reference architectures, integration guides, POC guides * Create scalable enablement programs to onboard new technical and non-technical GTM team members * Serve as the primary feedback loop between Prospects/Customers and Product/Engineering teams, translating field insights into actionable product requirements and roadmap input * Ensure the team maintains deep expertise in AI/ML, deepfake generation techniques, API integrations, cloud architectures, and cybersecurity frameworks * Develop technical success metrics and reporting frameworks to measure SE effectiveness, time-to-value, POC win rates, and technical close rates * Support RFP/RFI responses with technical content, architecture diagrams, and security/compliance documentation for regulated industries * Build strong relationships with technical champions and economic buyers at key accounts, establishing credibility and trust throughout the sales cycle Who you are. * 5+ years of experience in Solutions Engineering, Sales Engineering, Solutions Architecture, or forward-deployed technical roles at B2B SaaS or cybersecurity companies * 2+ years of people management experience, including hiring, coaching, and scaling technical teams * Deep technical expertise with API-first platforms, RESTful architectures, webhooks, and cloud-based integrations (AWS, Azure, GCP) * Experience supporting complex enterprise and government sales cycles with 6-12+ month timelines * Proven track record of running successful POCs, pilots, and technical evaluations that lead to closed business * Strong understanding of AI/ML concepts, computer vision, NLP, and generative AI technologies; familiarity with deepfakes or synthetic media is a plus * Experience with cybersecurity, fraud prevention, or risk management solutions and understanding of security frameworks (SOC 2, FedRAMP, NIST) * Exceptional presentation and communication skills with ability to engage audiences ranging from developers to C-level executives * Strong consultative approach with ability to uncover technical requirements, map them to product capabilities, and articulate business value * Experience working cross-functionally with Sales, Product, Engineering, and Customer Success teams to drive customer outcomes * Analytical mindset with ability to establish metrics, track team performance, and use data to drive improvements * Ability to thrive in a fast-paced, high-growth startup environment while building scalable processes and frameworks * Willingness to travel up to 25-30% for customer meetings, conferences, and strategic opportunities What we offer. Reality Defender offers the following benefits to all our employees, regardless of location: * Healthcare plans with 100% premium coverage for employees and partial coverage available for dependents * Dental and Vision plans with 100% premium coverage for employees and their dependents * Short/Long-term disability and life insurance plans with 100% premium coverage for employees * FSA/HSA and 401k programs * Equity compensation * 20 days of PTO per year * 12 weeks of Parental Leave * Learning and Development budget * Monthly wellness benefits * Annual company-sponsored offsite For employees working from Reality Defender’s HQ in NYC, we offer the following benefits: * Daily in-office lunch through UberEats * Commuter benefits * Remote Fridays * Happy Hours and other local events Compensation Range: $165K - $195K

Job DescriptionWho we are: EHE Health is the leading national preventive healthcare provider network partnering with mid- and large-sized employers to help their employees and dependents stay healthy by screening and diagnosing health risks through comprehensive exams, allowing for early intervention. Named by Fortune Magazine and Great Place to Work® as one of the Best Workplaces in healthcare, EHE Health is headquartered in New York City and has over 200 health clinics and practices across the U.S., staffed by a network of curated primary care physicians and clinicians. EHE Health was recently acquired by Consello Capital, the private equity arm of Consello. This transformative partnership leverages Consello’s proven expertise in scaling high-growth ventures and its extensive network of industry leaders. Together, EHE Health and Consello will unlock unprecedented opportunities to accelerate EHE Health’s mission of revolutionizing preventive care. What we’re looking for: EHE is looking for a talented Director, Security and Privacy to support our IT and Privacy & Security teams in ensuring proper security protocol and procedures around all of our infrastructure. The Director, Security and Privacy will facilitate and implement processes to assess the compliance of our security policies in accordance with standard frameworks. They will regularly perform internal audits, risk assessment, and security analyses to keep all processes and controls in optimal form. The ideal candidate will be detail-oriented, proactive, and collaborative while managing the complete incorporation of security best-practices across the organization. In this role, you will: • Perform information systems security and assurance audits of networks, systems, applications, platforms, databases, and operating procedures in accordance with established auditing standards, • Participate in vulnerability and risk assessment reviews and evaluations of the EHE’s IT infrastructure to determine adequacy of the controls to detect and prevent unauthorized activities, provide an acceptable level of risk to the organization, and establish controls to mitigate loss, • Conduct third party risk assessments and oversee adherence to EHE requirements, • Communicate with and educate process owners on the importance of controls and an effective control environment, • Analyze security event data from customer computing platforms, network elements, and security devices, • Perform health checks on relevant operational systems, • Generate routine metrics and operational reports, • Perform threat research on emerging cyber-attacks that could impact our clients and patient, • Develop actionable, repeatable, measurable, and reportable security strategies, • Promote awareness of security policies and related security topics, • Bachelor’s degree in related field required, • 5-7 years of related experience in change management and steering third party compliance audits and network/wireless/web app penetration tests, and acting upon remediation recommendations, • Comprehensive understanding of National Institute of Standards and Technology (NIST) 800-53, ISO27001/27701, SOC2 Type 2 and similar regulations, • Deep knowledge of Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH Act), and the Sarbanes-Oxley Act (SOX), • Excellent written and verbal communication skills, with the ability to present and clearly disseminate information to all audiences, internal and external, • Overall knowledge and usage of cybersecurity tools, such as SIEM, EDR, and XDR, • Proven track record implementing strong identity and access management policies to enforce the principle of least privilege across all infrastructure and SaaS applications, • Robust experience analyzing cloud infrastructure misconfigurations and prioritizing risk-based mitigations, • Strong familiarity automating application security testing (SAST/DAST/SCA) and executing remediations, • Competitive salary, • Medical, dental, vision, life and disability insurance, • Employer-matched 401(k) plan, • Professional development reimbursement, • Employee access to our wellness clinics EHE is committed to Equal Employment Opportunity and to attracting and retaining the most qualified employees. Powered by JazzHR vrW0dpJEuF

Job Description Rumble is a high-growth video platform and cloud services provider that is creating an independent infrastructure. Our mission is to restore the internet to its roots by making it free and open once again. About the Role: We are seeking a Cloud Engineer (Networking & Security) to help update, maintain, and secure our cloud infrastructure. This role will primarily support our OpenStack based infrastructure, but it will also include secondary support of our Kubernetes, billing, self-service, and other components. The focus of the role will be supporting the virtual networking foundation of our cloud infrastructure, and in ensuring systems are hardened and compliant with industry standards. You'll be deeply involved in managing OpenStack networking components (OVS/OVN, Neutron), configuring automation, and applying security best practices across our infrastructure. This is a hands-on technical role for someone who enjoys solving real-world networking challenges and continuously improving cloud security posture. The ideal candidate will have experience configuring and debugging virtual networking using Open vSwitch (OVS) and Open Virtual Network (OVN) as well as a strong security background including either a security certification or hands on experience with security benchmarks (CIS, etc.). Direct experience with OpenStack is big plus, but candidates with strong Linux based virtual networking and security background should not hesitate to apply. Key Responsibilities: • Build and maintain OpenStack network environments, including OVS/OVN and Neutron services., • Configure and manage overlay networks, VLANs, VXLANs, and routing for multi-tenant environments., • Implement and manage firewall rules, VPNs, and access policies to protect data and infrastructure., • Apply system hardening and security baselines across Linux hosts, containers, and OpenStack components., • Collaborate with other team members to troubleshoot, optimize, and secure network components., • Automate network configuration and security enforcement using Ansible, Terraform, or similar tools., • Monitor and analyze network performance, availability, and security events., • Contribute to vulnerability remediation, patch management, and compliance audits., • Maintain accurate documentation and network diagrams for internal use and audits., • Strong, hands-on experience in cloud networking, network engineering, or infrastructure security., • Strong knowledge of Linux virtual networking (OVS, OVN, BIRD/FRR)., • Solid understanding of TCP/IP, DNS, VLANs, VXLANs, routing, and basic BGP/OSPF principles., • Experience implementing firewalls, load balancers, and VPNs in cloud or virtualized environments., • Hands-on experience with Linux system administration and hardening., • Familiarity with automation tools like Ansible, Terraform, or Kolla Ansible., • Working knowledge of TLS, certificate management, and encryption practices., • Exposure to vulnerability assessment tools (OpenSCAP, Trivy, Nessus) and patch workflows., • Scripting ability in Python or Bash for automation and troubleshooting., • Experience with Kubernetes networking and security (Calico, Cilium)., • Knowledge of monitoring and logging tools (Prometheus, Grafana, ELK, or Graylog)., • Exposure to compliance frameworks or standards (CIS Benchmarks, NIST 800-53, ISO 27001)., • Understanding of zero-trust and identity-based networking concepts., • Demonstrated ability to work in production environments and collaborate effectively with cross-functional teams., • $124,000-$174,000 USD base + benefits + equity (If based in the United States) Why Our Team Loves Working Here: • We are making a significant financial impact for our video creator community; we're proud of their success stories, • We enjoy challenging the status quo and going head-to-head against Big Tech, • We aren't afraid to try new things; we act fast and want to win Physical demands of the position: While performing the duties of this job, the employee is regularly required to sit for prolonged periods of time while using a computer and/or keyboard. The employee is required to communicate verbally and hear. The employee may be required to walk, reach with hands and arms, balance, and stoop or kneel. The employee may occasionally be required to lift and/or move up to 15 pounds. Specific vision abilities required by this job include clarity of vision at approximately 20 inches or less (i.e., working with small objects or reading small print), including the use of computers.

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job DescriptionProduct Manager – Identity & Access Management (IAM)Role OverviewWe are seeking a Product Manager / Product Owner specializing in Identity & Access Management (IAM) to lead the design, development, and delivery of modern authentication and access management capabilities. The role will focus on multi-factor authentication (MFA), passwordless authentication, adaptive access controls, and secure browsing experiences across enterprise and customer-facing platforms.The candidate will work closely with security, engineering, risk, compliance, and digital product teams to deliver secure, scalable identity solutions that enhance user experience while maintaining strong security controls.This role is critical in building next-generation authentication platforms that enable secure digital access while reducing friction for users.Key ResponsibilitiesProduct Strategy & Roadmap • Define and execute the IAM product roadmap covering authentication, authorization, identity lifecycle, and access governance., • Drive adoption of modern authentication standards such as passwordless authentication, adaptive MFA, and risk-based authentication., • Identify opportunities to enhance security posture while improving user experience across digital channels.Identity & Authentication CapabilitiesLead delivery of core IAM capabilities including:Authentication, • Multi-Factor Authentication (MFA), • Adaptive / Risk-Based Authentication, • Passwordless Authentication (Biometrics, FIDO2, Passkeys)Access Management, • Single Sign-On (SSO), • Identity Federation (SAML, OIDC, OAuth2), • Role Based Access Control (RBAC), • Attribute Based Access Control (ABAC)Secure Access & Browsing, • Secure browsing and session protection, • Continuous authentication, • Behavioral analytics driven access decisionsSecurity & Risk Integration, • Work with cybersecurity and risk teams to implement risk-based authentication models that dynamically adjust authentication requirements based on:, • Device posture, • Location and network, • User behavior, • Transaction risk, • Ensure compliance with regulatory frameworks (PCI, SOC2, NIST, Zero Trust architecture principles).Product Ownership, • Define and manage product backlog, epics, and user stories for IAM initiatives., • Partner with engineering teams to ensure secure and scalable implementation., • Lead Agile ceremonies including sprint planning, backlog grooming, and release planning.Platform & Vendor Management, • Evaluate and integrate leading IAM platforms such as:, • Okta, • Ping Identity, • ForgeRock, • Microsoft Entra ID, • Auth0, • CyberArk (for privileged identity), • Manage vendor partnerships and IAM platform evolution.Cross-Functional CollaborationWork closely with:, • Security Architecture, • Digital Engineering, • Cloud Platform Teams, • Compliance & Risk, • Customer Experience Teamsto ensure IAM capabilities align with enterprise security and digital strategy.Required QualificationsExperience, • 8–15 years of experience in product management, product ownership, or platform leadership, • 5+ years working with Identity & Access Management platforms, • Experience delivering enterprise authentication and access solutionsTechnical ExpertiseStrong understanding of:Authentication & Identity Standards, • OAuth 2.0, • OpenID Connect (OIDC), • SAML, • FIDO2 / Passkeys, • WebAuthnIAM Capabilities, • Multi-Factor Authentication (MFA), • Adaptive / Risk Based Authentication, • Passwordless authentication, • Identity federation, • Privileged Access ManagementSecurity Architecture, • Zero Trust security model, • Identity lifecycle management, • Secure session management

Job Description Senior Solutions Architect – Cybersecurity (Remote, NYC / Tri-State) National Technology Solutions Provider | Strategic Cybersecurity Role | Leadership Growth Path A top-ranked, national technology solutions provider is seeking a Senior Security Solutions Architect to lead pre-sales architecture and client advisory efforts focused on advanced cybersecurity solutions across the NYC / Tri-State region. This is a remote position based anywhere in the region where you can work from home when not out for client meetings, strategy sessions, and industry events. We’re looking for a senior technologist with deep technical expertise, strong client engagement skills, and the ability to drive high-impact security strategy across enterprise accounts. Why You’ll Want This Role • Leadership Track: Clear path into Practice Management or Strategic Architecture leadership, • Strategic Clients: Guide enterprise and commercial organizations through next-gen security transformations, • Comp Package: Competitive base + strong bonus potential, full benefits, 401(k) match, paid certs & generous PTO, • Culture: Entrepreneurial, collaborative team with resources and support to drive results What You’ll Be Doing • Leading solution design and architecture across Zero Trust, Secure Access, Threat Protection, and Hybrid Cloud Security, • Conducting whiteboarding, discovery sessions, and executive briefings to align technical security strategy with client business needs, • Partnering with Account Executives to deliver strategic proposals, BOMs, solution narratives, and RFP responses, • Producing high-quality technical documentation including architectural diagrams, statements of work, and solution overviews, • Acting as a thought leader on cybersecurity frameworks (NIST, ISO, MITRE ATT&CK) and emerging market trends, • Driving enablement efforts with clients and partners around vendor selection, risk management, and compliance alignment, • Supporting solution evangelism at client events, workshops, and security forums What You Bring • 10+ years of experience in cybersecurity architecture, engineering, and strategy, • Strong expertise with security technologies across Cisco, Palo Alto, Fortinet, Crowdstrike, SentinelOne, Sumo Logic, etc., • Advanced certifications (CISSP, CISM, or equivalent) highly preferred, • Deep understanding of EDR, XDR, SIEM, IDS/IPS, firewalls, endpoint protection, and automation/orchestration tools, • Familiarity with incident response, threat modeling, and secure systems design, • Track record of engaging stakeholders and delivering large-scale security projects on time, • Excellent communication skills, with proven ability to deliver presentations, whiteboarding sessions, and technical documentation, • Strong business acumen to align cybersecurity strategy with organizational objectives Benefits & Perks • Competitive base + performance-based bonus, • Full medical, dental, and vision coverage, • 401(k) with company match, • Paid certifications, training, and ongoing career development, • Generous PTO + paid holidays If you’re a strategic-minded security architect with a passion for shaping enterprise cybersecurity strategy across the NYC / Tri-State region, let’s connect. Apply today or send your resume directly to: Interviews are moving quickly for qualified candidates. Additional openings: levelociti.com/job-search #LI-LVL1

Job DescriptionFrom the beginning, our goal was to establish an advisory firm that stands apart from the rest – one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value. Our commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here. By joining our rapidly growing Risk Advisory practice you will serve as a trusted partner to our clients. You’ll bring your first-hand experience, unique perspectives, and functional knowledge to deliver tailored integrated solutions that help our clients solve today's challenges and set the foundation for future success. As a Manager at CrossCountry Consulting you will be responsible for a mix of client delivery, leading teams and developing junior team members, and participating in business development activities.What You'll Do: • Develop logical and technical cloud security architectures, API designs, and functional requirements for secure cloud environments, • Build roadmaps, design, and implement secure cloud-based technologies such as containers, infrastructure-as-code, and serverless, • Conduct solution-based gap analysis and define, identify, and engineer suitable solutions for asset testing, code scanning, and application and infrastructure monitoring, • Inventory security tools, identifying opportunities to consolidate and leverage unknown, unused, or new features, • Review technical processes, with a specific focus on cybersecurity and data (vulnerability management, disaster recovery, data protection, software development), updating them to be effective in a cloud environment, • Benchmark and model cloud security capability maturity against industry, regulatory standards, and frameworks (NIST CSF, NIST 800-53, Cloud Security Alliance, ISO 27000), • Conduct cybersecurity program and control-level assessments, identify gaps, and produce strategies and roadmaps for security program and control uplift, • Lead workstreams across various cybersecurity topics, including governance, risk, and compliance; incident response; and security architecture and engineering, • Conduct research and analysis, leveraging data to derive valuable insights and actionable recommendations for clients, • Develop deliverables that showcase a strong business rationale, presenting impactful findings and recommendations, • Stay current with the latest developments and trends in cyber and privacy issues, actively sharing knowledge with the team and the firm, • Lead project administration tasks such as project setup, planning, budgeting, account management, billing, and preparing client proposals, • Contribute to developing and implementing firm-approved, AI-enabled solutions for clients, in accordance with company policies on data protection, intellectual property, and professional standards, • Stay informed about emerging AI tools and techniques and collaborate with firm leadership to identify compliant opportunities to enhance client solutions and internal processesWhat You'll Bring:, • 5+ years of experience in Cybersecurity, • Experience building and implementing solutions on industry cloud platforms (e.g. AWS, Azure, GCP), • Experience in implementing, building and operating security capabilities in cloud environments and working with cloud/DevOps technologies including containers, infrastructure-as-code, and serverless, • Working knowledge of cloud and cybersecurity standards and frameworks, • Exceptional verbal and written communication, analytical thinking, and problem-solving skills, • Comfort with AI: Demonstrated ability to responsibly explore and adopt firm-approved AI tools to enhance productivity and innovation, • Continuous Learning Mindset: Openness to learning and applying emerging technologies including AI and automation in alignment with firm policies and client standardsQualifications:, • Bachelor’s degree from an accredited university

Job Description Imagine being a healthcare provider whose sole mission is to focus on delivering high-quality patient outcomes, but with the knowledge that you need to constantly document your compliance with key healthcare regulations along the way. Now imagine tasking someone with a limited compliance background to manage that, with looming risks of audits, breaches and fines hanging over your practice. Compliancy Group's vision is to deliver stress-relieving, tech-enabled services and software to the healthcare community that create stronger trust between patients and providers. We're on a mission to support small and midsized medical practices as they work to comply with critical, ongoing healthcare compliance requirements. We're looking for a Compliance Program Advisor who thrives in a strategic, high-impact role, loves building deep relationships with clients, and is motivated by helping organizations succeed in compliance. You'll interface with a portfolio of our largest and most strategically important clients, guiding compliance leaders and key compliance stakeholders through long-term compliance program strategy, regulatory challenges, and risk management, while collaborating closely with cross-functional teams to deliver solutions, insights, and proactive guidance. This is a remote role with opportunities to meet virtually or in-person for strategic business reviews, planning sessions, and team collaboration. Key Responsibilities • Acts as a strategic compliance advisor by offering high-level, informational guidance on regulatory trends, program design, and best practices., • Build and maintain strong client relationships, acting as a trusted partner and resource for long-term compliance strategy. In hiring you, we want to offer our customers access to a "trusted peer" that they feel understands their position and provides them pragmatic, helpful perspectives., • Become deeply familiar with our platform The Guard, ensuring that the majority of recommendations delivered to clients map their next steps back to the software and its adoption., • Analyze complex compliance needs and provide tailored solutions that enhance client programs and employee experience., • Collaborate with internal teams - especially customer success, sales and content production - to ensure seamless delivery of compliance solutions, integration with other client services and constant alignment with Compliancy Group's perspective