Penetration testing jobs in Los Angeles, CaliforniaCreate job alerts

Job Description Job Title: IT Security Specialist Location: Remote-USA Employment Type: Full-Time; On-call support as needed Why Join LaserAway? At LaserAway, we're not just shaping the future of aesthetics—we’re revolutionizing it! With 175 locations and growing, we are the nation's leader in aesthetic dermatology, providing top-tier laser, skin, and body treatments powered by cutting-edge technology. Our growth means more opportunities for talented professionals like you to make an impact in a dynamic, fast-paced environment. Job Summary: We are seeking a skilled and proactive IT Security Specialist to join our team. This role focuses on ensuring the security of our network, systems, and devices. The ideal candidate will have at least 8 years of hands-on experience with security tools, strong technical expertise, and the ability to work collaboratively with internal teams and external vendors. Compensation: LaserAway offers a generous pay structure with significant earning potential through performance-based bonuses. Your compensation will reflect your experience and value, with room for growth and rewards tied to success. The salary for this role is $95,000+ (flexible), varying based on skills, experience, and location. Key Responsibilities: • Network Security: Implement, monitor, and maintain robust security measures to protect the organization's network infrastructure., • Systems Security: Oversee the security of internal systems, ensuring they comply with industry standards and best practices., • Device Security: Establish and enforce policies to secure endpoint devices across the organization., • Google Workspace Security: Configure and manage security settings within Google Workspace to safeguard sensitive data and communications., • Endpoint Detection and Response (EDR): Deploy and manage CrowdStrike or equivalent EDR tools to detect, investigate, and respond to threats., • Penetration Testing: Conduct or coordinate penetration tests to identify vulnerabilities and recommend remediation measures., • Email Security: Implement and manage email security tools to protect against phishing, spam, and other email-based threats., • Vendor Liaison: Act as the primary point of contact for security vendors, managing relationships and ensuring timely delivery of services., • Incident Response: Participate in the investigation and resolution of security incidents., • Documentation: Maintain comprehensive security documentation, including policies, procedures, and incident reports., • At least 8 years of related experience in IT security, focusing on network, systems, and device security., • Proven experience in IT security, with a focus on network, systems, and device security., • Proficiency with Google Workspace security tools and configurations., • Hands-on experience with CrowdStrike or similar EDR solutions., • Strong understanding of email security protocols and tools., • Familiarity with penetration testing methodologies and tools., • Excellent problem-solving and analytical skills., • Effective communication skills, with the ability to explain technical concepts to non-technical stakeholders., • Experience in managing relationships with security vendors., • Knowledge of compliance standards such as GDPR, HIPAA, or ISO 27001., • Generous Compensation: Competitive base pay., • Healthcare Benefits: Comprehensive health, dental, and vision insurance., • 401(k) Plan: Robust retirement plan with company matching., • Paid Time Off: Generous PTO, including holidays and vacation days., • Employee Discounts: Substantial discounts on all LaserAway products and services., • Supportive Culture: Uplifting office environment focused on teamwork and collaboration., • Cutting-Edge Technology: Access to the latest in aesthetic dermatological treatments. LaserAway provides competitive compensation packages and a comprehensive range of benefits, including Medical, Dental, Vision, Disability and Life Insurance, a 401(k) plan with a company match, and additional ancillary benefits. We also offer Paid Time Off (PTO) in compliance with state and federal requirements, ensuring our employees are supported both professionally and personally. LaserAway also provides incentive compensation, including potential bonuses and commissions, depending on role and performance. Disclaimer: This job description is not exhaustive and may be updated at any time. LaserAway is an Equal Opportunity Employer and will provide reasonable accommodations for employees with disabilities to perform essential functions, barring undue hardship. Duties may be reassigned as needed.

Job DescriptionPosition Overview: We are seeking a skilled Fortinet Network Engineer to design, implement, and maintain secure and efficient network infrastructure utilizing Fortinet security solutions. The ideal candidate will have extensive experience with FortiGate firewalls, SD-WAN, VPNs, FortiAnalyzer, FortiManager, and other Fortinet security products. This role involves working closely with IT teams to optimize network security, ensure high availability, and troubleshoot issues. Key Responsibilities:Network Security & Firewall Management: • Configure, deploy, and maintain FortiGate firewalls (policies, NAT, VPNs, UTM features)., • Monitor and manage Fortinet SD-WAN for optimized traffic flow and redundancy., • Set up and maintain IPSec and SSL VPNs for secure remote access., • Perform firewall rule audits, tuning, and optimization to enhance security posture., • Implement Fortinet UTM (Unified Threat Management) features including web filtering, antivirus, and intrusion prevention.Network Design & Administration:, • Design and implement LAN/WAN architectures using Fortinet solutions., • Configure and maintain FortiSwitch and FortiAP for seamless networking., • Integrate Fortinet solutions with existing infrastructure to enhance security and performance., • Work with third-party vendors and ISPs to optimize network connectivity.Monitoring & Troubleshooting:, • Utilize FortiAnalyzer and FortiManager for logging, reporting, and centralized firewall management., • Proactively monitor network security events, troubleshoot issues, and implement solutions., • Conduct penetration testing and vulnerability assessments to identify risks., • Provide Level 2/3 support for network-related incidents and service requests.Compliance & Best Practices:, • Ensure Fortinet security solutions comply with industry standards and best practices., • Assist in disaster recovery and business continuity planning for network infrastructure., • Stay updated on Fortinet certifications, firmware updates, and emerging cybersecurity threats., • Maintain accurate documentation of configurations, policies, and network diagrams.Qualifications & Experience:, • 5+ years of hands-on experience with Fortinet networking solutions (FortiGate, FortiManager, FortiAnalyzer, etc.)., • Strong knowledge of firewall administration, security policies, and VPN technologies., • Experience with Fortinet SD-WAN, high availability (HA), and load balancing., • Solid understanding of network protocols (BGP, OSPF, VLANs, QoS, NAT, DHCP, DNS, etc.)., • Familiarity with security frameworks and compliance (NIST, PCI-DSS, ISO 27001, etc.)., • Fortinet NSE4 or higher certification preferred (NSE5, NSE6, NSE7 a plus)., • Knowledge of cloud networking (Azure, AWS, GCP) and integration with Fortinet security solutions is a plus. qbaNBFhpBQ

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Job DescriptionAbout Us At Vast.ai, we value creativity, energy, drive and teamwork. We are looking for talented people who share these values to join as we grow our team. Our vision is to widely distribute AI computing to reshape our future for the good of humanity. Come join us. If witnessing the birth of AGI excites you, we can't wait to hear from you! Vast.ai is a market based cloud computing platform focused on reducing the cost and friction of compute-intensive workloads, enabling anyone to easily leverage large-scale GPU liquidity. Vast.ai is the market leader for low cost GPU rentals. Our GPU marketplace powers AI projects and businesses all over the world. NOTE: Currently hiring for onsite work at the Vast.ai HQ in Westwood, Los Angeles. About the Role We are seeking a skilled Security Engineer to join our dynamic team. We hire people with broad skill sets who also exhibit deep expertise. The ideal candidate will have experience in both offensive and defensive security, strong software development skills, and deep knowledge of Linux systems and containerization. This role provides the opportunity to work on cutting-edge GPU cloud technologies, tackle complex security challenges at scale, and directly enhance the resilience and trustworthiness of our infrastructure and services. You Are • A problem-solver who thrives in a fast-paced environment, • Committed to continuous improvement and staying updated with the latest security practices and cloud technologies, • A team player with strong communication skills, able to bridge the gap between development and securityResponsibilities, • Collaborate with Operations Team: Partner with our operations team to ensure compliance with relevant standards such as SOC 2, ISO 27001, and GDPR, • Secure Architecture Design: Develop and implement secure architectures for our GPU cloud platform, • Security Assessments: Conduct security assessments, threat modeling, code reviews, and penetration testing, • Security Improvements: Develop and implement security fixes and improvements in collaboration with engineering teams, • Security Tools Management: Implement and manage security tools and systems, including SIEM, WAF, and EDR, • Documentation: Create and maintain security documentation, including policies, procedures, and technical guidelines, • Security Training: Provide security guidance and training to engineering teams to foster a security-first culture, • Incident Response: Participate in incident response activities and contribute to post-incident analysis and improvementsRequired Qualifications, • Educational: Bachelor's degree in Computer Science, Cybersecurity, or a related field., • Programming: Strong programming skills in at least one language, ideally Python or C., • Linux and Virtualization: Extensive knowledge of Linux kernel internals, containerization technologies, and virtualization, • Isolation Techniques: Deep understanding of workload and network isolation techniques in multi-tenant environments, • Cloud Security: Experience in securing and hardening cloud infrastructure, particularly in environments with untrusted workloads, • Network and Application Security: Strong background in network security, application security, and cloud-native security practices, • Security Testing Tools: Experience with security testing tools and methodologies, such as OWASP, Burp Suite, and static/dynamic analysis tools, • Cybersecurity Frameworks: Familiarity with common cybersecurity frameworks, including SOC 2, NIST, and CIS ControlsPreferred Qualifications, • Security Certifications: Relevant security certifications such as CISSP, CCSP, or OSCP., • DevSecOps Experience: Experience with DevSecOps practices and tools in cloud environments., • Regulatory Compliance: Familiarity with regulatory compliance requirements for operating cloud services. The following table will give you an idea of an expected annual total compensation based on experience: 5 years: $145,000 10 years: $185,000 Benefits • Comprehensive health, dental, vision, and life insurance, • 401(k) with company match, • Meaningful early-stage equity, • Onsite meals, snacks, and close collaboration with founders/tech leaders, • Ambitious, fast-paced startup culture where initiative is rewarded

Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes covering multiple technical disciplines, such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware or products that contain code. This includes implementing a product security program designed to address cybersecurity across all stages of the product life cycle. This role identifies and oversees the mitigation of technical and operational threats; analyzes the security, supportability, and feasibility of new technology; and ensures conformance with regulatory guidelines and industry best practices. This position requires an extremely high level of analytical problem-solving skills to diagnose and resolve complex technical issues in addition to superlative process management and communication skills. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role • Develop an architectural vision to support the continued growth of the product suite, • Working knowledge of Data Security Best Practices: At Rest, In Flight, In Use, • Experience with privacy-enhancing technologies and encryption techniques., • Working knowledge of cloud security architecture strategies, frameworks, and reference models, • Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives, • Ability to build Risk Models and analyze security weaknesses in complex technology deployments., • Provide security expertise and direction on projects related to cloud architecture and design, implementation, maintenance, governance, and risk management, • Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, identity federation, etc., • Conduct automated (preferred) or manual security validation of cloud templates and/or cloud infrastructure, • Collaborate with business units and corporate partners to ensure they build solutions consistent with the organization's policies, programs, architectural recommendations, and information security standards, • Develop, establish, enforce, and sustain the Information Security Architecture, including standards and guidelines for infrastructure solutions and technologies, integration methodologies and practices, development processes, hardware platforms, and enterprise data design., • Partner with stakeholders in building and implementing a robust, scalable, and agile information security architecture, • Partner with stakeholders in assessing the IT application & infrastructure portfolios today and design and execute the future state strategy to meet business objectives going forward., • Make recommendations on the strategic use of technology for leveraging business results and work with stakeholders to incorporate these recommendations into appropriate roadmaps and life cycle plans., • Anticipate and ensure alignment with long-term business requirements, ensuring identified change is reflected in the appropriate roadmaps, providing thought leadership both internally and externally, • Minimize the number of architectural components and total cost of ownership while maintaining maximum of functional flexibility, reliability, and security., • Must be able to balance the role of strategist with urgency while simultaneously managing and delivering results in a growing and fast-paced environment., • Must demonstrate the ability to manage via influence and have the credibility and interpersonal skills to become respected as a thought leader. Must be capable of articulating pragmatic, sensible, and simple solutions while executing across multiple business and technical perspectives., • Act as a role model for service mentality, building long-term relationships with key internal customers and stakeholders, while remaining receptive to the customer's needs, • Facilitate and steward the documenting of the architecture design and analysis work, including the capture and mapping of the relationships between architecture components. You Will Have • 8+ years’ experience dedicated to information security architecture required with expert knowledge in building defense in-depth reference architecture, • Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.), • Familiarity with information management practices, system development life cycle management, IT services management, agile and lean methodologies, infrastructure, and operations., • Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT and predictive analytics., • Hands-on experience with Cloud Technologies AWS, Azure & GCP, • Good understanding of security management solutions, including IDS, IPS, SIEM, Vulnerability Scanning, Denial of Service, and Continued Compliance, • Experience with attacks and mitigation methods, with experience working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks, • Experience in managing and contributing to incident response, • Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation., • Excellent analytical skills, organizational, time management, and problem-solving skills are essential.is work, including the capture and mapping of the relationships between architecture components.

