Trabajos penetration testing en North Bergen, NJCrear alertas

Job Description About the Company TipLink is a company merging the world of crypto and payments. Crypto rails can be cheaper, faster, and more global than traditional finance, enabling new products that couldn’t otherwise exist. TipLink is leading the charge with innovation at this intersection. The company is backed by investors including Sequoia, Multicoin, Circle, Solana Ventures and more. About the Role TipLink is looking for an experienced Mobile developer to join our engineering team. You’ll be playing a foundational role in building out our mobile offering, including iOS and Android apps in React Native. You should be passionate about creating compelling user experiences. You will be shaping many peoples’ first experience with crypto, from idea generation all the way up to implementation and fine-tuning. We need someone who can come up with practical solutions for difficult engineering problems -- without compromising on the usability people have come to expect from Web2. You will be a core team member with a huge say in our architecture, design philosophy, and product roadmap. We seek exceptional talent to build the next generation of user experiences in crypto, enabling us to change the world of payments. Responsibilities * Own our upcoming mobile app across Android and iOS * Help design a secure self-custody solution that can scale to support moving people’s entire financial lives on-chain * Speak directly with users to collect stories and identify key features * Maintain a high bar for other team developers through architecture and design review, estimation, code reviews, and education Qualifications * 3+ years of experience building iOS apps with React Native * Some experience with security work or cryptography is strongly preferred * Ability to work independently and aggressively prioritize * Interest in cryptocurrency / web3. Our main focus is in developing great consumer products, but some domain expertise is helpful! Strongly Preferred * Experience having shipped an app from concept to production on your own or in a small team * Experience with Next.js or Rust. * Experience with GCP or similar cloud computing technology * Experience deploying smart contracts on Solana * Some experience with offensive security threat modeling, ie penetration testing Benefits * Equity and a competitive salary. * Comprehensive health care, dental, and life insurance. * Unlimited paid time off. * Relocation stipend for NYC.

Job Description This job opportunity is part of an RFP process; candidates are invited to submit their resumes detailing relevant experience. Job Title: Quality Control Tester, Associate Onsite Requirement: A couple of days onsite required and travel to different sites. Job Summary: The Quality Control Tester, Associate will support the testing efforts of the modernized Chapter 683 systems by designing and executing both manual and automated test cases focused on security, system reliability, and performance. The Quality Control Tester, Associate will contribute to all test activities from planning to execution and reporting, ensuring compliance with client’s technical and security standards. This role requires experience in manual, automated, and performance testing, with proficiency in tools such as Selenium, Microsoft Test Suite, and performance/load testing platforms. Familiarity with certification and auditing requirements is a strong plus. Key Responsibilities • Execute manual and automated test cases across platforms (web, tablet, mobile) for applicant and admin applications., • Leverage tools such as Selenium and MS Test Suite to automate functional and regression tests., • Validate system performance under high load scenarios typical of summer hiring cycles., • Conduct performance, load, and stress testing using tools like JMeter or LoadRunner to ensure system scalability and stability., • Assist in penetration testing and report findings based on Third Party Security Requirements of the client., • Conduct system-level regression and integration tests, validating updates in new and existing features., • Support cross-browser testing to ensure consistent behavior across Chrome, Firefox, Edge, and Safari., • Participate in sprint planning and Agile ceremonies to ensure test coverage aligns with development timelines., • Identify, document, and track bugs using project tools; retest fixes and close issues., • Support creation of reusable test data and scripts for ongoing regression testing., • 8+ years of software testing experience with a focus on manual and automated execution., • Hands-on experience with Microsoft Test Manager, Coded UI, or comparable QA tools., • Experience with Selenium and Microsoft Test Suite across manual, automation, and performance testing efforts., • Background as a Manual Tester, Automation Engineer, and Performance Tester is highly desirable., • ISTQB Foundation or Advanced certification., • Familiarity with client applications and data integration environments, • Knowledge of DB2, SQL, and system interoperability testing., • Knowledge of performance/load testing tools such as JMeter or LoadRunner., • Demonstrated ability to support regression testing and ensure test cases meet certification and audit standards., • Understanding of non-functional requirements including scalability, cross-browser compatibility, and system stability., • Strong attention to detail with the ability to interpret complex business logic., • Experience testing systems within a .NET environment and familiarity with data migration scenarios. The projected compensation range for this position is $88,200 to $111,600 per year benchmarked in the New York area. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience. LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits. Devoted to Fair and Inclusive Practices All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at . Securing Your Data Beware of fraudulent job offers using LCG's name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from lcginc.com or emails, not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information, contact us immediately at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Job Description Vistrada is looking to hire a strong Cybersecurity Analyst to join our Cybersecurity practice. A Cybersecurity Analyst is part of a team that consults with clients about cybersecurity related topics and strategies. This role helps clients identify cybersecurity related improvements, conduct cybersecurity risk assessments, conduct cybersecurity scans and testing, document cybersecurity related policies and procedures, and respond to cybersecurity related issues. Responsibilities Include: • Conduct regulatory compliance audits and assessments utilizing frameworks like CMMC, NIST, CSF, ISO, PCI, HIPAA, etc., • Create and update cybersecurity related policies and procedures., • Participate in the creation of cybersecurity awareness training programs, materials and conduct training sessions., • Perform scripted penetration testing and vulnerability scanning utilizing tools like Clone Systems., • Review and deliver penetration testing and vulnerability scanning reports to clients., • Participate in the on-boarding of clients into GRC tools like Apptega., • Provide training and support to clients for our GRC tools., • Participate in activities related to phishing\social engineering testing, physical security assessments, and tabletop exercises., • Participate in activities related to our advisory services offerings including planning, budgeting, presentation building, crisis management, etc., • Participate in activities related to cybersecurity incident response and remediation., • Keep abreast of emerging technologies related to cybersecurity and communicate findings to the team., • Knowledge of NIST 800-53, NIST 800-171, CSF, CMMC, DFARS, IS027001, PCI, HIPAA and other regulations, • Possess a bachelor’s degree in Cybersecurity, • Policy Development, • 1-5 years of experience, • Vulnerability Scanning / Penetration Testing, • Ability to handle multiple assessments at one time, • Possess/pursuing certifications such as CISA or CISSP, or something similar, • Strong analytical skills and ability to effectively prioritize and coordinate multiple deliverables simultaneously, • Strong ability to work effectively in a team and to communicate verbally and in writing with both external and internal customers Benefits: Medical, Dental, 401K (with employer match), Disability, Paid Time Off, and Bonus Program. Salary Range: $60K-$80K Company Background: Vistrada is a Business, Technology, and Management services firm dedicated to helping clients plan and implement initiatives across Business and Technology Transformation, Integrated Risk Management, Cybersecurity, and Managed Services. Vistrada provides deep expertise and flexible team structures ensuring agility and responsiveness to support our client’s evolving needs. We leverage the right team during a client’s journey to optimize their investment and commitment. Founded in 2007, Vistrada LLC is a profitable privately-held minority-owned organization. With more than 500+ people successfully serving clients today, our teams operate with a breadth of expertise bringing Big 4 consulting, agency, and Fortune 500 company experiences to clients. Our clients include the most prestigious institutions and many emerging companies with relationships spanning 10+ years. Vistrada has extensive public and private sector experience. Powered by JazzHR J26xsW7PZe

Job Description CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024. As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you're someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry. CoreWeave powers the creation and delivery of the intelligence that drives innovation. What You'll Do: CoreWeave's Information Security team is seeking an experienced and talented offensive security engineer to join our team. As part of the Information Security Organization at CoreWeave, security engineers work to measure and improve the security of internal and external infrastructure and application offerings that provide high-power compute to customers. CoreWeave Security engineers integrate within engineering to act as a security liaison between product, engineering, and security. They provide assurance to business & network partners that CoreWeave's capabilities and technologies have been adequately hardened. About the role: • Perform penetration testing as well as purple and red team exercises, • Conduct threat modeling, code reviews, and design reviews for development teams within the business, • Research/stay abreast of new hacking techniques and find ways to counter them, • Find effective solutions to information security related problems, • Develop best practices and improve security standards for the organization to adhere to while maintaining our internal compliance stance and security posture, • Ability to provide solutions to complex issues; handle multiple tasks in a fast-paced environment; set priorities; meet deadlines per project scope, • Demonstrated ability to present complex, technical information to both technical and non-technical audiences, • Strong time management, good technical writing, presentation, and documentation skills, • Ability to work with minimal supervision, attention to detail, and follow-through, • Other work-related duties as assignedWho You Are:, • Proficiency in using at least one programming or scripting language (e.g. GoLang, Python, C/++) to solve automatable tasks and perform code reviews, • At least five years of experience in the offensive information security industry, • Penetration Testing experience, • Strong technical background and experience writing and using offensive security tooling, • Experience using Kubernetes and Kubernetes-related security measures, • Extensive experience with Linux OS environments, • Ability to navigate ambiguity and determine solutions to underlying problems, • Excellent interpersonal, verbal, and written communication skills with strong attention to detail, • Ability to work with minimal supervision while handling multiple tasks in a fast-paced environment, • Certifications like Sec+, Net+, OSCP, or other relevant industry certifications., • An understanding of best practices and how to implement them at a business-wide level, • 5+ years' experience in the information security industry or related role Wondering if you're a good fit? We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren't a 100% skill or experience match. Why CoreWeave? At CoreWeave, we work hard, have fun, and move fast! We're in an exciting stage of hyper-growth that you will not want to miss out on. We're not afraid of a little chaos, and we're constantly learning. Our team cares deeply about how we build our product and how we work together, which is represented through our core values: • Be Curious at Your Core, • Act Like an Owner, • Empower Employees, • Deliver Best-in-Class Client Experiences The base salary range for this role is $188,000 to $275,000. The starting salary will be determined based on job-related knowledge, skills, experience, and market location. We strive for both market alignment and internal equity when determining compensation. In addition to base salary, our total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program (all based on eligibility). What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job Description Firm looking for qualified MBE/WBE/SDVOB subconsultants to join our team in providing eligible candidates for work in the Port District. Concrete field/asphalt plant inspector Experience/Certification Level required: • ACI Concrete Field Testing Technician – Grade I, • NJSAT Asphalt Plant Level 1 & 2, • Radiation Safety-Nuclear Density Gauge Certified, • Efficient in the Marshall Method – ASTM C6926 - Standard Practice for Preparation of Asphalt Mixture Specimens Using Marshall Apparatus, • Perform AASHTO Resource Annual Accreditation equipment calibrations., • Efficient in preparing samples for ASTM C4867 - Standard Test Method for Effect of Moisture on Asphalt Mixtures, • Able to cut asphalt cores and prepare for bulk specific gravity of in place densities in accordance with ASTM D2726 - Standard Test Method for Bulk Specific Gravity and Density of Non-Absorptive, • OSHA 10, • OSHA 30 Concrete field inspector/lab technician Experience/Certification Level required: • ACI Concrete Strength Testing Technician, • ACI Concrete Field Testing Technician – Grade I, • ACI Aggregate Base Testing Technician, • NJSAT HMA Construction Technologist, • Knowledge of AASHTO Resource Annual Accreditation for equipment calibration., • AASHTO Resource CCRL- Rebar measurements., • Knowledge of Portland cement testing, • Efficient in performing ASTM C1202 - Standard Test Method for Electrical Indication of Concrete’s Ability to Resist Chloride Ion Penetration., • Efficient in performing ASTM C215 - Standard Test Method for Fundamental Transverse, Longitudinal, and Torsional Resonant Frequencies of Concrete Specimens, • Efficient in performing ASTM C666 - Standard Test Method for Resistance of Concrete to Rapid Freezing and Thawing, • Efficient in performing ASTM C157 - Standard Test Method for Length Change of Hardened Hydraulic-Cement Mortar and Concrete, • OSHA 10, • OSHA 30

Job DescriptionCompany Description Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included. As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few! Job Description Your Career The Principal Consultant on the Offensive Security team is focused on assessing and challenging the security posture across a comprehensive portfolio of clients. The individual will utilize a variety of tools developed and act as a key team member and leader in client engagements. They will be the client’s advocate for cybersecurity best practices and will provide strong recommendations in this domain. Your Impact • Assist in the development of internal infrastructure design for research, development, and testing focused on offensive security, • Conducts periodic scans of networks to find and detect vulnerabilities, • Performs client penetration testing to find any vulnerabilities or weaknesses that might be exploited by a malicious party, using open-source, custom, and commercial testing tools, • Ability to assist in scoping engagements by clearly articulating various penetration approaches and methodologies to audiences ranging from highly technical to executive personnel, • Report generation that clearly communicates testing and assessment details, results, and remediation recommendations to clients, • Develop scripts, tools, and methodologies to automate and streamline internal processes and engagements, • Conducts IT application testing, cybersecurity tool and systems analysis, system and network administration, and systems engineering support for the sustainment of information technology systems. (mobile application testing, penetration testing, application, security, and hardware testing), • Conduct threat hunting and/or compromise assessment engagements to identify active or dormant indicators of compromise (IoCs) using Unit 42 and Palo Alto Networks’ threat hunting tools (and/or client owned hunting instrumentation where applicable), • Assist Unit 42 Leadership in the development of security standards and best practices for the organization and recommend security enhancements as needed, • Able to conduct cyber risk assessments using frameworks or standards like NIST CSF, ISO 27001/2, PCI, CIS Top 20, CMMC, or other industry measurement tools, • Conduct cloud penetration testing engagements to assess specific workloads (i.e., AWS, GCP, Azure, containers, or other PaaS and SaaS instances) for vulnerabilities and subsequently attempt to exploit identified weaknesses after receiving permission from client stakeholders, • Provide recommendations to clients on specific security measures to monitor and protect sensitive data and systems from infiltration and cyber-attacks including response and recovery of a data security breach, • Ability to perform travel requirements as needed to meet business demands (on average 30%)Qualifications Your Experience • 6+ years of professional experience with risk assessment tools, technologies, and methods focused on Information Assurance, Information Systems/Network Security, Infrastructure Design, and Vulnerabilities Assessments, • Experience managing a team of consultants, • Demonstrate a deep understanding of how malicious software works (i.e.-malware, trojans, rootkits, etc.), • Ability to modify known and/or craft custom exploits manually without dependence on consumer tools such as Metasploit, • Strong knowledge of tools and techniques used to conduct network, wireless, and web application penetration testing, • Familiarity with web application penetration testing and code auditing to find security gaps and vulnerabilities, • Knowledge and experience in conducting cyber risk assessments using industry standards, • Experience with penetration testing, administering, and troubleshooting major flavors of Linux, Windows, and major cloud IaaS, PaaS, and SaaS providers (i.e., AWS, GCP, and Azure), • Experience with scripting and editing existing code and programming using one or more of the following: Perl, Python, ruby, bash, C/C++, C#, or Java, • Experience with security assessment tools, including Nessus, OpenVAS, MobSF. Metasploit, Burp Suite Pro, Cobalt Strike, Bloodhound, and Empire, • Knowledge of application, database, and web server design and implementation, • Knowledge of network vulnerability assessments, web and cloud application security testing, network penetration testing, red teaming, security operations, or 'hunt', • Knowledge of open security testing standards and projects, including OWASP & MITRE ATT&CK, • Ability to read and use the results of mobile code, malicious code, and anti-virus software, • Ability to scope new opportunities with prospective clients, including drafting statements of work and proposals, • Knowledge of computer forensic tools, technologies, and methods, • Identified ability to grow into a valuable contributor to the practice and, specifically -, • have an external presence via public speaking, conferences, and/or publications, • have credibility, executive presence, and gravitas, • be able to have a meaningful and rapid delivery contribution, • have the potential and capacity to understand all aspects of the business and an excellent understanding of PANW products, • be collaborative and able to build relationships internally, externally, and across all PANW functions, including the sales team, • Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security, or equivalent years of professional experience or equivalent military experiences to meet job requirements and expectations Additional Information The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, risk management, and digital forensic services to clients of all sizes. Our team is composed of recognized experts and incident responders with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. With a highly successful track record of delivering mission-critical cybersecurity solutions, we are experienced in working quickly to provide an effective incident response, attack readiness, and remediation plans with a focus on providing long-term support to improve our clients’ security posture. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $151000 - $208000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization. The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security systems. You should have a sound working knowledge of cybersecurity, including intrusion prevention and incident response. You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills. What Will You Be Doing? Manage all day-to-day activities within the Security organization. This would include: • Management of Anti-Virus and Anti-Malware solutions like CrowdStrike., • Monitoring and alerting management., • Confirm infrastructure has most recent patches, updates and libraries., • Management of 1Password, • Management of vaults and user access for both passwords and keys, • Management of KnowBe4, • Phishing tests and training and response., • Develop ongoing security posture improvements., • Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected., • Management of Nightfall DLP solution., • Evaluate existing Detection Rules., • Implement detection rules based on growth of the Vestwell platform., • Action against alerts triggered for DLP leakage., • Work closely with Engineering to provide guidance and advice on industry best practice security., • Authentication & Authorization, • Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth., • Work closely with Legal and Compliance teams to evaluate and improve policies. The Necessities • Professional experience in computer science, programming, or related field., • Professional experience working in computer systems with some specialization in computer security., • The ability to manage competing deadlines., • Excellent verbal and written communication skills, interpersonal, and teaching skills., • Ability to anticipate, analyze, and problem-solve, • The ability to remain current on the latest technology and best practices in information security., • Proficient, or able to gain proficiency with, a broad array of security software applications and tools., • Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication., • Experienced with penetration testing and techniques., • Advanced training certifications may be advantageous., • CISSP, • Training or experience with SOC audits. OUR BENEFITS We're an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan office, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan! OUR PROCESS It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well. Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer. We prioritize transparency and lack of surprise throughout the process. For your awareness you will only receive correspondence from any other domain not ending in Vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization. The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security systems. You should have a sound working knowledge of cybersecurity, including intrusion prevention and incident response. You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills. What Will You Be Doing? Manage all day-to-day activities within the Security organization. This would include: • Management of Anti-Virus and Anti-Malware solutions like CrowdStrike., • Monitoring and alerting management., • Confirm infrastructure has most recent patches, updates and libraries., • Management of 1Password, • Management of vaults and user access for both passwords and keys, • Management of KnowBe4, • Phishing tests and training and response., • Develop ongoing security posture improvements., • Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected., • Management of Nightfall DLP solution., • Evaluate existing Detection Rules., • Implement detection rules based on growth of the Vestwell platform., • Action against alerts triggered for DLP leakage., • Work closely with Engineering to provide guidance and advice on industry best practice security., • Authentication & Authorization, • Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth., • Work closely with Legal and Compliance teams to evaluate and improve policies. The Necessities • Professional experience in computer science, programming, or related field., • Professional experience working in computer systems with some specialization in computer security., • The ability to manage competing deadlines., • Excellent verbal and written communication skills, interpersonal, and teaching skills., • Ability to anticipate, analyze, and problem-solve, • The ability to remain current on the latest technology and best practices in information security., • Proficient, or able to gain proficiency with, a broad array of security software applications and tools., • Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication., • Experienced with penetration testing and techniques., • Advanced training certifications may be advantageous., • CISSP, • Training or experience with SOC audits. OUR BENEFITS We're an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan office, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan! OUR PROCESS It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well. Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer. We prioritize transparency and lack of surprise throughout the process. For your awareness you will only receive correspondence from any other domain not ending in Vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.

Job Description We are actively seeking an& Application Offensive Security Consultant with expertise in application security testing, red teaming, and penetration testing. This role involves offensive security assessments, manual security testing of applications and APIs, and collaboration with cross-functional teams to strengthen application defenses. & Key Responsibilities: * Conduct offensive security testing against applications and APIs to identify vulnerabilities. * Perform application threat hunting to evaluate risks and weaknesses in web applications. * Execute manual security testing of applications, identifying OWASP Top 10 vulnerabilities. * Utilize Burp Suite and OWASP Zap for application penetration testing and risk assessment. * Document vulnerabilities and generate detailed reports for remediation planning. * Collaborate with Security Architects, Product Managers, and Risk Managers to enhance application defenses. * Provide subject matter expertise and respond to queries regarding Application Defense enhancements. * Ensure compliance with application security best practices and regulatory requirements. * Engage in Capture the Flag (CTF) challenges and maintain current knowledge of MITRE Framework and adversarial methodologies. * Contribute to the education of Business and Development teams on offensive security methodologies. & Must-Have Qualifications: * 6+ years of experience in application security testing. * 4+ years of hands-on experience with Burp Suite and OWASP Zap. * Proven ability to perform manual security testing of applications without relying solely on automated scanners. * Deep understanding of MITRE Framework and adversarial methodologies. * Bachelor’s Degree in Computer Science, Cybersecurity, or equivalent experience. * Experience in generating assessment reports and facilitating remediation planning. * Strong understanding of Application Defense enhancements. * Ability to think outside the box and manually discover vulnerabilities. * Ability to work onsite in Jersey City, NJ with hybrid flexibility. & Preferred Experience: * Offensive Security or Penetration Testing Certifications. * Completion of penetration testing and red teaming courses. * Passion for Capture the Flags (CTFs) and training platforms like TryHackMe, HackTheBox. * Familiarity with DevSecOps practices for automated application defense.

Job Description For over 35 years, Yorktel has been the video managed services partner around the world for some of the largest business and government agencies. With over 10,000 video systems under management worldwide – more than any other video communications service provider – Yorktel has the proven expertise and global reach to deliver enterprise-quality visual communications. Yorktel is currently seeking a Strategic Account Manager who will work to achieve maximum sales profitability, growth, and account penetration within assigned accounts. The position is responsible and accountable for overall sales processes from initial contact and understanding client needs to the closure of the product/service delivery. Promotes/sells/secures orders from existing and prospective customers through a relationship and solution-based approach. The Strategic Account Manager must present existing products and services to current and prospective clients and is accountable for ensuring client requirements are understood and communicated to service teams within Yorktel efficiently and effectively. This position reports directly the VP, Enterprise Sales – North America. The VP, Enterprise Sales, North America, will provide direction and support to the Strategic Account Manager regarding the following areas: development and improvement, career development and client escalation issues. This position will also work closely various departments to identify, develop and deploy service offerings and lead strategic engagements with major customers. Roles & Responsibilities: Ability to pursue audio visual, managed services, and voice integration business opportunities for Yorktel within enterprise corporate space, as well as other potential growth markets. Proven track record selling audio-visual integration, communication collaboration, IT integration, hardware, software or related technology-based product or solutions. This position must have the ability to establish and maintain strong working relationships both internally and externally. Excellent verbal and written communication are necessary. Strong presentation skills are an essential function of this position. Superior negotiation skills coupled with a net profit bottom line mentality is required. Must have advanced conflict resolution skills. When required the Strategic Account Manager will be required to manage actives within Global Enterprise Accounts. The ability to forecast business accurately and have basic understanding business financial principles is essential. The Strategic Account Manager will represent customer requirements to Yorktel and will play a major role in directing how Yorktel products and services are customized and deployed in based on the client solution. This position will make recommendations and be actively involved in the design and development of Yorktel products and services. Internal and External Relationship Responsibilities: This position regularly works in a team of individuals with varying degrees of expertise and influences internal and external customers to achieve a mutually desirable outcome. This position will make recommendations to internal parties and customers in regard to concerns or issues and ensure resolution of any problems working closely in conjunction with assigned clients. This position must regularly communicate answers to complex questions and respond to detailed inquiries. This position handles and is expected to protect all internal and external confidential information and must utilize discretion and judgment based on company policies and procedures. Responsible for interaction with all Operations and Corporate Services departments including, Sales, Purchasing, Accounting, Engineering, Production and Logistics to ensure the successful execution of all products. • Experienced in consultative sales with long sales cycles in the Collaboration industry., • Drives Revenue through recognition and realization of opportunities within accounts., • Works with customers and Yorktel resources to leverage Yorktel’s products and services to enhance customers’ business and grow opportunities., • Helps build the message to sell Yorktel Microsoft and Cisco voice offerings to other parts of their customers business. Contributes to the creation of stakeholder maps for accounts and determines and orchestrates a coverage plan., • Develops Sales annual account action plans., • Identify all customer contract renewals and build plan for the renewal of those contracts., • Drives profitability revenue growth year over year in assigned accounts., • Meets and exceeds monthly and annual revenue goals by executing an account growth strategy., • Works with Marketing to create Sales Programs centered on OEM endorsements., • Conducts regular Business Reviews and reporting with major accounts., • Manages relationships with Manufacturers (OEMs), distributors and resellers to further sales opportunities and to ensure continued customer satisfaction., • Tracks and maintains all account activity in the company CRM application (Vision and Dynamics), • Provides input into pricing, positioning and strategy within assigned verticals or markets., • Provides accurate and timely sales forecasts and other reports to manager as required., • Develop and conform to company technical standards and practices., • Research, prospect and establish leads for corporate relationships followed by an introductory needs analysis/discovery meeting utilizing a consultative sales approach, • Proven success building new business relationships with executive-level management., • Prepare and present proposals to corporate decision makers, build interactive components for all renewal and new business proposals, build interactive presentations that outline features, benefits and unique selling points of interactive properties., • Generate a pre-determined level of new business revenue for Yorktel with special attention to net revenues., • Self-motivated, achievement-oriented with superior planning and time management skills, • Maintain current knowledge of interactive products and industry trends., • Prepare weekly sales reports, activities and revenue reports., • Strategic Account Manager must keep up to date with the latest technology trends to ensure that they have the ability to answer client inquires for solutions., • Ability to translate technical concepts for non-technical buyers., • Proficiency in the use of computers and general business software (Microsoft Outlook, PowerPoint, Excel, Word and Project), • CCIE desirable, • CVE desirable, • Knowledge of and adherence to Yorktel policies and procedures., • Must be comfortable managing relationships with executive level contacts., • Excellent ability to successfully interface with clients and handle multiple priorities concurrently., • Dedication and commitment to get the job done., • Able to work in a fast-paced, continuously evolving environment., • Self-motivated and ability to work independently., • Knowledge of sales and marketing concepts., • Successful track record of winning and closing deals in competitive environments, as well as identifying new opportunities., • High capacity to learn and adapt., • May require occasional lifting (up to 50 lbs), • Requires extensive sitting, standing and walking, • Limited weekend and/or night work may be required, • Domestic travel requiring multi-night stays within and at times outside the local work area, • International travel may be required, • Valid U.S. driver’s license is a requirement and must have a positive driver’s abstract., • Current valid U.S. Passport is desirable., • Must be willing to complete background checks and drug tests as required by current or future contracts We conform to all the laws, statutes, and regulations concerning equal employment opportunities and affirmative action. We strongly encourage women, minorities, individuals with disabilities and veterans to apply to all of our job openings. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, genetic information and testing, family and medical leave, sexual orientation and gender identity or expression, protected veteran status, or any other characteristics protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer or the government, or against any individuals who assist or participate in the investigation of any complaint or otherwise oppose discrimination.