on effective compliance management., • Identify opportunities for clients to improve compliance processes, reduce risk, and maximize operational efficiency., • Stay current on regulatory changes, industry trends, and emerging compliance challenges to provide proactive guidance., • Support business development efforts by providing subject matter expertise for proposals and client presentations., • Act as a customer advocate, informing internal teams - especially product and content production - on areas of improvement for our product, content and their positioning, • Act as a thought leader, occasionally leading prospect- and customer-facing webinars that coach our customer universe on compliance trends and best practices, • Accurately track time spent delivering advisory services and categorize requests to support capacity planning and service boundaries Qualifications • Proven 5-7 years of experience in healthcare compliance, risk management, or related fields, preferably as a compliance practitioner in a small or midsized healthcare provider environment. Candidates with consulting, advisory or academic backgrounds will also qualify, • Strong understanding of compliance and regulatory frameworks most applicable to small and midsized covered entities, including HIPAA, OSHA, and FWA. Familiarity with broader data and privacy frameworks (e.g., NIST, CIS, SOC 2, etc.) is a plus., • Demonstrated ability to provide strategic guidance and high-level advice to senior stakeholders. You are definitionally comfortable controlling a room and projecting your perspective as an expert., • Exceptional communication, presentation, and relationship-building skills. You thrive on engaging in a high-volume of meaningful conversations and are exhilarated by providing advice that gets people over obstacles., • Analytical mindset with the ability to translate complex regulations into actionable strategies, insights and tips. A premium will be placed on candidates that can demonstrate a proven track record of creating frameworks/models that can be productized and consumed across our customer base., • Ability to manage multiple clients and priorities while delivering high-quality, strategic outcomes., • Comfort working in a highly cross-functional, collaborative role in a growth environment that provides new and varying challenges on a week-to-week basis. Key Competencies • Strategic Thinking: Ability to see the big picture and guide clients in long-term compliance planning., • Client Focus: Dedication to understanding client needs and delivering exceptional service., • Leadership & Influence: Ability to inspire confidence and provide guidance to both clients and internal teams., • Adaptability: Comfortable navigating evolving regulations and complex client environments. What CG Can Offer You: • Opportunity to make a direct, measurable impact on high-value clients and the business as a whole., • Competitive base salary plus performance-based bonus tied to gross retention and account success., • Extensive training and professional development to help you grow your career., • Comprehensive benefits (medical, dental, eyecare, 401K with company match, generous PTO, and more!)., • A collaborative and transparent company culture that values customer impact, strategic thinking, and professional growth. Base Salary: $140,000 / 20% bonus Location: Remote, USA PLEASE READ: Our team has recently been notified of a phishing scam targeting candidates applying for Compliancy Group's open roles, where scammers have been posing as recruiters in an effort to access candidates' personal information. Please note that any communication from our hiring teams will be sent from a @compliancygroup.com email address and we will only respond to applications submitted through appropriate channels. Equal Employment Opportunity is a fundamental principle at Compliancy Group, where employment is based upon personal capabilities and qualifications without discrimination based on race, color, religion, sex, age, national origin, disability, sexual orientation, or any other protected characteristic as established by law. Job Type: Full-time, Remote

Job DescriptionISSOEmployment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you’ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. - Maintain responsibility for managing cybersecurity risk from an organizational perspective. - Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.- Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.- Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).- Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.- Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.- Provide subject matter expertise for cyber security and trusted system technology. - Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.- Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. - Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.- Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications:- Bachelor’s Degree.- A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.- eMASS experience.- Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.- Strong desktop publishing skills using Microsoft Word and Excel.- Experience with industry writing styles such as grammar, sentence form, and structure.- Ability to multi-task in a deadline-oriented environment. Ideally, you will also have:- CISSP, CASP, or a similar certificate is preferred.- Master's Degree in Cybersecurity or related field.- Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.- Demonstrated ability to work well independently and as a part of a team.- Excellent work ethic and a high commitment to quality. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.Health, Dental, and VisionLife Insurance401kFlexible Spending Account (Health, Dependent Care, and Commuter)Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionAbout Monstro Monstro is the operating system for governed financial intelligence. We build governance and intelligence infrastructure that enables artificial intelligence to operate safely, explainably, and at institutional scale. We exist because the level of financial guidance historically available to a small group should be accessible to many more people. By combining AI with deep institutional infrastructure, we help financial institutions deliver more personalized, responsible, and life-changing financial support to millions of individuals. We're building mission-critical systems in a highly regulated domain, and we care deeply about doing it right. If you're motivated by meaningful problems, high standards, and shaping infrastructure that improves financial outcomes, you'll feel at home here. About the Role We're looking for a Platform Engineer to join our growing Platform Engineering team and play a critical role in shaping how we build, deploy, and operate software. You'll work alongside our Staff Platform Engineer and collaborate closely with the broader Engineering team. This role sits at the intersection of enablement and governance—you'll empower our engineering teams to move fast while ensuring everything we do meets the highest standards for security and compliance. You'll own our GCP infrastructure, build out scalable environments, and establish the standards and tooling that make our engineers productive. At the same time, you'll be the guardian of our security posture and compliance commitments, ensuring we meet NIST and SOC-2 requirements without slowing down innovation. What You'll DoEnable Engineering Velocity • Build and maintain our GCP infrastructure, creating consistent, repeatable environments across development, staging, and production, • Design and implement CD pipeline standards that enable teams to deploy confidently and frequently, • Develop internal tooling, templates, and automation that reduce friction for software engineers, • Create and maintain infrastructure-as-code (Terraform) to ensure environments are reproducible and auditable, • Provide support and guidance to engineering teams on platform best practices, • Continuously improve developer experience by identifying and eliminating bottlenecksSecure & Ensure Compliance, • Implement and maintain security controls across our GCP environment (IAM, VPC configuration, secrets management, encryption), • Ensure compliance with NIST frameworks (CSF, 800-53) including access controls, continuous monitoring, and risk management, • Support SOC-2 compliance by implementing controls for security, availability, and