Job Description Why We Exist and What We Do: At Dr. Squatch (), we're raising the bar on men's personal care with our line of natural, high-performance products. We're on a high-growth, fast-moving ride, continually introducing new product categories, launching into retailers nationwide, and growing internationally. We have been recognized and certified by Great Place to Work® multiple times, and we achieved status as a certified B Corp in 2023. We are looking for passionate, talented people who want to join us in our mission to inspire and educate men to be happier and healthier! About the Role: Dr. Squatch Bricc City is looking for a Deodorant Quality Assurance Technician to join the team on the second shift. The QA Technician is responsible for performing inspections on incoming materials, in-progress processes, and finished goods per approved methods, procedures, and specifications. Inspectors interact with all levels of production management to ensure that finished goods meet required quality standards. • This role will report to the Quality Manager., • This is a full-time, on-site role with company benefits based out of Brea, CA., • Actively work with the production team leads to resolve identified nonconformities., • Issue NCMR's (Non-Conforming Materials Report) as required, • Sample incoming materials for retention and any testing deemed necessary., • Inspect and ensure line readiness for setup., • Follow through on start-up and approvals., • Document line inspections; provide dispositions on results of inspections., • Accurately complete all Quality Assurance forms., • Inspect packaging and/or finished product quality to meet specifications., • Visually inspect components to meet work order specifications., • Check weights to meet range specifications., • Submit samples from packaging inspections as required for development of masters, resolution of quality holds (incoming packaging inspectors only), • Ensure all employees adhere to GMP guidelines., • Test Finish Goods and create COAs, • Lab test bulk oil incoming materials, • Assist Supervisor with department monthly outputs and PowerPoint presentations, • High School Diploma or GED and 3 years of QA experience are highly preferred., • Ability to communicate, write, and read in English., • Excellent communication skills, • Experienced with measuring instruments (scales, calipers, calibrating thermometers), • Some lab experience with (force gauge, penetration equipment, FTRI), • Create COAs, • Computer literacy skills in Office: Microsoft Word, Excel, and Google Office Suite, • Experience working in the consumer products industry is highly preferred., • Problem solver with a sense of urgency, • Entrepreneurial mindset and ability to take ownership., • Must be open to work any shift. #LI-BD1 #LI-ONSITE #LI-FULLTIME Who We Are: Our core values come naturally and make us a better, more whole, and unique team. We are Bold & Innovative - we are creative, rethink how things are done, and find a way. We Play to Win - we have high standards, we encourage ownership of work, we are scrappy, we act with urgency, and we invest in the outcome of our work. We are Team Squatch - we are humble, help others outside our own wheelhouse, stay positive, have fun, and have approachable and transparent leadership. We offer a competitive salary in a growth-focused & collaborative team environment. Benefits include medical, dental, vision, 401k with Squatch match, and PTO. We also have great perks like healthy snacks, frequent company events, and of course, free products! For Applicants with Disabilities. Reasonable accommodation will be made so that qualified applicants with disabilities may participate in the application process. If you need any accommodations during the hiring process, please let us know when you submit your application and we'll do our very best to adjust as needed. For Information regarding Data Privacy, please review . Unsolicited Resume Policy. Dr. Squatch ("DRSQ") employs an internal Talent Acquisition department. Exceptionally, DRSQ may choose to supplement that internal team with support from temporary staffing agencies, placement services, and/or recruiting agencies ("Agency"). Agencies are hereby specifically directed NOT to contact DRSQ employees directly in an attempt to present candidates. DRSQ's Talent Acquisition team is responsible for all candidate presentations to our hiring managers. To protect the interests of all parties, Dr. Squatch will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to DRSQ, including unsolicited resumes sent to a DRSQ email address or mailing address, directly to DRSQ employees, or to DRSQ's resume database will be considered property of Dr. Squatch. DRSQ will not pay a placement, service or other fee for any placement resulting from the receipt of an unsolicited resume. This also includes partial resumes, LinkedIn profiles, general candidate profiles, and/or candidate details or information. DRSQ will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. DRSQ's Talent Acquisition team must provide advance written approval to an Agency to submit resumes and/or profiles for a specific job-opening, and the approval must be in conjunction with a valid fully executed staffing, placement or other service agreement. DRSQ will not pay a fee to any Agency that does not have a fully executed agreement in place prior to submission, receipt and placement of candidates.

Job Description Responsibilities As a Cyber Security Engineer, you will have the opportunity to jump-start and lead the application security team as part of our engineering group. We are looking for highly skilled security experts who can handle the end to end ownership of our application security, which will include: • Researching vulnerabilities in our software, network topology, production servers and resources, • Planning, implementing and monitoring our security measure to protect our data, systems, and networks, • Engineering solutions that address those weaknesses and educating our teams for security awareness, • Hardening our overall network and responding to all system and/or network breaches, • You have at least 3 years of Security experience., • You have the ability to handle complex software system infrastructure tasks from requirements to production., • You have experience leading or building a team, • End-to-end task ownership: This is a position that requires a leader someone who can confidently see a project through from beginning to end., • Independently tackling challenges: You don't need anyone to keep you on track., • Experience in cloud environments, and advanced technologies. AWS, puppet/ansible, containers, SQL and NoSQL DBs, Java, Python, • Experience in Manual Penetration Testing (SQL Injection, XSS, exploit creation), • Automated penetration testing tools (e.g. Nessus, Kali Linux, Burp Suite, OWASP ZAP, Metasploit) Experience, • Web Services Security Penetration Testing Experience, • A great recommendation from your previous employer Job Posted by ApplicantPro

Job DescriptionBenefits: • 401(k), • 401(k) matching, • Competitive salary, • Dental insurance, • Flexible schedule, • Health insurance, • Paid time off, • Profit sharing Job Responsibilities: • Assist with security strategy updates addressing the evolving risk landscape., • Assist with security governance, aligned to NIST CSF, as required to sustain an effective cybersecurity program., • Assist with 3rd parties/projects/initiatives security risk assessments and provide solutions recommendations as needed., • Assist with security operations management update/improvement as required., • Manage information security-related activities of the agency including the analysis, identification, estimation of InfoSec efforts and the development, planning, testing, and documenting of remediation measures., • Develops, conducts, and documents executive-level reporting and strategy formulation., • Creates and maintains a centralized information security register to manage all InfoSec information and document changes relevant requirements., • Collaborates with internal and external stakeholders to maintain an understanding of current risks, new systems, and changes to the environment., • Supports development, implementation, and maintenance of strong security risk & compliance processes for new and existing deployments., • Participates in vendor due-diligence processes and third-party security risk management efforts; in addition to performing contract reviews as it relates to Information Security., • Supports internal and external audit and assessment processes for relevant compliance (PCI DSS, Privacy, etc.)., • Creates security guidelines, checklists, and other documentation to support projects and initiatives., • Develops and presents metrics, reports, and dashboards., • Develops documentation for information security controls, acquisitions, and process or system changes., • Stays up to date on developing regulatory concerns, evolving IT, and information security trends., • Contributes to ensuring that the Equal Employment Opportunity (EEO) policies and programs are carried out., • May be required to perform other related job duties.Knowledge & Experience Requirements, • Experience working with a transit Universal Fare System (UFS) and the Cubic Payment Application (CPA) as it relates to transportation agency data compliance., • Knowledge of cybersecurity technology and compliance in transit systems., • Demonstratable strong background in the processes, policies, procedures, systems, practices, and professional standards of cybersecurity., • Demonstratable knowledge of industry best practices and relevant legal requirements as they pertain to cybersecurity, compliance, and privacy laws and regulations including TSA/DHS transport directives, DMV rules and regulation and other transportation agency cyber security rules and regulations., • Consultant must have delivered similar services (as stated above) during the past 10 years., • Experience with modern Security Operations Center (SOC) monitoring, detecting, analyzing, and responding to cyber threats., • Experience with conducting Cyber forensics., • Experience with major Cyber Incident handling., • Experience with preparing and guiding organizations to achieve and sustain compliance with Payment Card Industry Data Security Standard (PCI DSS)., • Experience with vulnerability scanning, penetration testing, etc. using commercial products., • Experience with risk-based prioritization of security vulnerabilities and providing actionable remediation guidance., • Experience with cloud based and on-premise Security Information and Event Management (SIEM) tools including administering the tools, reviewing alerts, and providing actionable steps., • Experience with Security Orchestration, Automation, and Response (SOAR) platform.Minimum Requirements:, • 15+ years experience supporting very large companies with skills performing above listed technical security activities., • Two of the certifications below:, • Certified Information Systems Security Professional (CISSP), • Certified Information Systems Auditor (CISA), • Certified Information Security Manager (CISM), • GIAC Security Professional (GSEC), • Certified Data Privacy Solutions Engineer (CDPSE), • Cyber Security Nexus (CSX)

