Trabajos soc analyst en Kearny, New JerseyCrear alertas

Job Description About the job Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey. Position: Cybersecurity Practitioner: Paid Expert Interviews (SOC, Incident Response, Detection, AppSec) Type: Contract Compensation: $125–$175/hour Location: Remote Role Responsibilities • Participate in two to three one-hour video conversations over four weeks., • Discuss the tools and processes used in enterprise cyber defense work., • Evaluate AI assistance in current workflows and suggest improvements., • Provide feedback on task taxonomy for AI benchmarking., • Share insights on measuring effectiveness in triage, investigation, and containment. Qualifications Must-Have • Experience as a SOC analyst, incident responder, or digital forensics investigator., • Familiarity with EDR and SIEM stacks like CrowdStrike Falcon, Microsoft Defender, Sentinel, Splunk, or Elastic. Preferred • Security leaders with hands-on experience in enterprise security. Compensation & Legal • Paid hourly for interview time as a spot bonus. Application Process (Takes 20–30 mins to complete) • Upload resume, • AI interview based on your resume, • Submit form Resources & Support • For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome, • For any help or support, reach out to: support@mercor.com PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Job Description Title: SOC Analyst Location: Remote Duration: 6+ months with a possibility of extension Experience: 2 to 5 years' experience working a SOC Shift: Su, M, T, W, Th - 3rd shift - 12 am - 6 am Job Description: Summary of Project • Provide analyst coverage to review alerts/incidents produced by customer bootstrapped monitoring setup., • Coordinate incident response decisions and escalation, including IT/OT coordination as applicable., • Establish minimum runbooks, reporting, and operational governance required for operation. Tasks • Onboarding and access: create analyst accounts, validate connectivity (VPN/jump host), and assign tool roles., • Service Desk Priority 1 On Call Rotation, • Expected Shift Work, • Willing to work holidays if necessary, • Alert understanding and triage: acknowledge, enrich, classify, and route alerts; create cases/tickets as defined., • Incident coordination: initiate incident bridge, coordinate stakeholders, maintain timeline, and drive decision capture., • Escalation management: follow the escalation matrix and severity model; notify on-call roles and vendors as required., • Reporting: daily operational summary and incident reports (including post-incident review)., • ENVIRONMENT:, • CrowdStrike, Nozomi, Fortinet, and Fortigate FWs., • CrowdStrike is the SIEM, EDR and VM

Job DescriptionTitle: PeopleSoft Integrator/Support Analyst Location: NYC NY On-site/Remote/Hybrid: Onsite Duration: 12 Months Interview Process: Web or In person interview No of submissions: No of Positions: 1 Job Description: The purpose of this position is to support the critical initiatives underway within the PeopleSoft Pension Administration system for Client's administered pension plans. This position is responsible for: • Enhancing / modifying / troubleshooting existing pension processes, implementing new processes allowing for accurate, secure and compliant pension processes, calculations and estimates., • Implementation & support of all customizations required to comply with pension legislation, tiers, regulatory requirements and collective bargaining agreements., • Configuration of all pension rules including eligibility, participation, consolidation (hours, earnings, contributions), vesting, benefit formulas, optional forms., • Supporting various bolt on applications, including but not limited to the pension loans administration system Additional Skills and Information The following knowledge, skills, and abilities are required for this position; PeopleSoft HCM & PeopleSoft Pension Administration knowledge including: Pensions configuration expertise including pension administration module tables & calculation phase (individual & batch) including; • Consolidated Hours, Earnings, and Contributions, • Service Eligibility, Benefit, and Vesting Service, • Plan Eligibility and Participation, • Vesting and Benefit Eligibility, • Benefit Earning Limitations - 415 Limit Earnings, • Final Average Earnings and 401(a)(17) Limits / Kingston Cap Limits, • Overtime Earning Caps as Per CBA's and statutory changes, • 415 Limit High 3 and 401(a)(17) Limits, • Early Retirement Factors, • Benefit Formulas including death benefits, • Retiree payroll, • Annual actuary valuation reporting, • Annual cost of living adjustments, • Pension loans administration, • Service purchase buybacks Technical skills including PeopleTools, PeopleCode, SQR, App Engine, and COBOL About Us: InterSources Inc, is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job DescriptionSecurity Analyst Full-time Onsite - NYC No 3rd parties please. This role is not eligible for employment-based immigration sponsorship. Applicants must be legally authorized to work in the United States without employer sponsorship, now or in the future. This role operates within the internal SOC, partnering closely with an external MSSP to maintain 24x7 coverage. The analyst will triage alerts, investigate incidents, and improve detection capabilities through data analysis and automation. The role emphasizes critical thinking, analytical reasoning, and hands-on scripting to enhance SOC efficiency and detection quality.Core ResponsibilitiesSOC Operations & MSSP Oversight • Triage and investigate alerts from SIEM, EDR, identity, and cloud platforms, • Act as the internal escalation point for MSSP-generated alerts, • Provide direction and feedback to MSSP to improve alert quality and response consistency, • Validate MSSP findings and ensure appropriate prioritization and remediationIncident Investigation & Response, • Conduct structured investigations across endpoint, identity, and network telemetry, • Correlate data across multiple sources to determine root cause and scope, • Document incidents with clear timelines, impact assessments, and recommendationsSecurity Analytics & Detection Engineering, • Analyze logs and datasets to identify detection gaps and improve signal quality, • Tune detection logic and reduce false positives, • Develop and maintain detection use cases aligned to threat frameworks (e.g., MITRE Telecommunication&CK), • Design, test, and deploy new detection rules and analytics based on emerging threats and internal findingsAutomation & Engineering (Required), • Build scripts (Python, PowerShell, or similar) to automate triage, enrichment, and case workflows, • Integrate tools and APIs to streamline SOC processes, • Improve case management workflows and response playbooks through automationContinuous Improvement, • Propose and implement improvements to monitoring coverage and response processes, • Contribute to playbooks, runbooks, and detection standards, • Participate in threat hunting and simulation exercisesRequired Skills & CharacteristicsCritical Thinking (Primary Evaluation Criteria), • Ability to analyze incomplete or ambiguous data and form defensible conclusions, • Strong hypothesis-driven investigation approach, • Demonstrated problem-solving in technical or analytical contextsTechnical Skills, • Hands-on experience with scripting (Python, PowerShell, or similar), • Familiarity with SIEM, EDR, and log analysis, • Understanding of common attack techniques and investigation methodsAnalytical Skills, • Ability to identify patterns and anomalies across datasets, • Experience working with structured or semi-structured dataCommunication, • Clear, concise incident documentation, • Ability to challenge and validate MSSP outputs constructivelyNice to Have, • Experience building detection rules or analytics (Splunk, Sentinel, Elastic, etc.), • SQL or data querying experience, • Exposure to AI/ML-assisted security workflows or automation tools, • Threat hunting experience

Job DescriptionCybersecurity Analyst – Job Description Job Title: Cybersecurity Analyst Experience: 2–6 years Location: [Location / Remote] Employment Type: Full-time Job Summary We are seeking a skilled Cybersecurity Analyst to monitor, detect, investigate, and respond to security threats across the organization's IT environment. The ideal candidate will have hands-on experience with SIEM, endpoint security, vulnerability management, incident response, and security monitoring. Key Responsibilities Monitor security alerts and events using SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or similar tools. Investigate and respond to security incidents, alerts, and potential threats. Perform security event analysis, threat detection, and incident triage. Analyze logs from firewalls, endpoints, servers, applications, network devices, and cloud environments. Conduct incident investigations and perform root-cause analysis. Create and maintain incident reports, investigation documentation, and security metrics. Perform vulnerability assessments and coordinate remediation of identified vulnerabilities. Monitor endpoint security solutions such as Microsoft Defender, CrowdStrike, SentinelOne, or similar platforms. Assist with threat hunting and identification of Indicators of Compromise (IOCs). Support phishing investigations, malware analysis, and suspicious-user activity investigations. Implement and monitor security controls based on organizational security policies. Collaborate with IT, network, cloud, application, and infrastructure teams during security incidents. Participate in security audits, compliance activities, and risk assessments. Stay updated on emerging cyber threats, vulnerabilities, attack techniques, and security trends. Required Technical Skills Strong understanding of cybersecurity fundamentals. Hands-on experience with SIEM tools such as: Microsoft Sentinel Splunk IBM QRadar Knowledge of Security Operations Center (SOC) processes. Experience with Incident Response and Threat Detection. Good understanding of networking concepts: TCP/IP DNS HTTP/HTTPS VPN Firewalls Proxies Knowledge of Windows and Linux security. Experience analyzing security logs and events. Knowledge of MITRE Telecommunication&CK, IOC, TTPs, and threat intelligence. Familiarity with vulnerability-management tools such as Tenable, Qualys, or Rapid7. Basic scripting knowledge in Python, PowerShell, or Bash is preferred. Understanding of endpoint detection and response (EDR) technologies. Cloud Security Basic to intermediate knowledge of Azure, AWS, or GCP security. Experience monitoring cloud security events and logs. Knowledge of Microsoft Entra ID/Azure AD, IAM, MFA, and RBAC. Familiarity with cloud security monitoring and security best practices. Preferred Certifications CompTIA Security CompTIA CySA Certified SOC Analyst (CSA) CEH GIAC certifications Microsoft SC-200 CISSP – preferred for senior-level roles Soft Skills Strong analytical and problem-solving skills. Good communication and documentation skills. Ability to work effectively under pressure during security incidents. Strong attention to detail. Ability to work in a 24×7 SOC environment when required. Typical Tools SIEM: Microsoft Sentinel, Splunk, QRadar EDR: Microsoft Defender, CrowdStrike, SentinelOne Vulnerability Management: Qualys, Tenable, Rapid7 Network Security: Palo Alto, Fortinet, Cisco Threat Intelligence: VirusTotal, MISP, Recorded Future Cloud: Azure, AWS, Microsoft Entra ID Ticketing: ServiceNow, Jira Experience Levels Junior Cybersecurity Analyst (1–3 years): Focus on alert monitoring, incident triage, log analysis, ticket management, and basic investigation. Cybersecurity Analyst (3–6 years): Focus on incident investigation, threat hunting, vulnerability management, SIEM administration, and security improvements. Senior Cybersecurity Analyst (6 years): Focus on advanced threat hunting, incident response leadership, detection engineering, security architecture, automation, and mentoring analysts.

Job DescriptionTitle: Database Administrator Location: New York, NY 10004 On-site/Remote/Hybrid: Onsite Interview Process: Web or In person interview Duration: 12 Months Work Schedule: 35 Hours/Week (7 Hours/Day) Job Summary: Client is seeking an experienced Security Data Science Specialist / Data Analyst to support its Office of Security with data collection, analysis, reporting, and dashboard development. The consultant will analyze fare evasion, crime-related, and security operational data across Client agencies, using SQL, Python, relational databases, and Power BI to generate actionable insights and support management decisions. Key Responsibilities: • Collect, compile, validate, and analyze fare evasion, crime-related, and security operational data from multiple Client agencies., • Use SQL and Python to process large datasets, identify trends, and generate actionable insights., • Develop, maintain, and enhance Power BI dashboards, reports, and data visualizations., • Integrate data from relational databases, spreadsheets, internal systems, and cloud-based sources., • Perform data cleansing, transformation, and validation to ensure accuracy and consistency., • Analyze security incidents, operational statistics, and historical trends to support decision-making., • Collaborate with business analysts, data engineers, security teams, and management to gather reporting requirements., • Translate business requirements into dashboards, reports, and analytical solutions., • Identify opportunities to improve data processes, reporting efficiency, and system performance., • Maintain documentation for data models, reporting specifications, and standard operating procedures., • Ensure data confidentiality, security, and compliance with applicable policies., • Present analytical findings and recommendations to technical and non-technical stakeholders. Required Qualifications:, • 6+ years of relevant professional experience in data analysis, reporting, or database technologies., • 4+ years of experience developing reports and dashboards., • 4+ years of experience working with relational databases and data management technologies., • Strong hands-on experience with SQL and Python for data extraction, manipulation, and analysis., • Experience developing dashboards and visual reports using Microsoft Power BI., • Experience integrating, cleaning, validating, and organizing data from multiple sources., • Strong proficiency in Microsoft Excel, Word, PowerPoint, Visio, and Project., • Experience analyzing large datasets and presenting findings to business stakeholders., • Strong documentation, analytical, troubleshooting, and problem-solving skills., • Excellent written and verbal communication skills., • Ability to work independently, prioritize assignments, and meet deadlines in a fast-paced security environment., • Bachelor's degree in Computer Science, Information Systems, Business Administration, or a related field. Preferred Qualifications:, • Microsoft Certified: Power BI Data Analyst Associate (PL-300)., • Previous experience working with MTA or NJ Transit., • Experience in transportation, railroads, public transit, or public-sector environments., • Experience analyzing security incidents, crime statistics, or fare evasion data., • Familiarity with cloud-based data sources and relational database integration., • Experience supporting operational reporting and executive dashboards. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18+ years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC / NJ! ROLE AND RESPONSIBILITIES: We're looking for a Cybersecurity Engineer (not an Analyst) who can both build our security infrastructure and operate it day-to-day. This isn't a pure admin role or a pure analyst role — it's both. You'll architect and install enterprise-grade, on-prem security platforms for dual-datacenter active/active deployments. You'll then turn around and use those same tools operationally — writing detection logic, creating dashboards, building SOAR playbooks, and triaging what you built. RESPONSIBILITIES: You'll be primarily blue team — defending, detecting, and running the platforms you build. But if you have offensive security chops, this is a chance to participate and help us with red team functions as well. • Architect and implement enterprise security platforms on-prem and in the cloud: CyberArk PAS (Vault, CPM, PSM, PVWA), Splunk Enterprise/ES (indexers, search heads, clustering, HA/DR), Tenable, SOAR, OKTA/SAML, • Design for scale: capacity planning, redundancy, role-based access control, and integration with AD, applications, and infrastructure, • Then operate what you build: custom dashboards, correlation rules, detection tuning, automated playbooks, • Own incident response and threat hunting using your own tooling — you're the analyst, not just the platform owner, • Support compliance (SOC 2, PCI DSS, NIST 800-53) with the audit trails and reporting your architecture produces DESIRED QUALIFICATIONS: • 4+ years securing enterprise environments, with real hands-on time both building (installs, architecture, HA/DR design) and using (detection, dashboards, response) security platforms — not just one or the other, • Deep proficiency in at least two of: CyberArk, Splunk Enterprise/ES, Tenable, SOAR (Phantom/Demisto/Resilient), • Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation and integrations, • Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center), • Comfortable owning something end-to-end: design it, deploy it, defend with it, • Bonus: offensive security background (Nmap, Burp, Metasploit, pentest/ethical hacking experience) — not required, but a strong plus given the red team opportunity above ADDITIONAL SKILLS - NICE TO HAVE: • CISSP, • GCIH, • CEH,, • CySA+, or vendor certs (CyberArk Defender/Sentry, Splunk Certified Admin/Architect) *The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process. Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOAR, SOAR, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at www.mettel.net

Job DescriptionTitle: PeopleSoft Application Security Location: NYC NY On-site/Remote/Hybrid: Remote Duration: 12 Months Interview Process: Web or In person interview No of submissions: No of Positions: 1 Job Description: PeopleSoft Security Analyst – Skills, Experience, and Job DescriptionJob DescriptionPeopleSoft Security AnalystRequired Skills and ExperienceSeeking a senior consultant with extensive hands-on experience in PeopleSoft application security administration, access governance, security auditing, and user access management. The candidate must have strong technical knowledge of PeopleSoft HCM, FSCM, EPM, PeopleTools, and enterprise security controls.PeopleSoft Application SecurityExtensive experience managing PeopleSoft user profiles, roles, permission lists, row-level security, component and page access, process security, and role-based access control (RBAC).PeopleSoft Security AdministrationStrong knowledge of PeopleSoft security architecture, security tables, role assignments, permission-list configuration, user access provisioning, and security configuration across production and non-production environments.User Lifecycle ManagementExperience managing employee, contractor, vendor, retiree, and terminated-user access based on HR job data, effective dates, employment status, and approved access requests. Ability to identify and resolve inappropriate or outdated access.PeopleSoft Query SecurityExtensive knowledge of PeopleSoft Query Manager, public and private queries, Query Access Groups (QAG), query trees, permission lists, and controls governing access to sensitive data. Experience reviewing public queries and identifying unauthorized exposure of sensitive information is highly desirable.Sensitive Data and PII ProtectionExperience securing access to personally identifiable information (PII), employee records, payroll data, and other confidential information through appropriate roles, permission lists, row-level security, and database access controls.Access Governance and AuditingExperience performing periodic access reviews, user and role recertification, manager approvals, segregation-of-duties reviews, privileged access assessments, audit evidence collection, and remediation of security findings.Security Monitoring and ReportingAbility to develop and maintain security reports, monitor changes to user access and security configurations, investigate unauthorized access, identify control gaps, and automate recurring security monitoring activities.PeopleSoft Security AuditingExperience reviewing PeopleSoft security tables and access records, analyzing security changes, validating user and role assignments, and coordinating with database administrators to audit access to sensitive database tables. Knowledge of Oracle Fine-Grained Auditing (FGA) is preferred.Production and Environment SecurityExperience managing security across production, development, test, and staging environments. Ability to validate security configurations, identify inappropriate access, and ensure sensitive production data is appropriately protected in non-production environments.Workflow and Access ApprovalsExperience reviewing and improving access request workflows, approval processes, manager access, employee timesheet access, and security-related operational procedures. Ability to identify process gaps and recommend automation and standardization improvements.Troubleshooting and Problem ResolutionAbility to independently investigate complex PeopleSoft access issues involving roles, permission lists, query access, row-level security, user profiles, and application authorization. Strong analytical and problem-solving skills are required.Technical Documentation and CollaborationAbility to document security procedures, audit findings, access control reviews, and remediation plans. Must collaborate effectively with PeopleSoft functional teams, developers, DBAs, internal auditors, and cybersecurity teams.Additional Skills and InformationStrong hands-on expertise in PeopleSoft security administration, HCM and FSCM security, roles and permission lists, Query Manager, Query Access Groups, row-level security, PII protection, access reviews, security reporting, and audit compliance. Experience supporting large enterprise PeopleSoft environments with complex security requirements is strongly preferred.Preferred QualificationsExperience with PeopleTools 8.59 or later, PeopleSoft HCM, FSCM, EPM, PeopleSoft security tables, SQL, Oracle database auditing, Fine-Grained Auditing (FGA), security automation, and enterprise access governance.Overall Expectation: The Senior PeopleSoft Security Analyst must be a hands-on technical expert capable of independently reviewing and resolving complex PeopleSoft security issues, strengthening access controls, protecting sensitive employee and payroll data, supporting audits, improving security reporting, and proactively identifying and remediating security risks across PeopleSoft environments. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job DescriptionWho we are. Reality Defender is an award-winning cybersecurity company helping enterprises and governments detect deepfakes and AI-generated media. Utilizing a patented multi-model approach, Reality Defender is robust against the bleeding edge of generative platforms producing video, audio, imagery, and text media. Reality Defender's API-first deepfake detection platform empowers teams and developers alike to identify fraud, disinformation campaigns, and harmful deepfakes in real time. Backed by world class investors including DCVC, Illuminate Financial, Y Combinator, Booz Allen Hamilton, IBM, Accenture, Rackhouse, and Argon VC, Reality Defender works with leading enterprise clients, financial institutions, and governments in order to ensure AI-generated media is not used for malicious purposes. Youtube: Reality Defender Wins RSA Most Innovative Startup The Solutions Engineer Role. Deepfake detection is a new category, and most buyers are evaluating it for the first time. They need someone who can show them, on their own media and inside their own workflows, what our platform catches and how it fits their stack. As a Solutions Engineer, you'll be that person: the technical lead on deals with banks, government agencies, and enterprise security teams, from first discovery call through a working integration. This is a full-time role based in NYC or can be full-time remote, reporting to our CRO. Responsibilities include: Lead technical discovery and run proofs of concept that test our detection models against the customer's own audio, video, image, and text samples, with success criteria agreed up front with the account executive and the customer. Build and deliver demos tailored to each buyer's use case (contact center fraud, executive impersonation, KYC and onboarding, media verification), not a standard feature tour. Explain detection results in plain terms: what a score means, how thresholds trade false positives against missed fakes, and how to tune them for the customer's risk tolerance. Guide customers through integrating our API and SDKs into their existing systems, including contact center, video conferencing, identity verification, and case management tools. Own the technical side of security reviews, questionnaires, and RFPs, especially for financial institutions and government buyers with strict procurement requirements. Turn what you hear in the field into clear, prioritized feedback for Product, Engineering, and our research team. Build reusable demo environments, scripts, talk tracks, and integration guides so every deal doesn't start from zero. Know where your job ends: bring in Engineering or research when a question goes beyond what the platform does today, rather than over-promising. Represent Reality Defender at customer meetings, industry events, and conferences as needed. Who you are. 3+ years as a Solutions Engineer, Sales Engineer, or in a similar customer-facing technical role, ideally selling cybersecurity, fraud prevention, identity, or AI/ML products to enterprise buyers. A track record of running proofs of concept that convert: you set clear success criteria, keep evaluations on schedule, and can show deals you helped close. Hands-on with APIs and integrations, with enough Python or JavaScript to build a demo, read a customer's code, and troubleshoot an integration. Working knowledge of AWS, Azure, or GCP. Comfortable explaining probabilistic results (confidence scores, false positive and false negative rates) to both a fraud analyst and a CISO. Strong communicator who can hold a room with technical and executive audiences, and who tells customers honestly what the product does and doesn't do. Experience selling into financial services, government, defense, or other regulated buyers, including security reviews and compliance requirements (SOC 2, FedRAMP, or similar). (nice to have) Familiarity with contact center (e.g., Genesys, Five9, Amazon Connect), video conferencing, or identity verification platforms. (nice to have) Active or prior U.S. security clearance, or exposure to digital forensics, synthetic media, or adversarial ML. (nice to have) Within 12 months, you'll… Be recognized internally and by customers as a go-to expert on deepfake detection deployments in your segment. Have built a library of demos, integration guides, and POC frameworks that shortens the sales cycle for the whole team. Be shaping how we sell into new use cases or verticals as the market matures. Be onboarding and coaching new Solutions Engineers as the team grows. What we offer. Reality Defender offers the following benefits to all our employees, regardless of location: Healthcare plans with 100% premium coverage for employees and partial coverage available for dependents Dental and Vision plans with 100% premium coverage for employees and their dependents Short/Long-term disability and life insurance plans with 100% premium coverage for employees FSA/HSA and 401k programs Equity compensation 20 days of PTO per year 12 weeks of Parental Leave Learning and Development budget Monthly wellness benefits Annual company-sponsored offsite For employees working from Reality Defender's HQ in NYC, we offer the following benefits: Daily in-office lunch through UberEats Commuter benefits Remote Fridays Happy Hours and other local events Base salary range: $165,000 - 190,000, based on experience and level. This role is also eligible for variable compensation. Includes equity. Compensation Range: $165K - $190K

Job Description Digital Forensics Analyst Job DescriptionJob TitleDigital Forensics AnalystJob Summary We are seeking a detail-oriented and analytical Digital Forensics Analyst to investigate cyber incidents, collect and preserve digital evidence, and perform forensic analysis across computers, mobile devices, cloud platforms, and networks. The ideal candidate will have experience in incident response, malware analysis, forensic tools, and legal evidence handling while ensuring compliance with organizational policies and industry standards. Key ResponsibilitiesConduct digital forensic investigations involving computers, mobile devices, servers, cloud environments, and network systems. Acquire, preserve, and analyze digital evidence while maintaining chain of custody. Investigate cybersecurity incidents, including malware infections, insider threats, ransomware, phishing, and data breaches. Perform disk, memory, and network forensic analysis. Recover deleted, encrypted, or damaged files using forensic techniques. Analyze system, application, and security logs to determine attack timelines. Collaborate with Incident Response, SOC, Legal, HR, and Compliance teams during investigations. Prepare detailed forensic reports and present findings to technical and non-technical stakeholders. Support litigation, regulatory, and law enforcement requests when required. Develop and maintain forensic procedures, documentation, and evidence handling standards. Stay current with emerging cyber threats, forensic methodologies, and investigative technologies. Required SkillsStrong understanding of digital forensic principles and evidence handling. Experience with forensic acquisition and analysis tools. Knowledge of Windows, Linux, and macOS operating systems. Experience in memory, disk, mobile, cloud, and network forensics. Understanding of file systems (NTFS, FAT, EXT, APFS, HFS ). Knowledge of malware analysis and incident response processes. Familiarity with log analysis, SIEM platforms, and threat detection. Basic scripting skills in Python, PowerShell, or Bash. Strong analytical, investigative, and report-writing skills. Understanding of cybersecurity frameworks and best practices. Preferred QualificationsBachelor's degree in Cybersecurity, Computer Science, Digital Forensics, Information Security, or a related field. 2 5 years of experience in digital forensics, incident response, or cybersecurity investigations. Experience with cloud forensics in AWS, Azure, or Google Cloud Platform (GCP). Knowledge of mobile device forensics (Android and iOS). Familiarity with eDiscovery and legal compliance requirements. Experience supporting law enforcement or corporate investigations. Nice-to-HHave SkillsMalware reverse engineering Threat hunting Cloud forensics Memory analysis YARA rule creation MITRE Telecommunication&CK framework OSINT techniques Python PowerShell Bash SQL Tools & TechnologiesEnCase FTK (Forensic Toolkit) Autopsy Magnet AXIOM Cellebrite Volatility Wireshark X-Ways Forensics Velociraptor Splunk Microsoft Sentinel Elastic (ELK Stack) Microsoft Defender XDR CrowdStrike Falcon AWS Microsoft Azure Google Cloud Platform (GCP) Key CompetenciesAttention to detail Critical thinking Analytical and investigative skills Problem-solving Written and verbal communication Integrity and confidentiality Time management Collaboration under pressure Key Performance Indicators (KPIs)Incident investigation turnaround time Accuracy and completeness of forensic reports Evidence integrity and chain of custody compliance Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) Successful recovery and analysis of digital evidence Investigation quality and documentation standards Compliance with legal and regulatory requirements Continuous improvement of forensic processes Preferred CertificationsGIAC Certified Forensic Analyst (GCFA) GIAC Certified Incident Handler (GCIH) Certified Forensic Computer Examiner (CFCE) Certified Computer Examiner (CCE) EC-Council Computer Hacking Forensic Investigator (CHFI) GIAC Certified Enterprise Defender (GCED) CompTIA Security CompTIA CySA Certified Information Systems Security Professional (CISSP) (preferred for senior roles)

Job Description Job Title: Information Security Analyst – Incident Response & Threat Hunting Term: 12 Month Contract (possible extensions of 12 to 24 months) Work Environment: On-Site (Possible hybrid 1 Day) Location: Downtown Financial District, NYC Pay Rate: $75.00 to $105.00 per hour on W2 Interview: Video and In-Person U.S. Citizen Only for this position No 3rd-party candidates will be considered No one who requires sponsorship now or in the future You have to be from the NYC Metropolitan Area. "No Relocation" Position Overview We are seeking an experienced Information Security Analyst with strong hands-on experience in incident response, Splunk, and threat analysis to join an established enterprise cybersecurity team. The ideal candidate will go beyond basic SOC monitoring and alert triage, demonstrating the ability to investigate security incidents, identify potential threats, and analyze attacker behaviors across complex environments. Key Responsibilities • Investigate and respond to cybersecurity incidents, identify root causes, and recommend remediation., • Utilize Splunk to analyze security events, investigate suspicious activity, and correlate logs., • Perform targeted threat hunting and analyze indicators of compromise (IOCs) and attacker tactics, techniques, and procedures (TTPs)., • Evaluate threat intelligence to identify and prioritize security risks., • Develop scripts and automation solutions to improve security investigations and response., • Collaborate with cybersecurity teams to strengthen detection and incident response capabilities. Required Qualifications • 5+ years of experience in cybersecurity, incident response, or security operations., • Strong hands-on Splunk experience, including searches, dashboards, and security investigations., • Proven experience in incident response and security threat analysis., • Understanding of threat hunting, threat intelligence, and attacker TTPs., • Ability to investigate complex security incidents beyond basic SOC alert triage., • Strong analytical, troubleshooting, and communication skills., • Hands-on scripting experience with PowerShell, Power Automate, Python, or similar tools, Preferred Qualifications • including the ability to write scripts independently., • Experience writing Splunk SPL queries., • Familiarity with MITRE ATT&CK and threat modeling., • Experience supporting large enterprise security environments. Ideal Candidate We're looking for a hands-on security analyst who enjoys investigating threats, solving complex problems, and improving security operations. Strong Splunk investigation skills and incident response experience are essential, and scripting and automation skills are highly desirable. This is an excellent opportunity to contribute to a collaborative enterprise cybersecurity team working on meaningful security challenges.

Job Description Title: Network Security Architect/Analyst Location: NYC NY On-site/Remote/Hybrid: Hybrid (3 days onsite/2 days remote) Duration: 12 Months Interview Process: Web or In person interview No of submissions: No of Positions: 1 Job Description: Abilities " Must be intellectually curious and passionate about technology " Ability to collect and analyze data effectively " Ability to work independently " Must possess excellent planning and analytical skills, superior communication skills Technical skills " Must possess basic knowledge of our platforms and systems: EC2, Elastic Beanstalk, CloudWatch, Docker, ActiveMQ, RDS/Postgres, Firebase and Sentry. " Must possess knowledge of languages including Java, Kotlin and SQL. Optionally React, HTML/CSS and JavaScript, as well, for frontend work. " Knowledge of React Native and Kotlin is desired but not required. " Knowledge of our SaaS providers is desired but not required: GitHub, GitLab, Sentry, Intercom, Airtable, Expo. Domain knowledge " Prior working knowledge of railroad operations. " Prior working knowledge of GIS or location-based data and systems (including Mapbox and ESRI). Experience and education " Bachelor's degree in computer science or related field is required. Demonstrated equivalent experience and education may be considered in lieu of the degree, subject to approval. " Prior experience designing customer-facing applications. " Must possess prior experience running projects, writing technical documents including scopes of work, software requirements, and estimates. About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job DescriptionIncident Response Analyst Hybrid - New York, NY What are the top skills required for this role? a. Incident Response support along with IDBNY team and SOC provider. b. Would need to understand the broader Crowdstrike Falcon ecosystem Job Description/ Responsibilities Would need to understand the broader Crowdstrike Falcon ecosystem. Would also need to understand to understand sensor management, policy configuration. Perform the Incident Response support along with IDBNY team and SOC provider. Key activities include: " Responsible for documenting evidence throughout the incident life cycle, conducting shift handovers, escalating security events to incident response, and providing support during cyber security incidents " Responsible for the ticket queue triage: prioritization, assignment and disposition of security incident tickets/events. " Responsible for analyzing threat data from multiple sources and building evidence backed dispositions. " Responsible for front line triage and response including some containment and remediation actions such as network isolation of hosts and blocking indicators of compromise within security perimeter tools. " Analyst must keep detailed reports on all analysis activity, documented in the case management tool to validate process adherence. " Responsible for contributing to the creation and updating of new and existing SOAR playbooks and runbooks and general response documentation. " Monitor IDB's security detection and response program to protect IDB's Data and IP from both internal and external threats " Hunt for, detect, and respond to malicious activity and anomalous events on IDB devices and networks " Utilize IDB tools to automate detection and automatically find and address future vulnerabilities " Manage/coordinate remediation efforts after security assessment findings outline weaknesses requiring attention. " Working with the threat modelling lead in Security Architecture to integrate TM tools into the Security Design Review Process. " Review Vendor software/hardware and Third-Party information security integration controls/risks and document gaps and issues for action. " Document, formulate and enforce areas of security improvement that balance risk with business operations and do not diminish efficiencies or innovation. " Foster strong cross-functional relationships internally between Infrastructure, Application teams and external vendors.

Job Description This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week. This role is for Officer level candidates. About the Bank Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. Department Overview: The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues. Your Role Overview: The Third Party Information Security Analyst supports the Bank’s Third Party Risk Management function by focusing on assessing and monitoring information security risks associated with 3rd, 4th, Nth parties. This role assists with vendor due diligence, security reviews, information security risk assessments, and ongoing monitoring activities to ensure these third party relationships align with the organization’s security requirements. Your Duties and Responsibilities: • Conduct initial and continuous information security risk assessments of third (Nth) parties., • Review third party provided security documentation including SOC reports, ISO 27001 certifications, security questionnaires, and Business Continuity and Disaster Recovery documentation., • Document assessment findings and risk ratings in the Bank’s TPRM platform and maintain an up-to-date tracking sheet that provides management with clear visibility into the status, due date, and completion of each assessment and related follow-up actions., • For vendor due-diligence, with a focus on information security risks, coordinate with relevant Teams (Administration, Legal, etc.) for vendor onboarding and offboarding activities, • Perform on-going monitoring of information security-related incidents involving third-parties and coordinate with relevant stakeholders to facilitate requests for necessary information from the relevant third-parties and support the assessment of potential impact to the Bank., • Participate in internal audits and external examinations related to the information security risk domains of third party risk management, • Assist in maintaining information security-related TPRM policies and procedures., • Performs other duties and responsibilities as assigned by management. Your Qualifications: • 3+ Years of experience with risk assessment methodologies and techniques as well as Third Party Risk Management Lifecycle., • Prior experience with financial industry structure and concepts a plus., • Prior experience working on a Third Party Risk Management (TPRM) platform, such as Prevalent., • Prior experience working with and assessing information security-related documentation such as SOC 2 reports, ISO 27001 certification, etc., • Strong knowledge of information security and risk management frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and the Cyber Risk Institute Profile., • Strong Microsoft Office skills, • Strong verbal and written communication skills., • Strong analytical skills, • Self-motivated with good time management skills. Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion. • The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance., • We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals. Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application

Job Description About the job Mercor connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include Benchmark, General Catalyst, Peter Thiel, Adam D'Angelo, Larry Summers, and Jack Dorsey. Position: Cybersecurity Practitioner: Paid Expert Interviews (SOC, Incident Response, Detection, AppSec) Type: Contract Compensation: $125–$175/hour Location: Remote Role Responsibilities • Participate in two to three one-hour video conversations over four weeks., • Discuss the tools and processes used in enterprise cyber defense work., • Evaluate AI assistance in current workflows and suggest improvements., • Provide feedback on task taxonomy for AI benchmarking., • Share insights on measuring effectiveness in triage, investigation, and containment. Qualifications Must-Have • Experience as a SOC analyst, incident responder, or digital forensics investigator., • Familiarity with EDR and SIEM stacks like CrowdStrike Falcon, Microsoft Defender, Sentinel, Splunk, or Elastic. Preferred • Security leaders with hands-on experience in enterprise security. Compensation & Legal • Paid hourly for interview time as a spot bonus. Application Process (Takes 20–30 mins to complete) • Upload resume, • AI interview based on your resume, • Submit form Resources & Support • For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome, • For any help or support, reach out to: support@mercor.com PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell Corporate Information Technology team is looking for an experienced, meticulous and detail-oriented Information Security compliance analyst to be responsible for monitoring the compliance systems in our rapidly scaling organization. The compliance analyst's responsibilities include reviewing our SOC controls and comparing them to actions today, coming up with new automations to confirm compliance, responding to RFPs, and building a library of knowledge to speed up the RFP response program. You will work cross-functionally with teams such as Security and Engineering to identify and correct any flaws in our Compliance systems as well as Legal and Compliance to advise on best practices and policies You should have a sound working knowledge of compliance, including audits and RFPs. You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills. What Will You Be Doing? • Manage cybersecurity risk processes, including risk registers, findings, vulnerabilities, remediation plans, ownership, escalation, and business acceptance within the Vestwell Governance, Risk and Compliance (GRC) solution., • Manage cybersecurity compliance obligations across regulatory, contractual, and customer requirements, including NIST, ISO and SOC 1&2, and other applicable cybersecurity standards and frameworks., • Coordinate cybersecurity audits, assessments, evidence requests, customer reviews, and remediation tracking in partnership with Legal, Compliance, IT, and business leaders., • Support customer, vendor, supplier, and subcontractor cybersecurity risk management, including questionnaires, contract reviews, security expectations, and customer-facing services. Requirements The Necessities • Experience with SOC, ISO, and other audits, • Experience responding to RFPs, • Experience working crossteams to implement new compliance processes, • Vendor management, review experience The Extras • Familiarity with software such as:, • Crowdstrike, • Vanta, • Responsive, • Led an audit response This role will be based in our New York City or Austin office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $90K - $105K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from recruiting@vestwell.com any other domain not ending in vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.

Job DescriptionWhat you'll be part of Garner is on a mission to transform the U.S. healthcare system — and we're the only proven player doing exactly that. We partner with employers to redesign how healthcare works: applying 550+ proprietary clinical metrics across 80+ specialties to a dataset of 320M+ patients to identify the best-performing doctors, then using compelling incentives to steer members to the care that helps them get healthier, faster. The result is a rare "win win" — better care and lower costs for both members and employers. In just five years, our work has helped over 2.5 million people access higher-quality care and saved $1B in healthcare costs. We recently raised our Series E and have doubled five years running. If you've ever wanted your work to solve a problem that touches every person in this country, this is the opportunity to do exactly that. You'd be joining a team fundamentally reimagining healthcare in the U.S. — and using AI to scale that impact further and faster than anyone else can. About the role: We are looking for a Senior GRC Analyst to join our Technical Compliance team to ensure Garner's compliance posture across security frameworks such as ISO 27001, SOC 2, HITRUST, and HIPAA. As a Senior GRC Analyst you will run our internal audits, guide our external assessments, and partner with teams across Engineering, Product, People, and Legal so that our controls are designed well, operating effectively, and continuously improving. Our Technical Compliance team safeguards Garner's sensitive healthcare data and protects the trust of our members, clients, and partners by maintaining a strong control environment and regulatory compliance. The work you do here has a direct impact on our ability to win and retain enterprise customers, expand into new lines of business, and scale securely as we grow. Where you will work: This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: • Manage and support our compliance certifications, including SOC 2, HITRUST, and ISO 27001 audits and run control testing across the audit lifecycle, • Serve as the subject matter expert across the company on our compliance frameworks, • Serve as the primary point of contact for external auditors and assessors, • Manage Garner's Security and Privacy trust center, • Maintain the risk register and drive risk identification, scoring, and reporting, • Manage the maintenance of our compliance policies, standards, and procedures, • Report on our compliance posture to senior leadership, • Scale our GRC function with AI and automation, building quick wins and scoping requirements for Engineering to fully automate the restWhat you will bring to the team:, • 5+ years of experience in GRC, IT audit, or information security compliance, • Prior experience with HITRUST, SOC 2, and ISO 27001 audits, • Hands-on experience with control design, evidence collection, and remediation in a cloud-native engineering environment, • Proven ability to adapt your communication style across engineers, operators, and executives, • A GRC Engineering mindset with prior experience using scripting and LLMs to automate repetitive tasks, • A desire to be a part of a high-performing, mission-driven team that operates with intense urgency, a strong sense of individual accountability, and a commitment to authentic feedback, • Industry certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor preferred Technologies we use: • AWS, Okta, Datadog, Retool, Gitlab, Vanta, Claude Please note: we are unable to sponsor or take over sponsorship of an employment visa at this time. Compensation Transparency: The target salary range for this position is $155,000 - $185,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to candidateprotection@garnerhealth.com. Equal Employment Opportunity:Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at talent@garnerhealth.com.

Job Description Job Description: SOC Analyst Position Title SOC Analyst (Security Operations Center Analyst) Job Summary We are seeking a skilled SOC Analyst to monitor, detect, investigate, and respond to cybersecurity threats across enterprise environments. The ideal candidate will analyze security alerts, perform incident investigations, identify potential threats, and support incident response activities to protect organizational systems, networks, and data. Key Responsibilities Monitor security alerts and events from SIEM, EDR, IDS/IPS, and other security monitoring platforms. Analyze and investigate security incidents, suspicious activities, and potential threats. Perform alert triage, escalation, and incident classification based on severity and impact. Conduct log analysis across endpoints, servers, applications, and network devices. Identify indicators of compromise (IOCs) and indicators of attack (IOAs). Perform threat hunting activities to detect advanced threats. Support malware analysis and suspicious file investigations. Investigate phishing emails, credential-based attacks, and unauthorized access attempts. Create and maintain incident response documentation and playbooks. Escalate critical security incidents to senior analysts and incident response teams. Generate security reports, dashboards, and incident summaries. Stay updated on emerging threats, vulnerabilities, and attacker techniques. Required Technical Skills Hands-on experience with SIEM platforms such as: Splunk Microsoft Sentinel IBM QRadar ArcSight LogRhythm Knowledge of security monitoring tools: EDR/XDR solutions IDS/IPS Firewalls Antivirus and endpoint security tools Understanding of networking concepts: TCP/IP DNS HTTP/HTTPS VPN Firewall rules Knowledge of operating systems: Windows security concepts Linux fundamentals Understanding of cybersecurity concepts: Incident response lifecycle Threat intelligence MITRE Telecommunication&CK framework Vulnerability management Malware analysis basics Ability to analyze logs from: Windows Event Logs Linux system logs Firewall logs Proxy logs Authentication logs Preferred Tools & Technologies SIEM: Splunk, Sentinel, QRadar, ArcSight EDR: CrowdStrike, Microsoft Defender, SentinelOne Network Security: Palo Alto, Fortinet, Cisco security products Threat Intelligence Platforms Ticketing systems: ServiceNow, Jira Certifications (Preferred) CompTIA Security CompTIA CySA Certified Ethical Hacker (CEH) GIAC Security Operations (GSEC) Certified SOC Analyst (CSA) Microsoft Security Operations Analyst (SC-200) Education & Experience Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field preferred. Experience in SOC operations, security monitoring, incident response, or threat analysis. Knowledge of cybersecurity frameworks and best practices. Ability to work in a 24x7 SOC environment (where applicable). Soft Skills Strong analytical and problem-solving skills. Ability to prioritize and handle multiple security alerts. Good written and verbal communication skills. Ability to document incidents clearly. Strong attention to detail and investigative mindset. Key Deliverables Timely alert investigation and resolution. Incident reports and escalation documentation. Threat intelligence updates. Security monitoring improvements. Root cause analysis reports. Role Type Full-time / Contract Department Cybersecurity / Security Operations Center (SOC)

Job Description Job Description: Incident Response Analyst Position Title Incident Response Analyst Job Summary We are seeking an experienced Incident Response Analyst to investigate, contain, and remediate cybersecurity incidents across enterprise environments. The ideal candidate will respond to security events, perform forensic investigations, analyze attacker activities, and coordinate response efforts to minimize business impact and improve organizational security resilience. Key Responsibilities Monitor, investigate, and respond to cybersecurity incidents including malware infections, phishing attacks, ransomware, data breaches, and unauthorized access. Perform incident triage, classification, prioritization, and escalation based on severity and business impact. Execute incident response processes following established security frameworks and playbooks. Conduct digital forensic analysis on endpoints, servers, network devices, and cloud environments. Perform root cause analysis to determine attack vectors, affected systems, and scope of compromise. Collect, preserve, and analyze forensic evidence while maintaining chain of custody. Analyze security logs, endpoint telemetry, network traffic, and threat intelligence data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs). Support containment activities such as isolating affected systems, blocking malicious indicators, and removing threats. Assist with eradication and recovery activities after security incidents. Conduct malware analysis and suspicious file investigations. Perform threat hunting activities based on incident findings and intelligence. Develop incident reports, executive summaries, and technical documentation. Collaborate with SOC analysts, security engineers, IT teams, legal teams, and business stakeholders. Improve incident response procedures, playbooks, and security controls based on lessons learned. Required Technical Skills Strong understanding of incident response lifecycle: Preparation Identification Containment Eradication Recovery Lessons Learned Experience with security monitoring and investigation tools: SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, ArcSight) EDR/XDR platforms (CrowdStrike, Microsoft Defender, SentinelOne) Network monitoring tools Threat intelligence platforms Knowledge of digital forensics concepts: Disk forensics Memory analysis Log analysis Timeline analysis Evidence handling Experience investigating: Phishing attacks Malware infections Credential compromise Insider threats Ransomware incidents Advanced persistent threats (APTs) Understanding of MITRE Telecommunication&CK framework and attacker behaviors. Knowledge of Windows and Linux security internals. Familiarity with scripting languages such as Python, PowerShell, or Bash for automation and analysis. Preferred Tools & Technologies Forensics: EnCase FTK Autopsy Volatility KAPE Security Platforms: Splunk Microsoft Sentinel CrowdStrike Falcon Microsoft Defender for Endpoint Network Analysis: Wireshark Zeek Case Management: ServiceNow Jira Certifications (Preferred) GIAC Certified Incident Handler (GCIH) GIAC Certified Forensic Analyst (GCFA) Certified Incident Handler (ECIH) Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH) OSCP (Offensive Security Certified Professional) Education & Experience Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field preferred. Experience in incident response, SOC operations, digital forensics, or cybersecurity investigations. Experience handling security incidents in enterprise environments. Knowledge of security frameworks such as NIST Cybersecurity Framework and MITRE Telecommunication&CK. Soft Skills Strong analytical and investigative skills. Ability to work effectively under pressure during security incidents. Excellent documentation and reporting abilities. Strong communication skills with technical and non-technical stakeholders. Ability to collaborate across multiple teams. Strong attention to detail and problem-solving mindset. Key Deliverables Incident investigation reports. Root cause analysis documentation. Evidence collection and forensic analysis reports. Threat intelligence and IOC documentation. Incident response recommendations. Post-incident improvement plans. Role Type Full-time / Contract Department Cybersecurity / Incident Response / Security Operations

Job Description Title: Computational Histopathology Analyst Location: Upper Providence, PA On-site/Remote/Hybrid: Onsite Duration: 6-12 Months Interview Process: Webcam/In-Person No of submissions: No of Positions: 1 The role is a Computational Histopathology Analyst in Upper Providence, PA. There are no visa restrictions, and the candidates must be able to work on-site. Please send candidates at your best rate. Job Description: GSK is seeking one Senior / Principal Scientist to augment bandwidth within an established computational pathology team of five members at its Upper Providence, PA research site. This is an individual contributor engagement not a team placement. The contractor will work alongside three colleagues in equivalent roles under the direction of the GSK Technical Lead, integrating directly into day-to-day computational and histotechnology workflows. The engagement is structured around three pillars of expertise that GSK considers non-negotiable for candidate success: Position Summary The Computational Histopathology Analyst will leverage deep expertise in image analysis, machine learning, and histotechnology to develop, validate, and execute computational pathology algorithms that drive biomarker discovery and translational research at GSK. The individual will own end-to-end algorithm development using Halo AI (preferred commercial platform), support metadata ingestion workflows into GSK's Image Management System, and contribute hands-on wet lab capabilities to support tissue processing inputs for computational analysis. All work is conducted under GSK GCP-aligned validation SOPs with documentation maintained in Electronic Lab Notebooks (ELN) and Veeva Vault. Key Responsibilities A. Computational Pathology Algorithm Development & Validation (Primary) " Develop, optimize, and validate image analysis algorithms and computational pathology pipelines using commercial software preferred platform: Halo AI; accepted alternatives include Visiopharm, CellProfiler, Imaris, and QuPath. " Execute end-to-end algorithm development lifecycle: method development, internal testing, formal validation, and data delivery per GSK milestone schedule. " Deliver five complete computational pathology algorithms over the 12-month engagement, each with accompanying validation report and QC-reviewed data output. " Apply machine learning and quantitative image analysis techniques to analyze histological tissue samples and generate robust biomarker insights. " Utilize whole-slide imaging platforms and advanced microscopy tools for qualitative and quantitative data interpretation. " Ensure all algorithmic outputs meet GSK acceptance criteria before submission for sign-off; perform QC review on all executed data prior to delivery. " Document all development and validation activities in GSK's Electronic Lab Notebook (ELN) and regulatory documentation systems including Veeva Vault, in compliance with GCP standards. B. Metadata Ingestion & Data Integration " Design and implement two semi-automated metadata ingestion workflows into GSK's Image Management System to support downstream pathologist and computational analysis pipelines. " Perform structured metadata mapping across four projects, linking sample metadata to corresponding images in the Image Management System and flagging discrepancies for escalation. " Manage and organize pathology image metadata to ensure accuracy, consistency, and downstream pipeline readiness. " Perform data wrangling across multiple file types and formats; apply coding or scripting skills (Python, R, or equivalent) to automate reconciliation tasks where appropriate. " Maintain rigorous data integrity standards; attention to detail and systematic error-flagging are critical success factors for this role. C. Wet Lab / Histotechnology Support (Nice-to-Have, Milestones Included) " Support wet lab histotechnology workflows to produce tissue inputs for computational analysis, including: Microtomy sectioning of tissue samples to appropriate thickness for staining and imaging Histological staining applying and QC-reviewing staining protocols for IHC and special stains Slide scanning and whole-slide imaging using automated platforms Image QC and quality assessment prior to ingestion into computational pipelines " Operate and oversee automated staining platforms including Ventana Benchmark / Discovery Ultra, Leica Bond RX / Bond III, and Dako Link 48/96; industry-based automated platform experience is strongly preferred over academic manual staining backgrounds. " Execute five wet lab sample testing assays (Months 7 11), each including full microtomy, staining, imaging, and QC cycle. " Coordinate tissue processing schedules with computational analysis timelines to ensure smooth handoff of slide inputs into digital pathology workflows. D. Governance, Documentation & Collaboration " Maintain all project documentation in GSK's ELN and Veeva Vault in accordance with GCP-aligned validation SOPs and regulatory requirements. " Actively participate in governance meetings and control gates; report progress against milestones and flag risks proactively. " Collaborate with GSK MSAT, QA, Operations, and QC teams in weekly technical intake sessions to gather process information required for algorithm authoring. " Operate as an independent contributor self-directed, organized, and capable of managing multiple concurrent deliverables against fixed milestone dates. " Escalate data errors, ambiguities, and timeline risks promptly to the GSK SUS Project Manager with proposed resolution plans. Required Qualifications & Experience Education " PhD in a relevant field (Pathology, Computational Biology, Bioinformatics, Biomedical Engineering, Cell Biology, or closely related discipline) with postdoctoral research experience strongly preferred. " Master's degree with substantial industry experience in a pharmaceutical, biotech, or CRO environment is acceptable where depth of practical expertise compensates. " Entry-level PhD candidates without postdoctoral or equivalent industry experience are not suitable for this engagement. Experience Level " Senior or Principal Scientist level (equivalent to GSK Grade G7 or above). " Minimum 3 years post-PhD applied experience in computational pathology, digital pathology, or closely related field. " Demonstrated ability to function as an independent contributor with minimal day-to-day supervision. Technical Skills & Competencies Computational Pathology Must Have " Proficiency in commercial image analysis software Halo AI is the top-priority platform; candidates must demonstrate hands-on experience or demonstrate rapid adaptability. " Accepted alternative platforms with strong experience: Visiopharm, CellProfiler, Imaris (Amira/Amaris), QuPath, ImageJ/Fiji. " Expertise in designing, developing, and validating image analysis algorithms for histological tissue data including cell detection, segmentation, and biomarker quantification. " Applied knowledge of machine learning and computer vision methods relevant to histopathological image analysis. " Experience working with whole-slide images (WSI) and digital pathology file formats. Wet Lab / Histotechnology Preferred " Hands-on experience in core histology workflows: tissue processing, microtomy, embedding, staining, and slide preparation. " Proficiency with automated immunohistochemistry (IHC) and special staining platforms: Ventana Benchmark / Discovery Ultra Leica Bond RX / Bond III Dako Link 48/96 " Slide scanning and whole-slide imaging experience; familiarity with scanning platforms and image QC protocols. " Industry-based automated staining experience strongly preferred over academic manual techniques. Data Integration & Informatics Must Have " Ability to design and build semi-automated metadata ingestion workflows; experience integrating metadata into image management or laboratory information management systems (LIMS). " Proficiency in data wrangling and reconciliation across multiple file types and formats; rigorous attention to detail and error-flagging capability. " Basic to intermediate coding/scripting skills Python, R, or equivalent for automation, data transformation, and pipeline support. " Experience working with ELN systems and regulatory documentation platforms such as Veeva Vault is a significant advantage. GCP & Regulatory Documentation " Understanding of GCP-aligned validation frameworks and SOPs applicable to computational method development and data delivery in a pharmaceutical R&D context. " Experience preparing and maintaining validation reports, method development documentation, and regulatory submission-ready records. Ideal Candidate Profile GSK is not evaluating teams or groups this engagement requires a single, highly capable individual who brings all three pillars of expertise with depth in computational pathology as the primary domain. The ideal candidate: " Has built and validated image analysis algorithms in a regulated pharmaceutical or biotech environment not just academic research settings. " Understands the full data lifecycle in digital pathology: from slide preparation through image acquisition, computational analysis, metadata management, and regulatory documentation. " Is self-organizing, detail-oriented, and capable of simultaneously managing five concurrent algorithm workstreams against fixed milestone dates. " Has a troubleshooting mindset able to identify data errors, algorithm performance issues, and process gaps and escalate with a clear proposed resolution. " Is comfortable working onsite in a team environment, attending regular technical intake sessions, and communicating progress and blockers transparently. " Brings a track record of generating high-quality, reproducible analytical data that passes formal validation review. Tools & Systems Environment GSK will provide all software licenses, hardware, and system access. The contractor is not required to supply tools. Key platforms include: Category Platforms / Systems Image Analysis Software Halo AI (preferred); Visiopharm, CellProfiler, Imaris, QuPath (alternatives) Automated Staining Platforms Ventana Benchmark / Discovery Ultra; Leica Bond RX / Bond III; Dako Link 48/96 Documentation / ELN Electronic Lab Notebook (GSK platform); Veeva Vault (regulatory documentation) Image Management System GSK internal Image Management System (IMS) for metadata ingestion and storage Programming / Scripting Python, R, or equivalent for data wrangling and pipeline automation QC & Validation GSK GCP-aligned validation SOPs; formal validation report templates About Us: InterSources Inc , is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

Job Title: Incident Response Analyst Location: New York, NY Work Arrangement: Hybrid Employment Type: Contract Duration: 24+ Months Domain: Technology | Banking Pay Rate: $64/hr on W2 & $70/hr on c2c Application Deadline: November 30th SKILLS REQUIRED Primary (Must-Have): • Cybersecurity Incident Response, • CrowdStrike Falcon Ecosystem:, • SOC Operations & Security Event Triage. Secondary (Good to Have): • SIEM and security monitoring tools., • Security orchestration and automation (SOAR). POSITION OVERVIEW We are seeking an experienced Incident Response Analyst to support cybersecurity incident detection, investigation, triage, and remediation in collaboration with internal security teams and SOC providers. The ideal candidate will have a strong understanding of the CrowdStrike Falcon ecosystem, including sensor management, policy configuration, endpoint detection and response (EDR), and threat containment. This role involves analysing security events, maintaining incident documentation, supporting SOAR automation, and coordinating remediation activities to protect enterprise systems, data, and intellectual property. ROLES & RESPONSIBILITIES • Support cybersecurity incident response activities in collaboration with internal security teams and SOC providers., • Monitor security alerts, investigate suspicious activities, and identify potential threats across enterprise devices and networks., • Manage security incident ticket queues, including triage, prioritization, assignment, escalation, and resolution., • Utilize the CrowdStrike Falcon ecosystem for threat detection, sensor management, policy configuration, and endpoint protection., • Perform front-line incident response, including host isolation, blocking indicators of compromise (IOCs), and supporting containment and remediation activities. BENEFITS Medical | Dental | Vision | 401(k) EEOC Compliance: We are an equal opportunity employer, and all qualified applicants will receive consideration for employment. DISCLAIMER AI Usage Policy: Pacer Group uses AI to assist in screening applications. Final hiring decisions are made by human recruiters based on qualifications and experience.

Senior Third-Party Risk Management (TPRM) Analyst Pay Rate: Up to $62.50 per hour Job Type: Contract (Assigment with a Swipejobs staffing) Location: NY NY Job Summary Seeking an experienced Senior Third-Party Risk Management (TPRM) Analyst to independently conduct, analyze, and complete third-party risk assessments. This role focuses on evaluating vendor security controls, reviewing technical and compliance documentation, identifying potential risks and control gaps, and documenting findings and recommendations to support informed, risk-based decisions. The ideal candidate will have hands-on experience managing third-party risk assessments from initial review through final conclusions, along with a strong understanding of cybersecurity, data privacy, and regulatory compliance. Experience with enterprise third-party risk management (TPRM) and governance, risk, and compliance (GRC) platforms, particularly KY3P, is highly desirable. This is a hands-on technical risk management position requiring direct ownership of risk assessments rather than a role focused primarily on vendor onboarding, administrative coordination, or document management. Responsibilities • