Nist jobs in New York, New York - Page 2Create job alerts

Job DescriptionBenefits: • 401(k), • 401(k) matching, • Competitive salary, • Dental insurance, • Employee discounts, • Health insurance, • Training & development, • Demonstrated experience with Transmit Securitys Mosaic platform or comparable CIAM orchestration solutions., • Strong knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, and Multi-Factor Authentication (MFA) protocols., • Hands-on experience implementing social login, passwordless authentication, and document verification within customer-facing applications., • Proficiency in working with RESTful APIs and scripting languages such as Python or PowerShell for automation and system integration., • Understanding of fraud prevention technologies, including behavioral biometrics, device fingerprinting, and identity verification workflows.Preferred Qualifications, • Experience in the automotive, mobility, or travel industries, particularly supporting customer onboarding journeys., • Familiarity with Zero Trust architecture, GDPR regulations, and NIST identity standards., • Exposure to low-code/no-code platforms for designing and managing digital identity journeys.Role Overview As a Mosaic Platform Engineer, you will design, implement, and maintain secure, seamless customer identity workflows for our car rental ecosystem. You will orchestrate end-to-end identity journeys using Transmit Securitys Mosaic platform, including registration, social authentication, passwordless access, and document verification processes. In this role, you will collaborate closely with product, security, and engineering teams to integrate CIAM solutions into booking platforms and mobile applications. You will monitor fraud indicators, ensure adherence to privacy and security standards, automate identity lifecycle processes, and continuously enhance the customer experience across all digital touchpoints.

Job Description BASIC FUNCTIONS Lead and direct the Quality Engineering Team, ensuring that products meet design and reliability requirements. This individual has the responsibility and authority to carry out assigned tasks. SPECIFIC DUTIES • Offer technical support as required throughout the organization., • Oversight of the Designated Quality Representative (DQR) program for Sikorsky, Lockheed, GDLS and UTC., • Ensure AS9102 and customer requirements are met for all First Article Inspections conducted at CTG, • Technical blueprint, specification and datasheet interpretation and support for all departments, • Provide support for customer defined contract review on any technical requirements established by the customer., • Product planning for all new product(s) – Sampling plans, Inspection/Test methods, validation/verification points., • Product failure review (Internal and External) and providing solutions for added testing/inspection., • Product failure review (Escapes - RMA) from customer. Communication with Sales Department and Customer on resolutions. Process Return Material Authorizations accordingly., • Product Failure review (Internal – RTV), identify any potential Suspect Counterfeit, Confirmed Counterfeit or Unapproved parts that require disposition. Coordinate with the Quality Compliance Manager per AS5553 on disposition methods., • Supporting the Electronic Review Board (EEE Device review – Blueprint, specification requirements and providing authentication solutions), • Monitoring and Measurement Equipment calibration and preventative maintenance. Creating effective cycles to ensure longevity of equipment., • Coordinate with Quality Compliance Manager to establish new standards (ISO, AS or otherwise) to implement within Quality Management System., • Ensure technical standards (ESD S20.20, ISO17025, AS6171, IDEA-STD-1010, etc.) meet industry requirements and are established within the organization in the form of written, documented processes., • This individual has the authority to disposition product(s) as necessary., • Ensures compliance with company code of conduct and all applicable laws, regulations, rules, and policies., • Perform other duties as necessary STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • OTD for special processes FAI, Test Plans, DARs, • Quality ratings for special processes (RMAs, nonconformances, rework) EDUCATION / EXPERIENCE / COMPETENCY • Excellent verbal and written communication skills., • Excellent interpersonal and customer service skills., • Excellent organizational skills and attention to detail., • Excellent time management skills with a proven ability to meet deadlines., • Strong analytical and problem-solving skills., • Strong supervisory and leadership skills., • Ability to prioritize tasks and to delegate them when appropriate., • Proficient with Microsoft Office Suite or related software., • Bachelor’s degree in related field required., • At least three years of related experience required.

Job DescriptionHeadquartered in New York City, located in the heart of Midtown Manhattan, our Loews Hotels & Co Home Office teams support our properties throughout the United States. Our talented teams provide guidance over strategic planning, operations, revenue management, communications, sales, development, brand marketing, finance, human resources and information technology. . Who We Are: Founded in 1960, Loews Hotels & Co-operates iconic hotels and resorts across the U.S. Together, our diverse and welcoming teams craft exceptional experiences in iconic destinations. Growth and belonging start here; you'll be valued for who you are and the goals you have. Whether your next career chapter involves making memories for guests or supporting our properties in our Corporate Office, every role-from Guest Services to Finance, Culinary to IT-offers opportunities to grow and make a meaningful impact. Creating a Team Member experience where you belong no matter what race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status that makes you, you is a daily focus for us. What We Offer: * This is a bonus eligible position * Competitive health & wellness benefits, 401(K) & company match * Paid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet Bereavement * Training & Development opportunities, career growth * Tuition Reimbursement * Employee Hotel Rates, other discounts, perks and more What We're Looking For: As the IT Audit Manager at Loews Hotels, you'll be at the forefront of our IT-focused audit endeavors, reporting directly to the Vice President, Internal Audit. This role offers an opportunity to lead and manage Sarbanes-Oxley (SOX) compliance audits over IT general controls (ITGCs) and drive operational IT audit processes, ensuring the integrity and security of our technology landscape. Collaborate closely with the VP, Internal Audit to craft annual risk assessments and risk-based audit plans, leveraging your expertise to identify key areas of focus and opportunity. Further, the IT Audit Manager successfully establishes positive working relationships with key internal and external stakeholders at all levels, including Executive and Senior Leadership, Loews Corporation Internal Audit, co-source partners, and external auditors. Who You Are: * A guardian of ethics guided by principles of integrity, honesty, and respect * A continuous learner who is constantly evolving, mastering new skills, and staying updated on industry trends * A relentless communicator, fostering collaboration to support their colleagues and drive collective success * A natural, effective leader who takes initiative, makes decisions, and motivates others * A quick learner who is nimble in adapting to new situations and thrives in a dynamic work environment * Veterans and military spouses are encouraged to apply What You'll Do: * Perform annual risk assessments to develop the annual risk-based audit plan, evaluating the adequacy and operating effectiveness of internal controls by conducting audits of all business units (i.e., corporate/home office, hotel properties, and the shared service center), communicating audit recommendations to remediate audit issues or concerns identified, and providing IT advisory and assurance services to improve internal controls, operations, risk management, and compliance * Provide independent, objective IT assurance and advisory services to assess, evaluate, and validate the design and operating effectiveness of internal controls, while also adding value towards continuous process improvement opportunities within the organization * Lead and manage the planning, fieldwork, and reporting phases of IT compliance audits (including the review of quarterly IT SOX compliance certifications and completion of annual IT SOX compliance audits as required by SOX 302 and SOX 404, respectively) across the organization * Participate in the Annual Audit Risk Assessment and Enterprise Risk Management (ERM) processes, including understanding standard operating procedures and risk management policies, IT security and governance policies, interviewing key internal stakeholders, reviewing control self-assessments (CSAs) completed by hotel management, and analyzing financial data and information, which will help define annual risk-based audit plans * Share input and ideas towards developing audit risk and control matrices, mapping/documenting processes and procedures (e.g., flow charts and walkthrough narratives), and creating/enhancing audit methodologies and strategies * Perform detailed IT audit testing procedures during the fieldwork phase, while maintaining supporting audit workpapers, and thoroughly documenting any audit results and issues identified * Execute integrated audits consisting of financial, operational, IT, and compliance auditing procedures in collaboration with the Audit Manager * Clearly and timely communicate audit results and significant findings to the VP, Internal Audit, business and process owners, and senior management, and effectively advise on audit recommendations and corrective action plans to remediate issues * Assist with drafting formal audit reports and presentations that will be communicated to the Audit Committee, Executive and Senior Leadership team members and all other related key stakeholders * Partner with the IT Security and Governance team to assess and evaluate all IT general controls (ITGCs), as well as to complete special projects involving Cyber Security, Data Governance & Classification, Service Organization Controls (SOC) Reviews, System Implementations, Payment Card Industry Data Security Standards (PCI DSS) Compliance, etc. * Collaborate with the IT Business Intelligence team to design data analytics for continuous monitoring and automated audit testing by leveraging available analytical tools and resources * Hire, train, coach, and develop new staff and senior internal auditors, as needed * Co-lead and manage internal and external parties (e.g., co-source partners) to conduct planned audits * Coordinate with external auditors for interim and year-end financial statement audits, as necessary * Attend all required training sessions and meetings * Perform other duties as assigned Your Qualifications Include: * Bachelor's in accounting, finance, or IT related field required; Master's degree in referenced fields preferred * A minimum of six years of external or internal audit experience with working knowledge of and skill in applying Generally Accepted Accounting Principles (GAAP), Generally Accepted Auditing Standards (GAAS), Institute of Internal Auditors (IIA) Standards, SOX Compliance Requirements, Cyber Security Framework Standards (e.g., National Institute of Standards Technology - NIST), PCI DSS, etc. * Extensive understanding of internal controls and risks with the ability to recognize significant control issues and risk exposure across the organization * Experience assessing IT risks (including SOX), and evaluating the adequacy, design, and operating effectiveness of ITGCs * Strong understanding of IT security, governance, network, and infrastructure processes and procedures * Familiarity with utilizing data analytics tools to gain full coverage of audit population and automate auditing procedures * Proven track record of successfully managing and leading staff and senior internal auditors to effectively and sufficiently complete audit assignments and timely report on results * Excellent communication skills (verbal and written) in interactions with team members at all levels, including control or business process owners and senior management * Strong interpersonal skills with the ability to effectively develop and maintain positive working relationships cross-functionally with all levels of team members (e.g., Accounting, Finance, Operations, Compliance, Legal, HR, Loews Corporate Internal Audit, etc.) and external parties (e.g., co-source partners and external auditors) * Flexibility to work independently and in a team-oriented environment depending on assignment needs * Combination of Public Accounting (external audit) and Internal Audit experience preferred * IT audit experience at a company within the hospitality, restaurant, and retail industries, preferred * Knowledge of systems and applications such as, Oracle Enterprise Resource Planning (ERP), Workday Human Resources Information System (HRIS), Opera Property Management System (PMS), etc. with the ability to utilize system reports for audit testing and data analytics, preferred * Ability to work a flexible schedule based on business needs * Must be willing and able to travel up to 30% of the time, depending on business needs Who You'll Supervise: * Indirect team members (i.e., senior internal auditors) depending on the projects assigned * External co-source staff auditors, as needed . Salary range for this position, based on experience, is $116,000.00 to $145,000.00. Loews Hotels & Co is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances.

Job Description Imagine being a healthcare provider whose sole mission is to focus on delivering high-quality patient outcomes, but with the knowledge that you need to constantly document your compliance with key healthcare regulations along the way. Now imagine tasking someone with a limited compliance background to manage that, with looming risks of audits, breaches and fines hanging over your practice. Compliancy Group's vision is to deliver stress-relieving, tech-enabled services and software to the healthcare community that create stronger trust between patients and providers. We're on a mission to support small and midsized medical practices as they work to comply with critical, ongoing healthcare compliance requirements. We're looking for a Compliance Program Advisor who thrives in a strategic, high-impact role, loves building deep relationships with clients, and is motivated by helping organizations succeed in compliance. You'll interface with a portfolio of our largest and most strategically important clients, guiding compliance leaders and key compliance stakeholders through long-term compliance program strategy, regulatory challenges, and risk management, while collaborating closely with cross-functional teams to deliver solutions, insights, and proactive guidance. This is a remote role with opportunities to meet virtually or in-person for strategic business reviews, planning sessions, and team collaboration. Key Responsibilities • Acts as a strategic compliance advisor by offering high-level, informational guidance on regulatory trends, program design, and best practices., • Build and maintain strong client relationships, acting as a trusted partner and resource for long-term compliance strategy. In hiring you, we want to offer our customers access to a "trusted peer" that they feel understands their position and provides them pragmatic, helpful perspectives., • Become deeply familiar with our platform The Guard, ensuring that the majority of recommendations delivered to clients map their next steps back to the software and its adoption., • Analyze complex compliance needs and provide tailored solutions that enhance client programs and employee experience., • Collaborate with internal teams - especially customer success, sales and content production - to ensure seamless delivery of compliance solutions, integration with other client services and constant alignment with Compliancy Group's perspective on effective compliance management., • Identify opportunities for clients to improve compliance processes, reduce risk, and maximize operational efficiency., • Stay current on regulatory changes, industry trends, and emerging compliance challenges to provide proactive guidance., • Support business development efforts by providing subject matter expertise for proposals and client presentations., • Act as a customer advocate, informing internal teams - especially product and content production - on areas of improvement for our product, content and their positioning, • Act as a thought leader, occasionally leading prospect- and customer-facing webinars that coach our customer universe on compliance trends and best practices, • Accurately track time spent delivering advisory services and categorize requests to support capacity planning and service boundaries Qualifications • Proven 5-7 years of experience in healthcare compliance, risk management, or related fields, preferably as a compliance practitioner in a small or midsized healthcare provider environment. Candidates with consulting, advisory or academic backgrounds will also qualify, • Strong understanding of compliance and regulatory frameworks most applicable to small and midsized covered entities, including HIPAA, OSHA, and FWA. Familiarity with broader data and privacy frameworks (e.g., NIST, CIS, SOC 2, etc.) is a plus., • Demonstrated ability to provide strategic guidance and high-level advice to senior stakeholders. You are definitionally comfortable controlling a room and projecting your perspective as an expert., • Exceptional communication, presentation, and relationship-building skills. You thrive on engaging in a high-volume of meaningful conversations and are exhilarated by providing advice that gets people over obstacles., • Analytical mindset with the ability to translate complex regulations into actionable strategies, insights and tips. A premium will be placed on candidates that can demonstrate a proven track record of creating frameworks/models that can be productized and consumed across our customer base., • Ability to manage multiple clients and priorities while delivering high-quality, strategic outcomes., • Comfort working in a highly cross-functional, collaborative role in a growth environment that provides new and varying challenges on a week-to-week basis. Key Competencies • Strategic Thinking: Ability to see the big picture and guide clients in long-term compliance planning., • Client Focus: Dedication to understanding client needs and delivering exceptional service., • Leadership & Influence: Ability to inspire confidence and provide guidance to both clients and internal teams., • Adaptability: Comfortable navigating evolving regulations and complex client environments. What CG Can Offer You: • Opportunity to make a direct, measurable impact on high-value clients and the business as a whole., • Competitive base salary plus performance-based bonus tied to gross retention and account success., • Extensive training and professional development to help you grow your career., • Comprehensive benefits (medical, dental, eyecare, 401K with company match, generous PTO, and more!)., • A collaborative and transparent company culture that values customer impact, strategic thinking, and professional growth. Base Salary: $140,000 / 20% bonus Location: Remote, USA PLEASE READ: Our team has recently been notified of a phishing scam targeting candidates applying for Compliancy Group's open roles, where scammers have been posing as recruiters in an effort to access candidates' personal information. Please note that any communication from our hiring teams will be sent from a @compliancygroup.com email address and we will only respond to applications submitted through appropriate channels. Equal Employment Opportunity is a fundamental principle at Compliancy Group, where employment is based upon personal capabilities and qualifications without discrimination based on race, color, religion, sex, age, national origin, disability, sexual orientation, or any other protected characteristic as established by law. Job Type: Full-time, Remote

Job Description BASIC FUNCTIONS The Training/Project Coordinator is a dual-role position responsible for overseeing employee training programs and managing key internal projects to support organizational growth and operational efficiency. This role will plan, implement, and track both training initiatives and project execution across departments, ensuring alignment with company goals, timelines, and budgets. This individual has the responsibility and authority to carry out all assigned tasks. SPECIFIC DUTIES • Design, schedule, and coordinate internal and external training programs., • Track training completion, maintain accurate records, and ensure compliance with company and regulatory standards., • Work with department heads to assess training needs and develop target learning plans., • Prepare training materials, manuals, and onboarding guides as needed., • Evaluate training effectiveness and recommend improvements., • Lead cross-functional projects from initiation through completion, ensuring scope, timeline, and budget alignment., • Develop project plans, assign tasks, track milestones, and provide regular updates to stakeholders., • Identify and manage project risks, issues, and changes to scope., • Facilitate effective communication between departments to ensure smooth project execution., • Prepare status reports and post-project evaluations. STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES (pending) EDUCATION / EXPERIENCE / COMPETENCY • Bachelor’s degree in Business, Human Resources, Organizational Development or related field., • 3+ years of experience in training coordination, project management, or a similar role., • Proficient in project management and learning management systems., • Project Management certification is a plus., • Excellent verbal and written communication skills., • Excellent organizational skills and attention to detail., • Prolonged periods of sitting at a desk and working on a computer., • Must be able to lift 15 pounds at times. TRAINING REQUIREMENTS ALL TRAININGS OUTLINED FOR THIS JOB DESCRIPTION ARE IDENTIFIED WITHIN CRESTWOOD TECHNOLOGY GROUP’S TRAINING MATRIX, LOCATED WITHIN THE LEARNING MANAGEMENT TOOL WITHIN EACH INDIVIDUALS PRE-REQUISITES.

Job DescriptionProduct Manager – Identity & Access Management (IAM)Role OverviewWe are seeking a Product Manager / Product Owner specializing in Identity & Access Management (IAM) to lead the design, development, and delivery of modern authentication and access management capabilities. The role will focus on multi-factor authentication (MFA), passwordless authentication, adaptive access controls, and secure browsing experiences across enterprise and customer-facing platforms.The candidate will work closely with security, engineering, risk, compliance, and digital product teams to deliver secure, scalable identity solutions that enhance user experience while maintaining strong security controls.This role is critical in building next-generation authentication platforms that enable secure digital access while reducing friction for users.Key ResponsibilitiesProduct Strategy & Roadmap • Define and execute the IAM product roadmap covering authentication, authorization, identity lifecycle, and access governance., • Drive adoption of modern authentication standards such as passwordless authentication, adaptive MFA, and risk-based authentication., • Identify opportunities to enhance security posture while improving user experience across digital channels.Identity & Authentication CapabilitiesLead delivery of core IAM capabilities including:Authentication, • Multi-Factor Authentication (MFA), • Adaptive / Risk-Based Authentication, • Passwordless Authentication (Biometrics, FIDO2, Passkeys)Access Management, • Single Sign-On (SSO), • Identity Federation (SAML, OIDC, OAuth2), • Role Based Access Control (RBAC), • Attribute Based Access Control (ABAC)Secure Access & Browsing, • Secure browsing and session protection, • Continuous authentication, • Behavioral analytics driven access decisionsSecurity & Risk Integration, • Work with cybersecurity and risk teams to implement risk-based authentication models that dynamically adjust authentication requirements based on:, • Device posture, • Location and network, • User behavior, • Transaction risk, • Ensure compliance with regulatory frameworks (PCI, SOC2, NIST, Zero Trust architecture principles).Product Ownership, • Define and manage product backlog, epics, and user stories for IAM initiatives., • Partner with engineering teams to ensure secure and scalable implementation., • Lead Agile ceremonies including sprint planning, backlog grooming, and release planning.Platform & Vendor Management, • Evaluate and integrate leading IAM platforms such as:, • Okta, • Ping Identity, • ForgeRock, • Microsoft Entra ID, • Auth0, • CyberArk (for privileged identity), • Manage vendor partnerships and IAM platform evolution.Cross-Functional CollaborationWork closely with:, • Security Architecture, • Digital Engineering, • Cloud Platform Teams, • Compliance & Risk, • Customer Experience Teamsto ensure IAM capabilities align with enterprise security and digital strategy.Required QualificationsExperience, • 8–15 years of experience in product management, product ownership, or platform leadership, • 5+ years working with Identity & Access Management platforms, • Experience delivering enterprise authentication and access solutionsTechnical ExpertiseStrong understanding of:Authentication & Identity Standards, • OAuth 2.0, • OpenID Connect (OIDC), • SAML, • FIDO2 / Passkeys, • WebAuthnIAM Capabilities, • Multi-Factor Authentication (MFA), • Adaptive / Risk Based Authentication, • Passwordless authentication, • Identity federation, • Privileged Access ManagementSecurity Architecture, • Zero Trust security model, • Identity lifecycle management, • Secure session management

Job DescriptionDescription: We are seeking a highly skilled Security Engineer with extensive experience in cloud security, particularly within the AWS and MS365. The ideal candidate will have at least 5 years of AWS security experience and be proficient with security tools such as CrowdStrike, Coro Security or similar email security platforms, Knowbe4 and Microsoft. This role will be responsible for designing, implementing, and managing security measures that protect our AWS & MS environment and ensure the integrity, confidentiality, and availability of our data and systems. Responsibilities: • AWS Security Architecture: Design and implement robust security architectures and controls within AWS environments, ensuring compliance with best practices and organizational policies., • Security Monitoring & Incident Response: Deploy and manage security monitoring tools like CrowdStrike and Coro to detect, investigate, and respond to security incidents and vulnerabilities in real-time., • Identity & Access Management (IAM): Develop and manage AWS IAM policies, roles, and access controls to enforce least privilege and secure access to AWS resources., • Threat Detection & Vulnerability Management: Implement and maintain advanced threat detection and vulnerability management strategies within the AWS & MS environments, utilizing tools such as CrowdStrike, Coro, MS Defender and Guard Duty., • Compliance & Risk Management: Ensure AWS & MS environments comply with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR) and manage risk assessments and audits., • SIEM: Perform daily system monitoring and reviewing log data, build searches, check alarms, drill down through log sources, identify event logs., • Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into the software development lifecycle (SDLC) and operational workflows., • Monitoring and Analysis: Security analysts constantly monitor networks and systems for suspicious activity, security breaches, and potential vulnerabilities., • Incident Response: They investigate security incidents, analyze their impact, and take necessary actions to contain and resolve the issue., • Vulnerability Assessment and Penetration Testing: Identify weaknesses in systems and networks through vulnerability scans and penetration tests and then recommend solutions to mitigate these risks., • Security Policy and Implementation: Contribute to the development and implementation of security policies, procedures, and standards to protect sensitive information., • Security Awareness Training: Educate employees and users about security best practices, helping to prevent human error-related security breaches., • Strong knowledge of networking, operating systems, security technologies (firewalls, intrusion detection systems, etc.), and security protocols., • Ability to analyze security logs, network traffic, and other data to identify potential threats., • Ability to identify, analyze, and resolve security incidents and vulnerabilities., • Ability to communicate security risks and recommendations effectively to both technical and non-technical audiences., • Industry certifications like CISSP, Security+, or CEH can be beneficial. #LI-LV1 Requirements:

Job Description Datavant is a data platform company and the world's leader in health data exchange. Our vision is that every healthcare decision is powered by the right data, at the right time, in the right format. Our platform is powered by the largest, most diverse health data network in the U.S., enabling data to be secure, accessible and usable to inform better health decisions. Datavant is trusted by the world's leading life sciences companies, government agencies, and those who deliver and pay for care. By joining Datavant today, you're stepping onto a high-performing, values-driven team. Together, we're rising to the challenge of tackling some of healthcare's most complex problems with technology-forward solutions. Datavanters bring a diversity of professional, educational and life experiences to realize our bold vision for healthcare. What We're Looking For A senior security engineer to help build and evolve an engineering-driven vulnerability management program, focused on turning vulnerability data into clear, actionable risk signals embedded in modern engineering workflows. This role emphasizes automation, systems design, and practical risk reduction across application, cloud, and infrastructure environments. It is not primarily a tool-operations, ticket-tracking, or audit-administration role. What You Will Do You Will: • Design, build, and operate an engineering-first vulnerability management capability for Datavant's applications and infrastructure, with a primary focus on reducing real exploit risk., • Build and maintain automation and data pipelines that ingest, normalize, correlate, and prioritize vulnerability signals across multiple sources, treating vendor tools as inputs rather than systems of record., • Develop self-service, engineer-facing dashboards and workflows that provide clear prioritization and actionable insight, rather than compliance-only reporting., • Partner closely with product and engineering teams to assess vulnerability risk in context, communicate exploitability and impact clearly, and recommend practical remediation or mitigation options., • Embed high-confidence vulnerability signals into existing engineering workflows (CI/CD, PRs, backlogs) to drive adoption with minimal friction., • Drive vulnerability risk reduction by validating that remediation or compensating controls meaningfully reduce exposure, rather than tracking ticket closure alone., • Translate compliance control intent into scalable, low-friction engineering implementations that produce audit-ready evidence through automation., • Serve as a technical subject matter expert during FedRAMP and other assessments by validating controls, remediation effectiveness, and technical evidence, without owning manual audit administration., • Lead and execute technical projects that advance Datavant's vulnerability management and application security capabilities., • Deep technical expertise in vulnerability management and application security, with hands-on experience assessing, prioritizing, and reducing vulnerability risk in modern software environments., • Strong engineering background with demonstrated ability to design, build, and automate solutions (e.g., data pipelines, integrations, workflows, dashboards) rather than relying on manual or tool-driven processes. Python or GoLang strongly preferred., • Practical experience working across application, cloud, and container security in AWS and/or Azure, including real-world vulnerability assessment in complex or multi-cloud environments., • Solid understanding of security controls and assurance goals, with the ability to translate standards such as NIST, CIS, and FedRAMP into low-friction, scalable engineering implementations., • Ability to reason clearly about exploitability, exposure, impact, and compensating controls, and to apply that reasoning to prioritize work that meaningfully reduces risk., • Experience partnering closely with product and engineering teams throughout the software lifecycle, from design and build through deployment and operation., • Strong communication skills, with the ability to explain security risk, tradeoffs, and remediation options to both technical and non-technical stakeholders., • Demonstrated ability to operate effectively in fast-paced environments, delivering impact quickly while navigating ambiguity and limited dependencies., • Broad understanding of how security functions (product security, platform security, GRC, operations) work together, and how vulnerability management fits into the larger system., • Demonstrated technical thought leadership in vulnerability management, with a track record of shaping how risk is modeled, prioritized, and reduced in modern engineering environments., • Prior hands-on experience architecting and building automated vulnerability management or security data platforms, not just operating commercial tools., • Strong systems-level thinking, including experience designing secure, scalable solutions across complex application and cloud ecosystems., • Experience applying security and compliance requirements in highly regulated environments (e.g., healthcare, FedRAMP High/Moderate), including representing technical programs to auditors or government stakeholders. At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. The estimated total cash compensation range for this role is:$184,000—$230,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren't even able to see whether you've responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the 'Interview Accommodation Request' category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.

Job Description Summary: The Security Architect has primary responsibility for leading the Security Engineering and Architecture function within the Bank’s Information Security team. The individual will develop and maintain the security architecture framework and strategy in accordance with the Bank’s policies, standards, and risk appetite. They will collaborate with business units, Risk Management, and Technology teams to ensure security is integrated with business and technology strategies and objectives. Job Responsibilities: Security Design, Architecture, and Strategy • Lead the Bank’s Security Engineering and Architecture function., • Develop and maintain the security architecture framework, standards, policies, and guidelines for the Bank’s IT systems and applications., • Drive the Bank’s security architecture strategy ensuring adherence to principles of defense in depth, economy of mechanism, least privilege, and secure by default., • Collaborate with business units, Risk Management, and Technology teams to align security architecture with the business and technology strategies and objectives., • Maintain an evolving picture of the threat landscape, trends, and emerging technologies., • Perform security reviews of technology platforms and applications., • Identify and evaluate security risks across technology and vendor platforms, networks, applications, and cloud environments by performing risk assessment and threat modeling activities., • Develop and oversee execution of treatment plans to address identified risks in accordance with organizational policies, standards, and risk appetite balancing security, performance, and business needs., • Analyze and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance., • Lead the assessment of security processes, platforms, and practices to identify areas for improvement., • Ensure technology solutions have security considerations embedded throughout their lifecycle., • Ensure ongoing compliance with regulatory requirements.Project Management, • Lead in the management and execution of large-scale projects according to project management schedules., • Develop comprehensive project plans including milestones, resource allocation, and timelines ensuring alignment with the Bank’s security objectives., • Coordinate with internal and external stakeholders as required to ensure on-time and on-budget delivery of projects., • Support incident response efforts by reviewing security events and escalations, performing investigations, and seeing matters through to resolution., • Support technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies., • Stay abreast of relevant industry related developments, trends, and threats., • Commit to ongoing professional education and development in the Information / Cyber Security field., • Bachelor’s degree in an IT related discipline required;, • At least 5– 8 years of experience in information technology, information security, risk, or similar field;, • 5+ years of experience in an information security role;, • 5+ years of architecture experience;, • Experience in a highly regulated industries is preferred;, • Relevant industry certifications (CCSP, CISM, CAASP+, SSCP, CNDA, CYSA+) and/or advanced degrees may be considered in lieu of experience;, • Deep expertise in secure design and architecture principles;, • Advanced knowledge of multiple security practice areas including security architecture, security engineering, identity and access management, asset management, vulnerability management, threat detection and response, endpoint security, network security, cloud security, web security, email security, data security, application security, threat intelligence;, • In-depth knowledge of regulatory frameworks including, but not limited to, NIST, PCI-DSS, SOX, FFIEC, ISO27001;, • Ability to provide risk-based recommendations balancing security, performance, and business needs;, • Ability to communicate complex security topics to technical and non-technical stakeholders;, • Medical, Dental, Vision and Rx which are contributory., • Bonus programs., • Employee Stock Option Program (ESOP)., • Life Insurance, Long Term Disability and Accidental Death and Dismemberment (LTD&AD&D)., • Paid Time Off (PTO) which includes Personal and Vacation Time., • Paid Sick Time., • Bank Holidays., • This role is eligible for a hybrid schedule: 3 days in the office and 2 days work from home, based on business needs. This arrangement may change without notice. Columbia Bank and its affiliates is an Equal Opportunity Employer, including individuals with disabilities and veterans.

Job Description Capstone Integrated Solutions is a comprehensive services provider. Our team consists of outstanding professionals, highly experienced in designing, building, and supporting retail software. We see ourselves as a build-as-a-service provider who follows a repeatable business pattern that can be applied to a variety of platforms and verticals. Having a culture built on outcomes and delivery at the core of the business, Capstone is providing its customers with a complete suite of services for software development, system analysis, integration, implementation, and support, as well as the option to engage a single team to perform all the services they require. Who You Are and What You'll Do: Capstone Integrated Solutions is seeking a highly skilled and experienced Senior AWS Solution Architect with full-stack expertise to lead the design, architecture, and implementation of cloud-native applications. This individual will play a key role in defining the overall technical direction of our solutions, leveraging AWS cloud services, Angular (frontend), and Python (backend). The ideal candidate will combine strong hands-on technical skills with solution-level architectural experience to ensure scalability, performance, and security of enterprise-grade applications Responsibilities: • Lead the end-to-end solution architecture of applications hosted in AWS, ensuring scalability, reliability, performance, and security., • Collaborate with stakeholders to translate business requirements into technical designs and solution roadmaps., • Design and guide development of modern, responsive frontends using Angular and robust, scalable backends using Python FastAPI and SQLAlchemy., • Architect and implement API strategies, including RESTful and GraphQL services., • Define and implement cloud-native architectures, including serverless, container-based (ECS/EKS), or microservices-based solutions., • Design data storage and integration strategies (RDS, DynamoDB, S3, Glue, Lambda, etc.)., • Ensure application security best practices, including IAM roles, API Gateway, encryption, and compliance with standards., • Establish and enforce Azure DevOps CI/CD pipelines for streamlined deployments., • Mentor development teams on design patterns, coding standards, and AWS cloud adoption., • Provide thought leadership and stay updated on emerging technologies in cloud, frontend, and backend development, • Provide thought leadership and advisory guidance on cloud adoption, migration planning, and workload onboarding to the landing zone., • 8+ years of experience in software development and solution architecture, with at least 4+ years in AWS-focused architecture roles., • Strong proficiency in AWS services (EC2, Lambda, API Gateway, S3, RDS/DynamoDB, ECS/EKS, CloudFormation/Terraform, IAM)., • Hands-on experience designing and developing frontends with Angular (latest versions)., • Strong backend development skills with Python and related frameworks such as FastAPI., • Proven experience architecting end-to-end cloud-native solutions., • Solid knowledge of DevOps practices, CI/CD, and Infrastructure as Code., • Excellent understanding of microservices, REST, and event-driven architectures., • Experience in highly regulated industries (e.g., healthcare, financial services, government)., • Knowledge of compliance frameworks such as HIPAA, PCI, NIST, or FedRAMP., • Familiarity with DevOps practices, CI/CD pipelines, and cloud-native application design., • Prior consulting experience with a top-tier cloud services provider or systems integrator. AWS Certified Solutions Architect – Professional or equivalent., • Experience with machine learning integration in AWS (SageMaker, Glue, Athena, EMR)., • Experience in enterprise-scale application modernization and migration projects., • Familiarity with additional frontend frameworks (React, Vue) and backend tools (Node.js). "Our Culture": At Capstone, the central principles that we all adhere to, and the glue that holds us together, are our keystones. Our four keystones are: • "A Customer Obsessed, Delivery Focused, Culture", • We're driven to exceed our customers' expectations by listening, leading, solving problems, and delivering what we promise, • We aim to be the most dependable and trusted partner serving our customers. TRUST = CONSISTENCY x TIME, • "A Culture of Learning and Sharing", • We value "Lifetime Learners"; those who are hungry, competitive, curious, and self-motivated in their pursuit of knowledge., • Personal and professional growth depends on teamwork and continuous learning. By sharing knowledge, skills, ideas, and effort, we benefit our customers, ourselves, and our communities., • We recognize that the thoughts, feelings, and backgrounds of others are as important as our own. Everyone has something to learn and everyone has something they can teach., • Knowledge and ability are valued. Sharing knowledge and helping others learn new capabilities is valued exponentially., • "A Culture of Growth and Scalability", • Growth comes from not establishing barriers in your role. "Cross functional skill sets are valued and help us deliver to our customers in a truly agile fashion. It comes with understanding that when asked to do something new, you will need support, have questions, and make some mistakes along the way., • The most elegant solution is a simple solution. Simple doesn't mean easy. It's often more difficult to break a complex problem down into simple, scalable terms. We don't appreciate, or value, over architected solutions or superfluous coding., • Time is one of our most precious commodities. Scalability implies being respectful of this and passionate about making the most efficient use of each and every one of our team members time., • "All Work is Strategic", • No matter how small a project or assignment appears, every single engagement is an opportunity for us to prove ourselves, build trust, and develop relationships that last and grow, • Every task, interaction, and commitment matters Job Type: Full-time Benefits: • Remote work Capstone Integrated Solutions is an equal opportunity employer. We embrace and celebrate diversity and are committed to creating an inclusive and safe environment for all employees. Experience comes in many forms, and we're dedicated to adding new perspectives to the team. We encourage you to apply even if your experience doesn't perfectly align with what we have listed. We look forward to hearing from you. No Agencies Please!

Job Description Job Summary: The focus of this position is upon manufacturing support, quality planning, problem solving, training, quality system maintenance, continuous improvement. Provides Quality Engineering coordination of quality planning activities that ensure products and processes are designed, validated, procured, manufactured and inspected in accordance with customer and company quality assurance requirements. This role requires work in our Fairfield and Byram locations. Primary Responsibilities: • Maintains and improves Quality systems such as Calibration, Document Control, Non-conformance, Corrective Action, Management Review, Audits, Material Return, Material Review Board, etc., • Uses ability to interpret and analyze blueprints to develop and facilitate the creation of Product Quality Plans, Process Failure Mode and Effects Analysis, Control Plans and Inspection Instructions. Develops and initiates standards and methods for inspection, and evaluation of products and processes. Collects data tied to appropriate statistical techniques and sampling plan., • Develops and implements means for the use and reporting of statistical and capability studies in the manufacturing process., • Maintains, coordinates activities and systems, and makes improvements to quality systems such as Non-Conformance, Material Returns, Gage and Tooling Calibration, etc., • Assist in performing failure analysis for products and processes using problem solving tools and techniques. Troubleshoots processes to improve and correct quality issues., • Supports Quality Manager in various activities including cross-functional teams in formal and informal continuous improvement activities (i.e. developing and improving baseline Cpks, reducing scrap and rework, improving first time yields, reducing costs). Prepares reports, graphs and charts (level I-III) to describe trends, pin point areas of focus for improvement opportunities, or to provide information, • Maintains a thorough knowledge of all manufacturing and quality assurance systems i.e. Lot Acceptance, Military Specs, Design Qualification Testing, and quality assurance systems, i.e. First Article Inspection, Calibration of inspection equipment, inspection methods, techniques and gages, etc and, • Documents non-conformances and conducts preliminary reviews. Conducts preliminary review and analyzes non-conformance data to identify opportunities for corrective, preventive or continuous improvement opportunities., • Writes, revises and releases technical procedures and work instructions as necessary. Identifies opportunities for improvement and recommends changes to system documents., • Performs and hosts audits of quality systems, products, and processes, internal and external (suppliers/subsidiaries)., • Adheres to safety practices and procedures and follows overall CAD procedures & policies, procedures tied to ISO 9001/AS9100 and other QMS requirements., • Adheres to the Controlled Unclassified Information (CUI) policies and procedures related to NIST 800-171 and completes all required CUI Awareness training, which includes collection, processing/handling, transmission, storage, and general safeguarding practices., • Maintains the confidentiality of all information processed. Performs related duties as assigned. Regular and consistent attendance is required. While performing the duties of this job, the employee is occasionally required to stretch, bend, kneel and stoop and perform work behind a safety shield. The employee is regularly required to walk, communicate, and reach with hands and arms. The employee is frequently required to sit, stand, and use hands to finger, handle, or feel. The employee must occasionally lift and/or move up to 50 pounds using appropriate moving devices. Specific vision abilities required by this job include close vision, color vision, depth perception and ability to adjust focus. Work environment: While performing the duties of this job, the employee maybe at times be exposed to solder, fluxes, cleaners, epoxies, and masking agents while using appropriate personal protective equipment. Safety apparatus/ measuring devices are required to be used when performing tasks involving both X-Ray and Leak Tester. Work is performed in a temperature-controlled environment. The noise level in the environment is usually low to moderate. Essential Skills: Subject Matter Understanding. Analytical. Computer Applications. Project Management. Critical Thinking. Problem Solving. Attention to details. Use of basic inspection measuring equipment/test equipment, (i.e.) power supplies, oscilloscope, ohmmeter. Job Qualifications: Required: Bachelor's degree in an Engineering, or Technical field of study. All candidates are required to have excellent verbal and written communication skills; strong organizational and interpersonal skills; attention to detail, imitative and ability to prioritize multiple projects; experience in team facilitation and problem solving, knowledge of Root Cause Analysis, Failure Modes, and Effect Analysis, Quality Reporting and Analysis, Flowcharting and Procedure Analysis; knowledge of in Capability Analysis, process control of product, developing controls plans and statistical techniques . Preferred: Working knowledge of ISO 9001, AS9100, and / or similar quality system standards and Microsoft Office. Employment with Cartridge Actuated Devices is contingent upon the successful completion of a background investigation, including any required Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) screening, and drug screening, as permitted by applicable law. The background investigation may include verification of employment history, education, criminal records, ATF-mandated checks, and other relevant information to determine suitability for employment. The drug screening will be conducted in accordance with state and federal regulations. Failure to successfully pass the background check, ATF screening, or drug screening, or the provision of false or misleading information during the application process, may result in withdrawal of a job offer or termination of employment. By proceeding with the application process, you acknowledge and consent to the background, ATF, and drug screening requirements as described above.

Job DescriptionISSOEmployment Type: Full-Time, Experienced Department: Information Technology CGS is seeking an Information Systems Security Officer (ISSO) with DIACAP and/or RMF experience who has deep expertise in security assessment documentation to support Dept. of Commerce systems and efforts to achieve their Authorization to Operate (ATO). This position is located at the client site in the Herbert Hoover building in Washington, DC. The scope of this position includes full life-cycle Assessment and Authorization (A&A) management through all 6 Steps of the RMF process in support of the Government ISSM.In this role, you’ll conduct security assessment, and information system security oversight activities in accordance with NIST 800.53 that support systems from the perspective RMF requirements. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Review systems to identify potential security weaknesses and recommend improvements to amend vulnerabilities, implement changes, and document upgrades. - Maintain responsibility for managing cybersecurity risk from an organizational perspective. - Identify organizational risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.- Provide security guidance and IS validation using the National Institute of Standards and Technology (NIST) RMF, DoC, and local security policies.- Providing configuration management (CM) recommendations for information system security software, hardware, and firmware and coordinating changes and modifications with the ISSM, Security Control Assessor (SCA), and Authorizing Official (AO).- Maintain vulnerability scanning tool compliance, such as HBSS or ACAS, and patch management, such as IAVM to ensure IT staff pushes patches to all systems in an effort to maintain compliance with all applicable directives, manage system changes, and assess the security impact of those changes.- Support security authorization activities, including transitioning from the legacy Information Assurance Certification and Accreditation Process (DIACAP) to compliance with the DoC RMF.- Provide subject matter expertise for cyber security and trusted system technology. - Apply advanced technical knowledge and analysis of specialized functional areas in task requirements to develop solutions to complex problems.- Research, write, review, disposition feedback, and finalize recommendations regarding cyber security policy, assessment and authorization assessments (A&As), security test and evaluation reports, and security engineering practices and processes. - Conduct research and write risk assessment reports to include risk thresholds, evaluation, and scoring.- Support analysis of the findings and provide expert technical guidance for mitigation strategies, including implementation advice on the cyber security risk findings, and other complex problems. Qualifications:- Bachelor’s Degree.- A minimum of five (5) years experience as an Information Assurance (IA) Analyst, ISSE, ISSO, or similar role in ATO package development, including generating security documentation for requirements, security control assessment, STIG and IAVA compliance, Standard Operating Procedures, test results, etc.- eMASS experience.- Professional security certification such as: CCNA Security, CySA+, GICSP, GSEC, CompTIA Security+ CE, SSCP, or higher.- Strong desktop publishing skills using Microsoft Word and Excel.- Experience with industry writing styles such as grammar, sentence form, and structure.- Ability to multi-task in a deadline-oriented environment. Ideally, you will also have:- CISSP, CASP, or a similar certificate is preferred.- Master's Degree in Cybersecurity or related field.- Strong initiative, detail orientation, organizational skills, and aptitude for analytical thinking.- Demonstrated ability to work well independently and as a part of a team.- Excellent work ethic and a high commitment to quality. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.Health, Dental, and VisionLife Insurance401kFlexible Spending Account (Health, Dependent Care, and Commuter)Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionWho we are: EHE Health is the leading national preventive healthcare provider network partnering with mid- and large-sized employers to help their employees and dependents stay healthy by screening and diagnosing health risks through comprehensive exams, allowing for early intervention. Named by Fortune Magazine and Great Place to Work® as one of the Best Workplaces in healthcare, EHE Health is headquartered in New York City and has over 200 health clinics and practices across the U.S., staffed by a network of curated primary care physicians and clinicians. EHE Health was recently acquired by Consello Capital, the private equity arm of Consello. This transformative partnership leverages Consello’s proven expertise in scaling high-growth ventures and its extensive network of industry leaders. Together, EHE Health and Consello will unlock unprecedented opportunities to accelerate EHE Health’s mission of revolutionizing preventive care. What we’re looking for: EHE is looking for a talented Director, Security and Privacy to support our IT and Privacy & Security teams in ensuring proper security protocol and procedures around all of our infrastructure. The Director, Security and Privacy will facilitate and implement processes to assess the compliance of our security policies in accordance with standard frameworks. They will regularly perform internal audits, risk assessment, and security analyses to keep all processes and controls in optimal form. The ideal candidate will be detail-oriented, proactive, and collaborative while managing the complete incorporation of security best-practices across the organization. In this role, you will: • Perform information systems security and assurance audits of networks, systems, applications, platforms, databases, and operating procedures in accordance with established auditing standards, • Participate in vulnerability and risk assessment reviews and evaluations of the EHE’s IT infrastructure to determine adequacy of the controls to detect and prevent unauthorized activities, provide an acceptable level of risk to the organization, and establish controls to mitigate loss, • Conduct third party risk assessments and oversee adherence to EHE requirements, • Communicate with and educate process owners on the importance of controls and an effective control environment, • Analyze security event data from customer computing platforms, network elements, and security devices, • Perform health checks on relevant operational systems, • Generate routine metrics and operational reports, • Perform threat research on emerging cyber-attacks that could impact our clients and patient, • Develop actionable, repeatable, measurable, and reportable security strategies, • Promote awareness of security policies and related security topics, • Bachelor’s degree in related field required, • 5-7 years of related experience in change management and steering third party compliance audits and network/wireless/web app penetration tests, and acting upon remediation recommendations, • Comprehensive understanding of National Institute of Standards and Technology (NIST) 800-53, ISO27001/27701, SOC2 Type 2 and similar regulations, • Deep knowledge of Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH Act), and the Sarbanes-Oxley Act (SOX), • Excellent written and verbal communication skills, with the ability to present and clearly disseminate information to all audiences, internal and external, • Overall knowledge and usage of cybersecurity tools, such as SIEM, EDR, and XDR, • Proven track record implementing strong identity and access management policies to enforce the principle of least privilege across all infrastructure and SaaS applications, • Robust experience analyzing cloud infrastructure misconfigurations and prioritizing risk-based mitigations, • Strong familiarity automating application security testing (SAST/DAST/SCA) and executing remediations, • Competitive salary, • Medical, dental, vision, life and disability insurance, • Employer-matched 401(k) plan, • Professional development reimbursement, • Employee access to our wellness clinics EHE is committed to Equal Employment Opportunity and to attracting and retaining the most qualified employees. Powered by JazzHR vrW0dpJEuF

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC! ROLE AND RESPONSIBILITIES: The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk. They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions. Responsibilities: Vulnerability & Threat Management • Conduct vulnerability assessments across containerized and traditional infrastructure, • Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases., • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few., • Lead remediation efforts and track vulnerability lifecycle management, • Analyze security alerts and incidents, performing root cause analysis, • Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms, • Manage security aspects of VMware infrastructure, storage systems, and network segmentation CyberArk Privileged Access Management • Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components, • Configure privileged account onboarding, password management policies, and access workflows, • Implement CyberArk integrations with Active Directory, applications, and infrastructure systems, • Manage CyberArk clustering, disaster recovery, and high availability configurations, • Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders, • Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection, • Develop custom Splunk searches, dashboards, and alerts for security use cases, • Manage Splunk data models, knowledge objects, and correlation rules, • Administer Tenable Security Center and Nessus scanning infrastructure, • Configure vulnerability scanning policies, schedules, and remediation workflows, • Integrate vulnerability data with other security tools and ticketing systems, • Develop custom vulnerability reporting and metrics dashboards, • Implement and maintain SOAR platforms for security automation, • Develop automated playbooks for incident response, threat hunting, and remediation activities, • Create custom integrations between the SOAR platform and existing security tools, • Design automated workflows for security alert triage and response coordination, • Provide Level 2/3 technical support for security incidents and tool-related issues, • Participate in incident response activities and forensic investigations, • Develop and maintain security procedures and troubleshooting guides, • Support 24/7 security operations center (SOC) activities and on-call rotation, • Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits, • Maintain security tool documentation, configurations, and change management procedures, • Implement logging and audit trail requirements for compliance frameworks, • Develop security metrics and KPI reporting for management and auditors, • Partner with IT infrastructure teams on security tool deployment and maintenance, • Collaborate with application development teams on security tool integrations, • Work with network teams to implement security monitoring and traffic analysis, • Support risk management activities with technical security assessments, • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience, • Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent Security Tools Proficiency (3+ years each) • CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment, • Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization, • Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning, • Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation, • Windows Server administration including PowerShell scripting and Active Directory integration, • Enterprise PKI and certificate management, • Log aggregation, analysis, and correlation techniques, • Incident response procedures and forensic analysis, • Threat intelligence integration and threat hunting methodologies, • 4+ years of cybersecurity experience with focus on enterprise security tools, • 4+ years of hands-on system administration in enterprise environments, • Experience with self-hosted, on-premises security infrastructure, • Proven track record of security tool implementations and migrations, • Strong scripting abilities (Python, Bash, PowerShell) for automation and integration, • Experience with API integration and custom security tool development, • Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred, • Understanding of DevSecOps practices and CI/CD pipeline security, • Excellent troubleshooting and analytical problem-solving skills, • Technical Leadership: Ability to serve as subject matter expert across various Security tool sets., • Problem-Solving: Advanced analytical skills for complex security tool issues and integrations, • Communication: Ability to explain technical concepts to both technical and non-technical stakeholders, • Project Management: Experience leading security tool implementations and upgrades, • Degree in Cybersecurity or related field, • Experience in regulated industries (government), • Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications, • Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at

Job Description BASIC FUNCTIONS Quality Engineer will provide support to the Sr. Director of Quality Compliance in maintaining a strong overall Quality Compliance Program including the Quality Management System. The core focus shall be technical reviews implemented and established for each Department. This individual has the responsibility and authority to carry out all assigned tasks. SPECIFIC DUTIES • Ensures customers’ technical requirements are met by reviewing process procedures, test procedures, and supplier / Internal quality manuals to understand the scope and testing requirements, • Ensures products meet the organizations and customers quality and product integrity requirements., • Supports process development or operations team by providing analysis and expertise throughout the inspection & testing process., • Counsel and advise Sales personnel on technical developments or nonconformances (drawings, capabilities, etc.), • Advise Sales and Operations leadership on capability/capacity for certain types of orders, products, etc., • Enforce CTG Quality Planning including product sampling., • Support RFP/RFQ/Contract reviews – quality and technical review, • Conduct routine Material Review Board & Counterfeit Review Board actions and provide resolution/disposition, • Responsible for reviewing and submitting CTG requests for designated Airworthiness Rep 8130’s, • Maintain and retain a working list of qualified ASA-100/FAA AC 00-56 trained Inspectors/Technicians., • Oversight of the DQR (Designated Quality Representative) program for Sikorski, Lockheed, GDLS, and UTC. Utilizing First Article / First Piece development per AS9102, • Conduct sampling reviews of contract to shipped product(s), such audits shall be documented, • Ensuring equipment Preventative Maintenance and Calibration requirements are established and followed., • Develop and implement HAZMAT protocols including handling and disposition, • Identifies root causes of problems in the inspection process; recommends and/or implements corrective measures., • Champions Lean-Six Sigma methodologies within the organization; responsible for organizations’ 5S program and identifies and leads projects focused on reducing waste and increasing quality, • Ensure Return Material Authorization process is reviewed and documented, authorize approval as required per process., • Identify requirements for product(s) reviewed at CTG for potential Reach/RoHS specifics, • Manage and Enforce ESD S20.20 requirements within critical zones., • Review all Return to Vendor items for adequacy prior to material leaving facility, process all requirements within EPDS., • Disposition all discrepant material, determine (based on RMA/RTV) scrap rates, rework rates and return to stock., • Serve as backup to Senior Director of Quality Compliance for conditional quality plan approvals and conditional supply-chain activation approvals., • Collect and Analyze quality information for the development of quality strategies and continuous improvement plans, • Performs other duties as assigned. STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • Audit Findings (Reference QMR outputs), • FAI completion rates (M/Y, Quantity and per customer) Avg. process time/capacity, • Conditional Quality plannings (M/Y – Type, product specific, processing time), • RMA & RTV Data, Including DM Rates (Scrap, Rework, etc.) EDUCATION / EXPERIENCE / COMPENTENCY Bachelor’s degree in industrial engineering or related discipline required. • Certified Quality Engineer or equivalent, • ESD Program Manager preferred, • Approximately 0-4 years of experience, • Excellent interpersonal skills with ability to serve as a liaison with developers, project managers, and customer support., • Strong analytical and problem-solving skills., • Proficient with Microsoft Office Suite or related software, • Excellent organizational skills and attention to detail Preferred • Lean Six-Sigma Training/Certification, • Operational experience within QMS in Aerospace, Medical or other highly regulated industry

Job Description Rumble is a high-growth video platform and cloud services provider that is creating an independent infrastructure. Our mission is to restore the internet to its roots by making it free and open once again. About the Role: We are seeking a Cloud Engineer (Networking & Security) to help update, maintain, and secure our cloud infrastructure. This role will primarily support our OpenStack based infrastructure, but it will also include secondary support of our Kubernetes, billing, self-service, and other components. The focus of the role will be supporting the virtual networking foundation of our cloud infrastructure, and in ensuring systems are hardened and compliant with industry standards. You'll be deeply involved in managing OpenStack networking components (OVS/OVN, Neutron), configuring automation, and applying security best practices across our infrastructure. This is a hands-on technical role for someone who enjoys solving real-world networking challenges and continuously improving cloud security posture. The ideal candidate will have experience configuring and debugging virtual networking using Open vSwitch (OVS) and Open Virtual Network (OVN) as well as a strong security background including either a security certification or hands on experience with security benchmarks (CIS, etc.). Direct experience with OpenStack is big plus, but candidates with strong Linux based virtual networking and security background should not hesitate to apply. Key Responsibilities: • Build and maintain OpenStack network environments, including OVS/OVN and Neutron services., • Configure and manage overlay networks, VLANs, VXLANs, and routing for multi-tenant environments., • Implement and manage firewall rules, VPNs, and access policies to protect data and infrastructure., • Apply system hardening and security baselines across Linux hosts, containers, and OpenStack components., • Collaborate with other team members to troubleshoot, optimize, and secure network components., • Automate network configuration and security enforcement using Ansible, Terraform, or similar tools., • Monitor and analyze network performance, availability, and security events., • Contribute to vulnerability remediation, patch management, and compliance audits., • Maintain accurate documentation and network diagrams for internal use and audits., • Strong, hands-on experience in cloud networking, network engineering, or infrastructure security., • Strong knowledge of Linux virtual networking (OVS, OVN, BIRD/FRR)., • Solid understanding of TCP/IP, DNS, VLANs, VXLANs, routing, and basic BGP/OSPF principles., • Experience implementing firewalls, load balancers, and VPNs in cloud or virtualized environments., • Hands-on experience with Linux system administration and hardening., • Familiarity with automation tools like Ansible, Terraform, or Kolla Ansible., • Working knowledge of TLS, certificate management, and encryption practices., • Exposure to vulnerability assessment tools (OpenSCAP, Trivy, Nessus) and patch workflows., • Scripting ability in Python or Bash for automation and troubleshooting., • Experience with Kubernetes networking and security (Calico, Cilium)., • Knowledge of monitoring and logging tools (Prometheus, Grafana, ELK, or Graylog)., • Exposure to compliance frameworks or standards (CIS Benchmarks, NIST 800-53, ISO 27001)., • Understanding of zero-trust and identity-based networking concepts., • Demonstrated ability to work in production environments and collaborate effectively with cross-functional teams., • $124,000-$174,000 USD base + benefits + equity (If based in the United States) Why Our Team Loves Working Here: • We are making a significant financial impact for our video creator community; we're proud of their success stories, • We enjoy challenging the status quo and going head-to-head against Big Tech, • We aren't afraid to try new things; we act fast and want to win Physical demands of the position: While performing the duties of this job, the employee is regularly required to sit for prolonged periods of time while using a computer and/or keyboard. The employee is required to communicate verbally and hear. The employee may be required to walk, reach with hands and arms, balance, and stoop or kneel. The employee may occasionally be required to lift and/or move up to 15 pounds. Specific vision abilities required by this job include clarity of vision at approximately 20 inches or less (i.e., working with small objects or reading small print), including the use of computers.

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job DescriptionFrom the beginning, our goal was to establish an advisory firm that stands apart from the rest – one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value. Our commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here. By joining our rapidly growing Risk Advisory practice you will serve as a trusted partner to our clients. You’ll bring your first-hand experience, unique perspectives, and functional knowledge to deliver tailored integrated solutions that help our clients solve today's challenges and set the foundation for future success. As a Manager at CrossCountry Consulting you will be responsible for a mix of client delivery, leading teams and developing junior team members, and participating in business development activities.What You'll Do: • Develop logical and technical cloud security architectures, API designs, and functional requirements for secure cloud environments, • Build roadmaps, design, and implement secure cloud-based technologies such as containers, infrastructure-as-code, and serverless, • Conduct solution-based gap analysis and define, identify, and engineer suitable solutions for asset testing, code scanning, and application and infrastructure monitoring, • Inventory security tools, identifying opportunities to consolidate and leverage unknown, unused, or new features, • Review technical processes, with a specific focus on cybersecurity and data (vulnerability management, disaster recovery, data protection, software development), updating them to be effective in a cloud environment, • Benchmark and model cloud security capability maturity against industry, regulatory standards, and frameworks (NIST CSF, NIST 800-53, Cloud Security Alliance, ISO 27000), • Conduct cybersecurity program and control-level assessments, identify gaps, and produce strategies and roadmaps for security program and control uplift, • Lead workstreams across various cybersecurity topics, including governance, risk, and compliance; incident response; and security architecture and engineering, • Conduct research and analysis, leveraging data to derive valuable insights and actionable recommendations for clients, • Develop deliverables that showcase a strong business rationale, presenting impactful findings and recommendations, • Stay current with the latest developments and trends in cyber and privacy issues, actively sharing knowledge with the team and the firm, • Lead project administration tasks such as project setup, planning, budgeting, account management, billing, and preparing client proposals, • Contribute to developing and implementing firm-approved, AI-enabled solutions for clients, in accordance with company policies on data protection, intellectual property, and professional standards, • Stay informed about emerging AI tools and techniques and collaborate with firm leadership to identify compliant opportunities to enhance client solutions and internal processesWhat You'll Bring:, • 5+ years of experience in Cybersecurity, • Experience building and implementing solutions on industry cloud platforms (e.g. AWS, Azure, GCP), • Experience in implementing, building and operating security capabilities in cloud environments and working with cloud/DevOps technologies including containers, infrastructure-as-code, and serverless, • Working knowledge of cloud and cybersecurity standards and frameworks, • Exceptional verbal and written communication, analytical thinking, and problem-solving skills, • Comfort with AI: Demonstrated ability to responsibly explore and adopt firm-approved AI tools to enhance productivity and innovation, • Continuous Learning Mindset: Openness to learning and applying emerging technologies including AI and automation in alignment with firm policies and client standardsQualifications:, • Bachelor’s degree from an accredited university

Job DescriptionCompany Overview ID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly login across websites without having to create a new login and verify their identity again. Over 152 million users experience streamlined login and identity verification with ID.me at 20 federal agencies, 45 state government agencies, and 70+ healthcare organizations. More than 600+ consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me's technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to "No Identity Left Behind" to enable all people to have a secure digital identity. To learn more, visit . The Opportunity The way organizations hire, onboard, and authenticate employees is under attack. AI-generated deepfakes, synthetic identities, nation-state actors, and sophisticated social engineering campaigns are infiltrating workplaces at an unprecedented scale. More than 300 companies have reported hiring DPRK actors. Employment fraud has grown 5x in the last five years. Gartner predicts that by 2028, 25% of all job candidates will be fake. Employers tell us we're already past that point. At ID.me, we're the frontline defense. We have spent five years pioneering this space and developing the Employee Lifecycle vision. Today we support over 800 employers, and are integrated into many leading employment platforms. We are becoming the identity layer that connects hiring, onboarding, and workforce access end-to-end. We are hiring this position to drive enterprise sales across our Employee Lifecycle business. You will work directly with CISOs, CHROs, and CIOs at some of the most influential organizations in the country to embed identity proofing and authentication into the moments that matter most—and you will be selling a solution that has measurable, defensible impact on fraud prevention, candidate experience, and operational cost. This is high-stakes, high-impact work at the intersection of security, identity, and enterprise technology. If you're energized by complex problems, motivated by protecting people, and ready to bring your best to a category-defining company, we want to hear from you. Role Responsibilities • Own and execute an enterprise sales strategy targeting large organizations in regulated and at risk industries such as Financial Services, Technology, Staffing, Healthcare, and Security & Defense., • Lead consultative, multi-persona discovery across CHROs, CISOs, and CIOs to diagnose identity gaps across the hiring and access lifecycle and quantify the financial impact of fraud, operational inefficiency, and compliance risk., • Drive both direct enterprise deals and co-sell motions alongside our platform partners—to source, progress, and close pipeline., • Build and maintain a qualified pipeline and achieve bookings and revenue targets., • Articulate ID.me's Employee Lifecycle value proposition through compelling presentations, demos, and executive-level proposals., • Spend significant time in the field with prospects and customers. This is a relationship-driven, high-trust sale. In-person engagement with enterprise security and talent leaders and ecosystem partners will be essential to accelerating deal progression., • Contribute market intelligence on competitive dynamics, product gaps, and evolving buyer behavior back to BD and Product to sharpen positioning and accelerate roadmap priorities., • At least 5 years in a quota-carrying, "hunter" sales role, • Year-over-year track record of achieving quota and being recognized as a top performer, • Experience working within employment, hiring, or related fields; experience with identity related solutions is strongly preferred, • Closed opportunities with ACVs ranging from $100k to $1m on 6 to 12 month sales cycles, • Trained in leading sales methodologies (i.e. Command of the Sale, Message), • Experience selling technology into commercial markets, specifically top enterprises, • Demonstrated success in interfacing with customers and building trust, • Experience working for a team in a startup at a growth stage is highly desired, • Entrepreneurial personality, capable of effectively solving problems with minimal guidance, • Results-driven, highly organized and detail-oriented with the ability to multitask, • Excellent written and verbal communications skills and ability to communicate to a broad range of audience types at all levels of the organization, • Ability to build relationships with customers, • Ability to manage the sales cycle from start to finish, • Ability to work independently and as part of a team, • Superb planning and time management skills, ability to prioritize tasks and ability to meet deadlines with little supervision The annual base salary listed does not include a company bonus, incentive for sales roles, equity and benefits which will be determined based on experience, skills, education, relevant training, geographic location and role. ID.me offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit. The above represents the anticipated total rewards package for this job requisition. Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors. U.S. Pay Range$140,000—$160,000 USDMountain View, CA Pay Range$140,000—$160,000 USD ID.me is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings. ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations. Please review our Privacy Policy, including our CCPA policy, at id.me/privacy. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy. ID.me participates in E-Verify.

Job DescriptionSenior Network & Security Engineer Location: New York Tri-State Area (NYC / Northern NJ / Fairfield–Westchester CT) Work Model: Hybrid — 3 days on-site at primary data-center campus in Midtown Manhattan or Secaucus, NJ; 2 days WFH. Clearance: None required, but ability to pass a Tier 2 public-trust background check is a must. Travel: < 10 % (regional PoP / DR-site visits)About Us AITHERAS, LLC is a customer-focused IT consulting firm delivering cost-effective, mission-critical solutions since 2002. We specialize in Data Analytics, Cloud Computing, IT Engineering, Application Development, and Cyber Security. Based in Rockville, MD, we’re ISO 9001:2015 certified, an SBA-designated Small Business, and an MBE-certified firm by MDOT. We partner with over 100 clients to create scalable, innovative solutions that drive success.What You’ll Do% TimeResponsibility40 %Design & Implementation – Build and migrate segmentation zones, VRFs, and BGP/OSPF fabrics across Cisco Nexus 9K, Juniper QFX/MX, and Palo Alto PA-Series.25 %Security & Visibility – Stand up TACACS+/Cisco ISE for AAA, integrate flow telemetry into Cisco Secure Network Analytics (StealthWatch), deploy taps/SPANs/Gigamon, and tune IDS/IPS policies for OT & IT.15 %Automation – Write and maintain Python/Ansible/Terraform pipelines (pyATS, Nornir, Jinja2) for golden-config generation, compliance drift detection, and CI/CD-based push-button rollouts.10 %Operations & Incident Response – Serve as L3 escalation and join a 1-week-per-6 on-call rotation; own post-mortems and MTTR metrics.10 %Documentation & Mentoring – Produce HLDs/LLDs, MOPs, and runbooks; coach junior engineers toward CCNP/PCNSE.Must-Have Qualifications • 8+ years progressive experience in enterprise or service-provider networking., • Deep expertise configuring and troubleshooting BGP, OSPF, static routing, VRFs, VXLAN-EVPN., • Hands-on with Cisco Catalyst/Nexus & ASA/FTD, Juniper EX / QFX / MX, and Palo Alto NGFWs (Pan-OS 9/10)., • Solid command of AAA (TACACS+, RADIUS) and production deployments of Cisco ISE or equivalent., • Practical experience deploying or operating flow-analytics / tap infrastructure (StealthWatch, Gigamon, NetFlow/IPFIX, SPANs)., • Comfort writing Python and Ansible playbooks; git-based workflows (GitLab/GitHub, CI pipelines)., • Familiarity with network IDS/IPS (Snort, Zeek, Palo Alto Threat Prevention) and SIEM workflows (Splunk, QRadar)., • Ability to create HLD/LLD diagrams in Visio or draw.io and present them to technical & business leadership., • U.S. work authorization and ability to commute to NYC area 3× week.Nice to Have, • CCNP Enterprise/Security, PCNSE, JNCIS-ENT/Sec, or CCIE (R&S / Enterprise)., • Cisco Secure Network Analytics design experience (flow collector sizing, policy tuning)., • Prior exposure to industrial / OT networks (NIST 800-82, Purdue Model, SCADA segmentation)., • AWS or Azure Advanced Networking certification; Transit Gateway design experience., • Experience with F5 LTM/GTM or Citrix ADC in low-latency trading or fintech environments., • Source-of-truth & intent platforms (NetBox, Nautobot), RESTful API development, or Go/Rust scripting.What We Offer, • Base Salary: FTE: 135K-140K or $90-$100 C2C/1099, • FTE Benefits: 100 % employer-paid medical / dental / vision, 401(k) 5 % match, ESPP, • FTE Training: $3 k annual cert stipend, paid time for labs & conferences (Cisco Live, Palo Alto Ignite) Powered by JazzHR yiMixFkdvZ

Job Description At Angi®, we've had one simple mission for 30 years: get jobs done well. We make it happen by connecting homeowners with reliable pros who have the skills they need — and connecting pros with homeowners who have the jobs they want. Angi at a glance: • Homeowners have turned to Angi for more than 300 million projects, • 1,000+ home service tasks covered Angi® is defining the future of the home services industry, creating an environment where homeowners, pros, and employees benefit from more jobs done well. For homeowners, our platform is a reliable way to find skilled pros. For pros, we're a reliable business partner who helps them find the winnable work they want, when they want. For employees, we're an amazing place to call home. We can't wait to welcome you. About the Role The Senior Manager, Internal Audit – IT will lead Angi's IT audit efforts, overseeing planning, scoping, resource management (including offshore teams), and the delivery of high-quality audits. This role goes beyond traditional assurance work—providing advisory support upfront to help shape control design and implementation before risks materialize. You'll work cross-functionally with teams across product, engineering, finance and accounting, and operations to stay aligned on key initiatives and emerging risks. Success in this role requires a self-starter with strong communication skills and the ability to build trust across a dynamic, fast-paced organization. What you'll do As the Senior Manager, Internal Audit – IT, you will report directly to the VP of Internal Audit and serve as the company's leader for all technology-related audit work. You will be responsible for planning, executing, and overseeing a wide range of IT audits, including SOX ITGC testing and application controls testing, infrastructure reviews, IT risk assessments, and various operational audits. You'll also manage a team of offshore resources, ensuring their work aligns with Angi's quality standards and strategic objectives. In this role, you'll be more than just an auditor — you'll be a trusted advisor and partner to the business. Angi's internal audit team is highly engaged with stakeholders upfront, helping guide change before it happens, not just auditing after-the-fact. You'll collaborate closely with business process auditors and leaders across engineering, product, finance, and cybersecurity to proactively identify risks and drive improvements in controls and operations. You will also partner closely with the IT Compliance team, which maintains key frameworks including SOX and PCI. Key Responsibilities • Lead the IT internal audit function by developing and executing the annual audit plan for IT audits, including SOX ITGCs, cloud computing, third-party risk, and system development and transformation initiatives., • Oversee the SOX ITGC program, including testing design and operating effectiveness, and ensure work is performed at a level that enables external auditor reliance., • Manage outsourced audit resources, ensuring high-quality work product, consistency with internal methodologies, and clear, timely communication., • Partner cross-functionally with business and technology teams to understand upcoming system implementations, migrations, and control changes, and provide advisory input early in the process., • Coordinate with business process auditors to ensure integrated audit coverage across systems and processes., • Conduct periodic audits or assessments of cybersecurity risks and related IT controls, in collaboration with internal security stakeholders., • Serve as a subject matter expert on IT controls and risk management, offering insights that support business goals while safeguarding the enterprise., • Drive continuous improvement of audit methodologies, tools, and practices, and maintain documentation in compliance with professional and regulatory standards., • Present findings and recommendations to senior leadership and support the remediation process by providing practical, risk-based guidance., • You have 8+ years of relevant IT audit, IT risk management, or IT controls experience, with a strong preference for candidates who have worked in a Big 4 accounting firm., • You have proven leadership experience in managing end-to-end IT audits, including SOX 404, pre/ post implementation reviews, maturity assessments using IT frameworks, and other operational audits which rely heavily on system functionality., • You are a self-starter who thrives in a fast-paced environment and takes full ownership of your workstream, delivering with minimal oversight., • You are a strong communicator, capable of engaging with both technical and non-technical stakeholders across all levels of the organization., • You have experience managing offshore audit teams or third-party vendors, with a focus on maintaining quality and efficiency., • You are comfortable providing advisory input on systems and controls during project planning, not just identifying gaps after the fact., • You have a strong understanding of IT frameworks and regulatory requirements, such as COBIT, ISO, NIST, and COSO., • Professional certifications such as CISA, CIA, or CPA are strongly preferred. We know that the best ideas come from teams where diverse points of view uncover new solutions to hard problems. We welcome and value individuals who bring diverse life experiences, educational backgrounds, cultures, and work experiences. Our hiring process may utilize artificial intelligence (AI) tools to assist in candidate screening and assessment. Our AI tools are designed to complement, not replace, human decision-making. Compensation & Benefits • The salary band for this position ranges from $135,000 - $185,000 commensurate with experience and performance. Compensation may vary based on factors such as cost of living., • This position will be eligible for a competitive year end performance bonus & equity package., • Full medical, dental, vision package to fit your needs, • Flexible vacation policy; work hard and take time when you need it, • Pet discount plans & retirement plan with company match (401K), • The rare opportunity to work with sharp, motivated teammates solving some of the most unique challenges and changing the world #LI-Remote

Job DescriptionAbout Monstro Monstro is the operating system for governed financial intelligence. We build governance and intelligence infrastructure that enables artificial intelligence to operate safely, explainably, and at institutional scale. We exist because the level of financial guidance historically available to a small group should be accessible to many more people. By combining AI with deep institutional infrastructure, we help financial institutions deliver more personalized, responsible, and life-changing financial support to millions of individuals. We're building mission-critical systems in a highly regulated domain, and we care deeply about doing it right. If you're motivated by meaningful problems, high standards, and shaping infrastructure that improves financial outcomes, you'll feel at home here. About the Role We're looking for a Platform Engineer to join our growing Platform Engineering team and play a critical role in shaping how we build, deploy, and operate software. You'll work alongside our Staff Platform Engineer and collaborate closely with the broader Engineering team. This role sits at the intersection of enablement and governance—you'll empower our engineering teams to move fast while ensuring everything we do meets the highest standards for security and compliance. You'll own our GCP infrastructure, build out scalable environments, and establish the standards and tooling that make our engineers productive. At the same time, you'll be the guardian of our security posture and compliance commitments, ensuring we meet NIST and SOC-2 requirements without slowing down innovation. What You'll DoEnable Engineering Velocity • Build and maintain our GCP infrastructure, creating consistent, repeatable environments across development, staging, and production, • Design and implement CD pipeline standards that enable teams to deploy confidently and frequently, • Develop internal tooling, templates, and automation that reduce friction for software engineers, • Create and maintain infrastructure-as-code (Terraform) to ensure environments are reproducible and auditable, • Provide support and guidance to engineering teams on platform best practices, • Continuously improve developer experience by identifying and eliminating bottlenecksSecure & Ensure Compliance, • Implement and maintain security controls across our GCP environment (IAM, VPC configuration, secrets management, encryption), • Ensure compliance with NIST frameworks (CSF, 800-53) including access controls, continuous monitoring, and risk management, • Support SOC-2 compliance by implementing controls for security, availability, and confidentiality, along with auditable change management processes, • Maintain comprehensive documentation and evidence for internal and external audits, • Conduct security reviews and work with teams to remediate vulnerabilities, • Build observability and logging infrastructure that meets compliance retention and integrity requirementsCollaborate & Lead, • Work as part of the Platform Engineering and Engineering teams to understand needs and deliver solutions, • Partner with the Staff Platform Engineer on architecture decisions and platform strategy, • Partner with GRC/compliance stakeholders to translate requirements into technical controls, • Participate in incident response, root cause analysis, and postmortems, • Contribute to architectural decisions and help establish engineering standards, • 5+ years of experience in platform engineering, DevOps, SRE, or infrastructure roles, • Strong hands-on experience with Google Cloud Platform (GCP), • Proficiency with infrastructure-as-code tools, particularly Terraform, • Experience designing and implementing CI/CD pipelines (GitHub Actions, Cloud Build, or similar), • Solid understanding of security principles and experience implementing security controls in cloud environments, • Familiarity with compliance frameworks (NIST, SOC-2) and implementing controls to meet audit requirements, • Strong scripting and automation skills (Python, Bash, or similar), • Experience in fintech or other regulated industries, • Knowledge of Kubernetes and container orchestration, • Experience with API management platforms (e.g., Apigee), • Background in observability tools (Datadog, Prometheus, Grafana, or similar), • Relevant certifications (GCP Professional, CISSP, etc.)Why Monstro?, • Ownership & Impact: Shape the future of AI-powered finance—building a category-defining product used by consumers and institutions around the world., • Elite Team: Join a team with leadership that has a track record of scaling companies from early stage to major exits., • Principles-Driven Culture: Work in a culture that values speed, ownership, and impact—what most companies achieve in 90 days, we do in 45., • Comprehensive Compensation Package: Competitive salary, equity, and robust benefits package, including paid health, vision, dental, and disability coverage. Note: This role will be hybrid in office for those in the NYC metro or remote for those in the Denver metro area (but with the expectation of periodic travel to our NYC office) Base Compensation Range (New York City): $204,000 - $255,000 Base Compensation Range (Denver Metro): $179,200 - $224,000 *The posted range reflects the base salary for this role across the market ranges for each location. Final compensation will depend on a variety of factors, including experience, skills, internal leveling, and market conditions, and will be offered within the stated range in accordance with applicable pay transparency laws. Ready to Build With Us? If you're excited to contribute to a high-bar team building something meaningful, we love to hear from you!

Job Description Rumble is a high-growth video platform and cloud services provider that is creating an independent infrastructure. Our mission is to restore the internet to its roots by making it free and open once again. About the Role: Rumble Cloud is seeking an experienced Senior Cloud Architect to lead the design, integration, and optimization of our cloud infrastructure. This role focuses on developing scalable, secure, and resilient cloud architectures—driving technology strategy across OpenStack, public clouds, and containerized workloads. The ideal candidate combines deep technical expertise in OpenStack with the architectural vision to design end-to-end cloud solutions that meet performance, cost, and compliance objectives. You will collaborate closely with engineering, operations, and product teams to define and implement a unified cloud strategy for current and future business needs. Key Responsibilities: • Install, configure, upgrade, and maintain OpenStack environments (production and development)., • Define cloud strategy, governance, and best practices for scalability, performance, and cost optimization., • Architect high-availability OpenStack environments and ensure seamless integration with CI/CD pipelines and automation frameworks., • Provide architectural guidance for network design, storage solutions, and security frameworks across all cloud platforms., • Evaluate, select, and optimize tools for infrastructure as code, automation, and monitoring., • Lead design reviews, risk assessments, and cloud readiness analyses for new initiatives., • Collaborate with development teams to modernize applications for cloud-native deployment., • Oversee incident response and capacity planning from an architectural perspective., • Mentor technical teams and establish repeatable design patterns, documentation, and standards., • Extensive experience in cloud or systems engineering, including a proven track record of leading cloud architecture or design initiatives., • Deep expertise with OpenStack architecture, deployment, and scaling in enterprise production environments., • Strong understanding of Linux systems (Ubuntu/RHEL/CentOS) and system performance tuning., • Mastery of network design principles (TCP/IP, VLANs, VXLAN, BGP, SDN, OVS/OVN)., • Experience with Kolla Ansible, Terraform, and Ansible for automation and IaC., • Knowledge of Python programming for automation and API integration., • Practical experience designing cloud-native solutions using containers (Docker/Podman) and orchestration (Kubernetes)., • Expertise in distributed systems design: Ceph, Cinder, Swift, RabbitMQ, Kafka., • Proven experience designing and integrating CI/CD pipelines for cloud infrastructure (GitLab CI, Jenkins, etc.)., • Contributions to OpenStack or related open-source projects., • Familiarity with public clouds (AWS, Azure, GCP) and hybrid integration., • Experience architecting HA and disaster recovery strategies using HAProxy, Keepalived, and load balancers., • Skills in observability stack design (Prometheus, Grafana, ELK, or OpenTelemetry)., • Understanding of hardware and performance optimization for large-scale deployments (Dell, HPE, GPU accelerators)., • Knowledge of IT governance frameworks (e.g., Well-Architected Framework, NIST, CIS)., • 6+ years in infrastructure, systems or cloud engineering roles, with at least 3 years as an architect or technical lead., • Excellent communication, documentation, and stakeholder management skills. Why Our Team Loves Working Here: • We are making a significant financial impact for our video creator community; we're proud of their success stories, • We enjoy challenging the status quo and going head-to-head against Big Tech, • We aren't afraid to try new things; we act fast and want to win Physical demands of the position: While performing the duties of this job, the employee is regularly required to sit for prolonged periods of time while using a computer and/or keyboard. The employee is required to communicate verbally and hear. The employee may be required to walk, reach with hands and arms, balance, and stoop or kneel. The employee may occasionally be required to lift and/or move up to 15 pounds. Specific vision abilities required by this job include clarity of vision at approximately 20 inches or less (i.e., working with small objects or reading small print), including the use of computers.

Job DescriptionPositions: IAM Product Manager & IAM Product OwnerCompany: Incedo Inc.Industry: Wealth Management / Financial ServicesLocations: Fort Mill, SC | New York City, NY | San Diego, CAEmployment Type: Full Time OverviewIncedo Inc. is seeking experienced IAM Product Managers and Product Owners to lead the strategy, delivery, and implementation of modern identity and access management solutions. These roles focus on building secure authentication experiences, managing IAM platforms, and collaborating closely with engineering, security, and compliance teams across enterprise and customer-facing systems. We have two distinct opportunities depending on your experience and career focus: Role 1: Product Manager / Product Owner – IAM (Strategic / Senior Level)Experience: 8–15 years in Product Management or Platform Ownership for IAMKey Responsibilities: • Lead end-to-end strategy and roadmap for IAM platforms (Okta, Ping, ForgeRock, Entra ID, Auth0)., • Drive modernization initiatives including passwordless authentication, MFA, and adaptive/risk-based access., • Collaborate with Security, Risk, Compliance, and Architecture teams to ensure alignment with Zero Trust, PCI, SOC2, and NIST frameworks., • Engage with stakeholders to define vision, prioritize features, and deliver measurable business outcomes.Must-Have Qualifications:, • Proven IAM platform ownership beyond project delivery., • Hands-on experience with passwordless, MFA, and adaptive authentication strategies., • Strong background in financial services, banking, wealth management, or FinTech.Disqualifiers:, • Pure project management or scrum-only experience., • IAM exposure limited to SSO onboarding or operational support., • Lead hands-on IAM implementations including MFA, SSO, and federation integrations (SAML, OIDC, OAuth2)., • Translate security and compliance requirements into Agile stories and deliverables., • Onboard applications, define MFA policies, and execute federation integrations., • Work closely with engineering and security architecture teams to deliver high-quality IAM solutions.Must-Have Qualifications:, • Demonstrated experience in implementing IAM platforms (Okta, Ping, ForgeRock, Entra ID)., • Strong Agile Product Owner skills with security/IAM domain knowledge., • Experience working with MFA policy rollout and application federation.Disqualifiers:, • No hands-on IAM implementation exposure., • Generic PO experience without security/IAM depth., • IAM experience limited to business apps without core IAM work.

Job DescriptionCompany Description Columbia University has been a leader in higher education in the nation and around the world for more than 250 years. At the core of our wide range of academic inquiry is the commitment to attract and engage the best minds to pursue greater human understanding, pioneering discoveries, and service to society. The School of Professional Studies at Columbia University offers innovative and rigorous programs that integrate knowledge across disciplinary boundaries, combine theory with practice, leverage the expertise of our students and faculty, and connect global constituencies. Through seventeen professional master's degrees, courses for advancement and graduate school preparation, certificate programs, summer courses, high school programs, and a program for learning English as a second language, the School of Professional Studies transforms knowledge and understanding in service of the greater good. Job Description The School of Professional Studies seeks experienced industry professionals to serve as part-time Lecturer for a graduate-level course in Analytics for Cybersecurity Management. This course offers a comprehensive introduction to core cybersecurity principles, encompassing network security, threat detection, and vulnerability management, while highlighting how emerging techniques in AI and machine learning can transform modern defense strategies. Students will explore key frameworks, advanced tools, and real-world case studies, gaining insight into how analytics underpins effective threat intelligence, incident response, and regulatory compliance. Responsibilities * Lead class lectures, instructional activities, and classroom discussions. Attend all class sessions. * Monitor and address student concerns and inquiries. * Evaluate and grade student work and assessments. * Conduct office hours. Qualifications Columbia University SPS operates under a scholar-practitioner faculty model, which enables students to learn from faculty possessing outstanding academic training and a record of accomplishment as practitioners in an applied industry setting. Requirements * Doctoral degree in a quantitative disciplinary area * 3+ years of professional experience in roles such as Security Operations (SOC), Threat Intelligence, Incident Response, Security Engineering, Vulnerability Management, Cloud Security, or Applied Data Science/ML for security within industries like technology, finance, healthcare, consulting, or government. * Python proficiency for data parsing/ETL, log analysis, and basic analytics (e.g., pandas, simple scikit-learn workflows). * Comfort with shell scripting (PowerShell and/or Bash) and core OS tools for processes, networking, and files. * Strong communication and feedback skills for guiding graduate students; dependable, organized, and detail-oriented Preferred Skills & Experience * 10+ years of related professional experience. * 2+ years of University teaching experience, ideally at the graduate level. * Experience with cloud security (IAM, least privilege, security groups, logging) and common tools (e.g., CloudTrail/Defender for Cloud). * Familiarity with SOAR concepts/workflows and alert triage/runbooks. * Practical knowledge of security/privacy frameworks and regs (e.g., NIST CSF, HIPAA, GDPR) and ethical handling of sensitive data. * Experience supporting course operations (Canvas/LMS, rubric-based grading, timely feedback, academic integrity processes, managing small-group activities). * Track record of mentoring early-career professionals or graduate students and collaborating in diverse, remote teams. Additional Information All your information will be kept confidential according to EEO guidelines. Columbia University is an Equal Opportunity/Affirmative Action employer. Salary range: $11,000 - $13,000 per semester long course

Job Description BASIC FUNCTIONS Prepare all inbound and outbound shipments. This individual has the responsibility and authority to carry out assigned tasks. SPECIFIC DUTIES • Prepares shipments using DHL, Fedex, UPS and courier pick ups., • Prepares bills of lading; checks items to be shipped against picking tickets to determine that quantities, destination, and routing are correct., • Receives and unloads incoming materials and compares information to receiving reports to verify priority for quality department., • Prepare incoming material in bins with the correct paperwork and tracker for inspection process., • Logs outbound shipments, • Inspects shipments for damages or defects; records discrepancies or damages and notifies supervisor and/or purchasing personnel., • Picks and packs orders for outbound shipments using picking tickets., • Check for special customer requirements for shipping., • Organize materials in shipping area., • Follow Daily 5S/ESD/FOD policies, • Be able to pack and ship Hazmat material, including Haz Shipper software., • Comply with all requirements of the environmental management system., • Ability to navigate and use customer required shipping portals., • Performs inventory and supply checks, • Ability to evaluate and differentiate between various commodity types., • · Adhere to Safety Manual requirements for employees STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • · Daily throughput of Incoming and Outgoing Shipments, • · Accuracy of PO’s received., • · Accuracy of packages picked/shipped, • · COD management, • · Hazmat Compliance, • Daily 5S/ESD/FOD policies non-conformances EDUCATION / EXPERIENCE / COMPENTENCY • High School Diploma, • 0-2 years of relevant experience in related field(s), • Ability to pay attention to great detail., • · Prior knowledge of shipping/receiving techniques.

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. About the team:StubHub Cloud & Infrastructure Security Engineering is seeking a senior engineer to enhance our security posture within the cloud and infrastructure domains. The perfect candidate will possess extensive experience in cloud security architecture, network security, and infrastructure automation, as well as a familiarity with container and operating system security. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA or Aliso Viejo, CA What You'll Do: • Develop secure Cloud Account Architectures, focusing primarily on AWS, while understanding and navigating the trade-offs of various cloud architectures., • Design and implement network security strategies that leverage security groups, NACLS, routing domains, and multi-tiered subnet architectures to ensure a defense-in-depth approach., • Manage critical security logging and monitoring infrastructure for cloud-native and third-party data sources, ensuring their efficient shipping to Data Lakes and integration with visualization platforms., • Operate and manage Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP), such as Wiz, Orca, Palo Alto Networks Prisma, and Rapid7 ICS., • Deploy configurations and infrastructure using Infrastructure as Code (IaC) frameworks, such as Terraform, Cloud Formation, and Pulumi., • Develop and implement governance strategies for infrastructure deployment that integrate security best practices and enhance developer productivity., • Architect and implement workload identity services, such as SPIRE (Spiffe), in a heterogeneous multi-cloud environment., • Architect and maintain PKI and secrets management platforms to ensure secure storage and access to sensitive information., • Expert level experience in AWS cloud account architecture., • Expert level knowledge in Network Security, including experience with AWS networking primitives: Security Groups, Network Access Control Lists (NACLS), Subnetting, Routing, and egress traffic filtering mechanisms., • Expert level proficiency in Identity & Access Management (IAM) Security, including experience with architecting AWS IAM roles & policy architectures for both human and machine access., • Expert level communication skills and the ability to work effectively across teams., • Expert level experience deploying and maintaining configurations and infrastructure using Terraform., • Expert level experience with modern CSPM and CWPP tools (e.g., Wiz, Orca, Prisma, or Rapid7)., • Intermediate level experience with Secrets / key Management Platforms (e.g., AWS KMS, AWS Secrets Manager, Hashicorp Vault)., • Expert level experience in building and implementing IaC governance strategies that combine security best practices while enabling developer productivity., • Intermediate level experience in architecting & managing Spire (Spiffe) and Service Mesh services., • Intermediate level proficiency in Python or Go, and Bash scripting., • Intermediate level experience in container & operating system hardening., • Intermediate level experience in building & maintaining Web Application Firewalls., • Intermediate level experience in architecting & implementing internal PKI & Secrets Management services., • Intermediate level knowledge of Kubernetes (K8s) Security foundations, including admission controllers, K8s Network Policies, K8s RBAC, and K8s Ingress architectures., • Intermediate level proficiency in DDoS mitigation techniques using AWS Shield, CDN traffic scrubbing, and origin protection mechanisms., • Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact., • Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed., • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate's qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub's total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range$200,000—$250,000 USDAbout UsStubHub is the world's leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found hereWe are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact., • Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed., • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate's qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub's total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range$200,000—$250,000 USDAbout UsStubHub is the world's leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found hereWe are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Job DescriptionTagup is a defense technology company founded at MIT that is redefining logistics superiority with next-generation AI. We’re growing rapidly and are looking for change-makers passionate about delivering innovative technologies to solve the most challenging problems in the world’s highest stakes environments. This is an exciting opportunity to engage in meaningful work that strengthens national security and contributes to the success of U.S. and allied forces. Join us in shaping the future of defense logistics for a safer tomorrow. At Tagup, curiosity isn’t a perk—it’s the job. If you like seeing the whole system, sharing what you know, and learning from sharp teammates, you’ll fit right in. We’re engineers and data scientists on a mission to make the machines and processes that power the world safer, more reliable, and more efficient. Our AI directly controls large-scale industrial equipment and logistics systems, delivering best-in-class performance for our customers. We’re hiring a Cloud/DevOps Engineer to bring an SRE mindset to our platform: automate with IaC, orchestrate with Kubernetes, and tune PostgreSQL-backed services for performance and uptime. You’ll build secure, auditable CI/CD, enforce least-privilege by default, and uphold compliance across distributed, multi-region environments.What You'll Do • Help build and secure infrastructure across AWS, Kubernetes, and other cloud-native services under the guidance of senior engineers., • Support ATO efforts and day-to-day compliance work (e.g., IL4/IL5, CMMC, NIST SP 800-171), preparing evidence and maintaining controls., • Implement Infrastructure as Code with Terraform and related tooling; maintain modules and improve reliability through reviews and testing., • Participate in vulnerability management—triage findings, assist with remediation, and contribute to incident response runbooks and postmortems., • Collaborate with application teams to weave security into CI/CD and the development lifecycle (secrets management, least privilege, policy checks)., • Keep current on security and DevOps best practices, proposing small, iterative improvements to strengthen our defenses and operations.What We're Looking For, • Fluency in Kubernetes and Terraform (EKS in production)., • Hands-on experience with Istio and Gateway API., • Strong background in Python and PostgreSQL., • Familiarity with compliance frameworks—SOC 2, CMMC (Level 1 & 2), NIST SP 800-171, etc., • Proven track record identifying and mitigating CVEs., • Experience operating in FedRAMP environments (e.g., IL4, IL5).Bonus Points, • Experience mitigating CVEs in production systems.

Job Description BBR Partners is a premiere, boutique wealth management firm providing customized investment strategies and bespoke advice to high-net-worth individuals and families. The firm was founded in early 2000 and for over 25 years, we have nurtured our culture with talented people from diverse backgrounds who care about each other, our clients, and our collective communities. In our quest for continuous improvement, we strive to develop not only world class talent but world class humans! Job Description: BBR partners is seeking a DevOps Engineer, to play an integral role as a member of its IT department, working closely with Software Development & Data Engineering teams. This person is responsible for designing, implementing, and managing the systems, tools, and automation that support continuous integration, continuous delivery (CI/CD), and scalable infrastructure. We are looking for a highly motivated self-starter with a strong work ethic who enjoys contributing to a small-firm environment. This is a full-time position that requires a minimum of 8 years of experience and the ability to work on premises from our New York City headquarters three days per week. Responsibilities: • Cloud Infrastructure & Automation, • Design, build, and maintain secure, scalable cloud environments (preferably Azure) using Infrastructure as Code (Terraform)., • Build and maintain standardized, hardened machine images using HashiCorp Packer to support immutable infrastructure, security baselines, and rapid recovery, • Implement network segmentation, private endpoints, and secrets management (e.g., Azure Key Vault, AWS Secrets Manager)., • CI/CD Engineering, • Own architecture and standards for CI/CD pipelines (GitHub Actions, Azure DevOps, GitLab CI/CD, Jenkins/Octopus) with:, • Automated testing and quality gates, • Security scanning (SAST, DAST, dependency scanning), • Artifact management and controlled deployment strategies., • Enable development teams through reusable templates, modules, and golden pipelines., • Own and enforce version control best practices across application code, infrastructure-as-code, and CI/CD pipelines, including branching strategies, peer review, and controlled releases., • Automate change management controls through CI/CD workflows, approvals, and versioned deployments to support audit and regulatory requirements, • Containerization & Orchestration, • Build and optimize containerized workloads (e.g., Docker, Kubernetes) including GitOps and service mesh integrations., • Security, Compliance & Governance, • Embed security-by-design principles into all layers of the platform., • Implement guardrails, policy-as-code, and automated evidence collection aligned with SEC expectations and NIST/ISO frameworks., • Observability & Reliability, • Deploy and maintain observability stacks (metrics, logs, traces) using tools like Datadog and/or Logic Monitor., • Define SLOs, SLIs, and error budgets; lead incident response and postmortems., • Data Platform & Integrations, • Own platform infrastructure for data pipelines (Airflow, dbt), support the enforcement of data quality and lineage, and protection of PII through encryption and masking., • Support secure integrations with custodians, trading systems, CRMs, market data providers, and internal APIs., • Developer Experience & Enablement, • Enable engineering teams to self-service with platform tooling, best practices, and documentation (confluence)., • Hands on experience with cloud platforms (Azure preferred, AWS/GCP acceptable)., • Strong proficiency with Infrastructure as Code, especially Terraform., • Experience building and maintaining CI/CD pipelines, • Strong knowledge of Linux/Windows systems and scripting skills., • Experience with containers and orchestration platforms., • Experience with configuration management tools (Ansible, Puppet, Chef)., • Security mindset: key management, secrets management, compliance., • Knowledge of SDLC and Agile methodologies., • Understanding of networking fundamentals (DNS, load balancing, firewalls)., • Familiarity with site reliability engineering (SRE) practices., • An undergraduate degree in Information Technology or a related field with a strong academic track record is preferred, • Must have strong communication skills (written and verbal) and critical thinking skills, • Must be successful working in a team-based environment, • Must be highly motivated, proactive, ethical, and professional, • Solid organizational skills including attention to detail and multi-tasking skills, • Experience driving DevOps adoption in organizations with established IT operations., • Demonstrated ability to influence stakeholders and drive cultural change., • Competitive base salary and incentive compensation., • Company subsidized medical/Rx, dental and vision insurance for employee, partner, and dependents., • 401K plan, Life insurance, and short & long-term disability coverage., • One Medical membership (covered for employee and dependents), Employee assistance program (EAP), Gym reimbursement and other wellness offerings., • Pre-tax transit and parking programs, Health Savings Account (HSA) and flexible spending programs for medical and dependent care., • Personalized development and career growth opportunities., • Volunteerism opportunities and matching gift program., • Flexible time off, paid parental leave, and Sabbatical with company tenure., • Hybrid remote work environment, "Work from Anywhere" weeks, and business casual dress. Base salary for this position will be determined during the interview process and will vary based on multiple reasons, including but not limited to prior experience, relevant expertise, current business needs, and market factors. The expected base salary for the role will generally be between $150,000 and $200,000 per year at the commencement of employment, but the final salary offered may be outside this range based on these reasons and individual circumstances. Additionally, base salary is only part of the total compensation package, which, depending on the position, may also include discretionary bonuses, alternative incentive packages and Company-sponsored benefit programs. This position is at-will, and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Job Description BASIC FUNCTIONS Entry level position. Performs basic counterfeit lab testing and visual inspection of various commodities including, but not limited to, electromechanical and electrical devices, electronic components, aircraft parts and hardware. This individual has the responsibility and authority to carry out assigned tasks. SPECIFIC DUTIES • Visual and dimensional inspection of all product, including corresponding documentation received into CTG facility, • Ability to complete a full analysis on all EEE Devices within the Laboratory, • Ability to learn and subsequently operate all test equipment within the Laboratory Department, • Prepare and complete all necessary documentation (records) for reporting acceptance/rejection of items inspected and/or tested., • Identify nonconformity to provide data to Quality Manager., • Ability to communicate, document and report all nonconformity within internal system and direct supervisor., • Ability to conduct work as assigned by senior management., • Ensure daily tasks and priority inspections are completed ensuring all stock sales are completed for the day., • Ability to understand industry traceability and documentation requirement as required for each industry, • Ability to evaluate and differentiate between various commodity types., • Review and implement detailed inspection reports to provide all information regarding product testing and inspection, • Ability to use general inspection gages, Ex. Calipers, Micrometers, etc., • Ability to understand and decipher basic blueprint, data sheet, technical sheet requirements., • Must possess the ability to verify products fit, form and function by utilizing the appropriate gages to identify conformity., • Ensure First Article Inspection requirements are done in accordance with AS9102 and customer requirements., • For source conducted first article inspection, utilized tools, equipment as appropriate to conduct GD&T for inspection reports., • Complete AS9102 or equivalent or customer source designated reports for all First Articles and Source Inspections. STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • Daily throughput (inspections/Lab steps completed), • Quality Issue detections (Incoming NCM ), • Outgoing Quality (customer Escapes), • IDEA Certification and knowledge implementation, • Use of GD&T and FAI knowledge for timely FAIR completion, • Issue communication, • Daily 6S/ESD/FOD policies followed, • Ability to find datasheets/drawings information on CTG Systems, • Diversity of inspections (EC/EM/HA/Hardware/etc), • Achieving CQI certification EDUCATION / EXPERIENCE / COMPENTENCY • High School Diploma or equivalent, • 1 year of manufacturing or quality experience is a plus but not required, • Must be proficient in English, both written and verbal communication skills, • Good arithmetic skills are required, • Mechanical aptitude desired, • Working knowledge of measurement instruments: i.e., calipers, etc., • Basic proficiency of Microsoft Excel and Word, • Must complete IDEA-ICE-3000 Certification within 6 months of hire., • Able to pass internal testing and training to meet internal requirements, • Must demonstrate acceptable vision requirement.

Job DescriptionDescription: Hybrid 4 in either New York, NY or Pittsburgh, PA The organization seeks a Security Operations Engineer to strengthen and operate a FedRAMP-aligned Azure environment using native Microsoft security tooling. The role will design detections, run incident response, and drive continuous monitoring with audit-ready evidence across NIST SP 800-53 control families. The engineer will collaborate with cloud engineering, platform teams, and compliance stakeholders to sustain authorization and operational excellence. The position requires proficiency with Microsoft Sentinel, Defender for Cloud, Azure Policy, Entra ID, and KQL. This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $84.00 to $94.00/hr. w2 Responsibilities: • Design, implement, and tune detections in Microsoft Sentinel, including analytic rules, workbooks, watchlists, and automation with Logic Apps and Playbooks., • Build incident response runbooks and orchestration for triage, enrichment, and response using Sentinel automation., • Maintain log onboarding pipelines, data connectors, and normalization in Log Analytics to ensure coverage for in-scope resources., • Conduct daily SecOps functions including alert triage, investigation, threat hunting, containment, and post-incident reviews., • Leverage Defender for Cloud, Defender for Cloud Apps, Entra ID Protection, and Microsoft Defender XDR signals to correlate and respond to threats., • Document evidence and maintain audit-ready case records, contributing to POA&M entries and corrective actions., • Manage misconfigurations and control enforcement using Defender for Cloud recommendations, Secure Score, and Azure Policy., • Partner with platform engineering to remediate vulnerabilities and configuration drift, tracking closures against FedRAMP timelines., • Maintain baseline guardrails via Azure Policy and Blueprints and monitor compliance and exceptions with Continuous Monitoring reporting., • Implement and support least-privilege patterns with Entra ID, PIM, Conditional Access, RBAC, and managed identities., • Coordinate FIPS 140-2 validated cryptography usage with Key Vault and ensure encryption standards at rest and in transit are met and evidenced., • Operate Azure Firewall, NSGs, Private Link, and DDoS Protection and monitor and remediate anomalies., • Ensure logging and telemetry for network controls are complete, retained, and queryable within Sentinel., • Produce monthly and quarterly Continuous Monitoring artifacts and maintain supporting evidence., • Update detection coverage maps, control implementation narratives, and operational runbooks as environment changes occur., • Collaborate with compliance and assessors, support interviews, evidence collection, and remediation tracking., • Embed security checks into CI/CD pipelines using native integrations and support policy compliance and validation., • 5+ years in security operations engineering or incident response, including 2+ years operating native Microsoft security tooling in Azure., • Hands-on experience building and tuning Microsoft Sentinel detections and automating response with Logic Apps and Playbooks., • Practical knowledge of FedRAMP Moderate or High baselines and NIST SP 800-53 control families relevant to operations, including AC, AU, CM, IR, RA, SC, and SI., • Proficiency with Defender for Cloud, Azure Policy, Entra ID including PIM and Conditional Access, Key Vault, Azure Monitor, and Log Analytics., • Strong incident response skills across triage, investigation, containment, and post-incident documentation with audit-quality evidence., • Experience operating vulnerability and misconfiguration management workflows and meeting remediation SLAs aligned to FedRAMP timelines., • Scripting and automation familiarity using KQL for Sentinel and PowerShell, with ARM, Bicep, or Terraform basics., • Excellent documentation and communication skills for playbooks, evidence packages, and stakeholder updates., • Experience with Azure Government or GCC High environments (preferred)., • Prior contributions to FedRAMP Continuous Monitoring reporting and POA&M lifecycle management (preferred)., • Experience aligning native controls and detections to payment or mission-critical workload risk profiles (preferred)., • Familiarity with Microsoft Purview, Defender for Cloud Apps, Entra ID Protection, and Private Link patterns (preferred)., • Relevant professional certifications such as AZ-500 Azure Security Engineer Associate (preferred)., • SC-200 Microsoft Security Operations Analyst (preferred). W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality. Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact Eliassen Group: Eliassen Group is a leading strategic consulting company for human-powered solutions. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions. With offices from coast to coast and throughout Europe, Eliassen provides a local community presence, balanced with international reach. Eliassen Group strives to positively impact the lives of their employees, clients, consultants, and the communities in which they operate. Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Don’t miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!

Job Description:\n\nAbout Phaidra Phaidra is building the future of industrial automation. The world today is filled with static, monolithic infrastructure. Factories, power plants, buildings, etc. operate the same they've operated for decades — because the controls programming is hard-coded. Thousands of lines of rules and heuristics that define how the machines interact with each other. The result of all this hard-coding is that facilities are frozen in time, unable to adapt to their environment while their performance slowly degrades. Phaidra creates AI-powered control systems for the industrial sector, enabling industrial facilities to automatically learn and improve over time. Specifically:We use reinforcement learning algorithms to provide this intelligence, converting raw sensor data into high-value actions and decisions.We focus on industrial applications, which tend to be well-sensorized with measurable KPIs — perfect for reinforcement learning.We enable domain experts (our users) to configure the AI control systems (i.e. agents) without writing code. They define what they want their AI agents to do, and we do it for them. Our team has a track record of applying AI to some of the toughest problems. From achieving superhuman performance with DeepMind's AlphaGo, to reducing the energy required to cool Google's Data Centers by 40%, we deeply understand AI and how to apply it in production for massive impact. Phaidra's ability to achieve its mission is determined by our ability to work together — as defined by our core values: Transparency, Collaboration, Operational Excellence, Ownership, and Empathy. We seek individuals who embody these values, as they are instrumental in ensuring our team consistently delivers excellence and fosters an engaging and supportive culture Phaidra is based in the USA, but we are 100% remote with no physical office. We hire employees internationally with the help of our partner, OysterHR. Our team is currently located throughout the USA, Canada, UK, Sweden, Spain, Portugal, the Netherlands, Singapore, Australia, and India.The Opportunity At Phaidra, security is the bedrock of trust for our customers operating the world's most critical infrastructure. We are looking for a Senior Product Security Engineer to partner directly with our Agentic AI department. This team is at the forefront of our mission, building autonomous agents responsible for optimizing the operational fabric of AI factories. These agents don't just chat; they act. They make real-time decisions to optimize power usage, cooling efficiency, and hardware health, creating a more stable and efficient environment for massive-scale compute. This is a high-stakes environment where the integrity and security of AI-driven decisions are paramount. You will tackle the unique security challenges of deploying autonomous agents that interact directly with physical control systems. Security failures here don't just mean data leaks; they could mean operational downtime or physical degradation of critical hardware. We need a security expert who thrives working hand-in-hand with AI researchers and engineers. Your role is to embed security into the DNA of our Agentic platform, ensuring that as our agents learn and explore, they do so within unbreakable safety boundaries. We are seeking a team member located in the following areas: UK or US (central and eastern time preferred)ResponsibilitiesChampion Secure Agentic AI Development: Drive the adoption of Phaidra's Secure AI/ML Development Lifecycle (SAIDL) within the Agentic AI team. Adapt security practices to fit the iterative and experimental nature of Reinforcement Learning and agent development.Agentic Threat Modeling: Partner with researchers to model threats specific to autonomous agents. Beyond standard AI risks, you will analyze risks unique to agents, such as goal misalignment, reward hacking, infinite looping, and insecure tool execution (e.g., an agent executing a command that exceeds safety limits).Secure Agent Architecture & Safety Boundaries: Design secure-by-default architectures for autonomous agents. Crucially, this involves defining deterministic safety guardrails that sit between the probabilistic AI model and the physical hardware controls. Ensure "Zero Trust" applies to the agent—it should only have the minimum permissions needed to adjust specific parameters.Secure Agent Tools & Memory: Architect security controls for the "tools" the agent uses (APIs to read sensors or change settings) and the agent's long-term memory. Ensure the agent cannot be manipulated into using a tool to perform unauthorized actions or "poisoned" via its memory context.MLSecOps for RL Pipelines: Secure the training and simulation pipelines used for Reinforcement Learning. Ensure the integrity of the simulation environments (Digital Twins) used to train agents, preventing attackers from influencing agent behavior during the training phase.Adversarial Testing & Red Teaming: Lead AI Red Teaming exercises focused on behavioral manipulation. Can you trick the agent into making a suboptimal decision? Can you manipulate the observations the agent receives?Incident Preparedness: Develop incident response playbooks tailored for autonomous systems, focusing on "Kill Switches" and rapid rollback capabilities in the event of rogue agent behavior.Cross-Functional Partnership: Build strong relationships with the Agentic AI researchers, SREs, and Data Scientists. Act as an enabler who helps them deploy powerful agents safely, rather than a blocker.Key QualificationsAgentic AI & RL Security: Proven understanding of the security risks associated with Reinforcement Learning, Autonomous Agents, or automated decision-making systems.AI Partnership: Demonstrated experience working embedded with AI system developers and researchers. You understand the difference between "probabilistic" (AI) and "deterministic" (Code) and how to secure the bridge between them.Core Experience: 5+ years of work experience in product security, application security, or a closely related security engineering role.Safety Engineering Mindset: You understand that in physical systems, "Availability" and "Safety" often outrank "Confidentiality." You are familiar with concepts like fail-safes and human-in-the-loop controls.Technical Depth:Strong programming experience, ideally with Python (essential for ML/AI ecosystems) or Go.Familiarity with agent frameworks (e.g., LangChain, AutoGPT) or RL libraries (e.g., Ray RLLib).Proven experience securing Cloud infrastructure (GCP) and Kubernetes.Deep understanding of Authentication & Authorization (specifically non-human identities/workload identity).Advanced MLOps: Direct, hands-on experience securing MLOps tooling (e.g., Kubeflow, MLflow) and deep understanding of securing complex data and model-training pipelines.Preferred Skills & ExperienceIndustrial / OT Context: Experience working with systems that interface with the physical world (IoT, Robotics, ICS/OT). Understanding of the "IT/OT convergence."Formal Verification for AI: Experience using mathematical methods to prove that an AI model or agent will not violate specific safety constraints.Sim-to-Real Security: Experience securing simulation environments (Digital Twins) and managing the security risks of transferring policies from simulation to the real world.Protocol Fuzzing: Ability to test industrial protocols (e.g., Modbus, BACnet) for robustness against automated or adversarial inputs.AI Governance: Familiarity with emerging standards like the NIST AI RMF or ISO 42001.Critical Systems: Experience securing "closed loops" or control systems where latency and reliability are critical.Certifications: Relevant advanced certifications, such as GICSP (Global Industrial Cyber Security Professional), ISA/IEC 62443 Cybersecurity Expert, NVIDIA Agentic AI, OSEP (Offensive Security Experienced Penetration Tester), CISSP, or OSCP.Our StackAI/ML: PyTorch, TensorFlow, Ray (RL), LangChain, Gemini/OpenAI/Anthropic models.Languages: Python, Go.Infrastructure: Docker, Kubernetes, Terraform.Cloud: GCP (GKE, PubSub, BigTable)Onboarding In your first 30 days — (Foundation and AI Landscape Familiarization)Understand the Mission: Deep dive into "Building AI for AI Factories." Understand the specific physical parameters (power, cooling, airflow) our agents are optimizing.Build Trust: Sit with the Agentic AI researchers to understand their workflow. How do they train agents? How do they simulate environments?Initial Review: Conduct a high-level review of the current "Safety Layer" that sits between the Agent and the control systems. In your first 60 days — (Threat Modeling & Guardrails):Agent Threat Model: Lead a detailed threat modeling session for a specific Agentic workflow. Focus on the Interface between the Agent and the Physical Hardware.Guardrail Implementation: Propose and begin implementing technical controls (guardrails) that enforce deterministic safety rules, ensuring the AI cannot exceed operational limits regardless of its intent.Secure the Tools: Review the security of the internal APIs (Tools) that the agents use to sense and act on the environment. In your first 90 days — (Strategy & Automation):Reference Architecture: Publish a "Secure Agent Reference Architecture" for future agent development.Driving Initiatives: Drive the implementation of the secure reference architectures and remediation of key findings from the threat modeling exercises.Demonstrable Impact: Showcase measurable improvements in the security of the AI/ML pipeline (e.g., implementation of runtime monitoring for anomalous model behavior, reduction of AI-specific vulnerabilities).Strategic Contributions: Establish yourself as the key security partner and expert for the Agentic AI Department.General Interview Process All of our interviews are held via Google Meet, and an active camera connection is required.Meeting with People Operations team member (30 minutes)Meeting with Hiring Manager (30 minutes)Technical Interview with our Senior Product Security Engineer (60 minutes)Meeting with Agentic AI team member (45 minutes)Culture fit interview with Phaidra's co-founders (30 minutes)Base Salary US Residents:Tier 1 (Largest highest-cost metros): 146,200 USD - 199,600 USDTier 2 (Other major metros): 138,640 USD - 189,370 USDTier 3 (Mid-sized metro areas): 131,080 USD - 179,140 USDTier 4 (All other locations): 123,520 USD - 168,910 USD UK Residents:Tier 1 (London): 95,200 GBP - 142,000 GBPTier 2 (Manchester, Birmingham, Edinburgh, Bristol): 89,600 GBP - 134,400 GBPTier 3 (Other areas): 84,000 GPB - 126,000 GBP In addition to base salary, this position is eligible for equity. Final salary will be determined based on several factors, including a candidate's qualifications, skills, competencies, experience, expertise, education and location. In some cases, final compensation may fall outside the posted range. Salary ranges are regularly reviewed and may be adjusted in response to market trends. Benefits & PerksFast-paced, team-oriented environment where your work directly shapes the company's direction.We are a 100% remote company. Competitive compensation & meaningful equity.Outsized responsibilities & professional development.Training is foundational; functional, customer immersion, and development training.Medical, dental, and vision insurance (exact benefits vary by region).Unlimited paid time off, with a required minimum of 20 days per year.Paid parental leave (exact benefits vary by region).Flexible stipends to support your workspace, well-being, and continued professional development.Company MacBook. Please note: Not all of Phaidra's benefits and perks listed above apply to temporary employees such as interns.On being Remote We take a thoughtful and intentional approach to remote collaboration. Inspired by pioneers like GitLab, we embrace proven best practices to foster an exceptional remote work environment. Our culture is documentation-first, and we prioritize asynchronous communication to support focus and flexibility across time zones. While we value independence, we stay closely connected through tools like Slack and video conferencing. Weekly all-hands meetings help us align and build strong relationships, and we regularly host virtual team-building activities and social events to maintain a sense of camaraderie.Equal Opportunity Employment Phaidra is an Equal Opportunity Employer; employment with Phaidra is governed on the basis of merit, competence, and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status. We welcome diversity and strive to maintain an inclusive environment for all employees. If you need assistance with completing the application process, please contact us at Notice Phaidra participates in E-Verify, an employment authorization database provided through the U.S. Department of Homeland Security (DHS) and Social Security Administration (SSA). As required by law, we will provide the SSA and, if necessary, the DHS, with information from each new employee's Form I-9 to confirm work authorization for those residing in the United States. Additional information about E-Verify can be found here. #LI-Remote To be considered for any position at Phaidra, you must submit an online application. This role will remain open until it is filled. Phaidra only hires individuals who are legally authorized to work in the specified location(s) above. We do not provide employment sponsorship. Candidates requiring visa sponsorship, either now or in the future, are not eligible for hire. WE DO NOT ACCEPT APPLICATIONS FROM RECRUITERS.

Job DescriptionAgile CoachEmployment Type: Full-Time, ExperiencedDepartment: Project Management CGS is seeking an experienced, enthusiastic team member to act as an Agile Coach within our team supporting a large federal agency. The agency is committed to an operating model based on Agile, Product-focus, and DevSecOps in pursuit of increasing efficiency, efficacy, and overall success of various IT verticals and missions. The ideal candidate should embody an Agile mindset and be passionate about empowering an Agile culture through experience coaching, guiding, and supporting executives, managers, product owners, Scrum Masters, and others. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Oversee the Agile transformation for multiple teams at both the team and program level to enable successful delivery of large strategic system development initiatives.- Facilitate team workshops to help new teams understand Agile and Lean principles, Scrum, Kanban, individual and team roles and responsibilities.- Lead in the creation, delivery, and strategy of Agile Training to government stakeholders and contractors regarding agency Agile processes, tools, and policies- Help teams with sprint planning and implementation, as well as provide ongoing Agile Coaching support for new Agile teams throughout multiple iterations.- Provide ad hoc coaching to teams that have implemented Agile but need assistance to refine their processes.- Provide practical hands-on mentoring to Scrum Masters, Product Owners, and team members of new and existing Agile teams.- Help teams set up their team boards, workflow automation, and automated reporting. Assist organizations to define, prioritize, and decompose requirements in Product and Program Backlogs- Evolve and maintain the Agile Maturity Assessment model, Assess team performance and Agile maturity, and report findings.- Provide feedback on processes, policies, procedures, training, and tooling changes to better support the enterprise's Agile transformation.- Facilitate and coordinate cross-team planning workshops and coach other scrum masters to facilitate cross-team planning workshops.- Facilitate and coordinate cross-team grooming sessions. Lead and participate in Agile communities of practices. Prepare and/or update organization-wide Agile artifacts and methodology documentation.- Help iterate on and provide recommendations to advance the Agile Transformation Roadmap. - Embed an agile culture using techniques from a wide range of agile and lean methodologies and frameworks.- Ensure Agile project metrics are being tracked and monitored for indications of potential problem areas and assist teams in identifying and implementing solutions to address the problems.- Oversee the coaching and planning of multiple high-performing Agile development teams and large-scale programs across the enterprise. Qualifications:- Familiar with DevSecOps tools and techniques such as modern IDE's, GitHub, containerization, everything as code, and zero-trust.- Ability to demonstrate superior organizational skills with an acute attention to detail.- Ability to work effectively under pressure in time-sensitive situations and prioritize multiple projects with similar deadlines.- Agile coaching experience.- Minimum of 5 years of practical Agile experience.- Strong understanding of Agile concepts with an emphasis on SAFe including Scrum, Kanban, Product Ownership, and Agile Scaling.- Experience as a hands-on organizational change agent working across multiple teams- Experience with assisting leadership and team members with removing barriers and embracing transformation by assisting each organization to customize its own path, approach, and solutions to becoming Agile..- Experience with launching Agile Release Trains, building a Continuous Delivery Pipeline with DevOps culture, empowering a Lean Portfolio, and clearly understanding what it takes to successfully implement SAFe in the enterprise (starting with teams’ / Program levels and scaling up to Large Solutions and Portfolio levels).- Experience supporting and executing PI Planning events and coordinating multiple Agile Release Trains (ARTs). Ideally, you will also have:- Master’s degree or other higher education degree in Information Technology-related field.- Certifications including or equivalent to Scaled Agile Framework – SPC - ScrumAlliance – CST - ICAgile – ICE-AC / ICP-CAT- Equivalent Expert / Senior Coaching Certifications.- Secure coding knowledge.- Open-source tools management.- SEI-CMMI and NIST experience.- Project Management Training or Education such as PMP program. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Capstone Integrated Solutions is a comprehensive services provider. Our team consists of outstanding professionals, highly experienced in designing, building, and supporting retail software. We see ourselves as a build-as-a-service provider who follows a repeatable business pattern that can be applied to a variety of platforms and verticals. Having a culture built on outcomes and delivery at the core of the business, Capstone is providing its customers with a complete suite of services for software development, system analysis, integration, implementation, and support, as well as the option to engage a single team to perform all the services they require. Who You Are and What You'll Do: Capstone Integrated Solutions is seeking a talented Full-Stack Developer with strong skills in Angular (frontend) and Python (backend) to contribute to the design and development of a cloud-native application hosted on AWS. The ideal candidate will be a hands-on developer who can build high-quality, scalable, and secure solutions while collaborating with senior technical leads, QA engineers, and solution architects. Responsibilities: • Design, develop, and maintain frontend components using Angular and backend services using Python FastAPI and SQLAlchemy., • Implement and consume RESTful APIs and contribute to microservices development., • Collaborate with technical leads and architects to ensure solutions align with overall system architecture and best practices., • Write clean, maintainable, and testable code with appropriate documentation., • Participate in code reviews to ensure code quality and adherence to standards., • Support integration with AWS services (S3, Lambda, API Gateway, DynamoDB/RDS, etc.)., • Work with QA engineers to develop and maintain unit tests, integration tests, and automated test suites., • Troubleshoot, debug, and resolve application issues in a timely manner., • Contribute to CI/CD pipelines and deployment automation., • 3–5 years of professional software development experience., • Hands-on experience with Angular (latest versions)., • Strong backend development experience with Python FastAPI and SQLAlchemy., • Solid understanding of REST API design and integration., • Familiarity with AWS services for application development and deployment., • Experience with version control systems (Git, GitHub, GitLab)., • Exposure to CI/CD pipelines and automated deployment tools., • Strong problem-solving, debugging, and communication skills., • Experience in highly regulated industries (e.g., healthcare, financial services, government)., • Knowledge of compliance frameworks such as HIPAA, PCI, NIST, or FedRAMP., • AWS Certification (Developer, Solutions Architect Associate/Professional)., • Experience with cloud-native applications and microservices design., • Exposure to test automation frameworks (PyTest, Cypress, Selenium, etc.)., • Knowledge of database technologies (PostgreSQL, MySQL, DynamoDB). At Capstone, the central principles that we all adhere to, and the glue that holds us together, are our keystones. Our four keystones are: • "A Customer Obsessed, Delivery Focused, Culture", • We're driven to exceed our customers' expectations by listening, leading, solving problems, and delivering what we promise, • We aim to be the most dependable and trusted partner serving our customers. TRUST = CONSISTENCY x TIME, • "A Culture of Learning and Sharing", • We value "Lifetime Learners"; those who are hungry, competitive, curious, and self-motivated in their pursuit of knowledge., • Personal and professional growth depends on teamwork and continuous learning. By sharing knowledge, skills, ideas, and effort, we benefit our customers, ourselves, and our communities., • We recognize that the thoughts, feelings, and backgrounds of others are as important as our own. Everyone has something to learn and everyone has something they can teach., • Knowledge and ability are valued. Sharing knowledge and helping others learn new capabilities is valued exponentially., • "A Culture of Growth and Scalability", • Growth comes from not establishing barriers in your role. "Cross functional skill sets are valued and help us deliver to our customers in a truly agile fashion. It comes with understanding that when asked to do something new, you will need support, have questions, and make some mistakes along the way., • The most elegant solution is a simple solution. Simple doesn't mean easy. It's often more difficult to break a complex problem down into simple, scalable terms. We don't appreciate, or value, over architected solutions or superfluous coding., • Time is one of our most precious commodities. Scalability implies being respectful of this and passionate about making the most efficient use of each and every one of our team members time., • "All Work is Strategic", • No matter how small a project or assignment appears, every single engagement is an opportunity for us to prove ourselves, build trust, and develop relationships that last and grow, • Every task, interaction, and commitment matters Job Type: Full-time Benefits: • Remote work Capstone Integrated Solutions is an equal opportunity employer. We embrace and celebrate diversity and are committed to creating an inclusive and safe environment for all employees. Experience comes in many forms, and we're dedicated to adding new perspectives to the team. We encourage you to apply even if your experience doesn't perfectly align with what we have listed. We look forward to hearing from you. No Agencies Please!

Job Description Are you ready to shape the future of authentication? Join 1Kosmos and help lead the next wave in identity assurance and passwordless innovation. 1Kosmos is driving the future of identity security, empowering organizations to eliminate passwords and establish trust at every step of the identity lifecycle. As a vibrant team of innovators, we develop advanced authentication solutions trusted by some of the world’s leading brands. Join us as we create a passwordless world and set new standards for digital identity assurance. We are looking for an AI / Machine Learning Engineer to design, build, and deploy advanced computer vision and AI solutions. You will work on projects involving image capture, data extraction, and fraud detection, delivering high-performance models that can run on both mobile devices and cloud environments. This role blends R&D with production engineering—you’ll take ownership of the full ML lifecycle, from dataset creation and model training to deployment and performance optimization. Key Responsibilities • Design and implement AI models for image classification, object detection, OCR, and feature extraction., • Develop real-time image quality assessment and capture guidance algorithms., • Create and maintain data pipelines for collecting, cleaning, augmenting, and labeling datasets., • Implement model optimization techniques for mobile (on-device) and cloud inference., • Apply fraud detection methods to identify tampering, forgeries, or replay attacks in visual data., • Integrate ML models into production-grade APIs and mobile SDKs., • Monitor, evaluate, and continuously improve model accuracy and performance., • Collaborate with product and engineering teams to align AI capabilities with business goals. Requirements • Bachelor’s or Master’s degree in Computer Science, AI/ML, or related field (or equivalent experience)., • 3+ years of experience building and deploying ML models in production., • Proficiency in Python and ML frameworks (PyTorch, TensorFlow, or similar)., • Experience with computer vision libraries (e.g., OpenCV) and OCR technologies., • Strong understanding of deep learning architectures for image and text recognition., • Familiarity with cloud platforms (AWS, GCP, or Azure) and API development., • Strong problem-solving skills and ability to work in fast-paced environments., • Based in the NJ / NY area; Hybrid working model.Preferred Qualifications, • Experience with model quantization and optimization for mobile deployment., • Knowledge of synthetic data generation and data augmentation techniques., • Background in security, liveness detection, or anomaly detection., • Exposure to compliance and data privacy regulations (GDPR, CCPA)., • Cutting-Edge Tech Stack: Build with decentralized identity protocols, FedRamp High, FIDO2-certified cryptography, and NIST-compliant biometric systems., • Accelerated Growth: Receive annual stipends for certifications and attend key conferences like Identiverse or EIC., • Ownership & Impact: We move fast and will enable you to make a big impact with large customers in US & Canada., • Flexibility First: Unlimited PTO, and 2 days WFH

Job DescriptionWho We Are AI is changing how software gets built. Code production is becoming a commodity. The focus is shifting from writing code to orchestrating, verifying, and governing change – and the toolchain is the new constraint. Gradle is at the center of this shift. We build Develocity, a toolchain observability and intelligence platform used by some of the world's leading software organizations – Netflix, Airbnb, Spotify, SAP, major global banks, and hundreds more. Develocity helps software teams achieve delivery excellence through deep observability, build and test acceleration, and AI-powered intelligence across the entire toolchain – with current support for Gradle Build Tool, Apache Maven™, sbt, npm, and Python. We are an AI-native company. AI is not a feature we're bolting on – it's central to how we work, how we think about our product, and where we're heading. We're investing deeply in making Develocity's unique data and decades of domain expertise accessible to both humans and AI agents, with trust, evidence, and explainability at the core of everything we build. We have partnered with the Apache Software Foundation, the Commonhaus Foundation, the Micronaut Foundation, and other OSS projects such as Spring, Quarkus, Kotlin, JUnit, AndroidX, and many more to bring the values of Develocity also to the OSS Community. Our Values Seek to Understand: Everything starts with listening and understanding; we strive to understand diverse viewpoints, problems, and motivations. Before we take action, we ensure we truly grasp the challenges, perspectives, and goals. Know the Why: We approach our work with a clear sense of purpose, ensuring every step is deliberate and focused. We take meaningful action with urgency, but never at the expense of thoughtful consideration. Innovate & Iterate: We embrace challenges and are not afraid to try new things, even if they might fail. With a deep understanding and a clear purpose, we can develop creative, bold solutions to tackle challenges. Own the Outcome: We are empowered to take initiative, and we maintain transparency in our work and its outcomes. When we execute, we take responsibility for our decisions, measure the success of our innovations, and learn from the results. Who You Are You are an experienced and passionate B2B Senior Product Manager with a proven track record of leading strategy, roadmap, and delivery in the DevOps Toolchain and Build Artifacts space. You have honed your skills at an industry-leading developer tooling company. You have a deep understanding of software provenance, attestation, and supply chain governance — and you recognize how AI-driven software delivery is making these disciplines more critical and more complex than ever. You are fluent in compliance frameworks such as SLSA and bring experience defining product requirements for provenance data collection across the build process. You have a strong sense of the full customer lifecycle, from initial discovery through adoption and long-term value realization. You have a keen instinct for translating customer needs and market trends into product decisions that accelerate time-to-value. A strong cross-functional collaborator, you are equally comfortable working with engineering, sales, and marketing. Responsibilities • Product Strategy & Vision:, • Define and articulate a clear product vision, strategy, and roadmap for provenance and supply chain governance – accounting for how AI-driven development (coding agents, agent swarms, software factories) changes the threat model and compliance landscape., • Conduct thorough market research, competitive analysis, and customer interviews to identify opportunities and unmet needs across cloud, hybrid, and on-premises deployments., • Develop business cases for new product initiatives., • AI Integration:, • Establish the product direction for how AI agents and autonomous workflows interact with provenance and compliance, as consumers of attestation data and as subjects that require governance., • Collaborate with the AI strategy team to identify opportunities where Develocity's unique data and domain expertise can power AI-driven provenance capabilities, e.g., automated compliance verification, anomaly detection, and agent-ready provenance APIs., • Stay current with the rapidly evolving AI tooling landscape and evaluate how LLMs, coding agents, and agentic workflows impact software supply chain security., • Requirements & Prioritization:, • Gather, analyze, and prioritize product requirements, synthesizing input from all stakeholders, including customers, sales, support, and engineering., • Translate high-level business requirements into prioritized functional requirements with a clean value proposition., • Make pragmatic roadmap prioritization decisions with a clear rationale., • Go-to-market:, • Work with sales and marketing to develop go-to-market strategies, product positioning, and messaging., • Develop go-to-market materials to support the enterprise sales motion, such as presentations and demos., • Partner with customer-facing teams to understand and address customer pain points., • Customer & Market Advocacy:, • Evangelize for your products, presenting to customers, partners, and at conferences, as well as internally., • Actively engage with industry standards bodies and communities around SLSA, SPDX, in-toto, and other SDLC concerns., • Act as an external thought leader in the provenance and supply chain governance domain.Minimum Qualifications, • Proven experience in product management in a customer-facing, B2B context., • Proven ability to build and manage a pragmatic product roadmap., • Domain knowledge in the following:, • SDLC governance, GRC (Governance, Risk, and Compliance), and DORA metrics in an enterprise context., • Software Provenance and Attestation, e.g., SLSA and in-toto, • ITSM and Software Asset Management product practices, • Build systems, e.g., Gradle Build Tool and Apache Maven, • CI/CD practices, • Prior experience as a software engineer or a computer science degree., • Strong analytical skills with the ability to leverage data to inform product decisions., • Excellent collaboration and communication skills.Preferred Qualifications, • Deep understanding of security standards and frameworks relevant to the software supply chain, e.g., NIST, CISA, ISO 27001., • Experience with cryptography, signing, and key management practices in a developer tool context., • Experience with building AI-powered products, agentic workflows, or LLM-based tooling. What We Offer, • Shape a greenfield product area at the intersection of supply chain security and AI-driven development., • Close collaboration with an ambitious and experienced team, • Opportunities for growth in your career and in leadership responsibilities, • In-person meetings, such as our annual company offsite, team meetings, and onboardings, • Work from home in a remote-first environment Our team works remotely and is spread across the globe. We coordinate across time zones and stay connected through brief daily syncs — because we believe regular, direct collaboration brings out the best work.

Job DescriptionCompany Overview ID.me is the next-generation digital identity wallet that simplifies how individuals securely prove their identity online. Consumers can verify their identity with ID.me once and seamlessly login across websites without having to create a new login and verify their identity again. Over 152 million users experience streamlined login and identity verification with ID.me at 20 federal agencies, 45 state government agencies, and 70+ healthcare organizations. More than 600+ consumer brands use ID.me to verify communities and user segments to honor service and build more authentic relationships. ID.me's technology meets the federal standards for consumer authentication set by the Commerce Department and is approved as a NIST 800-63-3 IAL2 / AAL2 credential service provider by the Kantara Initiative. ID.me is committed to "No Identity Left Behind" to enable all people to have a secure digital identity. To learn more, visit . Role Overview The Senior Account Executive, Public Sector (SLED) is a high-impact role responsible for spearheading new business acquisition and strategic expansion within the State, Local, and Education markets. You will act as a sophisticated navigator of the public sector, translating complex technical solutions into mission-critical outcomes for government agencies. Preferred locations: New York City, Phoenix, Indianapolis, Denver (with travel to customer meetings and events) Key Responsibilities • Complex Cycle Management: Lead and execute sophisticated, end-to-end sales cycles within the SLED market, often involving multi-departmental buy-in and complex RFP/RFI processes., • Strategic Growth: Design and execute a territory play-book that contributes significantly to the company's financial objectives and market leadership., • Executive Relationship Building: Cultivate and maintain deep, long-term "trusted advisor" relationships with CIOs, CTOs, and Program Directors across state and local agencies., • Cross-Functional Leadership: Partner with Customer Success and Product teams to ensure successful pilot-to-production transitions and long-term account health., • Ecosystem Development: Identify and leverage a robust network of channel partners, system integrators (SIs), and lobbyists to accelerate market entry and deal velocity., • Forecasting Excellence: Maintain a rigorous, predictable sales pipeline, providing accurate quarterly forecasts in a landscape known for its long lead times.Qualifications, • The SLED Veteran: 7–15 years of demonstrable success in technology sales, with a primary focus on SLED (State, Local, and Higher Education) markets., • Proven Track Record: A consistent history of over-achieving seven-figure quotas and closing "landmark" deals within government sectors., • Procurement Mastery: Deep understanding of public sector procurement vehicles (e.g., NASPO, GSA, state-specific contracts) and the legislative cycles that drive funding., • Existing Network: A "ready-to-go" book of business and high-level contacts within key state and local agencies., • Communication Mastery: Exceptional ability to distill complex technical value propositions into compelling narratives for both technical staff and non-technical elected officials., • Startup Agility: Experience thriving in a high-growth, fast-paced environment where proactive problem-solving and an entrepreneurial mindset are required. ID.me offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit. The above represents the anticipated total rewards package for this job requisition. Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors. Pay Range$248,125—$296,820 USD The annual base salary listed does not include a company bonus, incentive for sales roles, equity and benefits which will be determined based on experience, skills, education, relevant training, geographic location and role. ID.me offers comprehensive medical, dental, vision, health savings account, flexible spending accounts (medical, limited purpose, dependent care, commuter benefit accounts), basic and voluntary life and AD&D insurance, 401(k) with company match, parental leave, ability to participate in unlimited paid time off subject to the terms and conditions of the PTO policy, including 8 company wide holidays, short and long-term disability insurance, accident and critical illness insurance, referral bonus policy, employee assistance program, pet insurance, travel assistant program, wellbeing and childcare discounts, benefit advocates, and a learning and development benefit. The above represents the anticipated total rewards package for this job requisition. Final offers may vary from the amount listed based on qualifications, professional experiences, skills, education, relevant training, geographic location, and other job related factors. U.S. Pay Range$248,125—$296,820 USDMountain View, CA Pay Range$248,125—$345,000 USD ID.me is a full-time, in-office culture. Unless a specific job description explicitly states otherwise, all roles are on-site five days per week at one of our offices in McLean, VA; Mountain View, CA; New York City, NY; or Tampa, FL. Certain roles — such as field-based sales or other remote-by-design positions — may have different work arrangements as noted in their individual postings. ID.me maintains a work environment free from discrimination, where employees are treated with dignity and respect. All ID.me employees share in the responsibility for fulfilling our commitment to equal employment opportunity. ID.me does not discriminate against any employee or applicant on the basis of age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. ID.me adheres to these principles in all aspects of employment, including recruitment, hiring, training, compensation, promotion, benefits, social and recreational programs, and discipline. In addition, ID.me's policy is to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations and ordinances where a particular employee works. Upon request we will provide you with more information about such accommodations. Please review our Privacy Policy, including our CCPA policy, at id.me/privacy. If you provide ID.me with any personally identifiable information you confirm that you have read and agree to be bound by the terms and conditions set out in our Privacy Policy. ID.me participates in E-Verify.

Job DescriptionOverview: Job Title: Senior Network Engineer Security Clearance: Ability to Obtain Public Trust Location: Kings Point, NY (Due to the nature of the work and contract requirements, U.S. Citizenship is required.) Description: C3EL has an immediate opportunity for a Senior Network Engineer to support the mission at the United States Merchant Marine Academy in Kings Point, New York. The selected candidate will design, implement, troubleshoot, analyze, and maintain Academy networks. Responsibilities include configuring, testing, and maintaining LAN, WAN, DMZ, and wireless networks, as well as related services. The engineer will identify, diagnose, and resolve network issues, and create and maintain comprehensive documentation for all implemented networks, applications, and appliances. Candidates should have experience working in a government environment and be familiar with NIST and FISMA standards. Responsibilities will include, but not be limited to: • Implement and administer network devices within a structured environment, including establishing and maintaining network policies, • Configure, manage, and troubleshoot Cisco switches and routers, • Design, plan, implement, and optimize wireless network infrastructure, • Manage and support Aruba architecture, including wireless networks and network access control (NAC) solutions, • Administer and maintain Nutanix Prism and Acropolis hypervisor environments, • Configure, manage, and analyze firewalls and VPN solutions to ensure secure connectivity, • Implement and support network access security tools and solutions, • Administer Microsoft Server environments, including Active Directory and Group Policy, • Develop, maintain, and execute PowerShell scripts to automate system and network tasks, • Provide Tier 2 and Tier 3 support for Windows Server and Windows 11 environments, resolving complex technical issues, • Document network configurations, processes, and procedures clearly and accurately, • Perform advanced troubleshooting, root cause analysis, and network performance optimization Minimum Qualifications: • U.S. Citizenship., • Minimum one of the following certifications; CCNA, CCNP, or ITILv3 certification., • Must be able to complete "eApp National Background Investigation Services (NBIS)" form., • Must have 5-7 years of related experience managing data networks, possessing extensive skills and knowledge in network design, architecture, troubleshooting, and management., • Experience configuring, testing, and maintaining LAN, WAN, DMZ, and wireless networks, as well as related services., • Experience creating and maintaining comprehensive documentation for networks, applications, and appliances., • Experience working in a government environment with knowledge of NIST and FISMA standards., • Must have excellent written and verbal communication skills, including documentation., • Proven team player with the ability to drive collaboration across the organization to improve product quality, reduce costs, and increase productivity. Education: • A minimum of a Bachelor's degree in a related field is required.

Deep understanding of SOX 404 requirements, General IT Controls (GITCs), IT Application Controls (ITACs), and IT frameworks such as COBIT, ISO, NIST, and COSO. Proven ability to manage end-to-end IT audits, including SOX 404, pre/post-implementation reviews, maturity assessments, and operational aud

Job Description BASIC FUNCTIONS Provide support and assistance to assigned sales manager. Calls and/or receive calls from new or existing customer base. Answer questions about product, service, price, delivery, submittal status, availability of product, etc. Assesses customer needs and makes recommendations for products and services. This individual has the responsibility and authority to carry out assigned tasks. SPECIFIC DUTIES • Support the creation/building of long-term relationship with customers., • Performs order entry, reviews and processes orders, and create credit requests., • Create processes and maintain a variety of reports pertaining to specific clients., • Interfaces with clients, account managers and internal departments to assist in resolving client-related administrative issues., • Identifies delays or problem areas, and suggests solutions for resolving issues., • Gather competitive information, and provide feedback on customer satisfaction, as well as recommendations to improve procedures., • Assist Sales Manager in attaining sales performance goals., • Maintain customer database., • Assist Accounting with vendor invoice processing., • Follow up with customers, • Order tracking, • Help track individual customer quality and delivery ratings., • Comply with all customer quality requirements., • Ensure compliance with company code of conduct and all applicable laws, regulations, rules and policies. STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. EDUCATION / EXPERIENCE / COMPENTENCY • High School Diploma – College education preferred., • Strong Microsoft Outlook skills, • Strong attention to detail., • Customer empathy/ Superior customer service skills., • Highly organized.

Job Description TITLE: Strategic Sales Administrator DEPARTMENT: Business Development REPORTS TO: Program Managers; Program Management Support Reps; Director, Strategic Sales; VP, Strategic Sales; FLSA STATUS: NON-EXEMPT JOB DESCRIPTION REVISION: 12/02/2024 BASIC FUNCTIONS This individual shall coordinate and provide administrative support on various projects, products, development efforts, and strategic initiatives across the organization and in conjunction with development efforts with strategic partners and outside OEM ventures. This individual has the responsibility and authority to carry out assigned tasks. SPECIFIC DUTIES • Provide support to the program management team for all business & personal needs including: calendar management, arranging travel, arranging digital & in person meetings & drafting correspondences., • Interface daily with internal & external customers, account managers and internal departments to quickly resolve issues., • Compile, maintain & report on contract performance analytics., • Work with Program Management team to attain required Key Performance Indicators., • Performs order entry, review, track, process orders, and process required data entry in various platforms., • Manage internal customer requirements for all program management related orders., • Track individual supply chain (vendor) incoming order statuses., • Understand and comply with all customer quality requirements., • Support a safe work environment, using safety equipment, ensure safety equipment used in the areas is proper, safe, and used in a productive manner., • Follow established departmental policies, procedures, objectives, and safety standards. STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA-QMS-9090, ASA-100 and supporting construct standards AS6081, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • (Pending) EDUCATION / EXPERIENCE / COMPETENCY • High school diploma (or equivalent) but college education preferred., • Strong Microsoft 365 skills, • Effective verbal communication skills, • Strong customer empathy/superior customer service skills., • Highly organized and strong attention to detail., • Ability to work independently., • Career focused, driven individuals with a professional and engaging personality wanted!, • Experience working in a fast-paced, dynamic environment is a bonus! TRAINING REQUIREMENTS ALL TRAININGS OUTLINED FOR THIS JOB DESCRIPTION ARE IDENTIFIED WITHIN THE COMPANY’S TRAINING MATRIX, LOCATED WITHIN THE LEARNING MANAGEMENT TOOL WITHIN EACH INDIVIDUALS PREREQUISITES.

Job Description About Bridewell One of the most exciting prospects in the cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world's most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely. Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team. Overview We are looking for an industry expert to lead and grow a team of cyber security consultants in the United States as we continue our expansion in the region, delivering large scale transformational projects, implementing compliance frameworks, and managing multiple customer relationships. Previously operating at a minimum of a Principal Consultant level, you will be responsible for leading customer delivery engagements and management of a growing delivery team. You will have a strong knowledge across cyber security disciplines and control frameworks, often servicing as a point of escalation for your team and providing services directly into customers. The role forms part of Bridewell’s leadership team, where you will be involved in shaping services, leading on key initiatives and be at the forefront of driving our business forward. Requirements The Role - here’s what you will do: As a key part of Bridewell’s Leadership Team, the Professional Services Lead is involved in supporting the development of high-level strategy, service development, project delivery oversight and providing a direct delivery role on key customer engagements as and when required. This will include developing strong working relationships with Bridewell clients, ensuring projects are delivered to a high standard and working across the organisation to support the delivery of key company strategic objectives. You will report directly to the COO, leading a team of cyber security consultants that operate across a diverse set of disciplines ranging from the implementations of frameworks such as ISO27001, Supplier Assurance, and Data Privacy across all of Bridewell’s service portfolio. Regularly apply your substantial, relevant and up to date knowledge of Cyber Security, having expertise and experience across a number of areas, often acting as a key point of authority or escalation from managers and wider members of your team. Balancing client delivery, strategic initiatives and working as a key member of the leadership team you must also have the ability to manage and develop other Principal Consultants, Team Leaders and Consultants across the company. The United States is a key growth area for Bridewell and therefore you will be expected to leverage your extensive personal network and key senior relationships to develop new business opportunities for the Bridewell US business whilst ensuring high quality day to day delivery and maintaining exceptional client satisfaction. Further Breakdown of key responsibilities: • Leading a Bridewell Delivery team of multi-disciplinary Consultants., • Responsible for the development, performance management and ongoing continual improvement of service areas., • Accountability for annual company objectives., • Collaborating with the wider business to ensure that all services lines and associated methodologies are best in class., • Accountability for client revenue retention and responsible for the delivery of client engagements, working directly with senior customer stakeholders and your teams within Bridewell Consulting to deliver successful outcomes., • Providing advice, leadership and expertise across your projects in areas such as but not limited to:, • Implementation of Control Frameworks such as ISO27001, NIST, ISO27701, ISO22301, CIS Controls, CMMC, HIPAA and PCI DSS., • Development of client assessment approaches dependant on customer industry, requirements and operating context., • Play a key role, supporting sales activities and having key input and decision making in areas of proposal development, client presentations and pre-sales material., • Working with Bridewell People, Admin and Finance teams to ensure that all Bridewell internal project delivery requirements are being met such as resource planning, commercial planning, timesheet billing and invoicing., • Be a key voice for the Company by producing blog material, supporting webinars and representing Bridewell at events as and when required., • Support the COO on the shaping of strategy, services, client initiatives and internal company matters as and when required., • Work with the People function to develop a working culture which allows diverse teams to collaborate in an inclusive manner, where everyone’s contribution is valued., • Use your expertise and experience across various technologies, environments and projects to understand our clients maturity and strategic direction to develop appropriate roadmaps and services, taking into account organizational, commercial and funding considerations, • Work with our Recruitment Team to build Bridewell’s capability in your area of expertise, using your knowledge to attract great talent. Experience You will have strong, demonstrable expertise in several of the following areas: • Implementing security standards and frameworks such as ISO27001, ISO22301, ISO27701, PCI DSS, PSN, CMMC, HIPAA, CIS Controls and NIST CSF., • Developing, implementing and conducting cyber security risk assessments and risk management activities across technical and executive audiences., • Expertise across several cyber security domains e.g. Security Operations, IAM, Cloud, Risk, Control Frameworks/Standards., • Up to date knowledge of IT environments covering on premise infrastructure, private and public cloud infrastructure. and managing risk management activities, • Leading a business development engagement such as growing existing client relationship, RFPs, public speaking, pre-sale collateral., • Managing a team of consultants and projects within a fast paced, commercial environment., • Working within an operational security role or security management/leadership position, • Working at all levels of an organisation and managing stakeholders effectively., • Developing services and solutions to drive revenue growth., • Operating as an escalation on complex matters that require expertise, stakeholder management and strong customer relationships to deliver successful outcomes. What's in it for you? Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn't end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following: • 15 Days Holiday - Plus buy and sell options, • Flexible Working (around core office hours), • Company Pension, • Personal Day & Birthday Off - After 1 year of service, • Family Leave - After 1 year of service, • Life Assurance, • Private Healthcare Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion. Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.

Job DescriptionCoreWeave is The Essential Cloud for AI™. Built for pioneers by pioneers, CoreWeave delivers a platform of technology, tools, and teams that enables innovators to build and scale AI with confidence. Trusted by leading AI labs, startups, and global enterprises, CoreWeave combines superior infrastructure performance with deep technical expertise to accelerate breakthroughs and turn compute into capability. Founded in 2017, CoreWeave became a publicly traded company (Nasdaq: CRWV) in March 2025. Learn more at You'll Do The Product Engineering organization is responsible for executing and delivering CoreWeave's products, platforms, processes, and tools. As a security technical program leader, you will work across cross-functional teams, including security, engineering, product, and operations, to ensure our cloud infrastructure is secure and private, while maintaining scalability and delivery of exceptional performance to meet the demands of our customers. If you are passionate about cloud technologies, thrive in complex technical environments, and excel at orchestrating large-scale programs, we want to hear from you! In this role, you will: • Lead end-to-end program management for critical security engineering and security compliance initiatives, including cross-functional planning, execution, delivery, and retrospectives, • Define program scope, milestones, and success metrics while managing security risks and dependencies, • Partner closely within the security team, and across engineering, product management and operations teams to ensure alignment on priorities and deliverables, • Act as the primary point of contact for security and cross-functional stakeholders, providing regular status updates, addressing risks, and ensuring accountability, • Facilitate and influence technical security, privacy and compliance discussions and decisions to align with long-term infrastructure goals and business objectives, • Develop and implement scalable processes to improve efficiency and predictability in program delivery, • Strategically automate and improve day-to-day operations,processes and reporting, • 8+ years of hands-on experience in Security Technical Program Management, Security Strategy, Security Risk Management and/or Security Compliance roles, ideally within the cloud services industry, • A Bachelor's degree in Information Security, Computer Science, or a related field or equivalent job experience, • Experience managing large-scale, complex security or compliance programs in a fast-paced, technology-driven environment, • Exceptional leadership, interpersonal, and influencing skills with a proven ability to build relationships across technical and non-technical teams, • Excellent written and verbal communication skills, with the ability to convey complex technical concepts to diverse audiences, • Proficiency in program management tools and methodologies (e.g., Jira, Google Sheet)., • Strong analytical and problem-solving skills with a focus on delivering results, • Proven track record in program management, process definition and improvements and influencing adoption of defined processes across multiple teams or organizations, • Ability to lead cross-functional teams to prioritize, manage tradeoffs, identify gaps and risks, drive accountability, and measure successes, • Comfortable handling conflicts and escalations, • Deep understanding of compliance frameworks and regulations, including SOC 2, ISO 27001:2022, ISO 27701, ISO 27017, ISO 22301, ISO 42001, HITRUST, NIST 800-53, NIST CSF, PCI DSS, FedRAMP, GDPR, UK Cyber Essentials, HIPAA, • Familiarity with networking, storage, containerization (Kubernetes), and CI/CD pipelines What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration. California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job Description Field Technician – Drive Your Career Forward with Guardian Data! Location: Ashburn, VA Travel: 50–70% You don't need a deep IT background to succeed in this role. As an entry-level Field Technician, you are trained to safely collect old computers, hard drives, and electronics from offices, hospitals, schools, and data centers, then prepare them for secure destruction or recycling, all with hands-on training and clear instructions. You work with a team that has your back, learn on the job from experienced technicians, and spend your days out in the field instead of stuck behind a desk. The work is physical but manageable, the days move fast, and you see the results of your effort right away. A Class B license is required because some jobs involve driving larger trucks and mobile shredding vehicles, which allows you to take on higher skill work, earn more, and build a professional credential that increases your value over time. Guardian is growing, and we are seeking Field Technicians with CDLs to join our team. We’re always looking for talented technicians and drivers to fill current and future opportunities across our network. Guardian’s mission is to responsibly handle the world’s IT assets earning the trust of our partners, our people, and our planet. We partner with ITADs, MSPs, Resellers and Value Added Resellers (VARs) to deliver best-in-class onsite asset disposition services. Our NAID AAA certification, NIST-compliant equipment, expertise and trusted processes mean that no one has to worry about a data breach from end-of-life assets. Why You’ll Love Working Here • Competitive Pay - Base hourly rate plus overtime typically results in $28–$32 per hour in total earnings, • Health & Dental Benefits, • Company-Paid Life, Disability & AD&D Insurance, • PTO, • 401(k) with Company Match, • Company-Paid and provided Uniforms, Safety Footwear, Masks & Gloves, • Career Development & Training – we invest in your growth!, • Safely operate and maintain a company CDL vehicle (manual or automatic), • Transport materials from client locations and handle loading/unloading using wireless scanning technology, • Prepare paperwork and perform daily vehicle checks for efficiency, • Follow all safety protocols and company standards, • Interact with clients and co-workers professionally, • Minimum age 21 with valid Class B CDL and a clean driving record, • 1+ year of route transportation experience preferred, • Strong customer service and communication skills, • Ability to:, • Lift 70+ pounds and push/pull 25–350 pounds, • Carry recycling bins up/down stairs, inclines, and ladders, • Walk, stand, and sit for extended periods, • Positive, adaptable attitude and ownership of daily responsibilities, • Willingness to travel 50–70% of the time If you’re looking for more than just a job where your work matters and your career can grow—apply today and start driving your career forward!

Job Description Job Title: Senior Project Manager – Vulnerability Remediation (Healthcare Domain) Location: Onsite Experience: 10–15+ years Employment Type: Contract Rate: 60-65$/Hr. Role Summary The Senior Project Manager will lead and manage large-scale vulnerability remediation programs across healthcare application portfolios and infrastructure systems. This role will ensure timely identification, prioritization, and remediation of Critical and High vulnerabilities aligned to regulatory and compliance requirements (HIPAA, HITECH, CMS, HITRUST). The candidate must have hands-on experience driving remediation activities for both application development (code, libraries, APIs, and platform vulnerabilities) and infrastructure (patching, server configuration, network, and cloud security issues). Key Responsibilities • Lead end-to-end program execution for vulnerability remediation related to applications, databases, servers, cloud environments, and legacy healthcare platforms., • Prioritize and track remediation of CVITs, VITs, vulnerabilities in code, patch deployments, and configuration fixes across technical teams., • Work with security, DevOps, application development, enterprise architecture, and infrastructure teams to systematically remediate scan findings., • Conduct backlog grooming, sprint planning, release coordination, and delivery tracking for remediation activities., • Analyze vulnerability scan reports and dashboards from tools such as Qualys, Tenable, Rapid7, CrowdStrike, Microsoft Defender, etc., • Develop remediation plans aligned to exposure of PHI/PII, severity, exploitability, and system criticality., • Prepare and present weekly status decks, risk registers, and executive scorecards for senior leadership and audit teams., • Oversee SOW deliverables, team onboarding, cross-shore coordination, and stakeholder alignment., • Ensure remediation governance, compliance documentation, and closure of cyber audit findings., • 10+ years of IT project or program management experience, including 5+ years dedicated to security or vulnerability remediation., • Must have experience managing both application development and infrastructure-related vulnerabilities, including:, • Code vulnerabilities (OWASP, dependency issues, API weaknesses, encryption gaps), • Infrastructure vulnerabilities (OS patching, server hardening, cloud misconfigurations, IAM issues), • Deep understanding of healthcare systems and PHI security risks., • Strong knowledge of healthcare compliance frameworks such as HIPAA, HITECH, HITRUST, NIST CSF, CMS., • Experience working in distributed delivery models with offshore/onshore teams., • Proficient in Agile, Scrum, and hybrid methodologies., • Excellent communication, stakeholder influencing, and senior leadership reporting capabilities., • PMP, CSM, SAFe, • CompTIA Security+, CISSP, CISM, • Payer systems (Medicaid, Medicare, Marketplace, Commercial), • Claims processing, provider data, enrollment, pharmacy, member access systems, • Reduction in Critical/High vulnerability backlog, • SLA compliance for remediation (30/60/90-day closure), • Audit remediation closure rate, • Legacy backlog risk reduction, • Operational readiness and stability for healthcare systems

Job Description Who We Are: Click Therapeutics, Inc., develops, validates, and commercializes software as prescription medical treatments for people with unmet medical needs. As a leading innovator of Digital Therapeutics™, Click delivers accessible, clinically proven, FDA-regulated prescription treatments to the smartphone in your hand. Click's treatments are defined by a commitment to applying technical and scientific rigor and patient-centric design to the development process. This results in uniquely engaging experiences that achieve compelling clinical outcomes for patients seeking new treatment options. Click Therapeutics continuously expands and refines its platform with novel cognitive, behavioral and neuromodulatory mechanisms of action and advanced data-driven tools such as artificial intelligence and machine learning. The digital therapeutics under development on Click's platform address diverse areas of therapeutic need, including indications in psychiatry, neurology, oncology, immunology, and cardiometabolic diseases. Consistently named a best place to work, Click fosters an inclusive, diverse workforce of innovators, clinicians, scientists, researchers, designers, technologists, engineers and more, united in a common mission to provide patients everywhere access to safe and effective prescription digital therapeutics. For more information, visit and connect with us on LinkedIn. About the Role: As Information Security Lead, you'll be at the forefront of safeguarding our groundbreaking digital therapeutics. We're seeking an individual with deep technical expertise in information security in the healthcare sector, ready to tackle complex challenges and pioneer innovative solutions. This isn't just a role; it's an opportunity to build, mentor, and inspire a high-performing team, while strategically collaborating across diverse departments to embed security into the very fabric of our revolutionary products. Your ability to swiftly master new technologies and meticulously adhere to processes in a highly regulated environment will be crucial as you champion information security across every facet of our company and with all our valued partners. This position is based out of Click's headquarters located in Tribeca, NYC, at the center of one of the fastest-growing digital health communities. We have a hybrid working model that consists of at least 4 days in office each week. Responsibilities: • Maintain, and continually improve the Information Security Management System (ISMS) to maintain relevant certifications (e.g., ISO 27001, SOC 2, IEC 81001-5-1 and UK Cyber Essentials Plus)., • Lead the technical security aspects of data privacy to ensure compliance with GDPR, CCPA, and HIPAA., • Lead and mature the company's Security Operations Center (SOC) capabilities, including threat intelligence, monitoring, detection, and analysis., • Responsible for collecting, analyzing, escalating, and responding to cybersecurity vulnerabilities, threats, and attacks using SIEM and EDR technologies., • Collaborate with Engineering to ensure Secure Development Lifecycle (SDLC) practices are followed, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process., • Develop and maintain reporting of Key Performance Indicators (KPIs) of threats and incidents, including incident response timeliness and general observability metrics., • Oversee security testing activities, including penetration testing and vulnerability scanning., • Conduct security training and awareness programs for employees to promote a culture of security., • Oversee all third-party and vendor risk management activities, • Collaborate with Quality and Regulatory on cybersecurity processes, • Support regulatory submissions by generating Cybersecurity Quality Management System (QMS) documentation, ensuring compliance with FDA Cybersecurity Guidance (2025), EU MDR, NIST 800-53, IMDRF, and AAMI TIR57.Qualifications:, • Experience within a highly regulated industry such as medical devices, pharmaceuticals, biotechnology, or healthcare, • Understanding of common security frameworks and standards, including NIST Cybersecurity Framework (CSF), ISO 27001/27002, and SOC 2., • Knowledge of risk assessment methodologies, threat modeling, network security, cloud security (AWS), application security, and data protection technologies., • Experience leading or participating in formal security audits., • Experience in interfacing with engineering teams and running in tiger-teams or embedded SME Scrum teams. The base salary range for this position is between: $130,000 - $180,000. The final base salary will be dependent upon skills, experience and location. In addition to the base salary, Click Therapeutics offers an annual performance-based cash bonus and a generous equity package. Benefits: The role includes great benefits and is an excellent wealth-building opportunity at a fast-growing pre-IPO company in a nascent and extremely exciting space. Competitive Salary with Annual Review | Cash Bonus | Stock Options | 5% 401(k) matching | Medical | Dental | Vision | Life Insurance | Voluntary Benefits | Unlimited PTO | Uber One | Nectar Rewards | One Medical | Fertility Support | Fitness Reimbursement | Bike Membership | Professional Development Stipend | DoorDash and Catered Lunches | Parent Benefits | LinkedIn Learning | Gemini Enterprise Stack | Industrious Workspaces | Commuter Subsidies | Flexible Work Arrangement | Choice of Mac or Windows | Sponsored Company Events | Office Snacks and Beverages | Much More… Equal Employment Opportunity: Click Therapeutics is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. Click Therapeutics also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must have authorization to work for Click Therapeutics in the U.S. In certain circumstances it may be advantageous to Click Therapeutics to support the application(s) for temporary visa classification and/or sponsor applications for permanent residence so that a foreign national colleague can accept or remain in a work assignment in the U. S. For certain classes of temporary visas, the resulting work authorization may be specific to Click Therapeutics and the specific job and/or work site. Click Therapeutics may at its business discretion decide to or refrain from obtaining, maintaining and/or extending the temporary visa status and/or sponsoring a colleague for permanent residency and /or employment eligibility, considering factors such as availability of qualified U.S. workers and the colleague's long-term prospects for securing lawful permanent residence, among other reasons. Employment applicants requiring immigration sponsorship must disclose, when initial application for employment is made, whether or not they are legally authorized to work for Click Therapeutics in the U.S. and, if so, whether that authorization permits them to work in the job they seek. In no case should Click Therapeutics support of a colleague's temporary visa application or sponsorship of a colleague for permanent residence be construed to guarantee success of that application or amend or otherwise invalidate the "at-will" employment relationship between the colleague and Click Therapeutics. Recruitment Phishing Scams: Fake job advertisements and offers are increasingly appearing on the internet. If you have encountered a job posting or have been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond and report it to the Federal Trade Commission and the FBI at . Please be mindful of the following: • Click Therapeutics will conduct interviews face-to-face over Zoom., • All job postings will be listed on the Click Therapeutics official career page.

Job Description TITLE: QUALITY ADMINISTRATOR DEPARTMENT: COMPLIANCE REPORTS TO: QUALITY COMPLIANCE MANAGER FLSA STATUS: NON-EXEMPT JOB DESCRIPTION REVISION: 09/04/24 BASIC FUNCTIONS The Quality Administrator will provide support to the Quality Compliance team in maintaining a strong overall Quality Compliance Program including the Quality Management System and Supply Chain. This individual has the responsibility and authority to carry out all assigned tasks. SPECIFIC DUTIES GENERAL: • Produce detailed Excel, Word, and PowerPoint reports/presentations as needed by Department Leads., • Preparation of Quality Management Reviews, acquiring accurate data necessary to communicate the Quality Management System., • Evaluating QMR data and reporting back findings including but not limited to: trends, areas of concern, etc. to Department Leads., • Update management on open items related to projects., • Coordinate schedules, activities, meeting minutes and follow-up action items., • Provide support to External Provider Qualification program; identify risks and opportunities for improvement., • Provide support for updating all vendor files in EPDS as per approved Vendor Forms., • Assist Compliance team with functions related to document control., • Lead and/or conduct internal audits throughout the organization as directed by the Audit Program Manager in accordance with ISO19011, • Assist personnel with on-the-spot audits and process walk through as requested., • Member of the "Surveys Team", thus responsible for completion of Incoming Self-Assessments as directed by the Director of Contracts., • Training of personnel when requested by Management on any responsible processes., • Act as a backup administrator to the Compliance Regulatory Platform., • Ensure compliance with company code of conduct and all applicable laws, regulations, rules and policies., • Update maintain and grow tracker with any applicable incidents as directed, • May be assigned additional responsibilities as directed by the Quality Compliance Manager QMS TRAINING ADMINISTRATOR: • Input training requirements provided by the Management Representative for all QMS applicable job titles, • Ensure newly onboarded employees are meeting training requirements within the 90-day probationary period, • Ensure training of revised documents are completed within the two-week CTG requirement. Follow up with department heads as needed to ensure trainings are conducted, • Send Weekly Delinquent Training Report to department heads as applicable., • Follow up with department heads regularly to ensure trainings are conducted and training records are closed, • Upload and maintain employee certifications within the Compliance Regulatory Platform, • Monitor employee certification expiration dates and notify department heads accordingly, • Ensure operational employees’ vision exams are up-to-date and notify department heads accordingly STANDARD REQUIREMENTS Comply with all requirements of International Standard ISO9001, ISO17025 and ISO27001, NIST 800-171, CMMC – Cyber Security and Informational Data Security Requirements. Aerospace Management System Standards AS9100, AS9120, IDEA- QMS-9090, ASA-100 and supporting construct standards AS6081, AS6171, IDEA-STD-1010, AC7402-CAAP, CCAP-101, FAA AC00-56, ANSI/ESD S20.20. All employees shall commit and comply with the requirements of AS5553 for Counterfeit Electrical, Electronic and Electromechanical (EEE) Parts – Avoidance, Detection, Mitigation and Disposition practices. METRICS AND MEASURABLES • Weekly recertification rate to meet annual requirements for External Providers (as needed with Supply Chain designee), • Re-Certification rate average turn time., • Procurement (Sales) Weekly completion rates, • Sub-Tier assessments submitted for completion + return rates., • New Sub-Tiers added monthly., • Closures of all said projects within CTG’s Compliance Project Management tool, • Customer Surveys received and documented monthly EDUCATION / EXPERIENCE / COMPENTENCY • Bachelor’s degree, preferred., • 1-3 years of administrative experience., • Proficiency in MS Office with expertise in Microsoft Word, PowerPoint, Excel and Project Management Tools., • Detail oriented and comfortable working in a fast-paced office environment, • Exceptional communication skills. ALL TRAININGS OUTLINED FOR THIS JOB DESCRIPTION ARE IDENTIFIED WITHIN CRESTWOOD TECHNOLOGY GROUP’S TRAINING MATRIX, LOCATED WITHIN THE LEARNING MANAGEMENT TOOL WITHIN EACH INDIVIDUALS PRE-REQUISITES.