confidentiality, along with auditable change management processes, • Maintain comprehensive documentation and evidence for internal and external audits, • Conduct security reviews and work with teams to remediate vulnerabilities, • Build observability and logging infrastructure that meets compliance retention and integrity requirementsCollaborate & Lead, • Work as part of the Platform Engineering and Engineering teams to understand needs and deliver solutions, • Partner with the Staff Platform Engineer on architecture decisions and platform strategy, • Partner with GRC/compliance stakeholders to translate requirements into technical controls, • Participate in incident response, root cause analysis, and postmortems, • Contribute to architectural decisions and help establish engineering standards, • 5+ years of experience in platform engineering, DevOps, SRE, or infrastructure roles, • Strong hands-on experience with Google Cloud Platform (GCP), • Proficiency with infrastructure-as-code tools, particularly Terraform, • Experience designing and implementing CI/CD pipelines (GitHub Actions, Cloud Build, or similar), • Solid understanding of security principles and experience implementing security controls in cloud environments, • Familiarity with compliance frameworks (NIST, SOC-2) and implementing controls to meet audit requirements, • Strong scripting and automation skills (Python, Bash, or similar), • Experience in fintech or other regulated industries, • Knowledge of Kubernetes and container orchestration, • Experience with API management platforms (e.g., Apigee), • Background in observability tools (Datadog, Prometheus, Grafana, or similar), • Relevant certifications (GCP Professional, CISSP, etc.)Why Monstro?, • Ownership & Impact: Shape the future of AI-powered finance—building a category-defining product used by consumers and institutions around the world., • Elite Team: Join a team with leadership that has a track record of scaling companies from early stage to major exits., • Principles-Driven Culture: Work in a culture that values speed, ownership, and impact—what most companies achieve in 90 days, we do in 45., • Comprehensive Compensation Package: Competitive salary, equity, and robust benefits package, including paid health, vision, dental, and disability coverage. Note: This role will be hybrid in office for those in the NYC metro or remote for those in the Denver metro area (but with the expectation of periodic travel to our NYC office) Base Compensation Range (New York City): $204,000 - $255,000 Base Compensation Range (Denver Metro): $179,200 - $224,000 *The posted range reflects the base salary for this role across the market ranges for each location. Final compensation will depend on a variety of factors, including experience, skills, internal leveling, and market conditions, and will be offered within the stated range in accordance with applicable pay transparency laws. Ready to Build With Us? If you're excited to contribute to a high-bar team building something meaningful, we love to hear from you!

Job DescriptionCompany Overview ID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly login across websites without having to create a new login and verify their identity again. Over 152 million users experience streamlined login and identity verification with ID.me at 20 federal agencies, 45 state government agencies, and 70+ healthcare organizations. More than 600+ consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me's technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to "No Identity Left Behind" to enable all people to have a secure digital identity. To learn more, visit . The Opportunity The way organizations hire, onboard, and authenticate employees is under attack. AI-generated deepfakes, synthetic identities, nation-state actors, and sophisticated social engineering campaigns are infiltrating workplaces at an unprecedented scale. More than 300 companies have reported hiring DPRK actors. Employment fraud has grown 5x in the last five years. Gartner predicts that by 2028, 25% of all job candidates will be fake. Employers tell us we're already past that point. At ID.me, we're the frontline defense. We have spent five years pioneering this space and developing the Employee Lifecycle vision. Today we support over 800 employers, and are integrated into many leading employment platforms. We are becoming the identity layer that connects hiring, onboarding, and workforce access end-to-end. We are hiring this position to drive enterprise sales across our Employee Lifecycle business. You will work directly with CISOs, CHROs, and CIOs at some of the most influential organizations in the country to embed identity proofing and authentication into the moments that matter most—and you will be selling a solution that has measurable, defensible impact on fraud prevention, candidate experience, and operational cost. This is high-stakes, high-impact work at the intersection of security, identity, and enterprise technology. If you're energized by complex problems, motivated by protecting people, and ready to bring your best to a category-defining company, we want to hear from you. Role Responsibilities • Own and execute an enterprise sales strategy targeting large organizations in regulated and at risk industries such as Financial Services, Technology, Staffing, Healthcare, and Security & Defense., • Lead consultative, multi-persona discovery across CHROs, CISOs, and CIOs to diagnose identity gaps across the hiring and access lifecycle and quantify the financial impact of fraud, operational inefficiency, and compliance risk., • Drive both direct enterprise deals and co-sell motions alongside our platform partners—to source, progress, and close pipeline., • Build and maintain a qualified pipeline and achieve bookings and revenue targets., • Articulate ID.me's Employee Lifecycle value proposition through compelling presentations, demos, and executive-level proposals., • Spend significant time in the field with prospects and customers. This is a relationship-driven, high-trust sale. In-person engagement with enterprise security and talent leaders and ecosystem partners will be essential to accelerating deal progression., • Contribute market intelligence on competitive dynamics, product gaps, and evolving buyer behavior back to BD and Product to sharpen positioning and accelerate roadmap priorities., • At least 5 years in a quota-carrying, "hunter" sales role, • Year-over-year track record of achieving quota and being recognized as a top performer, • Experience working within employment, hiring, or related fields; experience with identity related solutions is strongly preferred, • Closed opportunities with ACVs ranging from $100k to $1m on 6 to 12 month sales cycles, • Trained in leading sales methodologies (i.e. Command of the Sale, Message), • Experience selling technology into commercial markets, specifically top enterprises, • Demonstrated success in interfacing with customers and building trust, • Experience working for a team in a startup at a growth stage is highly desired, • Entrepreneurial personality, capable of effectively solving problems with minimal guidance, • Results-driven, highly organized and detail-oriented with the ability to multitask, • Excellent written and verbal communications skills and ability to communicate to a broad range of audience types at all levels of the organization, • Ability to build relationships with customers, • Ability to manage the sales cycle from start to finish, • Ability to work independently and as part of a team, • Superb planning and time management skills, ability to prioritize tasks and ability to meet deadlines with little supervision The annual base salary listed does not include a company bonus, incentive for sales roles, equity and benefits which will be determined based on experience, skills, education, relevant training, geographic location and role. ID.me offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit. The above represents the anticipated total rewards package for this job requisition. Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors. U.S. Pay Range$140,000—$160,000 USDMountain View, CA Pay Range$140,000—$160,000 USD ID.me is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings. ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations. Please review our Privacy Policy, including our CCPA policy, at id.me/privacy. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy. ID.me participates in E-Verify.

Job DescriptionDescription: We are seeking a highly skilled Security Engineer with extensive experience in cloud security, particularly within the AWS and MS365. The ideal candidate will have at least 5 years of AWS security experience and be proficient with security tools such as CrowdStrike, Coro Security or similar email security platforms, Knowbe4 and Microsoft. This role will be responsible for designing, implementing, and managing security measures that protect our AWS & MS environment and ensure the integrity, confidentiality, and availability of our data and systems. Responsibilities: • AWS Security Architecture: Design and implement robust security architectures and controls within AWS environments, ensuring compliance with best practices and organizational policies., • Security Monitoring & Incident Response: Deploy and manage security monitoring tools like CrowdStrike and Coro to detect, investigate, and respond to security incidents and vulnerabilities in real-time., • Identity & Access Management (IAM): Develop and manage AWS IAM policies, roles, and access controls to enforce least privilege and secure access to AWS resources., • Threat Detection & Vulnerability Management: Implement and maintain advanced threat detection and vulnerability management strategies within the AWS & MS environments, utilizing tools such as CrowdStrike, Coro, MS Defender and Guard Duty., • Compliance & Risk Management: Ensure AWS & MS environments comply with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR) and manage risk assessments and audits., • SIEM: Perform daily system monitoring and reviewing log data, build searches, check alarms, drill down through log sources, identify event logs., • Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into the software development lifecycle (SDLC) and operational workflows., • Monitoring and Analysis: Security analysts constantly monitor networks and systems for suspicious activity, security breaches, and potential vulnerabilities., • Incident Response: They investigate security incidents, analyze their impact, and take necessary actions to contain and resolve the issue., • Vulnerability Assessment and Penetration Testing: Identify weaknesses in systems and networks through vulnerability scans and penetration tests and then recommend solutions to mitigate these risks., • Security Policy and Implementation: Contribute to the development and implementation of security policies, procedures, and standards to protect sensitive information., • Security Awareness Training: Educate employees and users about security best practices, helping to prevent human error-related security breaches., • Strong knowledge of networking, operating systems, security technologies (firewalls, intrusion detection systems, etc.), and security protocols., • Ability to analyze security logs, network traffic, and other data to identify potential threats., • Ability to identify, analyze, and resolve security incidents and vulnerabilities., • Ability to communicate security risks and recommendations effectively to both technical and non-technical audiences., • Industry certifications like CISSP, Security+, or CEH can be beneficial. #LI-LV1 Requirements:

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC! ROLE AND RESPONSIBILITIES: The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk. They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions. Responsibilities: Vulnerability & Threat Management • Conduct vulnerability assessments across containerized and traditional infrastructure, • Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases., • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few., • Lead remediation efforts and track vulnerability lifecycle management, • Analyze security alerts and incidents, performing root cause analysis, • Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms, • Manage security aspects of VMware infrastructure, storage systems, and network segmentation CyberArk Privileged Access Management • Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components, • Configure privileged account onboarding, password management policies, and access workflows, • Implement CyberArk integrations with Active Directory, applications, and infrastructure systems, • Manage CyberArk clustering, disaster recovery, and high availability configurations, • Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders, • Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection, • Develop custom Splunk searches, dashboards, and alerts for security use cases, • Manage Splunk data models, knowledge objects, and correlation rules, • Administer Tenable Security Center and Nessus scanning infrastructure, • Configure vulnerability scanning policies, schedules, and remediation workflows, • Integrate vulnerability data with other security tools and ticketing systems, • Develop custom vulnerability reporting and metrics dashboards, • Implement and maintain SOAR platforms for security automation, • Develop automated playbooks for incident response, threat hunting, and remediation activities, • Create custom integrations between the SOAR platform and existing security tools, • Design automated workflows for security alert triage and response coordination, • Provide Level 2/3 technical support for security incidents and tool-related issues, • Participate in incident response activities and forensic investigations, • Develop and maintain security procedures and troubleshooting guides, • Support 24/7 security operations center (SOC) activities and on-call rotation, • Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits, • Maintain security tool documentation, configurations, and change management procedures, • Implement logging and audit trail requirements for compliance frameworks, • Develop security metrics and KPI reporting for management and auditors, • Partner with IT infrastructure teams on security tool deployment and maintenance, • Collaborate with application development teams on security tool integrations, • Work with network teams to implement security monitoring and traffic analysis, • Support risk management activities with technical security assessments, • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience, • Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent Security Tools Proficiency (3+ years each) • CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment, • Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization, • Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning, • Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation, • Windows Server administration including PowerShell scripting and Active Directory integration, • Enterprise PKI and certificate management, • Log aggregation, analysis, and correlation techniques, • Incident response procedures and forensic analysis, • Threat intelligence integration and threat hunting methodologies, • 4+ years of cybersecurity experience with focus on enterprise security tools, • 4+ years of hands-on system administration in enterprise environments, • Experience with self-hosted, on-premises security infrastructure, • Proven track record of security tool implementations and migrations, • Strong scripting abilities (Python, Bash, PowerShell) for automation and integration, • Experience with API integration and custom security tool development, • Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred, • Understanding of DevSecOps practices and CI/CD pipeline security, • Excellent troubleshooting and analytical problem-solving skills, • Technical Leadership: Ability to serve as subject matter expert across various Security tool sets., • Problem-Solving: Advanced analytical skills for complex security tool issues and integrations, • Communication: Ability to explain technical concepts to both technical and non-technical stakeholders, • Project Management: Experience leading security tool implementations and upgrades, • Degree in Cybersecurity or related field, • Experience in regulated industries (government), • Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications, • Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at

Job Description Datavant is a data platform company and the world's leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format. Our platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world's leading life sciences companies, government agencies, and those who deliver and pay for care. By joining Datavant today, you're stepping onto a high-performing, values-driven team. Together, we're rising to the challenge of tackling some of healthcare's most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare. What We're Looking For A senior security engineer to help build and evolve an engineering-driven vulnerability management program, focused on turning vulnerability data into clear, actionable risk signals embedded in modern engineering workflows. This role emphasizes automation, systems design, and practical risk reduction across application, cloud, and infrastructure environments. It is not primarily a tool-operations, ticket-tracking, or audit-administration role. What You Will Do You Will: • Design, build, and operate an engineering-first vulnerability management capability for Datavant's applications and infrastructure, with a primary focus on reducing real exploit risk., • Build and maintain automation and data pipelines that ingest, normalize, correlate, and prioritize vulnerability signals across multiple sources, treating vendor tools as inputs rather than systems of record., • Develop self-service, engineer-facing dashboards and workflows that provide clear prioritization and actionable insight, rather than compliance-only reporting., • Partner closely with product and engineering teams to assess vulnerability risk in context, communicate exploitability and impact clearly, and recommend practical remediation or mitigation options., • Embed high-confidence vulnerability signals into existing engineering workflows (CI/CD, PRs, backlogs) to drive adoption with minimal friction., • Drive vulnerability risk reduction by validating that remediation or compensating controls meaningfully reduce exposure, rather than tracking ticket closure alone., • Translate compliance control intent into scalable, low-friction engineering implementations that produce audit-ready evidence through automation., • Serve as a technical subject matter expert during FedRAMP and other assessments by validating controls, remediation effectiveness, and technical evidence, without owning manual audit administration., • Lead and execute technical projects that advance Datavant's vulnerability management and application security capabilities., • Deep technical expertise in vulnerability management and application security, with hands-on experience assessing, prioritizing, and reducing vulnerability risk in modern software environments., • Strong engineering background with demonstrated ability to design, build, and automate solutions (e.g., data pipelines, integrations, workflows, dashboards) rather than relying on manual or tool-driven processes. Python or GoLang strongly preferred., • Practical experience working across application, cloud, and container security in AWS and/or Azure, including real-world vulnerability assessment in complex or multi-cloud environments., • Solid understanding of security controls and assurance goals, with the ability to translate standards such as NIST, CIS, and FedRAMP into low-friction, scalable engineering implementations., • Ability to reason clearly about exploitability, exposure, impact, and compensating controls, and to apply that reasoning to prioritize work that meaningfully reduces risk., • Experience partnering closely with product and engineering teams throughout the software lifecycle, from design and build through deployment and operation., • Strong communication skills, with the ability to explain security risk, tradeoffs, and remediation options to both technical and non-technical stakeholders., • Demonstrated ability to operate effectively in fast-paced environments, delivering impact quickly while navigating ambiguity and limited dependencies., • Broad understanding of how security functions (product security, platform security, GRC, operations) work together, and how vulnerability management fits into the larger system., • Demonstrated technical thought leadership in vulnerability management, with a track record of shaping how risk is modeled, prioritized, and reduced in modern engineering environments., • Prior hands-on experience architecting and building automated vulnerability management or security data platforms, not just operating commercial tools., • Strong systems-level thinking, including experience designing secure, scalable solutions across complex application and cloud ecosystems., • Experience applying security and compliance requirements in highly regulated environments (e.g., healthcare, FedRAMP High/Moderate), including representing technical programs to auditors or government stakeholders. At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. The estimated total cash compensation range for this role is:$184,000—$230,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren't even able to see whether you've responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the 'Interview Accommodation Request' category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.

Job DescriptionHeadquartered in New York City, located in the heart of Midtown Manhattan, our Loews Hotels & Co Home Office teams support our properties throughout the United States. Our talented teams provide guidance over strategic planning, operations, revenue management, communications, sales, development, brand marketing, finance, human resources and information technology. . Who We Are: Founded in 1960, Loews Hotels & Co-operates iconic hotels and resorts across the U.S. Together, our diverse and welcoming teams craft exceptional experiences in iconic destinations. Growth and belonging start here; you'll be valued for who you are and the goals you have. Whether your next career chapter involves making memories for guests or supporting our properties in our Corporate Office, every role-from Guest Services to Finance, Culinary to IT-offers opportunities to grow and make a meaningful impact. Creating a Team Member experience where you belong no matter what race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status that makes you, you is a daily focus for us. What We Offer: * This is a bonus eligible position * Competitive health & wellness benefits, 401(K) & company match * Paid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet Bereavement * Training & Development opportunities, career growth * Tuition Reimbursement * Employee Hotel Rates, other discounts, perks and more What We're Looking For: As the IT Audit Manager at Loews Hotels, you'll be at the forefront of our IT-focused audit endeavors, reporting directly to the Vice President, Internal Audit. This role offers an opportunity to lead and manage Sarbanes-Oxley (SOX) compliance audits over IT general controls (ITGCs) and drive operational IT audit processes, ensuring the integrity and security of our technology landscape. Collaborate closely with the VP, Internal Audit to craft annual risk assessments and risk-based audit plans, leveraging your expertise to identify key areas of focus and opportunity. Further, the IT Audit Manager successfully establishes positive working relationships with key internal and external stakeholders at all levels, including Executive and Senior Leadership, Loews Corporation Internal Audit, co-source partners, and external auditors. Who You Are: * A guardian of ethics guided by principles of integrity, honesty, and respect * A continuous learner who is constantly evolving, mastering new skills, and staying updated on industry trends * A relentless communicator, fostering collaboration to support their colleagues and drive collective success * A natural, effective leader who takes initiative, makes decisions, and motivates others * A quick learner who is nimble in adapting to new situations and thrives in a dynamic work environment * Veterans and military spouses are encouraged to apply What You'll Do: * Perform annual risk assessments to develop the annual risk-based audit plan, evaluating the adequacy and operating effectiveness of internal controls by conducting audits of all business units (i.e., corporate/home office, hotel properties, and the shared service center), communicating audit recommendations to remediate audit issues or concerns identified, and providing IT advisory and assurance services to improve internal controls, operations, risk management, and compliance * Provide independent, objective IT assurance and advisory services to assess, evaluate, and validate the design and operating effectiveness of internal controls, while also adding value towards continuous process improvement opportunities within the organization * Lead and manage the planning, fieldwork, and reporting phases of IT compliance audits (including the review of quarterly IT SOX compliance certifications and completion of annual IT SOX compliance audits as required by SOX 302 and SOX 404, respectively) across the organization * Participate in the Annual Audit Risk Assessment and Enterprise Risk Management (ERM) processes, including understanding standard operating procedures and risk management policies, IT security and governance policies, interviewing key internal stakeholders, reviewing control self-assessments (CSAs) completed by hotel management, and analyzing financial data and information, which will help define annual risk-based audit plans * Share input and ideas towards developing audit risk and control matrices, mapping/documenting processes and procedures (e.g., flow charts and walkthrough narratives), and creating/enhancing audit methodologies and strategies * Perform detailed IT audit testing procedures during the fieldwork phase, while maintaining supporting audit workpapers, and thoroughly documenting any audit results and issues identified * Execute integrated audits consisting of financial, operational, IT, and compliance auditing procedures in collaboration with the Audit Manager * Clearly and timely communicate audit results and significant findings to the VP, Internal Audit, business and process owners, and senior management, and effectively advise on audit recommendations and corrective action plans to remediate issues * Assist with drafting formal audit reports and presentations that will be communicated to the Audit Committee, Executive and Senior Leadership team members and all other related key stakeholders * Partner with the IT Security and Governance team to assess and evaluate all IT general controls (ITGCs), as well as to complete special projects involving Cyber Security, Data Governance & Classification, Service Organization Controls (SOC) Reviews, System Implementations, Payment Card Industry Data Security Standards (PCI DSS) Compliance, etc. * Collaborate with the IT Business Intelligence team to design data analytics for continuous monitoring and automated audit testing by leveraging available analytical tools and resources * Hire, train, coach, and develop new staff and senior internal auditors, as needed * Co-lead and manage internal and external parties (e.g., co-source partners) to conduct planned audits * Coordinate with external auditors for interim and year-end financial statement audits, as necessary * Attend all required training sessions and meetings * Perform other duties as assigned Your Qualifications Include: * Bachelor's in accounting, finance, or IT related field required; Master's degree in referenced fields preferred * A minimum of six years of external or internal audit experience with working knowledge of and skill in applying Generally Accepted Accounting Principles (GAAP), Generally Accepted Auditing Standards (GAAS), Institute of Internal Auditors (IIA) Standards, SOX Compliance Requirements, Cyber Security Framework Standards (e.g., National Institute of Standards Technology - NIST), PCI DSS, etc. * Extensive understanding of internal controls and risks with the ability to recognize significant control issues and risk exposure across the organization * Experience assessing IT risks (including SOX), and evaluating the adequacy, design, and operating effectiveness of ITGCs * Strong understanding of IT security, governance, network, and infrastructure processes and procedures * Familiarity with utilizing data analytics tools to gain full coverage of audit population and automate auditing procedures * Proven track record of successfully managing and leading staff and senior internal auditors to effectively and sufficiently complete audit assignments and timely report on results * Excellent communication skills (verbal and written) in interactions with team members at all levels, including control or business process owners and senior management * Strong interpersonal skills with the ability to effectively develop and maintain positive working relationships cross-functionally with all levels of team members (e.g., Accounting, Finance, Operations, Compliance, Legal, HR, Loews Corporate Internal Audit, etc.) and external parties (e.g., co-source partners and external auditors) * Flexibility to work independently and in a team-oriented environment depending on assignment needs * Combination of Public Accounting (external audit) and Internal Audit experience preferred * IT audit experience at a company within the hospitality, restaurant, and retail industries, preferred * Knowledge of systems and applications such as, Oracle Enterprise Resource Planning (ERP), Workday Human Resources Information System (HRIS), Opera Property Management System (PMS), etc. with the ability to utilize system reports for audit testing and data analytics, preferred * Ability to work a flexible schedule based on business needs * Must be willing and able to travel up to 30% of the time, depending on business needs Who You'll Supervise: * Indirect team members (i.e., senior internal auditors) depending on the projects assigned * External co-source staff auditors, as needed . Salary range for this position, based on experience, is $116,000.00 to $145,000.00. Loews Hotels & Co is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances.

Job DescriptionSenior Network & Security Engineer Location: New York Tri-State Area (NYC / Northern NJ / Fairfield–Westchester CT) Work Model: Hybrid — 3 days on-site at primary data-center campus in Midtown Manhattan or Secaucus, NJ; 2 days WFH. Clearance: None required, but ability to pass a Tier 2 public-trust background check is a must. Travel: < 10 % (regional PoP / DR-site visits)About Us AITHERAS, LLC is a customer-focused IT consulting firm delivering cost-effective, mission-critical solutions since 2002. We specialize in Data Analytics, Cloud Computing, IT Engineering, Application Development, and Cyber Security. Based in Rockville, MD, we’re ISO 9001:2015 certified, an SBA-designated Small Business, and an MBE-certified firm by MDOT. We partner with over 100 clients to create scalable, innovative solutions that drive success.What You’ll Do% TimeResponsibility40 %Design & Implementation – Build and migrate segmentation zones, VRFs, and BGP/OSPF fabrics across Cisco Nexus 9K, Juniper QFX/MX, and Palo Alto PA-Series.25 %Security & Visibility – Stand up TACACS+/Cisco ISE for AAA, integrate flow telemetry into Cisco Secure Network Analytics (StealthWatch), deploy taps/SPANs/Gigamon, and tune IDS/IPS policies for OT & IT.15 %Automation – Write and maintain Python/Ansible/Terraform pipelines (pyATS, Nornir, Jinja2) for golden-config generation, compliance drift detection, and CI/CD-based push-button rollouts.10 %Operations & Incident Response – Serve as L3 escalation and join a 1-week-per-6 on-call rotation; own post-mortems and MTTR metrics.10 %Documentation & Mentoring – Produce HLDs/LLDs, MOPs, and runbooks; coach junior engineers toward CCNP/PCNSE.Must-Have Qualifications • 8+ years progressive experience in enterprise or service-provider networking., • Deep expertise configuring and troubleshooting BGP, OSPF, static routing, VRFs, VXLAN-EVPN., • Hands-on with Cisco Catalyst/Nexus & ASA/FTD, Juniper EX / QFX / MX, and Palo Alto NGFWs (Pan-OS 9/10)., • Solid command of AAA (TACACS+, RADIUS) and production deployments of Cisco ISE or equivalent., • Practical experience deploying or operating flow-analytics / tap infrastructure (StealthWatch, Gigamon, NetFlow/IPFIX, SPANs)., • Comfort writing Python and Ansible playbooks; git-based workflows (GitLab/GitHub, CI pipelines)., • Familiarity with network IDS/IPS (Snort, Zeek, Palo Alto Threat Prevention) and SIEM workflows (Splunk, QRadar)., • Ability to create HLD/LLD diagrams in Visio or draw.io and present them to technical & business leadership., • U.S. work authorization and ability to commute to NYC area 3× week.Nice to Have, • CCNP Enterprise/Security, PCNSE, JNCIS-ENT/Sec, or CCIE (R&S / Enterprise)., • Cisco Secure Network Analytics design experience (flow collector sizing, policy tuning)., • Prior exposure to industrial / OT networks (NIST 800-82, Purdue Model, SCADA segmentation)., • AWS or Azure Advanced Networking certification; Transit Gateway design experience., • Experience with F5 LTM/GTM or Citrix ADC in low-latency trading or fintech environments., • Source-of-truth & intent platforms (NetBox, Nautobot), RESTful API development, or Go/Rust scripting.What We Offer, • Base Salary: FTE: 135K-140K or $90-$100 C2C/1099, • FTE Benefits: 100 % employer-paid medical / dental / vision, 401(k) 5 % match, ESPP, • FTE Training: $3 k annual cert stipend, paid time for labs & conferences (Cisco Live, Palo Alto Ignite) Powered by JazzHR yiMixFkdvZ