Job Description Dermalogica continues to lead the professional skin care industry with distribution in over 90 countries. Our entrepreneurial spirit, hands-on environment and fast-paced culture encourages employees to be their best, bringing innovative solutions to reach the skin care professional and consumer. We are highly energetic, passionate, and results oriented. You will find that Dermalogica is a very special place, with tremendous opportunities ahead for us, all building upon a record of achievement. In 2015 Dermalogica was acquired by Unilever, one of the world’s largest and most successful consumer goods companies. While Dermalogica continues to operate as a stand-alone entrepreneurial business, we now have enviable access to cutting edge capabilities and resources to help us win in our markets. The challenge is to build on the legacy of our brand, our experienced team and our industry leading education to deliver profitable growth. One of the key elements for our success, and critical for our growth, is bringing in the right people to join our team. We invite you to come and make a difference and grow your career with the global leader in skin care. Senior Sales Data Analyst General Description: Success is generating performance enhancing insights through the combination of disseminating quality analytics across the business and from diving deeply into key topics. We need to empower people across the business with information as well as supporting our entrepreneurial culture through building, testing and iterating hypotheses. To do that we need people with analytical expertise and the motivation to apply it to prestige skin care. Our analytics agenda is moving at pace and this role is key to continuing to move us towards our goal to be industry leading. We have work to do to; establish a standard data model within a future proofed environment, continue to develop analytic tools across chosen software (Tableau/Power BI) and to build analytical skills across the business. We are trying to enhance our analytics in our sales channels as they are expanding during this exciting time. The right person for this role demonstrates a passion and curiosity in identifying and interpreting trends within complex data sets to deliver actionable insights. This role reports through the finance function to the US Finance Senior Director but is broader in scope than simply financial/sales analytics. Key Job Responsibilities: • Sales Analytics/Performance Management, • Business partnering with different audiences will be a key function of this role. Analyst will be expected to support sales and management team with tracking new accounts, providing weekly/monthly sales summaries, • Demonstrate ability to synthesize data and focus on key, relevant business insights. Ability to effectively communicate insights and recommendations that contribute to the development of business driving strategies., • Create models to understand how new business impacts existing channels and highlight the potential risk factors. Identify opportunities based on performance from sister brands., • Lead weekly calls with key members of the sales team to review their territories to ensure that key drivers and emerging trends are understood, and there is full transparency of gaps to target (sales performance, innovation penetration, inventory levels, promotional impacts, etc.), • Understand market drivers based on geographic locations, store type, education impact, product range changes, etc., • Developing reports & dashboards across Tableau/Power BI, • Ensure the different corporate functions have the standard analytical tools to be self-sufficient in performance management., • Embed user-friendly analytical tools for the team, which includes monitoring usage, shutting off what is not used, and having all workbooks accessible to the users in the proper formats., • Bachelor’s degree in Business, Data Science, Data Analytics, or other related field., • 3-5 years of previous analytical experience, • Proficient knowledge of SQL, Tableau or Power BI, and Excel required. Any additional business intelligence/ETL tools or programming knowledge is a plus, • Tech savvy with an open mindset about learning new technologies, systems, and tools, • Strong leadership and communication skills (planning, relationship building, influencing), storytelling with data, influencing without authority, and commercial acumen, • Excellent initiative and follow-up skills, and ability to carry out a variety of responsibilities in a fast-paced work environment, • Demonstrate an analytical mindset, enjoy problem solving and understand how to ask the right questions to deliver solution focused outcomes, • Courage to challenge established norms in a constructive way and drive change The position is based at the corporate headquarters in Carson, CA, with hybrid on site work guidelines. The expected annual base salary range for this position is $100,000 to $110,000. If you are ready to contribute to Dermalogica's mission, we would love to hear from you! To be considered for this role, please complete your online application. A member of the Human Resources team will contact you if your experience and skills are a match for the position. Dermalogica is an equal opportunity employer committed to fostering an inclusive culture where all employees are valued, supported, and empowered to succeed.

Job DescriptionDescription: Title: IT Infrastructure Engineer II Base Salary Range: $120,000 - $130,000 plus benefits FTE: Full-time, Exempt We seek a dynamic and experienced IT Infrastructure Engineer II who wants to make a difference in our community here in Los Angeles, California. We want to hear from you if you thrive in a fast-paced, caring, and compassionate environment! Our Mission: The Mission of South-Central Family Health Center is to improve the quality of life for the diverse community of inner-city Los Angeles by providing affordable and comprehensive health care and education in a welcoming and multicultural environment. To lead the way in health care in South Los Angeles, as the premier provider and employer of choice offering comprehensive, high quality, affordable, efficient, and culturally responsive services. General Summary: This position is an in-person job in Los Angeles, California. The IT Infrastructure Engineer II is a key member of SFCHC’s IT team, responsible for supporting, implementing, and managing the infrastructure that underpins our IT platforms. This role is especially focused on the administration, optimization, and expansion of our Microsoft and VMware virtualization environments, while also supporting a broad range of on-premises, cloud, and hybrid systems. The IT Infrastructure Engineer II will work closely with infrastructure vendors and partners, as well as internal teams. SCFHC platforms include VMware virtualization, Fortinet switching/routing/firewalls, Microsoft 365, Azure, Hybrid Active Directory, VEEAM backup and recovery systems, and Fortinet SDWAN. The ideal candidate will have to perform some of the following essential duties. • Collaborate with IT staff and technology service providers for both on-premises and cloud services., • Install, configure, and manage IT infrastructure, including:, • Networks (Fortinet SDWAN, switching, routing, and firewalls), • VMware virtual servers and environments, • VEEAM backup and recovery systems, • Cloud platforms (Microsoft 365, Azure), • Hybrid Active Directory environments, • Administer and optimize SCFHC’s Microsoft 365 tenant, including user management, security, and integration with on-premises Active Directory., • Manage and maintain Hybrid Active Directory, ensuring seamless synchronization between on-premises and cloud directories., • Configure, monitor, and maintain Fortinet SDWAN solutions for secure, reliable connectivity across multiple sites., • Implement and manage VEEAM backup and recovery systems, ensuring data integrity and disaster recovery readiness., • Collaborate with IT management to remediate audit and penetration test findings, coordinate responses to security incidents, and support customer due diligence inquiries., • Implement security measures and policies to protect data, software, and hardware across all platforms., • Document operational processes, system configurations, network topology, and architecture diagrams to ensure reliability and compliance., • Develop and maintain disaster recovery test plan procedures, security response procedures, and incident documentation., • Assist in the preparation of the annual audit and other miscellaneous projects, • Bachelor’s Degree in Computer Science, Management Information Systems., • Knowledge of computers, including Windows Software., • Extensive hands-on experience administering and supporting VMware virtualization environments in production settings., • Previous experience as an IT infrastructure engineer, system administrator, support technician analyst, or similar role., • Advanced expertise in VMware administration, including vSphere, vCenter, ESXi, and related technologies., • Experience with VMware features such as VMotion, DRS, HA, snapshots, and storage management., • Strong knowledge of Microsoft 365 administration and integration with on-premises systems., • Experience deploying and managing Hybrid Active Directory environments., • Expertise in configuring and managing Fortinet SDWAN, switching, routing, and firewall solutions., • Benefits: Health care, dental, life insurance, • 403 (b) Retirement plan, • Education Reimbursement Requirements:

Job DescriptionAbout WhoisXML API For over a decade, WhoisXML API has been the leader in Domain, IP, DNS, and Cyber Threat Intelligence. We have collected exhaustive information on billions of historic Whois records, DNS records, and hundreds of millions of active websites, covering 99.6% of all IP addresses in use. Our data is parsed into unified formats and provided as domain/IP intelligence for the world’s most advanced threat intelligence and market researchers, enabling them to monitor activity across the entire international internet. Our customer base includes Fortune 500 companies, threat intelligence/infosec companies, anti-malware/security vendors, cybercrime units, government agencies, brand protection agencies, domain registries/registrars, domain investors/brokers, banks, payment processors, telecom companies, marketing researchers, big data warehouses, web analytics firms, investment funds, web developers, and many more. Description WhoisXML API is hiring a Technical Account Executive (TAE) to join our remote team. TAEs are responsible for creating and capturing new business opportunities within new logo accounts from both inbound and outbound lead sources. What’s In It for Me?We’ll teach you absolutely everything we can to help you learn about the specific verticals you’re working into, how our data ties into their specific (often niche) environment and how we can solve problems in a manner which others cannot. You’ll teach us about intricate details and movements in the market and specific accounts to serve as a pioneer navigating many uncharted waters. This is a mission-critical seat with high visibility in a rapidly growing (Inc#4043 Fastest Growing Companies of 2023) private intelligence firm which reports directly to the Vice President of Sales. Job Responsibilities • Build a healthy and reliable pipeline of revenue in New Business by qualifying inbound leads from new logo customers., • Utilize outbound sales channels such as phone calls, emails, and LinkedIn to proactively engage new prospective sales opportunities in new logo accounts., • Articulate and evangelize the vision and positioning of both WhoisXML API and its solutions to illustrate differentiation from competitors., • Develop a deep understanding of ideal customer profiles and the competitive landscape to enable a business dialogue with C-level contacts and their teams., • Have a strong understanding of WhoisXML API solutions and know when and how to engage internal resources for subject matter expertise., • Drive creative business development activities to capture opportunities in emerging markets., • Manage and report monthly/quarterly forecasts directly to the Vice President of Sales., • Direct and prioritize own work, providing accurate and timely reports., • Build and maintain a network of colleagues and customers to deepen relationships.Basic Qualifications, • Experience with CRM software such as HubSpot or Salesforce., • Strong command of Microsoft Office and Google Suite products., • Drive to quickly understand technical concepts, with enthusiasm for technology, and articulate clearly to all levels of technical aptitude without compromising business ethics., • Strong sense of urgency in completing tasks, with the ability to set priorities, manage time effectively, and meet deadlines., • Takes initiative to do online research on clients, industries, and competitors., • Disciplined in qualifying and developing opportunities for sales while minding time, resources, and customer needs., • Willingness to travel as necessary for meetings, events, etc. (~10%)., • Genuine desire to hone sales skills as a craft by learning from internal mentors/trainers, as well as external advisors/consultants provided., • Effective written and verbal communication skills and professional etiquette over email.Ideal Applicant Profile, • Accomplished salesperson with the ability to work from a home office 90% of the time and travel to trade shows, customer sites, and company meetings., • Track record of consistently achieving monthly, quarterly, and annual sales revenue targets by planning, executing, measuring, and recording behaviors into a CRM., • Experience executing corporate sales strategies and generating positive business outcomes for clients, often in complex environments; comfortable negotiating contract prices exceeding five and six figures., • View assigned territory/account base as personal business; colleagues see you as a leader., • Open to ongoing sales training and development as a source for constant growth.Preferred Experiences, • 2+ years of experience selling enterprise security solutions (Security Threat Intelligence, DFIR, SOC-As-a-Service, MDR, Firewalls, Endpoint Protection, Cloud Security, DDoS Mitigation, Penetration Testing, etc)., • Proven track record of success in managing key/named accounts and executing full sales cycles from annual recurring revenue (ARR) and monthly recurring revenue (MRR) models., • Experience in negotiating annual agreements of significant investment value involving multiple stakeholders, including end-users, technical integration teams, and C-Suite executives., • Applicants with CompTIA / CEH / Security certifications and/or deep knowledge of network security processes are preferred.We Value Our Team Members, • Competitive salary, • PTO, • Sick days, • 401k, • Health benefits, • Company retreate, • Career growth with a rapidly growing industry innovatorEqual Opportunity Statement "Whois API, INC is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind. We are committed to the principle of equal employment opportunity for all employees and to providing a work environment free of discrimination and harassment. All employment decisions are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Whois API, INC will not tolerate discrimination or harassment based on any of these characteristics."

Job Description Hadrian — Manufacturing the Future Hadrian is building autonomous factories that help aerospace and defense companies manufacture rockets, satellites, jets, and ships up to 10x faster and up to 2x cheaper. By combining advanced software, robotics, and full-stack manufacturing, we are reinventing how America produces its most critical parts. We recently raised $260 million dollar Series C to accelerate this mission. We are excited to be launching a new Factory in Mesa, Arizona, a 270,000 square foot facility that will create 350 new jobs immediately. We are opening a new headquarters to support thousands of future hires, launching Hadrian Maritime to serve naval production, and introducing a Factory-as-a-Service model that delivers complete systems instead of individual parts. Hadrian works with startups, Tier 1 and Tier 2 suppliers, and major defense contractors across space, shipbuilding, and aviation to scale production, reduce costs, and accelerate delivery on mission-critical programs. We are backed by leading investors including Lux Capital, Founders Fund, and Andreessen Horowitz. Our fast-growing team is united by a shared mission to reindustrialize American manufacturing for the 21st century and beyond! The Role Every part of our company relies on robust security and effective systems – from day-to-day factory operations to supply chain integrations, resource scheduling, hardware data security, and compliance with industry standards. In this role, you will be a critical member of our security organization, responsible for designing, deploying, and maintaining secure systems, networks, and platforms to protect critical infrastructure and ensure compliance. You will be challenged to think strategically and solve complex security and compliance challenges. You will work cross-functionally with IT specialists, software engineers, and production teams to develop innovative solutions that safeguard our operations and drive toward secure, fully automated factories. What You'll Do * Configure, monitor, and manage Security Logging Infrastructure. * Administer and manage IAM systems, including Active Directory, Azure AD, and Okta, ensuring proper implementation of SSO, MFA, and RBAC. * Deploy and manage endpoint protection systems (e.g., EDR/XDR), ensuring secure configuration across factory endpoints, remote devices, and cloud environments. * Conduct vulnerability assessments, implement patch management processes, and monitor for threats using SIEM and vulnerability management tools (e.g., Splunk, Nessus). * Configure, monitor, and maintain PKI infrastructure and certificate management systems (e.g., NDES/SCEP). * Lead security analysis, identifying and mitigating risks in network, software, and SaaS configurations. * Maintain and enforce compliance requirements for NIST 800-171, CMMC, and ITAR, including completing SSPs and POAMs. * Collaborate with IT and DevOps teams to integrate security controls into CI/CD pipelines and Kubernetes environments. * Document security processes, configurations, and incident response procedures, maintaining an up-to-date inventory of security systems. * Provide Tier 3 support for security-related issues, working with vendors to resolve complex security incidents. * Analyze system performance, identify vulnerabilities, and develop solutions to improve resilience and mitigate threats. * Deploy and maintain secure SaaS configurations, ensuring adherence to security best practices and compliance standards. * Educate and train employees on secure practices, policies, and advanced security tools. * Design, deploy, and maintain network security policies across on-premises and cloud environments (e.g., firewalls, VPCs, NAC, and VPN configurations). What We’re Looking For * Expertise in Zero Trust Architecture design and implementation. * Advanced knowledge of container security for Kubernetes (e.g., Kyverno, OPA, Sysdig Secure). * Experience building automated threat detection and response workflows with SOAR tools. * Strong understanding of cloud-native security principles in AWS and Kubernetes. * Proficiency with advanced forensics tools (e.g., Velociraptor, Autopsy, Volatility). * Deep familiarity with hardware security for embedded systems and IoT devices. * Experience conducting penetration testing and red team exercises. * Strong grasp of secure coding practices and application security fundamentals. * Proven ability to architect scalable, automated compliance monitoring systems. * Strong mentorship capabilities to train and develop security skills across teams. What Will Set You Apart * Experience managing logging infrastructure. * Proficient in Detection Engineering. * Proficient in managing IAM systems such as Active Directory, Azure AD, and Okta, including SSO, MFA, and RBAC. * Experienced with endpoint protection tools like CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint. * Familiarity with SIEM platforms (e.g., Splunk, Datadog, Microsoft Sentinel) and vulnerability management tools (e.g., Nessus, Qualys). * Have knowledge of network security technologies: IDS/IPS, NAC, and secure network segmentation. * Experienced with compliance frameworks such as NIST 800-171, CMMC, and ITAR, including SSP and POAM development. * Proficient in secrets management and certificate infrastructure (e.g., HashiCorp Vault, NDES, PKI). * Familiar with DevSecOps practices, including integrating security controls into CI/CD pipelines and Kubernetes environments. * Experienced with infrastructure automation using tools like Terraform, Ansible, and GitOps workflows. * Familiar with SaaS security best practices and tools, ensuring proper hardening and secure integration. * Capable of documenting security architectures, incident response plans, and system configurations for team knowledge sharing. * Effective at analyzing complex security issues and proposing scalable, resilient solutions. * Passionate about securing systems that drive real-world outcomes in fast-paced, high-stakes environments. * A highly effective communicator who can convey technical security information to both technical and non-technical stakeholders. * Experienced with firewall administration (PANOS, JUNOS) and VPN configuration in cloud and on-prem environments. * Able to work from our Los Angeles Factory (Torrance). Compensation For this role, the target salary range is $120,000 - $200,000 (actual range may vary based on experience). This is the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee's pay position within the salary range will be based on several factors, including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs. Benefits * 100% coverage of medical, dental, vision, and life insurance plans for employees * 401k * Relocation stipend if you’re moving from outside of LA * Flexible vacation policy ITAR Requirements To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. Hadrian Is An Equal Opportunity Employer It is the Company’s policy to provide equal employment opportunity for all applicants and employees. The Company does not unlawfully discriminate on the basis of race inclusive of traits historically associated with race (including, but not limited to, hair texture and protective hairstyles, such as braids, locks and twists), color, religion, sex (including pregnancy, childbirth, or related medical conditions), gender identity, gender expression, transgender status, national origin (including, in California, possession of a drivers license), ancestry, citizenship, age, physical or mental disability, height or weight, medical condition, family care status, military or veteran status, marital status, domestic partner status, sexual orientation, genetic information, exercise of reproductive rights, any other basis protected by local, state, or federal laws, or any combination of the above characteristics. When necessary, the Company also makes reasonable accommodations for disabled candidates and employees, including for candidates or employees who are disabled by pregnancy, childbirth, or related medical conditions.

Job Description Robert Half Technology is partnering with a leading organization seeking a Cybersecurity Administrator to take ownership of securing enterprise systems and protecting critical infrastructure. This is a hands-on opportunity to design, implement, and manage security programs that safeguard digital and operational technology assets. The ideal candidate is both technically skilled and strategic, able to build security maturity while educating others on best practices. Responsibilities • Administer and manage security tools and technologies, including firewalls, VPNs, IDS/IPS, and endpoint protection., • Monitor and analyze security logs and alerts to detect and respond to incidents., • Implement and manage identity and access management (IAM) for Office 365 and Azure environments., • Configure and enforce conditional access policies and multi-factor authentication (MFA)., • Conduct vulnerability scans and penetration testing to identify and mitigate security weaknesses., • Collaborate with IT and business stakeholders to improve the organization’s security posture., • Lead incident response activities and coordinate remediation efforts., • Develop and maintain cybersecurity documentation, including policies, incident reports, and compliance materials., • Provide ongoing security awareness training to staff across departments., • Recommend and assist in implementing SIEM and EDR solutions to strengthen detection and response capabilities. Qualifications • Bachelor’s degree in Cybersecurity, Information Technology, or related field., • 4–6 years of experience in cybersecurity or IT systems administration., • Strong understanding of firewalls (Meraki or equivalent), VPNs, and O365 security configurations., • Experience with Azure security, MFA, and conditional access policies., • Hands-on vulnerability assessment and penetration testing experience., • Familiarity with SCADA or Operational Technology (OT) environments preferred., • Certifications such as Security+, CISSP, or CEH are highly desirable., • Location: Onsite in El Monte, CA with occasional travel to Fontana., • Schedule: 9/80 (every other Friday off); company may transition to a 4/10 schedule., • Salary: $120,000 – $160,000 (flexible up to $180,000 DOE)., • Benefits: Medical, Dental, Vision, 401(k) with match, PTO, paid holidays, and long-term stability.

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Santa Monica, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: Immerse yourself in an environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Enjoy a rewarding compensation package that includes enticing stock incentives, aligning with our commitment to recognizing and valuing your contributions., • Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed.

Job Function: Global Security and Risk Management Job Title: Head of Application Security Job Location: Singapore or Los Angeles, US About SHEIN SHEIN is a global online fashion and lifestyle retailer, offering SHEIN branded apparel and products from a global network of vendors, all at affordable prices. Headquartered in Singapore, with more than 16,000 employees operating from offices around the world, SHEIN is committed to making the beauty of fashion accessible to all, promoting its industry-leading, on-demand production methodology, for a smarter, future-ready industry. To learn more about SHEIN follow us at sheingroup.com. Position Summary: SHEIN Global Security and Risk Management (GSRM) is a global security organization that oversees security infrastructure, risk management, data privacy, business fraud, governance, and regulatory compliance across SHEIN’s global footprint. It is composed of a team of security professionals, innovators and thought leaders that have had decades of global security experience, led large scale transformations, and served in Fortune 500 executive roles. Here, innovation isn’t simply about protecting and empowering our company. We develop solutions that are practical today and scalable tomorrow; and we create collaborative teams dedicated to innovation across each of our businesses to share our common values and vision. The Head of Application Security, a senior executive residing within GSRM, is responsible for leading the overall strategy, execution and roadmaps of application security and the entire secure software development lifecycle. This position will lead the team of engineering and SDL experts and work with technology and business partners and units to mitigate application risks. This leader should have a deep technical understanding of the full SDL lifecycle and extensive experiences in code audit and application security testing. He or she must be familiar with industry standards and best practices, and must be able to effectively work with development, engineering, and business counterparts, across a broad deeply technical environment in the development world. This role will coordinate with application and system developers and owners on all aspects of SDL lifecycle through planning, feasibility analysis, design, development, testing to implementation and operations. This leader will also assist their leadership with ensuring all solutions and technologies are properly supported, implemented, and sufficiently met the needs for which they are deployed to protect SHEIN application footprint and its integrity. Core Responsibilities: • Oversee the application security team, consisting of direct and indirect reports (including full time employees, contractors, MSS staff and external service providers personnel). This includes hiring, training, career development, and performance management., • Lead all aspects of SDL and application testing disciplines, including but not limited to threat modeling, application risk assessment, vulnerability management, SAST and DAST tooling, attack surface monitoring, and application penetration testing., • Create and update new strategies, project plans and policy documents based on compliance and operational requests that map to SHEIN's business requirements, • Develop and manage security budget forecast, expense, and technology, service and vendor roadmaps., • Liaise with external agencies, such as law enforcement, standards and technology organization, advisory bodies and industry and peer working groups as necessary, to ensure that the organization maintains a strong application security posture and technical congruency., • Work directly with development teams to facilitate code audit, solution requirements and technology roadmaps to ensure compliance with industry and regulatory standards., • Establish credibility throughout the organization by earning the reputation for being a proactive senior leader and change agent., • Sustain high-availability service levels and ensure fulfillment of business-wide service levels and operational support objectives. Skills and Qualifications: • A minimum of 10 years of experience in global scale cyber security and development environment with strong focus in a DevSecOps eco-system and building security into the CI/CD pipeline, with at least 5 years of direct people management experience., • Possess a Bachelor’s degree or higher in the field of Engineering, Computer Science, Business Analytics, or equivalent advance technology field of study, • Must be skilled at mentoring and motivating staff, communicating goals and other corporate initiatives and driving to results, • Strong knowledge of programming languages, software development lifecycle, and security testing skills with ability to work through complex application footprint and derive characteristics of risk scenarios, • Experience building application security metrics, attack surface monitoring, and incident response strategies and playbooks in the technology industry., • Experience with change management lifecycle, development and regular preparation of management status and key metrics reports, • Should have strong experience working with technical teams on developing advanced risk engines, algorithms and models for threat detection, • Ability to translate complex application security threats from a technical perspective to business-line understanding and execution, • Ability to manage extremely technical staff and work in a matrix organization, • High level of personal integrity, with the ability to professionally handle confidential matters and exudes the appropriate level of judgment and maturity, • Must have strong business and financial acumen to make sound business and budgeting decisions., • Must be a strong communicator with exceptional verbal and written communication skills to translate the vision and strategy into clear priorities and direction, both internally and externally., • Proficiency in Mandarin is an advantage Education Level: Bachelor’s Degree Field of Study: Computer Engineering or Science, Information Sciences Technology, Business Analytics, Cyber Security or related fields Certifications: Relevant cyber security certifications, such as CISSP, CISM, CISA and/or PMP are highly desired Years of Experience: Generally requires 10+ years related experience. Five or more years in an e- commerce and technology field and management capacity preferred Benefits and Perks $220,000/year-$360,000/year + benefits Individual compensation is determined by skills, experiences and qualifications. • Healthcare (medical, dental, vision, prescription drugs), • Health Savings Account with Employer Funding, • Flexible Spending Accounts (Healthcare and Dependent care), • Company-Paid Basic Life/AD&D insurance, • Company-Paid Short-Term and Long-Term Disability, • Voluntary Benefit Offerings (Voluntary Life/AD&D, Hospital Indemnity, Critical Illness, and Accident), • Employee Assistance Program, • Business Travel Accident Insurance, • 401(k) savings plan with discretionary company match and access to a financial advisor to meet retirement planning goals., • Vacation-Paid time off, • 9 Paid Holidays/6 Sick Days, • Employee Discounts • Perks (HQ Location), • Free weekly catered lunch at HQ, • Dog-Friendly office, • Free Gym Access at HQ, • Free Swag Giveaways, • Annual Holiday Party, • Invitations to pop-ups and other company events, • Complimentary daily office snacks and beverages, • Free Shuttle Service from HQ to LA Union Station SHEIN is an equal opportunity employer committed to a diverse workplace environment.

Customer Service / Remote] - Anywhere in U.Up to $24 per hour / Medical, dental & vision / 401k match / PTO / 4 day work week - As a Customer Support Coordinator at Jabra Hearing, you will: Manage and respond to customer inquiries and concerns via phone, email, and chat; Provide excellent customer s

Billing / Remote] - Anywhere in U.K per year + benefits - As an Accounts Receivable Specialist at Tucows, you will: Manage and maintain the accounts receivable process by accurately recording and tracking all incoming payments and customer transactions; Follow up with customers regarding outstanding

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Customer Support / Remote] - Anywhere in U.Competitive pay / Medical, dental & vision / 401k / PTO - As a Customer Service Rep at GRT Financial, you will: Handle inbound/outbound calls and emails from clients regarding their accounts; Provide excellent customer service by addressing and resolving cu

Billing / Remote] - Anywhere in U.K per year + benefits - As an Accounts Receivable Specialist at Tucows, you will: Manage and maintain the accounts receivable process by accurately recording and tracking all incoming payments and customer transactions; Follow up with customers regarding outstanding

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Accounting Assistant / Remote] - Anywhere in U.Up to $22 per hour - As a Bookkeeper at Kickstart Accounting, Inc.Manage and record financial transactions accurately and efficiently; Maintain and reconcile bank accounts and credit card statements.Prepare and submit monthly, quarterly, and annual fina

Customer Service / Remote] - Anywhere in U.Up to $24 per hour / Medical, dental & vision / 401k match / PTO / 4 day work week - As a Customer Support Coordinator at Jabra Hearing, you will: Manage and respond to customer inquiries and concerns via phone, email, and chat; Provide excellent customer s

Customer Service / Fully Remote] - Anywhere in U.Competitive salary / Flexible hours - As a Customer Support Agent you'll: Manage day-to-day therapist questions and requests through a shared mailbox and member support across multiple channels (SMS, phone, emails); Provide support to therapists to en

Customer Service / Fully Remote] - Anywhere in U.Up to $52K per year / Competitive benefits - As a Customer Support Rep you'll: Provide email, chat and SMS support to Customers, Luggers & Retailers; Achieve world-class customer satisfaction ratings; Perform real-time analysis and problem-solving of

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Customer Service / Remote] - Anywhere in U.Up to $24 per hour / Medical, dental & vision / 401k match / PTO / 4 day work week - As a Customer Support Coordinator at Jabra Hearing, you will: Manage and respond to customer inquiries and concerns via phone, email, and chat; Provide excellent customer s

Accounting Assistant / Remote] - Anywhere in U.Up to $22 per hour - As a Bookkeeper at Kickstart Accounting, Inc.Manage and record financial transactions accurately and efficiently; Maintain and reconcile bank accounts and credit card statements.Prepare and submit monthly, quarterly, and annual fina

Customer Service / Fully Remote] - Anywhere in U.Up to $52K per year / Competitive benefits - As a Customer Support Rep you'll: Provide email, chat and SMS support to Customers, Luggers & Retailers; Achieve world-class customer satisfaction ratings; Perform real-time analysis and problem-solving of

Customer Service / Fully Remote] - Anywhere in U.Competitive salary / Flexible hours - As a Customer Support Agent you'll: Manage day-to-day therapist questions and requests through a shared mailbox and member support across multiple channels (SMS, phone, emails); Provide support to therapists to en

Customer Service / Fully Remote] - Anywhere in U.Up to $52K per year / Competitive benefits - As a Customer Support Rep you'll: Provide email, chat and SMS support to Customers, Luggers & Retailers; Achieve world-class customer satisfaction ratings; Perform real-time analysis and problem-solving of

Accounting Assistant / Remote] - Anywhere in U.Up to $22 per hour - As a Bookkeeper at Kickstart Accounting, Inc.Manage and record financial transactions accurately and efficiently; Maintain and reconcile bank accounts and credit card statements.Prepare and submit monthly, quarterly, and annual fina

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Billing / Remote] - Anywhere in U.K per year + benefits - As an Accounts Receivable Specialist at Tucows, you will: Manage and maintain the accounts receivable process by accurately recording and tracking all incoming payments and customer transactions; Follow up with customers regarding outstanding

Customer Support / Remote] - Anywhere in U.Competitive pay / Medical, dental & vision / 401k / PTO - As a Customer Service Rep at GRT Financial, you will: Handle inbound/outbound calls and emails from clients regarding their accounts; Provide excellent customer service by addressing and resolving cu

Customer Support / Remote] - Anywhere in U.Competitive pay / Health, dental & vision / 401k match / PTO - As a Customer Service Rep at Diana Health, you will: Answer and triage incoming phone calls and app messages from our current patients; Provide excellent customer service by addressing inquiries

Billing / Collections / Remote] - Anywhere in U.Competitive pay + bonuses / Flexible work schedules / Health, dental & vision / 401k match / PTO - As an Accounts Receivable Specialist at Quick Med Claims, you will: Manage and maintain accurate accounts receivable records; Process incoming payments a

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Billing / Remote] - Anywhere in U.K per year + benefits - As an Accounts Receivable Specialist at Tucows, you will: Manage and maintain the accounts receivable process by accurately recording and tracking all incoming payments and customer transactions; Follow up with customers regarding outstanding

Accounting Assistant / Remote] - Anywhere in U.Up to $22 per hour - As a Bookkeeper at Kickstart Accounting, Inc.Manage and record financial transactions accurately and efficiently; Maintain and reconcile bank accounts and credit card statements.Prepare and submit monthly, quarterly, and annual fina

Customer Service / Fully Remote] - Anywhere in U.Competitive salary / Flexible hours - As a Customer Support Agent you'll: Manage day-to-day therapist questions and requests through a shared mailbox and member support across multiple channels (SMS, phone, emails); Provide support to therapists to en

Customer Service / Remote] - Anywhere in U.Up to $24 per hour / Medical, dental & vision / 401k match / PTO / 4 day work week - As a Customer Support Coordinator at Jabra Hearing, you will: Manage and respond to customer inquiries and concerns via phone, email, and chat; Provide excellent customer s

Customer Service / Remote] - Anywhere in U.Competitive pay + bonuses / PTO / Employee discount + clothing allowance - As a Customer Experience Agent at Rhone, you will: Provide professional customer support at all times while serving as a front line, go-to resource for all customer needs and inquiri

Customer Service / Remote] - Anywhere in U.Competitive pay / Benefits - As a Leave Specialist you'll: Drive success through initial customer kickoff and provide a supportive, personalized end-to-end leave of absence experience for customers using a combination of tools to manage, communicate and upd

Customer Service / Remote] - Anywhere in U.Up to $49,800 per year / Medical, dental & vision / 401k match / PTO / Home office stipend - As a Customer Support Specialist at Cars Commerce, you will: Provide exceptional customer service to all clients through various communication channels such as phon

Billing / Remote] - Anywhere in U.K per year + benefits - As an Accounts Receivable Specialist at Tucows, you will: Manage and maintain the accounts receivable process by accurately recording and tracking all incoming payments and customer transactions; Follow up with customers regarding outstanding

Customer Support / Remote] - Anywhere in U.Competitive pay / Medical, dental & vision / 401k / PTO - As a Customer Service Rep at GRT Financial, you will: Handle inbound/outbound calls and emails from clients regarding their accounts; Provide excellent customer service by addressing and resolving cu

Customer Service / Fully Remote] - Anywhere in U.Competitive salary / Flexible hours - As a Customer Support Agent you'll: Manage day-to-day therapist questions and requests through a shared mailbox and member support across multiple channels (SMS, phone, emails); Provide support to therapists to en