Job Description LOCATION: The territory for this role includes New York, Vermont, Mass, Connecticut and Maine. We're looking for a dynamic Clinical Oncology Specialist (COS) to join our newly established Breast Oncology specialty team. This is a high-impact, tumor-specific role focused on accelerating the adoption and growth of Signatera—our groundbreaking, first-in-class MRD ctDNA test. As a COS, you'll act as a strategic field partner and a key representative of Natera Oncology, collaborating cross-functionally to engage key opinion leaders (KOLs) across integrated delivery networks, academic medical centers, hospital systems, and select community oncology practices. Primary stakeholders include Breast Surgeons, Breast Radiologists, Radiation Oncologist, Medical Oncologists and Pathologists. Success in this role demands a deep understanding of the breast oncology space, strong clinical acumen, and the ability to navigate complex healthcare systems while fostering trusted, value-driven relationships. We're seeking individuals who thrive in a fast-paced, entrepreneurial environment and are driven by purpose, passion, and the pursuit of clinical excellence. Frequent travel is required. Key Responsibilities • Develop and execute a strategic territory plan focused on growth and account penetration, • Identify and engage KOLs and key accounts to integrate Signatera into clinical decision-making, • Drive new business development while expanding and deepening existing relationships, • Maximize return on investment through consistent sales activity and cross-functional collaboration, • Deliver impactful clinical education to physicians and care teams, • Serve as a trusted resource in a fast-paced, startup-like environment, • Build deep understanding of Natera's oncology solutions, internal processes, and competitor landscape, • Call on targeted physicians and practices to promote Natera's oncology products and services, • Drive product adoption by influencing clinical decision-making at the provider and system level, • Monitor account performance and market trends; escalate issues and identify new opportunities, • Consistently conduct business in an ethical, transparent, and professional mannerQualifications, • Bachelor's degree required, • 5+ years of successful experience in breast oncology, surgical sales, or molecular diagnostics preferred, • Deep knowledge of academic and community oncology markets, precision medicine, and reimbursement landscape, • Ability to travel frequently, including overnight travel as needed, • Valid driver's license and safe driving record, • Proven leadership, business acumen, and strong communication skills, • Travel: ~75% (combination of road and air travel)Key Competencies, • Excellent verbal, written, and presentation skills, • Strategic, forward-thinking, and data-driven mindset, • Ability to work independently and collaboratively in team environments, • Strong clinical understanding of oncology and molecular diagnostics Total compensation includes a competitive base salary and uncapped quarterly commissions. In addition we offer a car allowance and Restricted Stock Units (RSUs). The pay range is listed and actual compensation packages are based on a wide array of factors unique to each candidate, including but not limited to skill set, years & depth of experience, certifications and specific office location. This may differ in other locations due to cost of labor considerations.Remote USA$195,000—$225,000 USD OUR OPPORTUNITY Natera™ is a global leader in cell-free DNA (cfDNA) testing, dedicated to oncology, women's health, and organ health. Our aim is to make personalized genetic testing and diagnostics part of the standard of care to protect health and enable earlier and more targeted interventions that lead to longer, healthier lives. The Natera team consists of highly dedicated statisticians, geneticists, doctors, laboratory scientists, business professionals, software engineers and many other professionals from world-class institutions, who care deeply for our work and each other. When you join Natera, you'll work hard and grow quickly. Working alongside the elite of the industry, you'll be stretched and challenged, and take pride in being part of a company that is changing the landscape of genetic disease management. WHAT WE OFFER Competitive Benefits - Employee benefits include comprehensive medical, dental, vision, life and disability plans for eligible employees and their dependents. Additionally, Natera employees and their immediate families receive free testing in addition to fertility care benefits. Other benefits include pregnancy and baby bonding leave, 401k benefits, commuter benefits and much more. We also offer a generous employee referral program! For more information, visit . Natera is proud to be an Equal Opportunity Employer. We are committed to ensuring a diverse and inclusive workplace environment, and welcome people of different backgrounds, experiences, abilities and perspectives. Inclusive collaboration benefits our employees, our community and our patients, and is critical to our mission of changing the management of disease worldwide. All qualified applicants are encouraged to apply, and will be considered without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, age, veteran status, disability or any other legally protected status. We also consider qualified applicants regardless of criminal histories, consistent with applicable laws. If you are based in California, we encourage you to read this important information for California residents. Link: Please be advised that Natera will reach out to candidates with a @natera.com email domain ONLY. Email communications from all other domain names are not from Natera or its employees and are fraudulent. Natera does not request interviews via text messages and does not ask for personal information until a candidate has engaged with the company and has spoken to a recruiter and the hiring team. Natera takes cyber crimes seriously, and will collaborate with law enforcement authorities to prosecute any related cyber crimes. For more information: • BBB announcement on job scams, • FBI Cyber Crime resource page

Job Description CoreWeave is the AI Hyperscaler™, delivering a cloud platform of cutting edge services powering the next wave of AI. Our technology provides enterprises and leading AI labs with the most performant, efficient and resilient solutions for accelerated computing. Since 2017, CoreWeave has operated a growing footprint of data centers covering every region of the US and across Europe. CoreWeave was ranked as one of the TIME100 most influential companies of 2024. As the leader in the industry, we thrive in an environment where adaptability and resilience are key. Our culture offers career-defining opportunities for those who excel amid change and challenge. If you're someone who thrives in a dynamic environment, enjoys solving complex problems, and is eager to make a significant impact, CoreWeave is the place for you. Join us, and be part of a team solving some of the most exciting challenges in the industry. CoreWeave powers the creation and delivery of the intelligence that drives innovation. About the role: CoreWeave is a leading specialized cloud computing provider, offering GPU-accelerated infrastructure for AI, machine learning, and other computationally intensive workloads. CoreWeave has rapidly grown to become a key player in the AI cloud space and operates multiple data centers across the U.S., leveraging NVIDIA GPUs to serve high-profile clients. With its advanced, high-performance infrastructure, CoreWeave leads the way in meeting the escalating demands of AI and machine learning technologies. CoreWeave is going through a very significant growth as we scale to support our customers and we need to build the next generation security tools to help us defend against vulnerabilities as they arise. We are seeking an experienced leader to join our team as the Senior Manager for our Vulnerability Management team. The Senior Manager, Vulnerability Management is responsible for running, evolving and operating CoreWeave's vulnerability management program and personnel. This person is responsible for working with cross-functional teams as well as with peer engineering stakeholders to measure, maintain, and improve the security posture of CoreWeave. Core job duties include, but are not limited to: • Creating and overseeing the execution of vulnerability management policies and procedures (e.g. patching), • Establishing and meeting Service Level Objectives for both enterprise security and product impacting vulnerabilities, • Creating and ensuring the adherence to procedures for notifying both the business and clients (where applicable) about risk and impacts from security vulnerabilities., • Communicating and coordinating with other teams in order to triage and remediate vulnerabilities in first and third-party software and software dependencies Minimum Qualifications • Experience establishing and maintaining a vulnerability management program at scale, • Ability to drive a team of vulnerability security engineers and analysts to focus on identifying, triaging and assisting in remediating vulnerabilities, • Ability to risk assess and distingusih what a critical or high impacting vulnerability is within CoreWeave's environment and drive appropriate remediations across multiple engineering and IT teams when necessary., • Knowledge and experience with the identification and remediation of CVEs within a large infrastructure deployment, • Extensive experience with Linux OS environments, • Hands-on experience managing security tools servers in a large environment, including routine Linux and Windows patching and application patching/upgrades, • Experience managing/troubleshooting server, workstation, local EDR, anti-virus software, log analysis as it relates to security compliance, • Willingness to learn new technologies/toolsets as part of the job responsibilities Experience operating and maintaining enterprise-level information security tools, proven experience in Systems Administration, including server & workstation troubleshooting, Knowledge and experience with cloud-based infrastructures, Knowledge of network concepts/protocols, Familiarity with Linux operating systems, Security+, Network+ The preferred candidate also has experience with or knowledge of the following skills & qualifications: • Experience with container orchestration technologies such as Kubernetes, • Familiarity with sending Requests for Proposals (RFPs) to gather information regarding the installation of new cyber tooling to best protect the company, • Creating and presenting technical strategies and technical solution recommendations, • Designing and implementing technical solutions, • Integrating new technologies into existing technology portfolio, • Collaborating with cross-functional teams, including engineering What We Offer The range we've posted represents the typical compensation range for this role. To determine actual compensation, we review the market rate for each candidate which can include a variety of factors. These include qualifications, experience, interview performance, and location. In addition to a competitive salary, we offer a variety of benefits to support your needs, including: • Medical, dental, and vision insurance - 100% paid for by CoreWeave, • Company-paid Life Insurance, • Voluntary supplemental life insurance, • Short and long-term disability insurance, • Flexible Spending Account, • Health Savings Account, • Tuition Reimbursement, • Ability to Participate in Employee Stock Purchase Program (ESPP), • Mental Wellness Benefits through Spring Health, • Family-Forming support provided by Carrot, • Paid Parental Leave, • Flexible, full-service childcare support with Kinside, • 401(k) with a generous employer match, • Flexible PTO, • Catered lunch each day in our office and data center locations, • A casual work environment While we prioritize a hybrid work environment, remote work may be considered for candidates located more than 30 miles from an office, based on role requirements for specialized skill sets. New hires will be invited to attend onboarding at one of our hubs within their first month. Teams also gather quarterly to support collaboration California Consumer Privacy Act - California applicants only CoreWeave is an equal opportunity employer, committed to fostering an inclusive and supportive workplace. All qualified applicants and candidates will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. As part of this commitment and consistent with the Americans with Disabilities Act (ADA), CoreWeave will ensure that qualified applicants and candidates with disabilities are provided reasonable accommodations for the hiring process, unless such accommodation would cause an undue hardship. If reasonable accommodation is needed, please contact: . Export Control Compliance This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. CoreWeave may, for legitimate business reasons, decline to pursue any export licensing process.

