Penetration testing jobs in Jersey City, New JerseyCreate job alerts

Posting Type Remote/Hybrid Job Overview As an Advanced Security Engineer focused on Endpoint Security, you will design, build, and operate security controls that protect Relativity's employee endpoints and the enterprise systems they access. You will help establish hardened, standardized, and measurable endpoint security foundations that reduce risk while preserving productivity, partnering closely with IT and Security teams to deliver securebydefault device experiences. This role blends handson software engineering with systemlevel security ownership in a modern cloud environment. Job Description and Requirements Role Responsibilities * Design, implement, andoperateendpoint security controls across laptops and mobile devices * Build automation and tooling to enforce secure configuration baselines and reduce manual effort * Partner with IT on device management, deployment, and lifecycle security * Reduce enterprise risk by hardening devices, limiting standing privilege, and improving visibility * Participate in incident response and endpointrelated investigations in partnership with Cyber teams * Continuously improve endpoint security posture using metrics, telemetry, and risk insights Minimum qualifications: * Bachelor's in Computer Science, Information Security, or equivalent experience. * 2+ years of commercial experience in software developmentand scripting(C#, Python,Javaor other general-purpose modern programming language) with a solid understanding of computer science fundamentals, including algorithms and data structures * Experience securing andoperatingmanaged endpoints at scale * Familiarity with modern device management and endpoint protection concepts * Ability to translate security policy into automated, enforceable controls * Comfort working across teams to deliver secure outcomes without friction * Experience with cloud technologies(preferably Azure),DevSecOpspractices, and automation tools (e.g., GitHub Actions). * Growth mindset and eagerness to learn across engineering and securitydomains. * Ability to take feedback and strive for continual improvement. Preferred qualifications: * Experience securing cloud-native applications / SaaS solutions and networks. * Familiarity with vulnerability scanning and threat protection. * Relevant certifications: * Microsoft Certified: Azure Security Engineer Associate (AZ-500). * Microsoft Certified: Identity and Access Administrator Associate (SC-300). * Knowledge of Zero Trustprinciplesand compliance standards (e.g., GDPR, HIPAA). * Exposure to other cloud platforms(AWS, GCP). Relativity is committed to competitive, fair, and equitable compensation practices. This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives. The expected salary range for this role is between following values: $104,000 and $156,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position. Required Skills: Endpoint Security, Network Security, Penetration Testing, Security Architecture Design, Security Automation, Security Information, Security Information and Event Management (SIEM), Security Operations, Threat Modeling, Vulnerability Management

Job Description [Position] Korean Bilingual IT Security Administrator [About Our Client] Our client is seeking a dedicated IT Security Administrator ranging from Associate to Experienced level. The ideal candidate will be responsible for managing and securing our IT infrastructure, ensuring the integrity, confidentiality, and availability of our systems. This role demands a strong expertise in network protocols, system security, and incident response. The IT Security Administrator will play a pivotal role in maintaining a robust security posture while supporting diverse IT operations across the organization. [Job Description] • Manage and support IT system security, including configuration checks and policy compliance, • Perform security vulnerability remediation and coordinate with relevant teams, • Conduct database security administration, including access control and monitoring, • Maintain and operate security systems (e.g., firewalls, endpoint security, monitoring tools), • Provide technical support to departments and branches on security-related issues, • Support secure development practices for in-house applications, • Assist with annual security assessments, including:, • Penetration Testing, • Vulnerability Assessment, • IT Risk Assessment Requirements • Must be authorized to work in U.S., • Experienced in Officer/AVP for 3+ years, • Strong expertise in network protocols, system security, and incident response, • Be able to play a pivotal role in maintaining a robust security posture while supporting diverse IT operations across the organization., • Korean Bilingual Benefits Health Insurance 401K PTO and Sick leave

Job Description Location: NYC, New Jersey, West Virginia, Maryland, Delaware, and Virginia, DMV, Richmond, Philly We're looking for a driven Clinical Oncology Specialist (COS) to join our newly established Cutaneous Oncology specialty team. This is a high-impact, tumor-specific role focused on accelerating the adoption and growth of Signatera—our groundbreaking, first-in-class MRD ctDNA test. As a COS, you'll act as a strategic field partner and a key representative of Natera Oncology, collaborating cross-functionally to engage key opinion leaders (KOLs) across integrated delivery networks, academic medical centers, hospital systems, and select community oncology practices. Primary stakeholders include Medical Oncologists, Oncology Surgeons, and Pathologists. Success in this role demands a deep understanding of the skin cancer/cutaneous space, strong clinical acumen, and the ability to navigate complex healthcare systems while fostering trusted, value-driven relationships. We're seeking individuals who thrive in a fast-paced, entrepreneurial environment and are driven by purpose, passion, and the pursuit of clinical excellence. Frequent travel is required. Key Responsibilities * Develop and execute a strategic territory plan focused on growth and account penetration * Identify and engage KOLs and key accounts to integrate Signatera into clinical decision-making * Drive new business development while expanding and deepening existing relationships * Maximize return on investment through consistent sales activity and cross-functional collaboration * Deliver impactful clinical education to physicians and care teams * Serve as a trusted resource in a fast-paced, startup-like environment * Build deep understanding of Natera's oncology solutions, internal processes, and competitor landscape * Call on targeted physicians and practices to promote Natera's oncology products and services * Drive product adoption by influencing clinical decision-making at the provider and system level * Monitor account performance and market trends; escalate issues and identify new opportunities * Consistently conduct business in an ethical, transparent, and professional manner Qualifications * Bachelor's degree required * 5+ years of experience with consistent success in Cutaneous, Surgical or molecular diagnostics preferred * Deep knowledge of academic and community oncology markets, precision medicine, and reimbursement landscape * Ability to travel frequently, including overnight travel as needed * Valid driver's license and safe driving record * Proven leadership, business acumen, and strong communication skills * Travel: ~75% (combination of road and air travel) Key Competencies * Excellent verbal, written, and presentation skills * Strategic, forward-thinking, and data-driven mindset * Ability to work independently and collaboratively in team environments * Strong clinical understanding of oncology and molecular diagnostics * Comfortable navigating complex healthcare systems and engaging senior stakeholders Why Natera? At Natera, we're transforming the way cancer is detected and monitored. Join us and be part of an innovative, mission-driven team committed to improving patient outcomes in oncology. Total compensation includes a competitive base salary and uncapped quarterly commissions. In addition we offer a car allowance and Restricted Stock Units (RSUs). The compensation package listed is for 1st year OTE, which are based on a wide array of factors unique to each candidate, including but not limited to skill set, years & depth of experience, certifications and specific office location. On-target earnings (OTE) represent the total potential income an employee can earn by achieving 100% of their performance goals. It combines a base salary with commissions and serves as an estimated figure rather than a guaranteed amount, providing a guideline based on average performance outcomes. On-target earnings (OTE) $195,000—$225,000 USD OUR OPPORTUNITY Natera™ is a global leader in cell-free DNA (cfDNA) testing, dedicated to oncology, women's health, and organ health. Our aim is to make personalized genetic testing and diagnostics part of the standard of care to protect health and enable earlier and more targeted interventions that lead to longer, healthier lives. The Natera team consists of highly dedicated statisticians, geneticists, doctors, laboratory scientists, business professionals, software engineers and many other professionals from world-class institutions, who care deeply for our work and each other. When you join Natera, you'll work hard and grow quickly. Working alongside the elite of the industry, you'll be stretched and challenged, and take pride in being part of a company that is changing the landscape of genetic disease management. WHAT WE OFFER Competitive Benefits - Employee benefits include comprehensive medical, dental, vision, life and disability plans for eligible employees and their dependents. Additionally, Natera employees and their immediate families receive free testing in addition to fertility care benefits. Other benefits include pregnancy and baby bonding leave, 401k benefits, commuter benefits and much more. We also offer a generous employee referral program! For more information, visit . Natera is proud to be an Equal Opportunity Employer. We are committed to ensuring a diverse and inclusive workplace environment, and welcome people of different backgrounds, experiences, abilities and perspectives. Inclusive collaboration benefits our employees, our community and our patients, and is critical to our mission of changing the management of disease worldwide. All qualified applicants are encouraged to apply, and will be considered without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, age, veteran status, disability or any other legally protected status. We also consider qualified applicants regardless of criminal histories, consistent with applicable laws. If you are based in California, we encourage you to read this important information for California residents. Link: Please be advised that Natera will reach out to candidates with a @natera.com email domain ONLY. Email communications from all other domain names are not from Natera or its employees and are fraudulent. Natera does not request interviews via text messages and does not ask for personal information until a candidate has engaged with the company and has spoken to a recruiter and the hiring team. Natera takes cyber crimes seriously, and will collaborate with law enforcement authorities to prosecute any related cyber crimes. For more information: • BBB announcement on job scams, • FBI Cyber Crime resource page

Senior Cyber Security Engineer Cooley is seeking a Senior Cyber Security Engineer to join the Security team. Position summary: Cooley Technology embraces a culture of customer service excellence and all members of the department are expected to move this agenda forward. To that end, the Cyber Security Engineer is expected to recognize that the Cooley Technology department is a service organization first and foremost and will be evaluated on this requirement equal in importance to the technical or operational responsibilities outlined later in this document. The Cyber Security Engineer will work to maintain and monitor the security practices and systems implemented by the Firm. The Cyber Security Engineer will implement and manage security systems and tools as directed by Firm policies, procedures, and management. Specific duties include, but are not limited to, the following: Position responsibilities • Review, analyze and monitor security system reports and logs for suspicious activities, trends and patterns. This includes but is not limited to web filters, mail gateways, firewalls, encryption systems, anti-malware systems, IDS/IPS, • Configure, maintain, and administer security products and solutions used within the Firm, • Configure, maintain and administer firewalls, VPN, privileged access management (PAM), data loss prevention, EDR, and security information event monitoring (SIEM) systems, • As a member of the Incident Response team respond to alerts, warnings, incidents, and help desk tickets to ensure minimum exposure of Firm assets under the direction of the Cyber Security Manager, • Participate in troubleshooting efforts on all cyber security related problems to include the establishment, management, and use of TAM arrangements with specified security vendors, • Participate as a technician/engineer on Technology and Innovation projects, • Conduct risk and security reviews on products as directed by the Cyber Security Manager or Technology management, • Recommend controls to ensure the appropriate level of protection and adherence to the goals of the overall information security strategy, • Monitor Technology security metrics and measures to include monitoring security system logs, Windows server logs, and network monitoring systems, • Provide consultation and conduct internal investigations that may require forensic analysis under the direction of the Cyber Security Manager and/or Technology management, • Respond to audit findings as directed by the Cyber Security Manager and/or Technology Management, • Evaluate and recommend commercial security vendors and products, • All other duties as assigned or required Skills and experience: Required: • After orientation at Cooley LLP, exhibit proficiency in the Microsoft Office suite, iManage and other firm applications, • Ability to work extended and/or weekend hours, as required, • Ability to travel, as required, • 5+ years of experience in information security with the proven ability to operate at an elevated level in terms of scope of responsibility, judgement and autonomy., • Proven practical experience in information security and well-rounded knowledge of Technology, • Experience working with:, • Active Directory, • Firewalls, • Intrusion Detection and Prevention Systems, • Endpoint Detection and Response (EDR) and management console, • Web filter/proxy technologies, • Encryption technologies - whole disk, e-mail, and data at rest, • Vulnerability scanners, • Data loss prevention, • Email gateways and anti-spam services, • Privileged account management systems, • Security information and event management systems, • AWS and Azure Cloud Services, • Bachelor's Degree in Information Technology or Computer Information Systems, • CISSP or equivalent certifications and/or experience, • Experience working with the following products:, • Palo Alto Network's Firewalls and Prisma Access, • Tenable Vulnerability Scanner, • VMWare, • Cyberhaven Data Loss Prevention, • Proofpoint Email Gateway and Anti-Spam, • Forensic Tools, • S/MIME email encryption, • Delina Secret Server, • Crowdstrike, • Google SecOps SIEM, • Two factor authentication technologies, • Penetration testing tools, • Patch management systems Competencies: • Exceptional customer service skills, • Excellent analytical, problem-solving, customer service, project management and communication skills, • Goal-oriented, • Excellent decision making, integrity and working with IT management, business users and staff, • Excellent oral and written communication skills, including technical and user documentation, • Strong organizational skills, • Ability to work independently and under high pressure with tight schedules and deadlines, • Ability to interact well with all levels of business professionals, • Excellent active listening skills, • Flexible and patient with process development/execution and adherence to instruct project management practices, • Capable of grasping new concepts quickly and without prior experience, • Detail-oriented, • Ability to multi-task and work in fast-paced environment, • Ability to interact and coordinate with several teams to achieve objectives, • Ability to solve problems independently and simultaneously, effectively managing multiple tasks, • Professional demeanor at all times Cooley offers a competitive compensation and excellent benefits package and is committed to fair and equitable employment practices. EOE. The expected annual pay range for this position with a full-time schedule is $145,000 - $210,000. Please note that final offer amount will be dependent on geographic location, applicable experience and skillset of the candidate. We offer a full range of elective benefits including medical, health savings account (with applicable medical plan), dental, vision, health and/or dependent care flexible spending accounts, pre-tax commuter benefits, life insurance, AD&D, long-term care coverage, backup care for children and/or adults and other parental support benefits. In addition to elective benefit options, benefited employees receive firm-paid life insurance, AD&D, LTD, short term medical benefits as well as 21 days of Paid Time Off ("PTO") and 10 paid holidays each year. We provide generous parental leave and fertility benefits. New employees will attend a detailed benefit orientation to learn more about our many benefits and resources.

Daily Harvest is seeking a Manager, Growth Marketing to help scale and diversify our customer acquisition engine across both established and emerging channels (DTC, CPG Retail, and others). This role will manage omnichannel paid acquisition performance while also identifying, testing, and scaling new growth channels and partnerships that can unlock incremental customer acquisition / household penetration You will partner closely with our paid media agency, brand team, sales teams, and cross-functional partners to drive efficient growth across paid media while building new acquisition pathways through creators, communities, affiliates, partnerships, and emerging channels. This role will act as a curious, hands-on internal growth builder, continuously launching and validating new pilots that can unlock Daily Harvest's next phase of customer growth. Paid Media Ownership • Own performance marketing strategy and results across full-funnel paid media channels (paid social, paid search, CTV, Youtube, TikTok, etc., leveraging retail media networks where appropriate), • Partner with our paid media agency to:, • Develop and maintain a structured testing roadmap across creative, landing pages, audiences and net-new channels, • Optimize toward CAC, acquisition volume, LTV, and household penetration targets, • Manage budget allocation across channels and funnel stages, • Monitor and optimize in-platform metrics (e.g. CPM, CPC, CTR, CVR, CPA, reach, frequency), • Identify opportunities for incremental growth and efficiency improvements, • Analyze full-funnel performance (impression click conversion) to identify opportunities to improve conversion, creative effectiveness, and audience targeting Emerging Channels, Influencers, Communities & Partnerships • Identify, test, and scale new acquisition channels beyond traditional paid media to help diversify Daily Harvest's growth engine, • Work closely with the Brand team and paid media agency to uncover high-potential growth opportunities across creators, communities, partnerships, and emerging platforms. Examples may include:, • Developing and executing a Reddit strategy, • Supporting micro-influencer and creator partnerships in collaboration with the Brand team, • Expanding and managing affiliate partnerships, including identifying non-traditional partners rooted in specific consumer communities, • Sourcing and supporting acquisition partnerships, including building partner prospect lists, conducting outreach, and managing partnership logistics, • Support the development of B2B growth initiatives, including identifying potential partners, coordinating outreach, supporting partner activations, and developing marketing collateral or co-marketing materials, • Build lightweight testing frameworks to rapidly validate new channels and partnerships, scaling those that demonstrate strong CAC efficiency and acquisition potential, • Continuously explore unconventional acquisition opportunities that can unlock new audiences and reduce reliance on traditional paid channels Performance Insights, Reporting & Forecasting • Own and optimize performance reporting across channels, ensuring accurate, actionable visibility into DTC acquisition performance, • Partner with agency & internal analytics on incrementality measurement across all channels and use insights to inform future media plans, • Proactively surface insights, risks, and optimization opportunities to inform budget and strategy decisions, • Collaborate with Sr Director of Revenue & Finance team on forecasting, spend pacing, and performance tracking against weekly/monthly acquisition goals, • 5-8 years of experience in growth, acquisition, or performance marketing roles, ideally within fast-paced DTC or digital-first consumer brands, • Strong hands-on experience managing paid acquisition channels (paid social, search, affiliate, or creator-led performance), • Highly curious and comfortable testing non-traditional growth channels including communities, partnerships, and creator ecosystems, • Experience working cross-functionally with creative, brand, and analytics teams to drive performance outcomes, • Strong analytical skills with the ability to interpret performance data and translate insights into action., • Comfortable operating in both strategic and executional modes, including running scrappy experiments and scaling what works., • High ownership mindset with a bias toward experimentation, learning, and iteration. Chobani uses food as a force for good in the world - putting humanity first in everything it does. The company's philanthropic efforts prioritize giving back to its communities and beyond. Chobani manufactures its products inNew York,Idaho,MichiganandAustralia, and its products are available throughoutNorth Americaand distributed inAustraliaand other select markets. For more information, please visit___ or follow us on Facebook, Twitter, Instagram and LinkedIn. Chobani is an equal opportunity employer. Chobani will not discriminate against any applicant for employment on any basis including, but not limited to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, military and/or veteran status, marital status, predisposing genetic characteristics and genetic information, or any other classification protected by federal, state, and local laws. The salary range for this full-time position is $94,000.00 - $147,950.00, + bonus + equity + benefits. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Chobani provides a comprehensive benefits package, including medical, dental, vision coverage, disability insurance, health savings account, flexible spending accounts, and tuition reimbursement. To help save for the future, all employees are eligible for a 401k match of 100% on up to 5% of eligible pay. To support growing families, we provide fertility and childcare assistance, and 12 weeks of parental leave at full pay after six months of continuous employment. In addition, we provide wellness resources which include an employee assistance program, fitness discounts, a wellness reimbursement, on-site gym access (certain locations) and a monthly wellness newsletter to connect you with resources and timely information. We offer various types of paid time of including: 120 hours of paid time off, 11 holidays, and paid volunteer time off.

Position Title: Enterprise Account Executive, Managed Solutions/Cybersecurity (P2). Managed Solutions and Cyber Security. Cyber Defense: Comfortability scoping and positioning SOCaaS, EDR, XDR, MDR, Cyber Risk Intelligence, Penetration Testing opportunities.

Bishop Fox is the leading authority in offensive security, providing solutions ranging from continuous penetration testing, red teaming, and attack surface management to product, cloud, and application security assessments. Bishop Fox has always supported remote work; however, for this role we are s

Ideal candidates should have at least 3 years of experience in cybersecurity, especially in offensive security testing. A prominent financial institution is seeking a Senior Penetration Tester to join their Cybersecurity & Technology Controls team. This role involves performing hands-on penetration

Job DescriptionThe OpportunityWe’ve partnered with a leading global investment firm that is significantly expanding how AI is used across the enterprise. As part of that effort, they’re hiring a Lead AI Application Security Engineer to join their Information Security organization and strengthen how AI-related applications are designed, built, and operated securely. This is a senior, hands-on role for someone who brings deep application security experience and wants to apply those fundamentals to modern AI use cases inside a large, complex environment. What You’ll Be Working On- Applying application security best practices to AI-enabled applications, services, and workflows- Identifying and mitigating security risks associated with Large Language Models, AI agents, and supporting platforms- Embedding automated security checks such as SAST, SCA, and DAST into CI/CD pipelines- Performing threat modeling using established frameworks and applying those findings in agile delivery environments- Partnering closely with engineering, platform, and security teams to support secure development practices- Communicating security risks clearly and effectively to both technical teams and leadership What They’re Looking For- 8+ years of experience across application security, information security, platform security, DevSecOps, penetration testing, or related security disciplines- Strong understanding of AI and LLM security risks, including common failure modes and safety considerations- Experience automating security controls and testing directly within CI/CD pipelines- Hands-on experience with threat modeling frameworks such as STRIDE and operating in agile environments (Scrum, Kanban)- Proficiency in at least one programming language such as Python, Java, or .NET- Strong collaboration and communication skills, with the ability to explain security risks and tradeoffs to stakeholders Nice to Have- Experience with containerized and cloud-native environments (Kubernetes, containers, CI/CD, cloud providers)- Familiarity with AI platform components such as AI gateways, model orchestration layers, or custom API-based AI workflows- Awareness of AI and security regulatory frameworks such as NIST AI RMF, MITRE ATLAS, GDPR, or EU AI ActRelevant security certifications (CISSP, GIAC, CISA, or similar) CompensationBase salary ranges by location:- Southern California: $180,000–$285,000- San Antonio: $150,000–$235,000- New York: $190,000–$300,000 Compensation is aligned with experience and level.

Job DescriptionAbout InfoTrack InfoTrack is a platform that seamlessly connects law firms to the courts and to the services that they need to litigate successfully. We're global leaders in legal technology with unparalleled expertise in forging integrations that can drastically improve the efficiency of law firms and the legal system. As a highly ambitious company, we know that our people are critical to our success. That's why we're passionate about fostering a high-performance culture built on professional development, open communication, and transparent leadership. If you're smart, dedicated, and eager to help build a market-leading solution that makes a difference in the lives of our clients, join us. About the role As a Senior Cloud Infrastructure Engineer at InfoTrack, you’ll play a key role in shaping and executing our cloud strategy. This is a hands-on, high-impact role where you’ll design, build, and optimize secure, scalable infrastructure while partnering with developers, product teams, and global colleagues. You’ll drive improvements across tools, processes, and technologies to ensure our cloud platform is cost-efficient, high-performing, and always aligned with business needs. Responsibilities • Lead and execute InfoTrack US’s cloud infrastructure strategy, ensuring systems are secure, up to date, and optimized for performance and cost., • Deliver high-quality, scalable solutions by driving continuous improvement in tools, processes, and technologies., • Partner with developers, product teams, and global stakeholders to align infrastructure with business needs., • Define and monitor KPIs to track operational excellence, security, and compliance., • 5+ years of progressive experience in cloud infrastructure with a strong background in networking and systems., • Deep expertise with AWS (Azure or similar cloud platforms also valued)., • Proven ability to automate infrastructure provisioning using tools like Terraform and to manage Windows and Linux servers at scale., • Hands-on experience with Kubernetes, databases (MySQL, Postgres, MongoDB, DynamoDB), API gateways (e.g., Kong), and networking/routing (e.g., Istio, VPCs)., • Skilled in CI/CD tools (Azure DevOps, GitHub Actions, TeamCity, Octopus) and source code management with GitHub., • Knowledgeable in monitoring, logging, and observability platforms (Datadog, Elastic, Zabbix, Grafana, Prometheus)., • Familiar with security/compliance frameworks (ISO, SOC 2) and tools such as Wiz and CrowdStrike, including endpoint protection, SIEM, penetration testing, and remediation strategies., • Strong documentation and communication skills; able to explain complex infrastructure to technical and non-technical stakeholders., • Experienced in partnering with developers, product teams, and global stakeholders to align infrastructure with business needs. The anticipated starting base pay range for this role is listed below. Base salary is not the only component of our competitive total rewards package - you may also be eligible for bonus, commissions and other benefits as described below. Actual compensation is influenced by a wide array of factors including but not limited to skill set, level of experience, licenses and certifications. $108,000 - $183,000 Benefits What Sets InfoTrack apart At InfoTrack, we’re committed to a workplace where everyone feels comfortable doing their best work and having fun! We also believe in a work/life balance that fulfills you while you’re here and supports you when you’re not. We built our benefits package to prove that we’re committed to you having everything you need. Our benefits guide, located here, illustrates what we offer full-time employees and a sneak preview is below • 401(k) Match, • Medical, Dental, & Vision Insurance, • Employer-funded Short/Long-Term Disability, Life, and Accidental Death & Dismemberment (AD&D) Insurance, • 20 Days of Paid Time Off (PTO), • 11 Paid Holidays, • “Be Me Time” off for mental health, re-charging, volunteering We believe that the key to our success is you. Your unique background, life experience, knowledge, self-expression, and talent make you uniquely you. Who you are, what you have experienced, and how you think inspires us to be innovative and bold. InfoTrack is an equal opportunity employer. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger. We welcome the unique contributions that you can bring in terms of your education, opinions, culture, ethnicity, race, ancestry, sex, gender identity and expression, national origin, citizenship, marital status, age, languages spoken, veteran status, color, religion, disability, sexual orientation, and beliefs. Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Job DescriptionSenior Lead Network Engineer IIEmployment Type: Full TimeDepartment: Information Technology CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large-scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job DescriptionSenior Network EngineerEmployment Type: Full TimeDepartment: Information Technology CGS is seeking an experienced Senior Lead Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large-scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work.Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation!Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Currently we are looking for Fire Protection Inspectors for immediate Building & Infrastructure Projects Location: Greater New York City Metropolitan Area (Project Location Varies) Status: Part Time as Needed Duration: Extended Client: Varies Compensation: $25hr - $40/hr Based on Certification & Experience Fire Protection Inspector Role Overview The Fire Protection Inspector provides specialized inspection and verification services for fire and life-safety systems on Building & Infrastructure projects throughout the Greater New York City Metropolitan Area. This role supports both Quality Control (QC) and Quality Assurance (QA) programs in accordance with 1 RCNY §101-06, Chapter 17 of the NYC Building Code, the International Building Code (IBC), and applicable NFPA standards, as required by each project. The Fire Protection Inspector is responsible for verifying that fire protection systems and fire-resistive construction are installed in strict conformance with approved design documents, shop drawings, specifications, code requirements, and manufacturer instructions. Systems may include, but are not limited to, sprinkler and standpipe systems, fire suppression piping, spray-applied fireproofing, firestopping, fire dampers, and related life-safety components. This role requires an active on-site presence during installation and testing activities, including witnessing required inspections, hydrostatic tests, acceptance testing, and special inspections. The inspector will coordinate closely with contractors, construction managers, testing laboratories, special inspection agencies, and client representatives to ensure all fire protection work meets regulatory and project-specific requirements. The Fire Protection Inspector plays a critical role in life-safety compliance, proactively identifying non-conforming conditions, documenting deficiencies, issuing Non-Conformance Reports (NCRs) where required, and verifying corrective actions and re-inspections. Clear documentation, timely communication, and strict adherence to code requirements are essential to the success of this role. • Work responsibilities may include but are not limited to the following:, • Inspection of fire suppression piping, hangers, seismic bracing, and supports, • Inspection of spray-applied fire-resistive materials (SFRM) and intumescent coatings, • Verification of firestopping systems and through-penetration fire assemblies, • Witnessing hydrostatic, flush, and acceptance tests for water-based systems, • Review of approved shop drawings, material submittals, and test reports, • Work hours may include early mornings, evenings, weekends, or night shifts depending on project requirements and concrete placement schedules., • Reporting & Documentation Requires you to:, • Prepare and submit daily inspection and test reports within required timeframe., • Utilize client or company reporting platforms as require, • A minimum of 3 years of experience inspecting construction work in the city of NY, varied in Size and complexity. Projects may include commercial high-rise buildings, residential towers, transportation infrastructure, utilities, institutional facilities, and public-sector construction., • Familiarity with 101-06 and Chapter 17 of the NYC building code and the International Building Code., • Holds OSHA 10 or OSHA 30 Certification taken within the last 5 years., • Well versed in all aspects of construction and QA/QC responsibilities, • Familiarity with applicable Soils & Geotechnical Systems, • Training and/or knowledge in fall protection, scaffolding and ladders, & work-zone safety, • High School Diploma or Equivalent, • Physical Abilities applicable to construction projects in the City of New York and the ability to work outdoors in varying weather conditions and navigate active construction sites, including climbing ladders, scaffolding, and walking uneven surfaces., • Currently holds certification as in one or more of the following:, • Bachelors Degree in Architecture (accredited institution or equivalent), • Bachelors Degree in Engineering (accredited institution or equivalent), • ICC Certification as a Spray Applied Fireproofing Special Inspector, • NICET Level II Certification in Fire Protection – Inspection and Testing of Water based Systems, • NYC Licensed Class A or Class B Master Fire Suppression Piping Contractor License In this roll you will: • Implement the quality assurance measures on varying construction projects., • Review and submit all required documentation in accordance with project specifications, • Continually monitor work-in-progress, • Issue Non-Conformance Reports (NCR) where necessary., • Conduct inspections/tests as appropriate and as required, • Coordinate all work with the General Contractor or CM, • Notify the contractor if there are deviations to the Contract documents (including Contract Design Documents), • Document all RFIs; field coordination, issues and their resolution; deficiencies; corrective action; re-tests/inspections; deviations from the Contract Documents (including Design Drawings), • Take a proactive approach to quality workmanship and work-in-progress, • Ensure components meet project specifications, • Practice safety in accordance with applicable and site-specific standards Qualified professionals will also have: • Ability to communicate with colleagues and clients of all levels, • Experience working with Microsoft Office Suite, • Ability to read and understand construction drawings & specifications, • Reliable means of transportation & valid driver’s license, • Willingness to learn, • Works well with a team and individually, • Familiarity with construction industry codes, • Mathematical Knowledge - Using mathematics to solve problems., • Installation Oversight - Installing equipment, machines, to meet specifications., • Equipment Selection Oversight - Determining tools and equipment needed to do a job., • Ability to provide inspection reports in a timely manor, • Willingness to obtain additional certifications, • Works well with a team and individually MISTRAS Group, Inc. is committed to equal employment opportunity. Employment decisions including initial hiring and all matters involving the terms and conditions of employment will be made without regard to any protected class under applicable law. If hired, the employment relationship is “At-Will,” which means that employment can be terminated at any time, and for any reason, at the option of either the Company or the employee. Please direct questions about these policies to a MISTRAS Group, Inc. Human Resources representative. By submitting & signing , I hereby understand and agree to the terms and conditions of employment as outlined above. I certify that the responses and information provided in this application (including any other supporting documentation such as a cover letter, resume, or transcript) are true and accurate to the best of my knowledge. I understand that misrepresenting or omitting information requested is cause for dismissal at any time, without notice. I hereby give the Company permission to contact schools, previous employers (unless otherwise indicated), references, and others disclosed in my application. Note to Applicants: Smoking is prohibited in all indoor areas of the Company. Employees may use designated smoking areas (if established) in accordance with applicable state and local law. Rhode Island Applicants: The Company is subject to Chapters 29-38 of Title 28 of the General Laws of Rhode Island, and is therefore covered by the state’s workers’ compensation law. Initial (if applicable): Massachusetts Applicants: I understand that it is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Initial (if applicable): Maryland Applicants: I UNDERSTAND THAT UNDER MARYLAND LAW, AN EMPLOYER MAY NOT REQUIRE OR DEMAND, AS A CONDITION OF EMPLOYMENT, PROSPECTIVE EMPLOYMENT OR CONTINUED EMPLOYMENT, THAT ANY INDIVIDUAL SUBMIT TO OR TAKE A POLYGRAPH OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100. Mistras Group, Inc. is an Equal Opportunity Employer/Veterans/Disabled:

Job DescriptionDescription: We are seeking a highly skilled Security Engineer with extensive experience in cloud security, particularly within the AWS and MS365. The ideal candidate will have at least 5 years of AWS security experience and be proficient with security tools such as CrowdStrike, Coro Security or similar email security platforms, Knowbe4 and Microsoft. This role will be responsible for designing, implementing, and managing security measures that protect our AWS & MS environment and ensure the integrity, confidentiality, and availability of our data and systems. Responsibilities: • AWS Security Architecture: Design and implement robust security architectures and controls within AWS environments, ensuring compliance with best practices and organizational policies., • Security Monitoring & Incident Response: Deploy and manage security monitoring tools like CrowdStrike and Coro to detect, investigate, and respond to security incidents and vulnerabilities in real-time., • Identity & Access Management (IAM): Develop and manage AWS IAM policies, roles, and access controls to enforce least privilege and secure access to AWS resources., • Threat Detection & Vulnerability Management: Implement and maintain advanced threat detection and vulnerability management strategies within the AWS & MS environments, utilizing tools such as CrowdStrike, Coro, MS Defender and Guard Duty., • Compliance & Risk Management: Ensure AWS & MS environments comply with relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR) and manage risk assessments and audits., • SIEM: Perform daily system monitoring and reviewing log data, build searches, check alarms, drill down through log sources, identify event logs., • Collaboration: Work closely with DevOps, engineering, and IT teams to integrate security best practices into the software development lifecycle (SDLC) and operational workflows., • Monitoring and Analysis: Security analysts constantly monitor networks and systems for suspicious activity, security breaches, and potential vulnerabilities., • Incident Response: They investigate security incidents, analyze their impact, and take necessary actions to contain and resolve the issue., • Vulnerability Assessment and Penetration Testing: Identify weaknesses in systems and networks through vulnerability scans and penetration tests and then recommend solutions to mitigate these risks., • Security Policy and Implementation: Contribute to the development and implementation of security policies, procedures, and standards to protect sensitive information., • Security Awareness Training: Educate employees and users about security best practices, helping to prevent human error-related security breaches., • Strong knowledge of networking, operating systems, security technologies (firewalls, intrusion detection systems, etc.), and security protocols., • Ability to analyze security logs, network traffic, and other data to identify potential threats., • Ability to identify, analyze, and resolve security incidents and vulnerabilities., • Ability to communicate security risks and recommendations effectively to both technical and non-technical audiences., • Industry certifications like CISSP, Security+, or CEH can be beneficial. #LI-LV1 Requirements:

Job DescriptionWhy Charlie Health? Millions of people across the country are navigating mental health conditions, substance use disorders, and eating disorders, but too often, they're met with barriers to care. From limited local options and long wait times to treatment that lacks personalization, behavioral healthcare can leave people feeling unseen and unsupported. Charlie Health exists to change that. Our mission is to connect the world to life-saving behavioral health treatment. We deliver personalized, virtual care rooted in connection—between clients and clinicians, care teams, loved ones, and the communities that support them. By focusing on people with complex needs, we're expanding access to meaningful care and driving better outcomes from the comfort of home. As a rapidly growing organization, we're reaching more communities every day and building a team that's redefining what behavioral health treatment can look like. If you're ready to use your skills to drive lasting change and help more people access the care they deserve, we'd love to meet you. About the Role Charlie Health is seeking an experienced Lead Security Engineer to join our Information Security team. In this role, you will partner closely with engineering and product teams to embed secure development practices across the entire software development lifecycle (SDLC). You will be the subject matter expert on application security, guiding the business in building secure, scalable and HIPAA-compliant software solutions. We're a team of passionate, forward-thinking professionals eager to take on the challenge of the mental health crisis and play a formative role in providing life-saving solutions. If you're inspired by our mission and energized by the opportunity to increase access to mental healthcare and impact millions of lives in a profound way, apply today. Responsibilities • Security Integration & Guidance, • Collaborate with product and IT engineering teams to design secure applications and features., • Educate developers on secure coding practices and security testing., • Serve as a subject matter expert on internal application security and SDLC controls., • Assessment & Threat Modeling, • Conduct code reviews, threat models and risk assessments to identify and mitigate vulnerabilities early., • Perform internal penetration testing and support incident response for application-level issues., • Continuously monitor the threat landscape to proactively adjust defenses and strategies., • Tooling & Automation, • Develop and implement tools and frameworks to integrate security into CI/CD pipelines., • Work with teams to build and enforce secure SDLC controls in a fast-paced agile environment., • Own and enhance application vulnerability management and remediation processes., • Collaboration & Policy, • Lead implementation of security policies, standards and remediation processes., • Work cross-functionally to balance security risks with business objectives and product timelines., • 10+ years of experience in application security, secure software development, or related roles., • Bachelor's degree in Computer Science or related field, or equivalent experience., • Proficiency in secure coding practices and languages such as TypeScript, Node, Python, Java, C++ or similar., • Ability to contribute code changes to production applications as needed, including debugging, fixing security vulnerabilities, and collaborating with engineering teams on secure feature development., • Hands-on experience with application security tools (e.g., Burp Suite, OWASP ZAP, Fiddler)., • Deep understanding of web application vulnerabilities: XSS, CSRF, SQLi, session management, etc., • Experience implementing security in CI/CD pipelines such as GitHub Action and agile development workflows., • Familiarity with management and deployment of SAST, DAST, and SCA tooling, • Knowledge of authentication technologies (i.e. Auth0, Okta, etc) and how to securely integrate them with applications, • Strong communication skills with ability to clearly articulate risk to technical and non-technical audiences., • Please note: candidates located within a 75-minute commute of our NYC office are expected to work onsite 4 days/wNice to Have, • Experience with HIPAA and securing applications in healthcare environments., • OSCP, OSWE or other relevant security certifications., • Experience securing custom software collaboratively on a team., • Familiarity with AWS cloud platform., • Experience contributing to or managing bug bounty programs., • Knowledge of security standards such as SOC2, ISO 27001/2, NIST 800-53, HITRUST, or HIPAA Security Rule., • Ability to write proof-of-concept exploits and perform advanced security analysis.Benefits Charlie Health is pleased to offer comprehensive benefits to all full-time, exempt employees. Read more about our benefits here. The total target base compensation for this role will be between $180,000 and $240,000 per year at the commencement of employment. Please note, pay will be determined on an individualized basis and will be impacted by location, experience, expertise, internal pay equity, and other relevant business considerations. Further, cash compensation is only part of the total compensation package, which, depending on the position, may include stock options and other Charlie Health-sponsored benefits. #LI-Remote #LI-Hybrid Our Values • Connection: Care deeply & inspire hope., • Congruence: Stay curious & heed the evidence., • Commitment: Act with urgency & don't give up. Please do not call our public clinical admissions line in regard to this or any other job posting. Please be cautious of potential recruitment fraud. If you are interested in exploring opportunities at Charlie Health, please go directly to our Careers Page: . Charlie Health will never ask you to pay a fee or download software as part of the interview process with our company. In addition, Charlie Health will not ask for your personal banking information until you have signed an offer of employment and completed onboarding paperwork that is provided by our People Operations team. All communications with Charlie Health Talent and People Operations professionals will only be sent from @charliehealth.com email addresses. Legitimate emails will never originate from gmail.com, yahoo.com, or other commercial email services. Recruiting agencies, please do not submit unsolicited referrals for this or any open role. We have a roster of agencies with whom we partner, and we will not pay any fee associated with unsolicited referrals. At Charlie Health, we value being an Equal Opportunity Employer. We strive to cultivate an environment where individuals can be their authentic selves. Being an Equal Opportunity Employer means every member of our team feels as though they are supported and belong. We value diverse perspectives to help us provide essential mental health and substance use disorder treatments to all young people. Charlie Health applicants are assessed solely on their qualifications for the role, without regard to disability or need for accommodation. By clicking "Submit application" below, you agree to Charlie Health's Privacy Policy and Terms of Service. By submitting your application, you agree to receive SMS messages from Charlie Health regarding your application. Message and data rates may apply. Message frequency varies. You can reply STOP to opt out at any time. For help, reply HELP.

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Job DescriptionWhy Charlie Health? Millions of people across the country are navigating mental health conditions, substance use disorders, and eating disorders, but too often, they're met with barriers to care. From limited local options and long wait times to treatment that lacks personalization, behavioral healthcare can leave people feeling unseen and unsupported. Charlie Health exists to change that. Our mission is to connect the world to life-saving behavioral health treatment. We deliver personalized, virtual care rooted in connection—between clients and clinicians, care teams, loved ones, and the communities that support them. By focusing on people with complex needs, we're expanding access to meaningful care and driving better outcomes from the comfort of home. As a rapidly growing organization, we're reaching more communities every day and building a team that's redefining what behavioral health treatment can look like. If you're ready to use your skills to drive lasting change and help more people access the care they deserve, we'd love to meet you. About the Role Charlie Health is seeking an experienced Lead Security Engineer to join our Information Security team. In this role, you will partner closely with engineering and product teams to embed secure development practices across the entire software development lifecycle (SDLC). You will be the subject matter expert on application security, guiding the business in building secure, scalable and HIPAA-compliant software solutions. We're a team of passionate, forward-thinking professionals eager to take on the challenge of the mental health crisis and play a formative role in providing life-saving solutions. If you're inspired by our mission and energized by the opportunity to increase access to mental healthcare and impact millions of lives in a profound way, apply today. Responsibilities • Security Integration & Guidance, • Collaborate with product and IT engineering teams to design secure applications and features., • Educate developers on secure coding practices and security testing., • Serve as a subject matter expert on internal application security and SDLC controls., • Assessment & Threat Modeling, • Conduct code reviews, threat models and risk assessments to identify and mitigate vulnerabilities early., • Perform internal penetration testing and support incident response for application-level issues., • Continuously monitor the threat landscape to proactively adjust defenses and strategies., • Tooling & Automation, • Develop and implement tools and frameworks to integrate security into CI/CD pipelines., • Work with teams to build and enforce secure SDLC controls in a fast-paced agile environment., • Own and enhance application vulnerability management and remediation processes., • Collaboration & Policy, • Lead implementation of security policies, standards and remediation processes., • Work cross-functionally to balance security risks with business objectives and product timelines., • 10+ years of experience in application security, secure software development, or related roles., • Bachelor's degree in Computer Science or related field, or equivalent experience., • Proficiency in secure coding practices and languages such as TypeScript, Node, Python, Java, C++ or similar., • Ability to contribute code changes to production applications as needed, including debugging, fixing security vulnerabilities, and collaborating with engineering teams on secure feature development., • Hands-on experience with application security tools (e.g., Burp Suite, OWASP ZAP, Fiddler)., • Deep understanding of web application vulnerabilities: XSS, CSRF, SQLi, session management, etc., • Experience implementing security in CI/CD pipelines such as GitHub Action and agile development workflows., • Familiarity with management and deployment of SAST, DAST, and SCA tooling, • Knowledge of authentication technologies (i.e. Auth0, Okta, etc) and how to securely integrate them with applications, • Strong communication skills with ability to clearly articulate risk to technical and non-technical audiences., • Please note: candidates located within a 75-minute commute of our NYC office are expected to work onsite 4 days/wNice to Have, • Experience with HIPAA and securing applications in healthcare environments., • OSCP, OSWE or other relevant security certifications., • Experience securing custom software collaboratively on a team., • Familiarity with AWS cloud platform., • Experience contributing to or managing bug bounty programs., • Knowledge of security standards such as SOC2, ISO 27001/2, NIST 800-53, HITRUST, or HIPAA Security Rule., • Ability to write proof-of-concept exploits and perform advanced security analysis.Benefits Charlie Health is pleased to offer comprehensive benefits to all full-time, exempt employees. Read more about our benefits here. The total target base compensation for this role will be between $180,000 and $240,000 per year at the commencement of employment. Please note, pay will be determined on an individualized basis and will be impacted by location, experience, expertise, internal pay equity, and other relevant business considerations. Further, cash compensation is only part of the total compensation package, which, depending on the position, may include stock options and other Charlie Health-sponsored benefits. #LI-Remote #LI-Hybrid Our Values • Connection: Care deeply & inspire hope., • Congruence: Stay curious & heed the evidence. Please be cautious of potential recruitment fraud. If you are interested in exploring opportunities at Charlie Health, please go directly to our Careers Page: . Charlie Health will never ask you to pay a fee or download software as part of the interview process with our company. In addition, Charlie Health will not ask for your personal banking information until you have signed an offer of employment and completed onboarding paperwork that is provided by our People Operations team. All communications with Charlie Health Talent and People Operations professionals will only be sent from @charliehealth.com email addresses. Legitimate emails will never originate from gmail.com, yahoo.com, or other commercial email services. Recruiting agencies, please do not submit unsolicited referrals for this or any open role. We have a roster of agencies with whom we partner, and we will not pay any fee associated with unsolicited referrals. At Charlie Health, we value being an Equal Opportunity Employer. We strive to cultivate an environment where individuals can be their authentic selves. Being an Equal Opportunity Employer means every member of our team feels as though they are supported and belong. We value diverse perspectives to help us provide essential mental health and substance use disorder treatments to all young people. Charlie Health applicants are assessed solely on their qualifications for the role, without regard to disability or need for accommodation. By clicking "Submit application" below, you agree to Charlie Health's Privacy Policy and Terms of Service. By submitting your application, you agree to receive SMS messages from Charlie Health regarding your application. Message and data rates may apply. Message frequency varies. You can reply STOP to opt out at any time. For help, reply HELP.

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC! ROLE AND RESPONSIBILITIES: The Cybersecurity Engineer is a hands-on technical role responsible for implementing, maintaining, and optimizing security controls across our hybrid infrastructure environment serves as a subject matter expert in designing, implementing, and administering our comprehensive security technology stack. This role combines deep technical expertise in cybersecurity tools with hands-on system administration skills to support our self-hosted, on-premises security infrastructure. The ideal candidate combines infrastructure knowledge with a strong understanding of security operations, compliance requirements, technical implementation and testing and assessing risk. They will be capable of supporting our security toolset including CyberArk, Splunk, OKTA, Tenable, SOAR platforms, and other security analytics solutions. Responsibilities: Vulnerability & Threat Management • Conduct vulnerability assessments across containerized and traditional infrastructure, • Perform ethical hacking and penetration testing to identify security weaknesses on our applications periodically and at times of new releases., • Candidates should have a CEH and be familiar with Nmap, Wireshark, Metasploit, Hydra and Burp to name a few., • Lead remediation efforts and track vulnerability lifecycle management, • Analyze security alerts and incidents, performing root cause analysis, • Administer and optimize enterprise security tools including SIEM, EDR, vulnerability scanners, and container security platforms, • Manage security aspects of VMware infrastructure, storage systems, and network segmentation CyberArk Privileged Access Management • Administer CyberArk PAS (Privileged Access Security) including Vault, CPM, PSM, and PVWA components, • Configure privileged account onboarding, password management policies, and access workflows, • Implement CyberArk integrations with Active Directory, applications, and infrastructure systems, • Manage CyberArk clustering, disaster recovery, and high availability configurations, • Administer Splunk Enterprise infrastructure including indexers, search heads, and forwarders, • Configure and maintain Splunk Enterprise Security (ES) for security monitoring and incident detection, • Develop custom Splunk searches, dashboards, and alerts for security use cases, • Manage Splunk data models, knowledge objects, and correlation rules, • Administer Tenable Security Center and Nessus scanning infrastructure, • Configure vulnerability scanning policies, schedules, and remediation workflows, • Integrate vulnerability data with other security tools and ticketing systems, • Develop custom vulnerability reporting and metrics dashboards, • Implement and maintain SOAR platforms for security automation, • Develop automated playbooks for incident response, threat hunting, and remediation activities, • Create custom integrations between the SOAR platform and existing security tools, • Design automated workflows for security alert triage and response coordination, • Provide Level 2/3 technical support for security incidents and tool-related issues, • Participate in incident response activities and forensic investigations, • Develop and maintain security procedures and troubleshooting guides, • Support 24/7 security operations center (SOC) activities and on-call rotation, • Support compliance initiatives including SOC 2, PCI DSS, NIST SP 800-53 and regulatory audits, • Maintain security tool documentation, configurations, and change management procedures, • Implement logging and audit trail requirements for compliance frameworks, • Develop security metrics and KPI reporting for management and auditors, • Partner with IT infrastructure teams on security tool deployment and maintenance, • Collaborate with application development teams on security tool integrations, • Work with network teams to implement security monitoring and traffic analysis, • Support risk management activities with technical security assessments, • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience, • Relevant certifications preferred: CCSP, CISSP, GCIH, GCFA, Security+, CySA+, GSEC, or equivalent Security Tools Proficiency (3+ years each) • CyberArk: Deep experience with PAS components, policy configuration, and enterprise deployment, • Splunk: Advanced administration of Splunk Enterprise and Enterprise Security, including clustering and performance optimization, • Tenable: Comprehensive vulnerability management experience with Security Center, Nessus, and enterprise scanning, • Advanced Linux administration (RHEL, CentOS, Ubuntu) including shell scripting and automation, • Windows Server administration including PowerShell scripting and Active Directory integration, • Enterprise PKI and certificate management, • Log aggregation, analysis, and correlation techniques, • Incident response procedures and forensic analysis, • Threat intelligence integration and threat hunting methodologies, • 4+ years of cybersecurity experience with focus on enterprise security tools, • 4+ years of hands-on system administration in enterprise environments, • Experience with self-hosted, on-premises security infrastructure, • Proven track record of security tool implementations and migrations, • Strong scripting abilities (Python, Bash, PowerShell) for automation and integration, • Experience with API integration and custom security tool development, • Knowledge of cloud security platforms (AWS Security Hub, Azure Security Center) preferred, • Understanding of DevSecOps practices and CI/CD pipeline security, • Excellent troubleshooting and analytical problem-solving skills, • Technical Leadership: Ability to serve as subject matter expert across various Security tool sets., • Problem-Solving: Advanced analytical skills for complex security tool issues and integrations, • Communication: Ability to explain technical concepts to both technical and non-technical stakeholders, • Project Management: Experience leading security tool implementations and upgrades, • Degree in Cybersecurity or related field, • Experience in regulated industries (government), • Advanced certifications: CISSP, SABSA, TOGAF, or specialized vendor certifications, • Experience with additional security tools: QRadar, Rapid7, Carbon Black, CrowdStrike Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Century City, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: An environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Competitive base, equity, and upside that tracks with your impact., • Flexible Time Off: Enjoy unlimited Flex Time Off, giving you the flexibility to manage your schedule and take time to recharge as needed., • Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options. The anticipated gross base pay range is below for this role. Actual compensation will vary depending on factors such as a candidate's qualifications, skills, experience, and competencies. Base annual salary is one component of StubHub's total compensation and competitive benefits package, which includes equity, 401(k), paid time off, paid parental leave, and comprehensive health benefits. Salary Range$200,000—$250,000 USDAbout UsStubHub is the world's leading marketplace to buy and sell tickets to any live event, anywhere. Through StubHub in North America and viagogo, our international platform, we service customers in 195 countries in 33 languages and 49 available currencies. With more than 300 million tickets available annually on our platform to events around the world -- from sports to music, comedy to dance, festivals to theater -- StubHub offers the safest, most convenient way to buy or sell tickets to the most memorable live experiences. Come join our team for a front-row seat to the action. For California Residents: California Job Applicant Privacy Notice found hereWe are an equal opportunity employer and value diversity on our team. We do not discriminate on the basis of race, color, religion, sex, national origin, gender, sexual orientation, age, disability, veteran status, or any other legally protected status.

Job DescriptionAbout ROH ROH is the hospitality industry’s first payments and revenue management platform purpose built to help hotels increase profitability. ROH drives conversions, increases revenue and provides real-time data and insights for large hospitality groups, asset owners and their brands. ROH’s leading technology, automation and workflow tools unlock productivity for hotel operators by enabling them to effortlessly manage sales, payments and finances all in one place. Developed by industry leaders, ROH has established relationships with leading hospitality brands collectively managing over $4T in Gross Payment Volume (GPV), including Loews Hotels & Co, Crescent Hotels & Resorts, Marriott International, Auberge Resorts Collection, Noble House Hotels & Resorts and Evolution Hospitality. ROH is quickly becoming an indispensable partner to forward-thinking hospitality groups as they optimize sales and finance operations and is proudly backed by investors including Acrew Capital, 1Sharpe Ventures, Founders Fund, Moore Specialty Credit, Correlation Ventures, SilverCircle, Cleo Capital and GMO VenturePartners. About the Role We are looking for a Director of Marketing to own, develop and orchestrate our GTM programs. Working closely with the founder and management team, this person will be a key contributor to building brand awareness, accelerating demand generation, and driving incremental growth from existing customers. Specifically, the candidate will take full ownership of the marketing function.What You'll Do • Strategic Planning: Develop comprehensive marketing strategies aligned with company objectives, market trends, and customer insights, • Brand Development: Cultivate and maintain a strong brand identity with differentiated positioning and visual design that resonates with our target audience and sets us apart in the market, • Lead Generation: Develop the overall strategy to drive lead (MQL) generation efforts through targeted campaigns, content marketing, SEO/SEM, email, social media, industry events and other relevant channels, • Account-Based Marketing: Use customer profiling, segmentation and personalized marketing programs to significantly increase penetration within existing portfolio/operating companies, • Product Marketing: Collaborate with our product team to ensure effective product feature launches, positioning, and messaging that addresses customer needs and the competitive landscape, • Content Creation: Oversee the strategy, messaging, and quality of content execution across our owned, earned and paid distribution channels, • Conversion Rate Optimization: Continually analyze and optimize our conversion funnel with iterative testing and program modifications to increase conversion and LTV, • Budget Management: Develop and oversee marketing budget allocation, ensuring efficient use of resources and maximizing return on investment, • Analytics and Reporting: Establish clear marketing KPI’s, leveraging data-driven insights to evaluate marketing performance, optimize campaigns, and enable the Sales team to more effectively close deals, • Team Development: Build a lean, high-performing marketing team over time, providing guidance, mentorship, and support to drive individual and collective successWhat We Look For, • 10+ years of relevant professional experience in B2B or B2B2C marketing, • Expertise in marketing, sales, and/or go-to-market at a tech or SAAS company, • A track record of developing and implementing successful Demand Gen and ABM programs, • Experience and/or familiarity with the Hospitality industry, • History working at an early-stage, high growth company with lean teams, focused resources and the need for constant prioritization, • Fluency in modern/digital marketing and media platforms and technologies, including managing CRM and email programs, and fluency with Hubspot, • A data-driven and results-oriented mindset and approach to marketing, • Experience building a marketing team from the ground-up and scaling over time, • Excellent project management and communication skills and a highly collaborative mindset

Job Description About Nayya Founded in 2019, Nayya is on a mission to connect people's most important information, so they can thrive in their health and wealth. Powered by AI and advanced analytics, Nayya's platform transforms complex benefits experiences into intuitive, seamless, and ongoing interactions—meeting people's real world needs. As a trusted platform and partner to leading employers, benefits solutions, and HR tech providers, Nayya unlocks long-term value through helping employees live more resilient lives. Backed by strategic investors like ICONIQ, Felicis Ventures, SemperVirens, Workday Ventures, MetLife Nextgen Ventures, and ADP Ventures, Nayya is ushering in the future of health and wealth for all. Role Summary: We are seeking a Director of Security & IT to lead Nayya's security strategy, compliance programs, and IT operations. This role will serve as the single point of accountability for protecting sensitive health and financial data, maintaining regulatory compliance, and ensuring the reliability and security of internal technology systems. Nayya is a benefits intelligence platform serving approximately 5 million employees. Our AI-powered platform delivers personalized guidance grounded in real plan data and claims history. The security and compliance requirements of this environment are significant: we handle Protected Health Information (PHI) at scale and operate under HIPAA, SOC 2, and other regulatory frameworks. This role reports to the Chief Product & AI Officer. The Director of Security & IT will partner closely with Engineering on infrastructure security while maintaining independent ownership of the security program, compliance posture, and IT operations. Key ResponsibilitiesSecurity Program Leadership • Lead the design, implementation, and continuous improvement of a comprehensive security program spanning application security, infrastructure security, data protection, and incident response., • Implement and manage vulnerability assessments, penetration testing, and security audits to identify and mitigate risks across IT infrastructure and systems., • Develop and maintain security policies, procedures, and controls aligned to SOC 2 Type II and HIPAA Security Rule requirements., • Coordinate response to security incidents, including root cause analysis, containment, remediation, and legal reporting requirements., • Own identity and access management (IAM) strategy, ensuring least-privilege access controls across production systems, cloud environments, and internal tools., • Implement encryption, access control, audit logging, and other technical safeguards to meet HIPAA security requirements for data at rest, in transit, and during processing.Compliance & Risk Management, • Own SOC 2 Type II compliance initiatives, including audit preparation, controls documentation, evidence collection, and remediation of findings., • Ensure compliance with HIPAA Privacy and Security Rules across Nayya's handling of PHI, including technical safeguards and organizational policies., • Develop and maintain a risk management framework that identifies, evaluates, and prioritizes security and compliance risks, ensuring alignment with applicable regulations., • Conduct regular risk assessments and vulnerability scans to proactively address potential compliance gaps., • Prepare for and manage regulatory audits, customer security assessments, and external inspections related to data security and privacy., • Stay current on emerging trends in healthcare data privacy regulations (HIPAA, HITECH, state-level requirements) and assess their impact on company policies and procedures.IT Operations & Help Desk Services, • Oversee day-to-day IT operations, ensuring all systems, networks, and applications function effectively and securely with minimal downtime., • Lead the internal IT help desk function, ensuring timely resolution of technical issues with clear escalation protocols and service level agreements (SLAs)., • Monitor help desk performance metrics and implement improvements based on organizational needs., • Manage IT asset lifecycle, including procurement, tracking, maintenance, and compliance with company policies., • Ensure effective onboarding and offboarding processes for IT systems, with a focus on security awareness and HIPAA compliance training.Vendor & Third-Party Risk Management, • Evaluate and manage relationships with cloud providers, vendors, and third-party services to ensure they meet HIPAA and SOC 2 security and privacy requirements., • Conduct due diligence and security assessments of third-party vendors, ensuring alignment with Nayya's data protection and compliance standards., • Negotiate and manage contracts and SLAs to ensure third-party vendors meet security, compliance, and privacy expectations.Cross-Functional Collaboration, • Partner closely with the VP of Engineering on cloud security, infrastructure hardening, disaster recovery, and production access controls., • Work with Legal, Finance, and People teams to ensure security and data privacy strategies align with business operations and legal obligations., • Serve as the primary security and compliance liaison for enterprise customers, partners, and prospects during due diligence and procurement processes., • Act as a strategic advisor to senior leadership on security investments, balancing risk mitigation against operational constraints and business priorities., • Provide regular reports to the executive team on the status of security initiatives, compliance posture, and audit results.Team Leadership & Development, • Lead, mentor, and develop a team of security, IT, and compliance professionals., • Foster a culture of continuous improvement to stay ahead of cybersecurity threats and regulatory changes., • Provide training to team members and the broader organization on security best practices, with emphasis on HIPAA compliance and PHI protection.QualificationsRequired, • 10+ years of experience in security, IT infrastructure, and compliance, with at least 3 years owning a security function in a leadership capacity., • Experience at a scaling software or AI company (50-1,000 employees) with exposure to the tradeoffs of building security programs with constrained resources., • Proven depth in HIPAA compliance, healthcare data protection, and SOC 2 Type II audits., • Strong understanding of cloud security architecture (AWS), network security, container security, and production access patterns., • Experience building or significantly maturing security and compliance programs, not solely operating existing ones., • Demonstrated ability to operate cross-functionally with Engineering, Legal, Finance, and People teams, turning ambiguity into structured execution., • Strong program execution skills with a track record of driving multi-quarter initiatives across security, compliance, disaster recovery, access management, and vendor risk., • Sound judgment in high-trust environments involving sensitive systems, company risk, customer data, and internal operations., • Strong people leadership with experience managing technical teams, setting expectations, and creating accountability., • Ability and willingness to go deep in a hands-on way where needed and delegate to the team where appropriate., • Experience in healthcare, benefits, fintech, or another regulated environment where data sensitivity and compliance requirements are material.Preferred, • Relevant certifications: CISSP, CISM, CCSP, AWS Certified Solutions Architect, or similar. SOC 2 and HIPAA-specific credentials are highly desirable., • Hands-on technical capability to engage in architecture discussions, evaluate operational tradeoffs, and assess technical risk directly when needed. #LI-KD1 Nayya is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics

Job Description:\n\nAbout Phaidra Phaidra is building the future of industrial automation. The world today is filled with static, monolithic infrastructure. Factories, power plants, buildings, etc. operate the same they've operated for decades — because the controls programming is hard-coded. Thousands of lines of rules and heuristics that define how the machines interact with each other. The result of all this hard-coding is that facilities are frozen in time, unable to adapt to their environment while their performance slowly degrades. Phaidra creates AI-powered control systems for the industrial sector, enabling industrial facilities to automatically learn and improve over time. Specifically:We use reinforcement learning algorithms to provide this intelligence, converting raw sensor data into high-value actions and decisions.We focus on industrial applications, which tend to be well-sensorized with measurable KPIs — perfect for reinforcement learning.We enable domain experts (our users) to configure the AI control systems (i.e. agents) without writing code. They define what they want their AI agents to do, and we do it for them. Our team has a track record of applying AI to some of the toughest problems. From achieving superhuman performance with DeepMind's AlphaGo, to reducing the energy required to cool Google's Data Centers by 40%, we deeply understand AI and how to apply it in production for massive impact. Phaidra's ability to achieve its mission is determined by our ability to work together — as defined by our core values: Transparency, Collaboration, Operational Excellence, Ownership, and Empathy. We seek individuals who embody these values, as they are instrumental in ensuring our team consistently delivers excellence and fosters an engaging and supportive culture Phaidra is based in the USA, but we are 100% remote with no physical office. We hire employees internationally with the help of our partner, OysterHR. Our team is currently located throughout the USA, Canada, UK, Sweden, Spain, Portugal, the Netherlands, Singapore, Australia, and India.The Opportunity At Phaidra, security is the bedrock of trust for our customers operating the world's most critical infrastructure. We are looking for a Senior Product Security Engineer to partner directly with our Agentic AI department. This team is at the forefront of our mission, building autonomous agents responsible for optimizing the operational fabric of AI factories. These agents don't just chat; they act. They make real-time decisions to optimize power usage, cooling efficiency, and hardware health, creating a more stable and efficient environment for massive-scale compute. This is a high-stakes environment where the integrity and security of AI-driven decisions are paramount. You will tackle the unique security challenges of deploying autonomous agents that interact directly with physical control systems. Security failures here don't just mean data leaks; they could mean operational downtime or physical degradation of critical hardware. We need a security expert who thrives working hand-in-hand with AI researchers and engineers. Your role is to embed security into the DNA of our Agentic platform, ensuring that as our agents learn and explore, they do so within unbreakable safety boundaries. We are seeking a team member located in the following areas: UK or US (central and eastern time preferred)ResponsibilitiesChampion Secure Agentic AI Development: Drive the adoption of Phaidra's Secure AI/ML Development Lifecycle (SAIDL) within the Agentic AI team. Adapt security practices to fit the iterative and experimental nature of Reinforcement Learning and agent development.Agentic Threat Modeling: Partner with researchers to model threats specific to autonomous agents. Beyond standard AI risks, you will analyze risks unique to agents, such as goal misalignment, reward hacking, infinite looping, and insecure tool execution (e.g., an agent executing a command that exceeds safety limits).Secure Agent Architecture & Safety Boundaries: Design secure-by-default architectures for autonomous agents. Crucially, this involves defining deterministic safety guardrails that sit between the probabilistic AI model and the physical hardware controls. Ensure "Zero Trust" applies to the agent—it should only have the minimum permissions needed to adjust specific parameters.Secure Agent Tools & Memory: Architect security controls for the "tools" the agent uses (APIs to read sensors or change settings) and the agent's long-term memory. Ensure the agent cannot be manipulated into using a tool to perform unauthorized actions or "poisoned" via its memory context.MLSecOps for RL Pipelines: Secure the training and simulation pipelines used for Reinforcement Learning. Ensure the integrity of the simulation environments (Digital Twins) used to train agents, preventing attackers from influencing agent behavior during the training phase.Adversarial Testing & Red Teaming: Lead AI Red Teaming exercises focused on behavioral manipulation. Can you trick the agent into making a suboptimal decision? Can you manipulate the observations the agent receives?Incident Preparedness: Develop incident response playbooks tailored for autonomous systems, focusing on "Kill Switches" and rapid rollback capabilities in the event of rogue agent behavior.Cross-Functional Partnership: Build strong relationships with the Agentic AI researchers, SREs, and Data Scientists. Act as an enabler who helps them deploy powerful agents safely, rather than a blocker.Key QualificationsAgentic AI & RL Security: Proven understanding of the security risks associated with Reinforcement Learning, Autonomous Agents, or automated decision-making systems.AI Partnership: Demonstrated experience working embedded with AI system developers and researchers. You understand the difference between "probabilistic" (AI) and "deterministic" (Code) and how to secure the bridge between them.Core Experience: 5+ years of work experience in product security, application security, or a closely related security engineering role.Safety Engineering Mindset: You understand that in physical systems, "Availability" and "Safety" often outrank "Confidentiality." You are familiar with concepts like fail-safes and human-in-the-loop controls.Technical Depth:Strong programming experience, ideally with Python (essential for ML/AI ecosystems) or Go.Familiarity with agent frameworks (e.g., LangChain, AutoGPT) or RL libraries (e.g., Ray RLLib).Proven experience securing Cloud infrastructure (GCP) and Kubernetes.Deep understanding of Authentication & Authorization (specifically non-human identities/workload identity).Advanced MLOps: Direct, hands-on experience securing MLOps tooling (e.g., Kubeflow, MLflow) and deep understanding of securing complex data and model-training pipelines.Preferred Skills & ExperienceIndustrial / OT Context: Experience working with systems that interface with the physical world (IoT, Robotics, ICS/OT). Understanding of the "IT/OT convergence."Formal Verification for AI: Experience using mathematical methods to prove that an AI model or agent will not violate specific safety constraints.Sim-to-Real Security: Experience securing simulation environments (Digital Twins) and managing the security risks of transferring policies from simulation to the real world.Protocol Fuzzing: Ability to test industrial protocols (e.g., Modbus, BACnet) for robustness against automated or adversarial inputs.AI Governance: Familiarity with emerging standards like the NIST AI RMF or ISO 42001.Critical Systems: Experience securing "closed loops" or control systems where latency and reliability are critical.Certifications: Relevant advanced certifications, such as GICSP (Global Industrial Cyber Security Professional), ISA/IEC 62443 Cybersecurity Expert, NVIDIA Agentic AI, OSEP (Offensive Security Experienced Penetration Tester), CISSP, or OSCP.Our StackAI/ML: PyTorch, TensorFlow, Ray (RL), LangChain, Gemini/OpenAI/Anthropic models.Languages: Python, Go.Infrastructure: Docker, Kubernetes, Terraform.Cloud: GCP (GKE, PubSub, BigTable)Onboarding In your first 30 days — (Foundation and AI Landscape Familiarization)Understand the Mission: Deep dive into "Building AI for AI Factories." Understand the specific physical parameters (power, cooling, airflow) our agents are optimizing.Build Trust: Sit with the Agentic AI researchers to understand their workflow. How do they train agents? How do they simulate environments?Initial Review: Conduct a high-level review of the current "Safety Layer" that sits between the Agent and the control systems. In your first 60 days — (Threat Modeling & Guardrails):Agent Threat Model: Lead a detailed threat modeling session for a specific Agentic workflow. Focus on the Interface between the Agent and the Physical Hardware.Guardrail Implementation: Propose and begin implementing technical controls (guardrails) that enforce deterministic safety rules, ensuring the AI cannot exceed operational limits regardless of its intent.Secure the Tools: Review the security of the internal APIs (Tools) that the agents use to sense and act on the environment. In your first 90 days — (Strategy & Automation):Reference Architecture: Publish a "Secure Agent Reference Architecture" for future agent development.Driving Initiatives: Drive the implementation of the secure reference architectures and remediation of key findings from the threat modeling exercises.Demonstrable Impact: Showcase measurable improvements in the security of the AI/ML pipeline (e.g., implementation of runtime monitoring for anomalous model behavior, reduction of AI-specific vulnerabilities).Strategic Contributions: Establish yourself as the key security partner and expert for the Agentic AI Department.General Interview Process All of our interviews are held via Google Meet, and an active camera connection is required.Meeting with People Operations team member (30 minutes)Meeting with Hiring Manager (30 minutes)Technical Interview with our Senior Product Security Engineer (60 minutes)Meeting with Agentic AI team member (45 minutes)Culture fit interview with Phaidra's co-founders (30 minutes)Base Salary US Residents:Tier 1 (Largest highest-cost metros): 146,200 USD - 199,600 USDTier 2 (Other major metros): 138,640 USD - 189,370 USDTier 3 (Mid-sized metro areas): 131,080 USD - 179,140 USDTier 4 (All other locations): 123,520 USD - 168,910 USD UK Residents:Tier 1 (London): 95,200 GBP - 142,000 GBPTier 2 (Manchester, Birmingham, Edinburgh, Bristol): 89,600 GBP - 134,400 GBPTier 3 (Other areas): 84,000 GPB - 126,000 GBP In addition to base salary, this position is eligible for equity. Final salary will be determined based on several factors, including a candidate's qualifications, skills, competencies, experience, expertise, education and location. In some cases, final compensation may fall outside the posted range. Salary ranges are regularly reviewed and may be adjusted in response to market trends. Benefits & PerksFast-paced, team-oriented environment where your work directly shapes the company's direction.We are a 100% remote company. Competitive compensation & meaningful equity.Outsized responsibilities & professional development.Training is foundational; functional, customer immersion, and development training.Medical, dental, and vision insurance (exact benefits vary by region).Unlimited paid time off, with a required minimum of 20 days per year.Paid parental leave (exact benefits vary by region).Flexible stipends to support your workspace, well-being, and continued professional development.Company MacBook. Please note: Not all of Phaidra's benefits and perks listed above apply to temporary employees such as interns.On being Remote We take a thoughtful and intentional approach to remote collaboration. Inspired by pioneers like GitLab, we embrace proven best practices to foster an exceptional remote work environment. Our culture is documentation-first, and we prioritize asynchronous communication to support focus and flexibility across time zones. While we value independence, we stay closely connected through tools like Slack and video conferencing. Weekly all-hands meetings help us align and build strong relationships, and we regularly host virtual team-building activities and social events to maintain a sense of camaraderie.Equal Opportunity Employment Phaidra is an Equal Opportunity Employer; employment with Phaidra is governed on the basis of merit, competence, and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status. We welcome diversity and strive to maintain an inclusive environment for all employees. If you need assistance with completing the application process, please contact us at Notice Phaidra participates in E-Verify, an employment authorization database provided through the U.S. Department of Homeland Security (DHS) and Social Security Administration (SSA). As required by law, we will provide the SSA and, if necessary, the DHS, with information from each new employee's Form I-9 to confirm work authorization for those residing in the United States. Additional information about E-Verify can be found here. #LI-Remote To be considered for any position at Phaidra, you must submit an online application. This role will remain open until it is filled. Phaidra only hires individuals who are legally authorized to work in the specified location(s) above. We do not provide employment sponsorship. Candidates requiring visa sponsorship, either now or in the future, are not eligible for hire. WE DO NOT ACCEPT APPLICATIONS FROM RECRUITERS.

Job DescriptionAmalgamated Bank seeks a dedicated Chief Information Security Officer to be responsible for designing and implementing the Bank’s Information Security program while protecting the business from cyber security threats. This is a hybrid role reporting to our NYC headquarters. By joining our team, you’ll be joining a Bank that believes that maintaining a diverse and inclusive workplace where everyone feels valued and respected is essential for us to grow as a company. We are dedicated to building a more equitable world in our everyday practices by embracing the values of our employees and customers. Essential Job Functions: • Develop and maintain an Enterprise Information Security Program, • Design a critical response process for Cyber Security incidents, • Identify, report and control Cyber Security incidents, • Manage and train Information Security staff and develop and deliver Information Security training to the Bank’s employees, • Continuously monitor threats to the Bank’s operating environment, • Approve and administer identity access policies, • Maintain a current understanding of the IT and Cyber Security threat landscape for the industry, • Ensure Bank compliance with relevant Information Security laws and applicable regulations, • Lead, and assess the results of periodic security tests, including internal and external penetration testing and phishing, • Schedule table-top exercises for Crisis Team and senior management and report findings to management, including implementation of recommendations, • Review and approve Information Security policies, procedures and controls, • Ensure that they are kept current and are communicated to staff/consultants, • Ensure staff/vendor compliance with the Bank’s security policies and procedures, • Manage a team of employees, contractors and vendors involved in Information Security, • Brief the Executive Team on status and risks, overall strategy and necessary budget, • Communicate best practices and risks to the Bank, • Perform a risk assessment of the Bank’s vulnerabilities in the Cybersecurity landscape and develop the Bank’s risk appetite for Information Security, • Develop Key Risk Indicators (KRIs) and dashboard metrics reporting to both the Management Team and the Board of Directors, • Establish strong working relationships with the Heads of IT and business lines, • Develop and present quarterly reports to the Board of Directors. Knowledge, Skills and Experience Requirements: • Master’s degree or equivalent experience, • Minimum of ten (10) years of experience, at least five (5) years focused on managing information security in a complex, matrixed environment, • Extensive experience in regulated industries, especially financial services; banking experience is preferred, • Proven ability to create and maintain enterprise-level information security programs, • Motivated individual with strong analytical, problem solving and root cause analysis skills, • Ability to work on multiple, time-critical projects simultaneously, • Knowledge of Data Privacy Laws, • Working knowledge of information security engineering concepts and principles, • Familiarity with DFS 500 and similar regulations, • Experience working with external regulators, including NY DFS and FDIC, • Excellent verbal and written communications, including presentation of complex data in easily, understood ways, • Ability to confidently interact at multiple levels in the organization and lead cross-departmental team projects, • Experience presenting to senior levels, including Board of Directors, • CISSP, CISA or CISM designations preferred Our job titles may span more than one career level. The starting base salary for this role is between $240,000.00 – $260,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Job DescriptionNetwork EngineerEmployment Type: Full Time, Experienced levelDepartment: Information Technology CGS is seeking an experienced Network Engineer to join a team focused on the evaluation, enhancement, and maintenance of a large scale network project that includes both wired and wireless network infrastructure and related hardware & software. The project's objectives are to evaluate the current setup of existing disparate networks and design & implement a network infrastructure that encompasses the wireless, wired, and software network requirements. The project will also include consultation regarding hardware and software necessary to facilitate the proper support for this encompassing infrastructure, and the associated systems testing, vulnerability assessments, and quality assurance needed to implement the new setup. This Network Engineer will interface with state and local governmental personnel, internal stakeholders, subject matter experts, and vendor(s) who will provide development services. CGS brings motivated, highly skilled, and creative people together to solve government’s most dynamic problems with cutting edge technology. To carry out our mission, we are seeking candidates that are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:- Operate and manage NPS network infrastructure;- Improve infrastructure monitoring and reporting capabilities based on the deployment of network management software;- Develop, maintain and deliver infrastructure documentation relating to the network infrastructure within the NPS environment;- Review current best practices and provide recommendations for architecture, design, management and operation of the network infrastructure;- Administration of the Cloudpath (or equivalent) onboarding process, monitoring and troubleshooting of wireless network health, maintenance of wireless network infrastructure, implementation of network security patches and software/firmware updates, from 0800 to 1700 PST, Monday-Friday;- Assess the NPS network infrastructure and make recommendations on improvement and optimization;- Define and conduct testing procedures for new infrastructure projects;- Implement technology solutions within the NPS network environment;- Provide design guidance on network solutions within NPS infrastructure projects;- Provide informal training and knowledge transfer to NPS resources on best practices and theory of operation relating to network products. Qualifications:- Bachelor’s Degree from an accredited college or university in Engineering, Computer Science, Business, Information systems or a related discipline.- Strong documentation skills including updating JIRA Tickets, Wiki Pages and Network Diagrams- Ability to communicate with end users, cross-organizational staff and technical assistance center.- CWNA Certification or equivalent- BCNE Certification or equivalent- Experience utilizing (RF) site survey tools such as Ekahau, RF Scanners and Wireshark packet capture software- Strong knowledge of layer 2 switching and layer 3 routing protocols; including VLANs, 802.1w, OSPF and VRRP- Strong knowledge of network security including; 802.1x, MAC Authentication, ACLs, RADIUS and Certificate of Authority (CA)- Strong knowledge of troubleshooting RF and LAN issues- Working knowledge of LINUX, MS Server 2013, VMware, etc.- A Master’s Degree in Engineering, Computer Science, Business, Information systems or a related discipline- At least 3 years experience with disaster recovery plan creation / implementation testing or projects - Experience with penetration testing, vulnerability assessment, and vulnerability testing- Experience with cyber threat information collection and analysis- Working knowledge of Agile/SCUM project management methodologies- Additional Industry certifications/licences Our commitmentContact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting edge technology with world-class personnel to deliver customized solutions that fit our clients’ specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years we’ve been growing our government-contracting portfolio, and along the way we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package:- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran Join our team and become part of meaningful government innovation! Explore additional job opportunities with CGS on our Job Board: For more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell Technology organization seeks an exceptional CISO to define and lead our enterprise-wide security strategy. The ideal candidate is a visionary and pragmatic security leader who can translate complex risk into business outcomes, influence across the company and Board, and scale programs that protect our customers, partners, and platform. They bring proven experience building and maturing security programs aligned to leading frameworks, navigating financial services regulatory requirements, and fostering a security-first culture across product, engineering, operations, and all corporate functions. They are as comfortable in the SOC as they are in the boardroom, with equal fluency in technology, governance, and business risk. What Will You Be Doing? • Own the enterprise information security vision, multi-year strategy, roadmap, and governance model that align to Vestwell's business goals and growth., • Build, lead, and develop a high-performing security organization; attract and mentor top talent and scale operating models and processes to meet Vestwell's future needs., • Evaluate current security technologies and capabilities (e.g., endpoint protection, monitoring/telemetry, DLP, IAM/zero trust, secret management, vulnerability and patch management) and recommend any changes or additions needed to elevate Vestwell's security posture., • Build and mature a comprehensive security program grounded in recognized frameworks (e.g., NIST, ISO 27001, CIS Controls), including policy architecture, control implementation, and continuous improvement and audit readiness., • Establish and operationalize key cybersecurity metrics and KRIs/KPIs; provide concise, decision-oriented reporting to executive leadership and key stakeholders., • Champion a security-first culture via company-wide awareness, training, and targeted education (e.g., phishing exercises), and ensure policies are well-understood and adopted., • Drive secure-by-design practices across product and engineering (e.g., SDLC, threat modeling, code scanning, penetration testing, cloud/infrastructure hardening) and partner closely with IT, Legal, Compliance, and Operations to safeguard PII and sensitive data., • Lead security incident management, including strategy, readiness, tabletop exercises, detection/response, crisis communications, lessons-learned, and executive/Board reporting; ensure tight alignment with business continuity and disaster recovery., • 10+ years of progressive experience in cybersecurity with 5+ years leading enterprise security programs or functions; proven leadership in high-growth or highly regulated environments., • Demonstrated success designing and operating security programs aligned to leading frameworks and sustaining regulatory compliance and audit readiness., • Expert ability to identify, prioritize, and communicate risk; proven track record translating complex technical concepts into actionable insights and decisions for executive, Board, and technical audiences., • Strong cross-functional leadership and collaboration skills; experienced at influencing product, engineering, IT, legal, compliance, and operations stakeholders., • Advanced knowledge across core security domains: endpoint protection, monitoring/telemetry, DLP, IAM/zero trust, vulnerability/patch management, incident response, cloud and infrastructure security, authentication/authorization, and sensitive data protection., • Advanced certifications such as CISSP, CISM, CISA, CCSP, or comparable., • Familiarity with secure SDLC practices, threat modeling, and penetration testing at scale., • Experience leading or supporting SOC examinations and financial services regulatory compliance., • Strategic thinking with the ability to set vision and drive measurable outcomes., • Executive communication and Board reporting; crisp, decision-oriented storytelling., • Talent builder who develops high-performing teams and scalable operating models. OUR BENEFITS We're an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan, Austin, King of Prussia, and Phoenix offices, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan! OUR PROCESS It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well. Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer. We prioritize transparency and lack of surprise throughout the process. For your awareness you will only receive correspondence from any other domain not ending in Vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job Description Firm looking for qualified MBE/WBE/SDVOB subconsultants to join our team in providing eligible candidates for work in the Port District. Concrete field/asphalt plant inspector Experience/Certification Level required: • ACI Concrete Field Testing Technician – Grade I, • NJSAT Asphalt Plant Level 1 & 2, • Radiation Safety-Nuclear Density Gauge Certified, • Efficient in the Marshall Method – ASTM C6926 - Standard Practice for Preparation of Asphalt Mixture Specimens Using Marshall Apparatus, • Perform AASHTO Resource Annual Accreditation equipment calibrations., • Efficient in preparing samples for ASTM C4867 - Standard Test Method for Effect of Moisture on Asphalt Mixtures, • Able to cut asphalt cores and prepare for bulk specific gravity of in place densities in accordance with ASTM D2726 - Standard Test Method for Bulk Specific Gravity and Density of Non-Absorptive, • OSHA 10, • OSHA 30 Concrete field inspector/lab technician Experience/Certification Level required: • ACI Concrete Strength Testing Technician, • ACI Concrete Field Testing Technician – Grade I, • ACI Aggregate Base Testing Technician, • NJSAT HMA Construction Technologist, • Knowledge of AASHTO Resource Annual Accreditation for equipment calibration., • AASHTO Resource CCRL- Rebar measurements., • Knowledge of Portland cement testing, • Efficient in performing ASTM C1202 - Standard Test Method for Electrical Indication of Concrete’s Ability to Resist Chloride Ion Penetration., • Efficient in performing ASTM C215 - Standard Test Method for Fundamental Transverse, Longitudinal, and Torsional Resonant Frequencies of Concrete Specimens, • Efficient in performing ASTM C666 - Standard Test Method for Resistance of Concrete to Rapid Freezing and Thawing, • Efficient in performing ASTM C157 - Standard Test Method for Length Change of Hardened Hydraulic-Cement Mortar and Concrete, • OSHA 10, • OSHA 30

Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes covering multiple technical disciplines, such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware or products that contain code. This includes implementing a product security program designed to address cybersecurity across all stages of the product life cycle. This role identifies and oversees the mitigation of technical and operational threats; analyzes the security, supportability, and feasibility of new technology; and ensures conformance with regulatory guidelines and industry best practices. This position requires an extremely high level of analytical problem-solving skills to diagnose and resolve complex technical issues in addition to superlative process management and communication skills. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role • Develop an architectural vision to support the continued growth of the product suite, • Working knowledge of Data Security Best Practices: At Rest, In Flight, In Use, • Experience with privacy-enhancing technologies and encryption techniques., • Working knowledge of cloud security architecture strategies, frameworks, and reference models, • Proven ability to develop effective partnerships with senior management and peer organizations. Must be able to explain technical concepts and problems to nontechnical senior executives, • Ability to build Risk Models and analyze security weaknesses in complex technology deployments., • Provide security expertise and direction on projects related to cloud architecture and design, implementation, maintenance, governance, and risk management, • Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, identity federation, etc., • Conduct automated (preferred) or manual security validation of cloud templates and/or cloud infrastructure, • Collaborate with business units and corporate partners to ensure they build solutions consistent with the organization's policies, programs, architectural recommendations, and information security standards, • Develop, establish, enforce, and sustain the Information Security Architecture, including standards and guidelines for infrastructure solutions and technologies, integration methodologies and practices, development processes, hardware platforms, and enterprise data design., • Partner with stakeholders in building and implementing a robust, scalable, and agile information security architecture, • Partner with stakeholders in assessing the IT application & infrastructure portfolios today and design and execute the future state strategy to meet business objectives going forward., • Make recommendations on the strategic use of technology for leveraging business results and work with stakeholders to incorporate these recommendations into appropriate roadmaps and life cycle plans., • Anticipate and ensure alignment with long-term business requirements, ensuring identified change is reflected in the appropriate roadmaps, providing thought leadership both internally and externally, • Minimize the number of architectural components and total cost of ownership while maintaining maximum of functional flexibility, reliability, and security., • Must be able to balance the role of strategist with urgency while simultaneously managing and delivering results in a growing and fast-paced environment., • Must demonstrate the ability to manage via influence and have the credibility and interpersonal skills to become respected as a thought leader. Must be capable of articulating pragmatic, sensible, and simple solutions while executing across multiple business and technical perspectives., • Act as a role model for service mentality, building long-term relationships with key internal customers and stakeholders, while remaining receptive to the customer's needs, • Facilitate and steward the documenting of the architecture design and analysis work, including the capture and mapping of the relationships between architecture components. You Will Have • 8+ years’ experience dedicated to information security architecture required with expert knowledge in building defense in-depth reference architecture, • Required industry security certification (e.g., CISSP, CISM, CISA, CCSP, etc.), • Familiarity with information management practices, system development life cycle management, IT services management, agile and lean methodologies, infrastructure, and operations., • Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT and predictive analytics., • Hands-on experience with Cloud Technologies AWS, Azure & GCP, • Good understanding of security management solutions, including IDS, IPS, SIEM, Vulnerability Scanning, Denial of Service, and Continued Compliance, • Experience with attacks and mitigation methods, with experience working in two or more of the following: Network protocols and secure network design; Operating system internals and hardening (e.g. Windows, Linux, OS X, Android); Web application and browser security; Security assessments and penetration testing; Authentication and access control; Applied cryptography and security protocols; Security monitoring and intrusion detection, Incident response and forensics; Development of security tools, automation or frameworks, • Experience in managing and contributing to incident response, • Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation., • Excellent analytical skills, organizational, time management, and problem-solving skills are essential.is work, including the capture and mapping of the relationships between architecture components.

Job DescriptionDescription: TASKS: ? Perform comprehensive cybersecurity risk analysis, identifying and prioritizing risks specifically related to application security. ? Develop, socialize, and implement security strategies to address vulnerabilities in web applications, microservices, APIs, and mobile applications. ? Track and manage progress against security plans, ensuring timely remediation of identified vulnerabilities. ? Lead the security implementation in application development projects, ensuring "secure by design" practices. ? Create and maintain architecture diagrams, outlining secure communication flows, and develop both high-level and low-level security design documents. ? Troubleshoot and resolve application security issues in collaboration with internal teams and external vendors. ? Translate application compliance requirements into specific security controls, recommending compensating measures where appropriate. ? Regularly report on the organization’s security posture, with a focus on application vulnerabilities, to senior management. ? Perform/coordinate application vulnerability assessments and ensure timely remediation in collaboration with the Development, IT, and Systems teams. ? Implement secure coding practices, perform static and dynamic application security testing (SAST/DAST), and support developers with secure code reviews. ? Monitor security incidents and respond to application-level threats, ensuring quick resolution of potential vulnerabilities. ? Establish and enforce secure configurations for applications and their underlying infrastructure, such as databases and APIs. ? Perform threat simulations to detect risks and recommend improvements for securing application designs, API security, identity management, and access control measures. ? Collaborate with teams to ensure continuous integration and continuous deployment (CI/CD) pipelines incorporate security control Requirements: Senior Application Security Engineer Mandatory Skills/Experience • 12 years of experience in application security, with a proven track record of conducting vulnerability assessments, penetration testing, and secure code reviews. • Extensive experience in secure application development, including knowledge of security frameworks like OWASP Top 10, and the ability to guide development teams in implementing secure coding practices. • Proficiency in Software Composition Analysis (SCA) tools (e.g., Veracode, AppSec) for identifying and managing vulnerabilities in open-source libraries and third-party components. • Advanced knowledge of static and dynamic application security testing (SAST/DAST) tools (e.g., Veracode, AppSec, Burp Suite) and integrating these tools into CI/CD pipelines for automated security checks. • Strong cloud security expertise, including securing applications and workloads on AWS, Azure, or GCP, and experience with Web Application Firewalls (WAF) and cloud-native security services. Desirable Skills/Experience • Advanced cloud security experience: Experience securing cloud environments (AWS, Azure, GCP) with tools like Web Application Firewalls (WAF), and implementing IAM, encryption, and monitoring tools. • Experience with scripting and automation, using Python, Bash, or PowerShell, to automate security tasks, integrate security testing tools, and improve the efficiency of security operations. • Strong communication skills: Ability to effectively explain complex security concepts and risks to both technical teams and non-technical stakeholders, ensuring alignment on security measures. • Leadership and mentoring skills: Experience leading security teams or initiatives, mentoring junior engineers, and fostering a culture of security awareness within the organization. • Collaboration and cross-functional teamwork: Proven ability to work effectively with development, DevOps, and IT teams to integrate security into all aspects of the business, ensuring security goals align with business objectives. • Highly flexible/willing to learn new technologies. • Highly organized with excellent analytical, problem solving and decision-making skills. Additional Qualifications: • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), or GIAC Web Application Penetration Tester (GWAPT) are highly preferred., • Knowledge of compliance standards like NIST, PCI-DSS, and GDPR and how they apply to application security.

Job Description Incisive. Inclusive. Invested. We’re Axinn. Experienced, tenacious, and always trial-ready, we are committed to understanding complex legal challenges that impact the future of our clients' businesses, globally. Focusing on antitrust, intellectual property, and high-stakes litigation, our extensive teams in the U.S. possess deep knowledge and client-side experience across a range of sectors, including technology, healthcare, life sciences, and consumer products. At Axinn, inclusivity is central to who we are. We have a purpose that goes beyond profit, which includes fostering a fair, welcoming workplace and supporting the communities where we live and work. We actively recognize talent and promote opportunities for all team members. By embracing the unique experiences and perspectives of our people, we fuel creativity and deliver results for our clients. The Firm’s Manager of Information Security is responsible for developing, implementing, and maintaining a comprehensive information security program to protect the firm’s data, systems, and client information. This role ensures the confidentiality, integrity, and availability of all information assets across the firm’s technology and operational infrastructure. The position involves close collaboration with IT leadership, legal professionals, and firm management to maintain compliance with client, regulatory, and industry standards. The position will serve as a strategic advisor to leadership, a hands-on technical manager, and a mentor to security staff, ensuring the Firm’s success in a highly evolving threat landscape. Responsibilities and Duties: • Develop and maintain the firm’s information security policies, standards, and procedures., • Develop, implement, and maintain a comprehensive information security program that aligns with the firm’s strategic objectives and client confidentiality obligations, • Establish metrics to monitor program effectiveness and present updates to Firm leadership, • Assess and manage cybersecurity risks; conduct vulnerability assessments and penetration testing, • Lead incident response efforts, including investigation, remediation, and reporting, • Develop playbooks and run regular tabletop exercises to ensure readiness, • Ensure compliance with NIST, ISO, HIPAA, and client confidentiality obligations, • Oversee (develop and maintain) security policies, procedures, training, and awareness programs for attorneys and staff, • Manage security tools (firewalls, endpoint protection, SIEM, IAM, etc.), • Collaborate with IT, Legal, and Compliance teams on security integration, vendor oversight, and cloud management, • Conduct regular risk assessments and vulnerability testing; manage mitigation and remediation efforts while presenting findings and reports to leadership, • Manage and mentor security staff, • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field required (advanced degrees are preferred), • CISSP, CISM, CISA, GIAC, COMPTia Security+, GISO, certifications are a plus, • Minimum 7–10 years of progressive IT and information security experience, with at least 3 years in a leadership role, • Proven expertise with security frameworks and standards such as NIST, ISO 27001, and HIPAA, • Strong understanding of law firm technology environments, including document management systems, practice management tools, cloud-based platforms, and eDiscovery systems, • Demonstrated ability to lead incident response, risk management, and compliance efforts, • Excellent interpersonal and communication skills, both verbal and written, with experience presenting complex security topics to senior leadership and non-technical stakeholders, • Effective time management skills, with the ability to handle a variety of tasks simultaneously and manage multiple projects while prioritizing assignments, • Ability to build rapport with attorneys, professional staff, and vendors, • Self-motivated, with the ability to work independently but within a team environment At Axinn, we offer market competitive wages and generous benefit options to our valued employees. This includes, but is not limited to, the following: • Competitive starting pay and annual discretionary bonus and raise eligibility, • Generous paid time off benefits (vacation, personal days, holidays, and sick leave), • Firm paid short and long-term disability, plus life and accident insurance, • 401(k) Profit Sharing Plan and Cash Balance Retirement Plan with generous employer contributions (please ask for further details re: eligibility requirements), • Comprehensive medical, dental, and vision insurance options, • Flexible spending and health savings accounts (medical plan dependent), • Firm paid comprehensive Employee Assistance Program (EAP), • Student loan refinancing discounts, • Lifestyle reimbursement program This is a full-time, benefits eligible, exempt level position. Final rate of pay and title will be commensurate with the incumbent’s experience, with a targeted hiring range of $160,000 - $175,000 (the upper range reserved for highly qualified applicants). This position is currently available in either our NY, CT, or DC office locations. Axinn is an equal employment opportunity employer and is committed to creating an environment that draws upon the strength of the diversity of its workforce to achieve excellence in the Firm's field and beyond

Job Description About Fin Fin is a next-generation payments platform built for high-value, global, and instant transactions. We are a Series A-stage company backed by Sequoia, Circle, and other notable investors. Powered by stablecoins, Fin enables users and businesses to move millions of dollars in seconds - whether to other Fin users, directly into bank accounts, or across crypto rails. By combining the speed of crypto with the reliability and trust of traditional finance, Fin reimagines how money moves worldwide. If banks and payment products were reinvented today, they would look like Fin. About the Role We are looking for a Mobile Engineer to own our mobile experience across iOS and Android using React Native. This will be the first time many users interact with Fin, so your work will define how our product feels in the real world. You will turn messy real world payment flows into simple, intuitive interfaces, and help hide the complexity of crypto, wallets, and cross border settlement behind a smooth mobile experience. You will work closely with the founders and the rest of the engineering team, make foundational decisions about architecture and design, and ship features from idea to production. If you care about building delightful consumer products on top of serious infrastructure, this is for you. We value your time: our process focuses on practical system design and architectural discussions, not LeetCode grinding or unpaid take-home assignments. Responsibilities * Own the Fin mobile app across iOS and Android using React Native, from architecture to implementation and polish. * Design and implement flows that make sending, receiving, and managing money feel simple and trustworthy for everyday users. * Help design secure account and custody patterns that can scale to handle meaningful balances and real world usage. * Collaborate with design and product to prototype, refine, and ship new features quickly. * Maintain a high bar for code quality through thoughtful architecture, code review, and testing. * Work with backend and infra engineers to integrate APIs, payments, and identity or security features into the mobile app. Qualifications * 3+ years of experience building and shipping mobile apps in React Native. Deep familiarity with the Expo ecosystem and modern mobile build pipelines (EAS) is required. * Strong product sense and attention to detail in UI and UX, especially for consumer facing apps. * Solid understanding of mobile app architecture, performance, and offline or edge cases. * Ability to work independently, set priorities, and drive projects from idea to shipped. * Strong communication skills and comfort collaborating with design, product, and backend teams. * Interest in payments, fintech, or crypto. You do not need to be a chain maximalist, but curiosity about the space helps. Bonus Points * You have shipped an app from concept to production in a small team or as the primary developer. * Experience in EITHER traditional consumer fintech apps (neobanks, peer-to-peer payments) OR mobile crypto wallets (Solana, non-custodial, etc). * Experience with cloud platforms such as GCP or AWS. * Experience deploying smart contracts on Solana or integrating with blockchain based systems. * Background in security, threat modeling, or penetration testing, especially for consumer finance products. Compensation Range: $125K - $250K

Job Description Who We Are: Click Therapeutics, Inc., develops, validates, and commercializes software as prescription medical treatments for people with unmet medical needs. As a leading innovator of Digital Therapeutics™, Click delivers accessible, clinically proven, FDA-regulated prescription treatments to the smartphone in your hand. Click's treatments are defined by a commitment to applying technical and scientific rigor and patient-centric design to the development process. This results in uniquely engaging experiences that achieve compelling clinical outcomes for patients seeking new treatment options. Click Therapeutics continuously expands and refines its platform with novel cognitive, behavioral and neuromodulatory mechanisms of action and advanced data-driven tools such as artificial intelligence and machine learning. The digital therapeutics under development on Click's platform address diverse areas of therapeutic need, including indications in psychiatry, neurology, oncology, immunology, and cardiometabolic diseases. Consistently named a best place to work, Click fosters an inclusive, diverse workforce of innovators, clinicians, scientists, researchers, designers, technologists, engineers and more, united in a common mission to provide patients everywhere access to safe and effective prescription digital therapeutics. For more information, visit and connect with us on LinkedIn. About the Role: As Information Security Lead, you'll be at the forefront of safeguarding our groundbreaking digital therapeutics. We're seeking an individual with deep technical expertise in information security in the healthcare sector, ready to tackle complex challenges and pioneer innovative solutions. This isn't just a role; it's an opportunity to build, mentor, and inspire a high-performing team, while strategically collaborating across diverse departments to embed security into the very fabric of our revolutionary products. Your ability to swiftly master new technologies and meticulously adhere to processes in a highly regulated environment will be crucial as you champion information security across every facet of our company and with all our valued partners. This position is based out of Click's headquarters located in Tribeca, NYC, at the center of one of the fastest-growing digital health communities. We have a hybrid working model that consists of at least 4 days in office each week. Responsibilities: • Maintain, and continually improve the Information Security Management System (ISMS) to maintain relevant certifications (e.g., ISO 27001, SOC 2, IEC 81001-5-1 and UK Cyber Essentials Plus)., • Lead the technical security aspects of data privacy to ensure compliance with GDPR, CCPA, and HIPAA., • Lead and mature the company's Security Operations Center (SOC) capabilities, including threat intelligence, monitoring, detection, and analysis., • Responsible for collecting, analyzing, escalating, and responding to cybersecurity vulnerabilities, threats, and attacks using SIEM and EDR technologies., • Collaborate with Engineering to ensure Secure Development Lifecycle (SDLC) practices are followed, integrating threat modeling, static/dynamic analysis, fuzz testing, and formal verification into the development process., • Develop and maintain reporting of Key Performance Indicators (KPIs) of threats and incidents, including incident response timeliness and general observability metrics., • Oversee security testing activities, including penetration testing and vulnerability scanning., • Conduct security training and awareness programs for employees to promote a culture of security., • Oversee all third-party and vendor risk management activities, • Collaborate with Quality and Regulatory on cybersecurity processes, • Support regulatory submissions by generating Cybersecurity Quality Management System (QMS) documentation, ensuring compliance with FDA Cybersecurity Guidance (2025), EU MDR, NIST 800-53, IMDRF, and AAMI TIR57.Qualifications:, • Experience within a highly regulated industry such as medical devices, pharmaceuticals, biotechnology, or healthcare, • Understanding of common security frameworks and standards, including NIST Cybersecurity Framework (CSF), ISO 27001/27002, and SOC 2., • Knowledge of risk assessment methodologies, threat modeling, network security, cloud security (AWS), application security, and data protection technologies., • Experience leading or participating in formal security audits., • Experience in interfacing with engineering teams and running in tiger-teams or embedded SME Scrum teams. The base salary range for this position is between: $130,000 - $180,000. The final base salary will be dependent upon skills, experience and location. In addition to the base salary, Click Therapeutics offers an annual performance-based cash bonus and a generous equity package. Benefits: The role includes great benefits and is an excellent wealth-building opportunity at a fast-growing pre-IPO company in a nascent and extremely exciting space. Competitive Salary with Annual Review | Cash Bonus | Stock Options | 5% 401(k) matching | Medical | Dental | Vision | Life Insurance | Voluntary Benefits | Unlimited PTO | Uber One | Nectar Rewards | One Medical | Fertility Support | Fitness Reimbursement | Bike Membership | Professional Development Stipend | DoorDash and Catered Lunches | Parent Benefits | LinkedIn Learning | Gemini Enterprise Stack | Industrious Workspaces | Commuter Subsidies | Flexible Work Arrangement | Choice of Mac or Windows | Sponsored Company Events | Office Snacks and Beverages | Much More… Equal Employment Opportunity: Click Therapeutics is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, disability or veteran status. Click Therapeutics also complies with all applicable national, state and local laws governing nondiscrimination in employment as well as employment eligibility verification requirements of the Immigration and Nationality Act. All applicants must have authorization to work for Click Therapeutics in the U.S. In certain circumstances it may be advantageous to Click Therapeutics to support the application(s) for temporary visa classification and/or sponsor applications for permanent residence so that a foreign national colleague can accept or remain in a work assignment in the U. S. For certain classes of temporary visas, the resulting work authorization may be specific to Click Therapeutics and the specific job and/or work site. Click Therapeutics may at its business discretion decide to or refrain from obtaining, maintaining and/or extending the temporary visa status and/or sponsoring a colleague for permanent residency and /or employment eligibility, considering factors such as availability of qualified U.S. workers and the colleague's long-term prospects for securing lawful permanent residence, among other reasons. Employment applicants requiring immigration sponsorship must disclose, when initial application for employment is made, whether or not they are legally authorized to work for Click Therapeutics in the U.S. and, if so, whether that authorization permits them to work in the job they seek. In no case should Click Therapeutics support of a colleague's temporary visa application or sponsorship of a colleague for permanent residence be construed to guarantee success of that application or amend or otherwise invalidate the "at-will" employment relationship between the colleague and Click Therapeutics. Recruitment Phishing Scams: Fake job advertisements and offers are increasingly appearing on the internet. If you have encountered a job posting or have been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond and report it to the Federal Trade Commission and the FBI at . Please be mindful of the following: • Click Therapeutics will conduct interviews face-to-face over Zoom., • All job postings will be listed on the Click Therapeutics official career page.

Job DescriptionWho we are: EHE Health is the leading national preventive healthcare provider network partnering with mid- and large-sized employers to help their employees and dependents stay healthy by screening and diagnosing health risks through comprehensive exams, allowing for early intervention. Named by Fortune Magazine and Great Place to Work® as one of the Best Workplaces in healthcare, EHE Health is headquartered in New York City and has over 200 health clinics and practices across the U.S., staffed by a network of curated primary care physicians and clinicians. EHE Health was recently acquired by Consello Capital, the private equity arm of Consello. This transformative partnership leverages Consello’s proven expertise in scaling high-growth ventures and its extensive network of industry leaders. Together, EHE Health and Consello will unlock unprecedented opportunities to accelerate EHE Health’s mission of revolutionizing preventive care. What we’re looking for: EHE is looking for a talented Director, Security and Privacy to support our IT and Privacy & Security teams in ensuring proper security protocol and procedures around all of our infrastructure. The Director, Security and Privacy will facilitate and implement processes to assess the compliance of our security policies in accordance with standard frameworks. They will regularly perform internal audits, risk assessment, and security analyses to keep all processes and controls in optimal form. The ideal candidate will be detail-oriented, proactive, and collaborative while managing the complete incorporation of security best-practices across the organization. In this role, you will: • Perform information systems security and assurance audits of networks, systems, applications, platforms, databases, and operating procedures in accordance with established auditing standards, • Participate in vulnerability and risk assessment reviews and evaluations of the EHE’s IT infrastructure to determine adequacy of the controls to detect and prevent unauthorized activities, provide an acceptable level of risk to the organization, and establish controls to mitigate loss, • Conduct third party risk assessments and oversee adherence to EHE requirements, • Communicate with and educate process owners on the importance of controls and an effective control environment, • Analyze security event data from customer computing platforms, network elements, and security devices, • Perform health checks on relevant operational systems, • Generate routine metrics and operational reports, • Perform threat research on emerging cyber-attacks that could impact our clients and patient, • Develop actionable, repeatable, measurable, and reportable security strategies, • Promote awareness of security policies and related security topics, • Bachelor’s degree in related field required, • 5-7 years of related experience in change management and steering third party compliance audits and network/wireless/web app penetration tests, and acting upon remediation recommendations, • Comprehensive understanding of National Institute of Standards and Technology (NIST) 800-53, ISO27001/27701, SOC2 Type 2 and similar regulations, • Deep knowledge of Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH Act), and the Sarbanes-Oxley Act (SOX), • Excellent written and verbal communication skills, with the ability to present and clearly disseminate information to all audiences, internal and external, • Overall knowledge and usage of cybersecurity tools, such as SIEM, EDR, and XDR, • Proven track record implementing strong identity and access management policies to enforce the principle of least privilege across all infrastructure and SaaS applications, • Robust experience analyzing cloud infrastructure misconfigurations and prioritizing risk-based mitigations, • Strong familiarity automating application security testing (SAST/DAST/SCA) and executing remediations, • Competitive salary, • Medical, dental, vision, life and disability insurance, • Employer-matched 401(k) plan, • Professional development reimbursement, • Employee access to our wellness clinics EHE is committed to Equal Employment Opportunity and to attracting and retaining the most qualified employees. Powered by JazzHR vrW0dpJEuF

Job Description Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeam, Trusteer and more). Cato's unique technology inspired a brand-new product category, later named "SASE" by Gartner and a market expected to reach $28.5 billion by 2028. This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don't miss it! About the Role As a Product Enablement Data Engineer at Cato Networks, you will design, generate, and manage realistic data feeds that power our cloud-managed networking and security platform. This role focuses on creating synthetic yet highly realistic traffic, attack simulations, and telemetry pipelines that replicate real-world customer environments. Your work will enable compelling demos, proof-of-value engagements, and hands-on lab experiences that showcase the full capabilities of the Cato platform. You will collaborate closely with lab engineers, content developers, product management, engineering, and sales engineering teams to deliver scalable and reliable data-driven enablement solutions. Responsibilities * Design and build realistic SaaS traffic simulations and network behavior scenarios * Develop repeatable traffic generation frameworks for demos, labs, and validation environments * Simulate network conditions such as latency, packet loss, jitter, and bandwidth constraints * Create and execute attack simulations aligned with frameworks such as MITRE ATT&CK * Model intrusion techniques including lateral movement, command-and-control traffic, and data exfiltration * Build modular, programmatic attack simulation libraries * Integrate with SaaS platforms via APIs to provision tenants, configure policies, and retrieve telemetry * Deploy and manage cloud-based infrastructure (AWS/Azure) for traffic generation and simulations * Configure VPN connectivity and ensure secure communication between lab and SaaS environments * Build dashboards and monitoring systems to validate telemetry, detection accuracy, and data health * Implement alerting and perform root-cause analysis for data or pipeline failures Requirements * 10+ years of experience in networking or security engineering * 5+ years of experience in data, network, or security engineering * Strong programming skills in Python * Experience working with REST APIs and authentication workflows * Experience building or supporting penetration testing or security simulation workflows * Hands-on experience with Azure (AWS is a plus) * Experience with Infrastructure-as-Code tools such as Terraform * Experience generating network traffic using tools like Scapy, tcpreplay, or iperf * Strong knowledge of Linux environments and networking tools (tcpdump, curl, netstat, etc.) * PowerShell scripting experience for Windows automation and system provisioning * Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, TLS) * Experience configuring VPN clients and secure connectivity * Familiarity with MITRE ATT&CK or similar security frameworks Preferred Qualifications * Networking or security certifications (e.g., CCNA) * Experience building demo or enablement environments * Experience with GraphQL APIs * Familiarity with traffic shaping tools (tc, netem) * Experience with monitoring and observability platforms (Grafana, ELK, Prometheus) * Experience simulating adversary behaviors in controlled environments * Background in cybersecurity, SASE, or networking platforms Why This Role Matters This role ensures that Cato's platform is demonstrated and validated using realistic, high-fidelity data that mirrors real customer environments. Your work will directly influence how effectively customers understand the platform's capabilities, as well as the accuracy of product detection, analytics, and overall performance in real-world scenarios. By building the data foundation behind demos, labs, and proof-of-value engagements, you will play a critical role in showcasing the technical value of Cato's platform. Cato provides a competitive salary and comprehensive benefits plan. Benefits for this role include health/vision/dental insurance, 401(k), stock options, Health Savings/Flexible Spending Accounts, flexible time-off, paid parental leave and disability benefits. As an EEO/Affirmative Action Employer all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status. #LI-GG1

Notes on Product Testing: - Each product test is conducted by a third party, independent company.

Online Consumer Panels America is a consulting firm that specializes in product testing and product development work. We design and conduct In-Home Usage Testing (IHUT) locally and nationally to provide actual user feedback in real-time to companies and market research firms to evaluate products to

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

Help us succeed as our next Netflix QA Tester to perform responsibilities as a QA Tester.Stay adaptable to changing priorities and business needs.Stay adaptable to changing priorities and business needs.Perks include competitive pay, flexible scheduling, training opportunities, a supportive workplac

No previous testing or gambling experience is needed. All the interactions/game-play would be for testing purposes. Participate in user experience testing on various online casino platforms.

The IT Business Systems Delivery (BSD) Customer Engagement Product Delivery team supports, manages and implements a portfolio of IT system capital initiatives with a focus on delivering value to the business.We are looking for a talented and experienced individual to join our team as a Business Anal

As part of the penetration test team, your primary responsibility will be performing hands on penetration testing of some of the firms most critical web and mobile applications. Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cyberse