Job Description NO H1S OR 3RD PARTIES. THIS ROLE IS BASED IN NEW YORK CITY. ROLE DESCRIPTION The Senior Client Compliance Consultant plays a vital role in managing all client-facing compliance activities for the firm. This includes organizing due diligence responses, tracking compliance timelines, preparing policy documentation, and communicating key regulatory developments. The successful candidate will possess strong writing and presentation skills, an understanding of security and regulatory frameworks, and a proactive, organized, and client-oriented mindset. KEY RESPONSIBILITIES Client Due Diligence & Requests Coordinate incoming and outgoing due diligence questionnaires, vendor assessments, and security documentation from clients and partners. Maintain a repository of compliance materials and coordinate subject matter expert (SME) involvement to complete responses. Ensure timely and complete delivery of all compliance documentation. Compliance Calendar & Operational Coordination Work with clients to create and maintain IT Compliance Calendars that covers their IT related compliance considerations including: o Annual security reviews o Annual disaster recovery and business continuity plan testing o Annual policy and control reviews o Annual cyber security testing o Annual vendor reviews o Annual penetration testing o Coordination and planning of tabletop exercises o Regulatory deadlines and attestations o ISO 27001 Program including key activities, internal and external audit, and InfoSec meetings Schedule and track progress of key compliance activities, engaging relevant stakeholders. Regulatory Monitoring & Trend Response Monitor changes in client-relevant regulatory environments (e.g., SEC, NY SHIELD Act, ISO 27001). Identify trends and communicate legislative developments to clients and internal teams. Assist in developing strategies and action plans to ensure client readiness. Policy Documentation & Best Practice Alignment Lead the onboarding process for client compliance documentation, including drafting baseline policies and procedures. Work with the technical teams to support critical client IT processes (on/off boarding, change management, etc.) Review client policies and ensure alignment with regulatory standards and best practices. Identify documentation gaps and propose remediation. For the ISO 27001 Program: o Draft, maintain, and manage internal information security policies and procedures in alignment with ISO 27001 controls and Annex A requirements. o Oversee version control, policy review cycles, and internal approvals. o Ensure policies remain current with changes in business operations, risk posture, and industry standards. o Coordinate and document policy acceptance and training efforts across the firm. Stakeholder Communication & Presentation Deliver briefings and presentations to internal teams and external clients on compliance posture, regulatory changes, and project milestones. Translate complex compliance issues into clear, actionable language suitable for business and technical audiences. TRAVEL/JOB EXPECTATIONS Occasional travel to office in NY and client sites, as required. Adherence to the Information Security Management System (ISMS) framework: o The ISMS consists of processes and controls to manage the firm s data security with a goal of protecting the confidentiality, integrity, and availability of information assets for clients and of company o Personnel are expected to contribute continuously to the ISMS framework by: Reporting incidents, events, and potential threats Identifying weakness within the ISMS and reporting it Providing recommendations for improvement for both the security infrastructure and related operating procedures o Personnel should recognize the implications of non-conformance This job description is not intended to cover or describe all the tasks, duties, and responsibilities that may be required nor does this constitute an offer of employment REQUIRED QUALIFICIATIONS Bachelor s degree in Business, Law, Information Security, or a related discipline. Minimum 5 years of experience in compliance, information security, risk, or regulatory affairs. Demonstrated ability to manage projects and meet deadlines across multiple stakeholders. Excellent grammar, writing, and verbal communication skills; strong attention to detail. Familiarity with relevant regulatory and security frameworks (e.g., ISO 27001, SOC 2, HIPAA, NY SHIELD Act, SEC/FINRA). Ability to interpret and summarize legal and regulatory changes for a professional audience. DESIRED QUALIFICATIONS Experience in IT consulting, SaaS, or professional services environments. Prior supervisory experience. Professional certifications such as CISA, CIPM, or CIPP.

Job Description Forhyre is seeking a talented individual that will be able to provide security architecture support and interface across the program as needed. This support includes, but is not limited to, cybersecurity solutions, providing technical strategy for solutions, guidance, policy, and implementations. The successful candidate for this position is a highly motivated individual, with a strong IT security background who excels integrating, operating, and deploying security technology and solutions and interacts well with both internal teams and clients. Note: U.S. citizens and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. Responsibilities: • Engineer, implement and monitor security measures for the protection of computer systems, networks and information, • Develop and implement security policies and controls to support the Cyber Security framework, • Manage the existing cyber security training program across global, multilingual business, • Assists in ensuring global Information security program meets all industry regulations, standards, and compliance requirements, • Drive adoption of infrastructure security best practices and work with Information Technology teams to ensure security standards are maintained, • Implement technology to proactively scan Information Technology environment for security breaches and suspicious activity, • Continuous improvement in the areas of Information Security technologies, techniques and processes, • Develops and maintains an effective system for the distribution of regular key performance indicator reports and dashboard, • Ability to interpret penetration test results and describe issues and fixes to non-security expert, • Responsible for leading an accurate & comprehensive status reporting to the executive steering committee, • Create and implement SOP/ process improvement initiatives to achieve outcomes that align or exceed the expectations of strategic roadmap Skills & Experience • 8+ years hands-on experience designing or implementing security solutions, including all related documentation and artifacts, • Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps, • Extensive experience in design and development of enterprise security architectures. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology., • Strong knowledge and experience in secure enterprise architecture design, especially with regard to IAM, NDR, EDR, SIEM, AI/ML, and other cybersecurity tools and resultant applications, • Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes, • Previous experience developing architectures, strategies, strategic plans, roadmaps, and technical standards for the federal IT enterprise environment., • Vulnerability Assessment testing and/or Penetration Testing (preferred), • Robotic Process Automation/Intelligent Automation (preferred), • Business case development supporting security technology solutions (preferred), • Additional certifications demonstrating cybersecurity/technical mastery (preferred)

Job Description StubHub is on a mission to redefine the live event experience on a global scale. Whether someone is looking to attend their first event or their hundredth, we're here to delight them all the way from the moment they start looking for a ticket until they step through the gate. The same goes for our sellers. From fans selling a single ticket to the promoters of a worldwide stadium tour, we want StubHub to be the safest, most convenient way to offer a ticket to the millions of fans who browse our platform around the world. StubHub's Product Security Engineering Team is seeking a Senior Engineer to enhance our security posture within the end user and services product domain. The perfect candidate will possess experience in CI/CD pipeline security, product and application architecture reviews, contextualized vulnerability management processes, and automation. Location: Hybrid (3 days in office/2 days remote) – New York, NY or Santa Monica, CA About the team: StubHub's Product Security Engineering Team plays a critical role in securing the platforms that power the world's largest ticket marketplace. This team works hands-on with cutting-edge tools and cloud-native technologies to embed security into every layer of the software development lifecycle—from architecture to automation. If you're passionate about offensive security, CI/CD hardening, and driving real impact across modern product teams, this is your opportunity to lead and innovate at global scale. What You'll Do: • Conduct security assessments, code reviews, and penetration tests on web applications, APIs, and mobile apps to identify vulnerabilities and flaws., • Collaborate with development teams to embed security into CI/CD pipelines, including the implementation of automated code scanning tools., • Develop and maintain secure coding guidelines and conduct security awareness training for developers., • Respond to security incidents, perform root cause analyses, and recommend effective remediations., • Stay current on emerging security threats, vulnerabilities, and mitigation strategies; proactively share insights across teams., • Help develop and enforce application security policies, standards, and procedures aligned with industry regulations and best practices., • Conduct architectural reviews to ensure the security of new technologies and controls., • Build and maintain robust product vulnerability management processes and procedures., • Write and maintain production-grade APIs to automate security processes and streamline infrastructure and developer workflows., • Demonstrated expert-level understanding of offensive web application security testing and defense-in-depth remediation strategies., • Expert-level skills in vulnerability assessments and code reviews., • Extensive experience with automated security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk)., • Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical audiences., • Hands-on experience in applied cryptography and key management., • Proven ability to implement SAST, DAST, and SBOM tooling within development workflows., • Experience in performing structured threat modeling (e.g., STRIDE, PASTA)., • Intermediate proficiency in at least one scripting language (e.g., Python, Ruby)., • Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, GWAPT)., • Intermediate-level experience with cloud security principles and technologies in AWS and Azure., • Understanding of Kubernetes security fundamentals, including the use of admission controllers, network policies, role-based access control (RBAC), and ingress architecture design., • Accelerated Growth Environment: Immerse yourself in an environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale., • Top Tier Compensation Package: Enjoy a rewarding compensation package that includes enticing stock incentives, aligning with our commitment to recognizing and valuing your contributions., • Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed.

Job Description This job opportunity is part of an RFP process; candidates are invited to submit their resumes detailing relevant experience Job Title: Security and Workflow Automation Solution Architect Onsite Requirement: A couple of days onsite required and travel to different sites. Job Summary: The Security and Workflow Automation Solutions Architect will ensure that all modernization activities adhere to client’s strict cybersecurity policies, while enabling seamless automation of applicant onboarding, session management, invoicing, and other program workflows. The architect will play a key role in designing secure authentication systems, defining access control rules, and implementing business process automations across multiple modules. Key Responsibilities • Design secure system architectures aligned with client’s security and privacy regulations., • Implement robust authentication and authorization systems, including client-compatible Single Sign-On (SSO), SAML, and OAuth2 integrations., • Define access control logic (RBAC/ABAC) across administrator and applicant portals to ensure separation of duties and least-privilege principles., • Conduct security assessments, threat modeling, and vulnerability mitigation for all deployed services and endpoints., • Work with DevSecOps to integrate security scanning and compliance tools into CI/CD pipelines., • Design and implement workflow automation for:, • Applicant registration and profile updates., • Principal/supervisor assignment and approvals., • Automated invoicing, rate calculations, and audit logs., • Email notifications and communication processes (SMTP/Secure Email)., • Ensure audit trails, logging, and reporting mechanisms are in place for all automated workflows and secure endpoints., • 8+ years of experience in security architecture and workflow automation., • Deep familiarity with client (education industry), federal, or local government cybersecurity policies., • Proven experience with identity management and access control systems., • Experience using Power Automate, Azure Logic Apps, or similar workflow tools. The projected compensation range for this position is $134,800 to $164,200 per year benchmarked in the New York area. The salary range provided is a good faith estimate representative of all experience levels. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience. LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits. Devoted to Fair and Inclusive Practices All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. If you are interested in applying for employment with LCG and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department by email at . Securing Your Data Beware of fraudulent job offers using LCG's name. LCG will never request payment-related details or advancement of money during the application process. Legitimate communication will only come from lcginc.com or emails, not free commercial services like Gmail or WhatsApp. If you receive suspicious emails asking for payment or personal information, contact us immediately at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

IAC is seeking a highly skilled Senior Security Engineer with a primary focus on Incident Response (IR) and a foundational understanding of Red Teaming/Penetration Testing (Pentest) techniques. Lead and support the investigation of security events, incidents, and potential intrusions. Knowledge of c

IAC is seeking a highly skilled Senior Cybersecurity Engineer with a primary focus on Incident Response (IR) and a foundational understanding of Red Teaming/Penetration Testing (Pentest) techniques.

TITLE: Cyber Security Analyst (KB) POSITION TYPE: Full Time (W2) LOCATION: Ridgefield Park, NJ *Must be Korean Bilingual (read, write, report) ABOUT WorldLink: WorldLink is a rapidly growing information technology company at the forefront of the tech transformation. From custom software development to cloud hosting, from big data to cognitive computing, we help companies harness and leverage today’s most cutting-edge digital technologies to create value and grow. Collaborative. Respectful. Work hard Play hard. A place to dream and do. These are just a few words that describe what life is like at WorldLink. We embrace a culture of experimentation and constantly strive for improvement and learning. We take pride in our employees and their future with continued growth and career advancement. We put TEAM first. We are a competitive group that like to win. We're grounded by humility and driven by ambition. We're passionate, and we love tough problems and new challenges. You don't hear a lot of "I don't know how" or "I can't" at WorldLink. If you are passionate about what you do and having fun while doing it; tired of rigid and strict work environments and would like to work in a non-bureaucratic startup cultural environment, WorldLink may be the place for you. For more information about our craft, visit ___ . WHO we’re looking for: We are looking for a Cyber Security Analyst (KB) to join our team. Role and Responsibilities: * Establish Information Technology (IT) policies regarding operational procedures and ensure compliance. • Work with outside vendors, upper management, and leadership of other departments to ensure smooth processes., • Establish strategies for risk mitigation and contingency planning., • Plan and schedule project guidelines and goals while ensuring timelines are met., • Monitor their organization’s networks for security breaches and investigate and remediate, including retraining, if violations occur., • Install and use software, such as firewalls and data encryption programs, to protect sensitive information., • Prepare reports that document security breaches and the extent of the damage caused by the breaches., • Coordinate/conduct penetration testing to identify and mitigate network vulnerabilities within systems before exploited., • Research the latest IT security trends., • Analyze IT requirements and advise on IT security requirements., • Develop security standards and best practices for the organization., • Recommend security enhancements to management or senior IT staff., • Liaise with Legal, Privacy & Compliance, and other departments. Required Experience and Education: • 1 year of experience in information security., • Bachelor's degree in Computer Science or Cyber Security, • CISSP certification is a plus., • Proficient with MAC and OS; Windows environment is primary., • Experienced with penetration testing and techniques., • Understand patch management., • Knowledge of firewalls, antivirus and IDPS concepts, • Experienced in installing security software and documenting security issues., • Mix of technical skills and strategical knowledge (50% on engineering tactics, 50% on hands-on strategy)., • Relevant experience in developing/documenting strategies & proposals for security standards and practices. Training experience is a plus., • Understanding & technical knowledge of IDPS, VOP solutions, Phishing campaign, Vulnerability scans, etc., • Must have complete understanding of IT environment and knowledge of Security systems such as FireEye. Necessary Skills and Attributes: * Self-motivated individual with the ability to thrive in a team-based or independent environment. • Korean Bilingual (advanced professional proficiency in Korean reporting, writing and speaking)., • Excellent verbal and written communication skills., • Ability to identify and mitigate network vulnerabilities. Physical Demands: The physical demands described here are representative of those that must be met by contract employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the contract employee is occasionally required to stand, clean, crawl, kneel, sit, sort, hold, squat, stoop, stand, twist the body, walk, use hands to finger, handle, or feel objects, tools or controls, reach with hands and arms, climb stairs or ladders and scaffolding, talk or hear, and lift up to 20 pounds. Specific vision abilities required by the job include ability to distinguish the nature of objects by using the eye. Operate a computer keyboard and view a video display terminal between 50% - 95% of work time, including prolonged periods of time. Requires considerable (90%+) work utilizing high visual acuity/detail, numeric/character distinction, and moderate hand/finger dexterity. Performs work under time schedules and stress which are normally periodic or cyclical, including time sensitive deadlines, intellectual challenge, some language barriers, and project management deadlines. May require working additional time beyond normal schedule and periodic travel. WHAT we’ll bring: During your interview process, our team can fill you in on all the details of our industry-competitive benefits and career development opportunities. A few highlights include: * Medical Plans • Vision Plan, • Long-Term Disability, • 401(k) WHAT you should know: Our success begins and ends with our people. We embrace diverse perspectives and value unique human experiences. WorldLink is an Equal Employment Opportunity and Affirmative Action employer. All employment at WorldLink is decided on the basis of qualifications, merit, and business need. We endeavor to continue our footprint as a diverse organization by highlighting opportunities for all people. WorldLink considers applicants for all positions without regard to race, color, religion or belief, sex, (including pregnancy and gender identity), age, national origin, political affiliation, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. People with disabilities who need assistance with any part of the application process should contact us. This job description is designed to cover the main responsibilities and duties of the role but is not designed to be a comprehensive list of all.

As we grow, we need a dedicated security leader who can build our security team and program, own the program management side of security, and tackle the customer assurance work that needs focused ownership. Coordinate penetration testing, security assessments, and incident response as the primary se

As a Security Engineer, Application Security you will be responsible for identifying and mitigating security vulnerabilities within software applications through building security tools, code reviews, penetration testing, and security assessments. You will also provide security guidance to developer

Job DescriptionFirm Summary: Winged Keel Group is an independent life insurance brokerage firm that creates and implements tax-efficient, multi-generational wealth accumulation and wealth transfer strategies for ultra-high net worth families. With ten offices located throughout the United States, the firm specializes in the structuring and administration of large blocks of Traditional Life Insurance and large portfolios of Private Placement Variable Life Insurance and Annuities Position Summary: The Manager of IT Services (Senior Associate) will work as part of the Winged Keel Group Information Technology Team supporting the maintenance, configuration, and reliable operation of the organization's IT systems, including servers, networks, hardware, and software. The person will also assist with implementing technologies that will increase security, efficiency and value to the firm. The role also involves ensuring proper security protocols are followed and providing daily support to internal users across departments. Position Responsibilities: Technology Infrastructure Support, Design and Implementation • Provide recommendations and implement technologies that can improve business operation and cyber security., • Plan, design and build infrastructure that can sustain for future growth., • Ensure that the technologies in all remote offices are working efficiently., • Maintain and support various Microsoft cloud services such as Azure, Entra AD, Office 365, Exchange Online, Purview, and Intune., • Responsible for maintenance, operation and system integrity of all servers and equipment, ensuring maximum uptime and availability to Firm users., • Manage IT task lists and projects including office relocation and integration.IT Security, • Ensure the confidentiality, integrity and availability of data stored on our network., • Implement and deploy security solutions., • Responsible for scheduling vulnerability testing and penetration testing of network and resources., • Ensure all systems (including servers, user computers, network devices) are current with the latest with security patches and updates and are in compliance with the firm’s security posture., • Ensure end-point devices are secure and meet company security policy., • Monitor and review server logs and firewall intrusion prevention logs., • Ensure user access permissions are minimal to perform job functions., • Document and update IT security policies and procedures., • Educate users on common security exploits, phishing attacks, unwanted emails and prevention techniques. Business Continuity and Disaster Recovery Planning, • Plan and implement disaster recovery solutions., • Ensure regular scheduled testing of backup and recovery of critical data and services., • Ensure BC/DR runbook documentation are current via annual testing.Telecom and Internet Connectivity Support, • Troubleshooting and resolve issues with Telco and Internet connectivity interruptions., • Supplement Tier 1 support with maintaining the operations of the Avaya phone system, including physical and soft phone and Zoom video conferencing systems., • Supplement Tier 1 support with maintaining Internet and phone connectivity.Hardware, Software and Service Procurement, • Procure hardware, software and services., • Track of software and hardware service maintenance agreements.End User Support, • Provide escalated support for computer equipment, business applications and software issues., • Provide escalated support with mobile devices by leverage Microsoft Intune, • Supplement level 1 support to ensure user computer issues are resolved expeditiously with minimal down time including remote and home office users., • Assisting with user on-board orientation, educate users with WKG technologies and applications.Ideal Candidate Will Possess the Following:, • 3-5 years of experience supporting and maintaining a cluster VMWare environment, • 3-5 years of experience supporting and maintaining Microsoft Cloud Services including Azure VM, Entra AD, Office 365, Exchange Online, Purview, and Intune., • 3-5 years of experience on various networking and infrastructure technologies., • Experience with Mimecast Threat Protection tool., • Hands-on with troubleshooting and fixing hardware and software issues (including end-user support)., • Proficient skills with using, supporting and troubleshooting Microsoft Office suite applications., • Experience supporting and troubleshooting an Avaya IP Office phone system with multiple call queues., • Experience with implementation and management of Zoom video and phone systems., • Experience with project management and execution of Office IT integration is a plus., • Experience with SQL, HTML, PowerShell scripting, Microsoft Access is a plus., • Must have strong interpersonal skills, excellent communication, and organizational skills., • Ability to work independently., • Must be able to work after business hours and weekends if necessary, during emergencies.Compensation / Benefits:, • Attractive annual compensation package is commensurate with experience, • Comprehensive benefit package includes medical, dental, life, disability, 401(k), Section 125, and other voluntary benefits. 1O8nZ9IQXw

Job DescriptionAmalgamated Bank seeks a dedicated Chief Information Security Officer to be responsible for designing and implementing the Bank’s Information Security program while protecting the business from cyber security threats. This is a hybrid role reporting to our NYC headquarters. By joining our team, you’ll be joining a Bank that believes that maintaining a diverse and inclusive workplace where everyone feels valued and respected is essential for us to grow as a company. We are dedicated to building a more equitable world in our everyday practices by embracing the values of our employees and customers. Essential Job Functions: • Develop and maintain an Enterprise Information Security Program, • Design a critical response process for Cyber Security incidents, • Identify, report and control Cyber Security incidents, • Manage and train Information Security staff and develop and deliver Information Security training to the Bank’s employees, • Continuously monitor threats to the Bank’s operating environment, • Approve and administer identity access policies, • Maintain a current understanding of the IT and Cyber Security threat landscape for the industry, • Ensure Bank compliance with relevant Information Security laws and applicable regulations, • Lead, and assess the results of periodic security tests, including internal and external penetration testing and phishing, • Schedule table-top exercises for Crisis Team and senior management and report findings to management, including implementation of recommendations, • Review and approve Information Security policies, procedures and controls, • Ensure that they are kept current and are communicated to staff/consultants, • Ensure staff/vendor compliance with the Bank’s security policies and procedures, • Manage a team of employees, contractors and vendors involved in Information Security, • Brief the Executive Team on status and risks, overall strategy and necessary budget, • Communicate best practices and risks to the Bank, • Perform a risk assessment of the Bank’s vulnerabilities in the Cybersecurity landscape and develop the Bank’s risk appetite for Information Security, • Develop Key Risk Indicators (KRIs) and dashboard metrics reporting to both the Management Team and the Board of Directors, • Establish strong working relationships with the Heads of IT and business lines, • Develop and present quarterly reports to the Board of Directors. Knowledge, Skills and Experience Requirements: • Master’s degree or equivalent experience, • Minimum of ten (10) years of experience, at least five (5) years focused on managing information security in a complex, matrixed environment, • Extensive experience in regulated industries, especially financial services; banking experience is preferred, • Proven ability to create and maintain enterprise-level information security programs, • Motivated individual with strong analytical, problem solving and root cause analysis skills, • Ability to work on multiple, time-critical projects simultaneously, • Knowledge of Data Privacy Laws, • Working knowledge of information security engineering concepts and principles, • Familiarity with DFS 500 and similar regulations, • Experience working with external regulators, including NY DFS and FDIC, • Excellent verbal and written communications, including presentation of complex data in easily, understood ways, • Ability to confidently interact at multiple levels in the organization and lead cross-departmental team projects, • Experience presenting to senior levels, including Board of Directors, • CISSP, CISA or CISM designations preferred Our job titles may span more than one career level. The starting base salary for this role is between $240,000.00 – $260,000.00. The actual base pay is dependent upon many factors, such as: training, transferrable skills, work experience, business needs and market demands. The base pay range is subject to change and may be modified in the future. Amalgamated Bank is an Equal Opportunity and Affirmative Action Employer, Minorities / Females / Individuals with Disability / Veterans. AmeriCorps, Peace Corps and other national service alumni are encouraged to apply. View our Pay Transparency Statement. Submission of a resume or any information regarding your qualifications does not constitute a promise or offer of employment. At Amalgamated Bank, we consider an applicant to be someone who has interviewed at least once, in person, with the hiring manager. Amalgamated Bank does not sponsor applicants for work visas. Hybrid Work Model Effective February 18, 2025, employees in office-based positions will be working a Hybrid work schedule consisting of three days or more, on-site per week, Monday - Thursday, although the specific days may vary by site or organization, with Friday designated as a remote-working day, unless business critical tasks require an on-site presence. This Hybrid work model does not apply to, and daily in-person attendance is required for, the contact center, branch service roles, and general services where the work to be performed is located at a Company site; positions covered by a collective-bargaining agreement (unless the agreement provides for hybrid work); or any other position for which the Company has determined the job requirements cannot be reasonably met working remotely. Please note, this Hybrid work model guidance does not apply to roles that have been designated as “remote”. Search Firm Representatives- Please Read Carefully Amalgamated Bank does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for the position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Role: CyberArk Engineer Location: 100% Remote CyberArk Engineer - Intermediate (LCAT - Information Security Engineer, Intermediate) • 5+ years of experience with Information Technology (IT), including supporting access management solutions, user privileges management, user credential management, or user security behavior monitoring, • minimum of three (3) years of relevant work experience in the area of information/cyber security engineering or security operations, including hands-on experience with security devices (e.g., firewalls), vulnerability scanners, and penetration testing tools., • 2+ years of experience supporting Identity Access Management (IAM), security operations and threat response, or security architecture, • 2+ years of experience with IAM tool CyberArk, • 2+ years experience working in Linux based environments, • Knowledge of Active Directory or LDAP management, configuration or design, PKI, X509, SSO across multiple domains, 2FA via PIV or CAC and scripting and coding, • 2+ years of experience with implementing IAM tools in an enterprise environment, • 2+ years of experience in collaborating with clients to deliver results, • Experience with supporting IAM in a Cloud environment, including Azure or AWS, • Experience with SQL database administration or management, • Experience with an SIEM tool, including Splunk or the ELK stack, • Experience with analyzing Cybersecurity guidance, including policies, strategies, and whitepapers, • Experience with implementing PKI and PIV standards, • Knowledge of HTTP, XML, REST, and JSON a plus, • IT related bachelors degree

About Us: Orveon is a new kind of beauty company launched in December 2021 when we acquired our three iconic brands - bareMinerals, BUXOM, and Laura Mercier. Operating in 40+ countries, we're a truly global business. Our headquarters are in New York, with additional locations in major cities worldwide. We love our brands and are embarking on a powerful shift: To change how the world thinks about beauty. We are a collective of premium and prestige beauty brands committed to stark honesty, co-creation, and making a sustainable cultural impact. People here are passionate, entrepreneurial and most of all, bold. This is an inspirational group of talented, silo-busting, confident and humble people, working together to build something better. We are looking for the best talent to join us on that journey. We believe we can accomplish more when we #Face Forward Together! Job Summary: We are seeking a skilled Infrastructure Engineer to join our infrastructure and security team. This role is pivotal in designing, implementing, and managing enterprise-scale cloud environments (primarily in Azure) that support business-critical applications and services. In addition to cloud engineering responsibilities, this role will act as the face of IT and escalation point for the users at our New York office, ensuring timely resolution of technical issues and maintaining high levels of user satisfaction. Key Responsibilities: • Design and deploy scalable, secure, and resilient cloud solutions., • Manage and monitor Azure infrastructure, ensuring performance, reliability, and cost optimization., • Collaborate with DevOps, security, and application teams to integrate Azure services., • Ensure compliance with security policies and best practices using Entra ID, RBAC, Azure Key Vault, and secure linked services., • Troubleshoot and resolve issues related to cloud infrastructure and services., • Provide technical guidance and mentorship on Azure and other cloud, • Stay up to date with Azure innovations and recommend improvements., • Document support procedures and contribute to knowledge base articles for recurring issues., • Deliver frontline support for end users in the New York office, including:, • Triaging hardware/software issues., • Administering local physical and wireless networks, • Coordinating with remote support teams. Qualifications & Competencies: • Bachelor's degree in computer science, Information Technology, or commensurate experience., • 3+ years of experience in Azure engineering or cloud infrastructure roles., • Proficiency in Azure services including Azure Data Factory, Azure Synapse, Azure SQL, Azure Blob Storage, Azure Purview. Entra ID, RBAC, Azure Key Vault, and secure linked services, • Experience with Microsoft Fabric, Power BI, and cloud-based reporting tools., • Experience with scripting languages (Python, Bash, PowerShell)., • Experience providing hands-on technical support in a multi-office environment. Preferred Skills • Certifications such as AZ-104 Azure Fundamentals or AZ-305 Designing Azure Infrastructure are highly preferred., • Experience in GCP infrastructure, • Familiarity with security frameworks and penetration testing protocols., • Good understanding of Wireless networks, • Excellent problem-solving, communication, and collaboration skills., • Ability to work independently and manage support requests efficiently. What Orveon offers you: You are a creator of Orveon's success and your own. This is a rare opportunity to share your voice, accelerate your career, drive innovation and fostering growth. We're a human sized company so your work will have a big impact on the organization. We invest in the well-being of our Orveoners - both personally and professionally and provide tailored benefits to support all of you, such as: • "Hybrid First" Model 2-3 days per week in office, balancing virtual and face-to-face interactions., • "Work From Anywhere" - Freedom to work three (3) weeks annually from the lo-cation of your choice., • Complimentary Products - Free and discounted products on new releases and fan-favorites., • Professional Development - Exposure to senior leadership, learning and development programs, and career advancement opportunities., • Community Engagement - Volunteer opportunities in the communities in which we live and work. Other things to know! Pay Transparency- One of our values is Stark Honesty, and the following represents a good faith estimate of the compensation range for this position At Orveon Global, we carefully consider a wide range of non-discriminatory factors when deter-mining salary. Actual salaries will vary depending on factors including but not limited to location, education, experience, and qualifications. The pay range for this position is $98,000 $130,000. Supplemented with all the amazing benefits above for full-time employees! Opportunities and Accommodations- Orveon is deeply committed to building a workplace and global community where inclusion is not only valued but prioritized. Find out more on our careers page. BE AWARE OF FRAUD! Please be aware of potentially fraudulent job postings or suspicious recruiter activity by persons that are posing as Orveon Global Recruiters/HR. Please confirm that the person you are working with has an @orveonglobal.com email address. Additionally, Orveon Global does NOT request financial information or payments from candidates at any point during the hiring process. If you suspect fraudulent activity, please visit the Orveon Global Careers Site at to verify the posting and apply though our secure online portal. Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges. In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd. The anticipated salary range for this role is between $143,000.00 and $185,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees. Role Description The Senior CI CD Security Engineer will be responsible for operating and maintaining a vendor SAST and SCA tool which scans our in-house developed software for application security vulnerabilities. The candidate should have a strong knowledge of application security processes, CICD processes and tools and SAST, SCA, SBOM. Acts as a subject matter expert who uses expertise to resolve complex problems in consideration of established policies, guidelines or processes. Reports to SMBC AD Head of Application Security. Role Objectives • Strong ability to work with stakeholders and being able to explain code issues and fixes to development community., • Ensure the SAST/SCA code scanning tool is operating effectively on a daily basis, • Manage license utilization across the entire organization and report to management periodically on utilization, especially as it nears our contracted limits, • Work with vendor representatives to resolve problems and manage contracts and renewals, • Escalate functionality and security issues to management and own those issues through resolution, • Interface with development and security architecture teams on topics related to application security for example vulnerability remediation, best practices, threat modeling, etc., • Interface with the vulnerability management team to ensure vulnerabilities identified are reported and validated according to SLA's, • Some manual testing activities validate vulnerability or penetration testing findings, • Weekend and night work may be needed at times based on project, support, and business needs Qualifications and Skills • 7+ years of experience as a Application Security analyst or Application Penetration Testing analyst, • Expertise with programming languages, C#, C++, Java, Python, .Net, • Ability to read and understand code deficiencies, • Experience in developing and maturing CI/CD pipeline with respect to code quality and detecting vulnerabilities., • 4+ years of experience with Static Application Security Testing (SAST) or Dynamic App Security Testing (DAST), • 2+ years of experience with container security issues and container technologies, • Through understanding of the components of the Secure Software Development Lifecycle, • Strong knowledge of OWASP Top 10 or CWE, • Understanding of common software threats and mitigations, • Must be process and detail oriented, ability to create detailed process documentation, • Experience with Jira/Confluence, • Bug Bounty and/or penetration testing experience a bonus #LI-JC2 Additional Requirements SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required. SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at .

Learn to evaluate testing data and troubleshoot issues independently after training. In this role, you will support field and lab testing of next-generation smartphones and devices, gaining hands-on experience in 5G and LTE technologies. Responsibilities:Support testing of cellular connectivity for

Job Description: Metro Public Adjustment is looking for people who are interested in helping homeowners receive the maximum amount they are entitled from their insurance claim.Join Metro, a renowned and trusted 30 year old business to take charge of your future.Position Details: Reliable Training ��

Job Description: Metro Public Adjustment is looking for people who are interested in helping homeowners receive the maximum amount they are entitled from their insurance claim.Join Metro, a renowned and trusted 30 year old business to take charge of your future.Position Details: Reliable Training ��

Take the next step in your career as our new Netflix QA Tester to test features for bugs and usability problems.Ensure all safety and quality standards are met.Work closely with your team to maintain high performance and efficiency.Perks include competitive pay, flexible scheduling, training opportu

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

Bring your energy to the role of Netflix QA Tester to perform daily responsibilities with dedication.Work with your team to maintain efficiency and service quality.Stay adaptable in a dynamic, fast-paced environment.Perks include competitive pay, flexible schedules, hands-on training, a collaborativ

Bring your energy to the role of Netflix QA Tester to perform daily responsibilities with dedication.Work with your team to maintain efficiency and service quality.Stay adaptable in a dynamic, fast-paced environment.Perks include competitive pay, flexible schedules, hands-on training, a collaborativ

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

We have an opening for a talented Netflix QA Tester to follow safety procedures and company policies, assist with organizing, stocking, and general upkeep, and manage daily responsibilities with a focus on quality and efficiency.Other duties include coordinate tasks to ensure deadlines are met, assi

Notes on Product Testing: - Each product test is conducted by a third party, independent company.

Help us succeed as our next Netflix QA Tester to perform responsibilities as a QA Tester.Stay adaptable to changing priorities and business needs.Stay adaptable to changing priorities and business needs.Perks include competitive pay, flexible scheduling, training opportunities, a supportive workplac

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

We have an opening for a talented Netflix QA Tester to follow safety procedures and company policies, assist with organizing, stocking, and general upkeep, and manage daily responsibilities with a focus on quality and efficiency.Other duties include coordinate tasks to ensure deadlines are met, assi

Complete all testing assignments within set timelines. No previous testing or gambling experience is needed. All the interactions/game-play would be for testing purposes.

Be part of our success story as a Netflix QA Tester to perform daily responsibilities with dedication.Provide excellent interactions with customers and colleagues.Ensure compliance with company and safety standards.Perks include competitive pay, flexible schedules, hands-on training, a collaborative

Be part of our success story as a Netflix QA Tester to perform daily responsibilities with dedication.Provide excellent interactions with customers and colleagues.Ensure compliance with company and safety standards.Perks include competitive pay, flexible schedules, hands-on training, a collaborative

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

QA Analyst Remote Job Duties: • Partner with the product and engineering team to understand project objectives, gather requirements, troubleshoot issues, and implement scalable test solutions • Design

Experience & Education Undergraduate degree preferred.AML investigations experience Strong Suspicious Transaction Report (STR) filing and writing experience.Understanding of related regulations, such as the Proceeds.

Read and strictly follow the In-Home Usage Test Daily Schedule provided with each product testing project (may include tasks such as unpacking, reading instructions, journal entries, online or mobile feedback, usage of product for a certain amount of time, writing reviews, taking pictures, etc. We a

We’re looking for Data Entry Specialists for Customer Products across the US to work from home and help top brands improve their products before they hit the market.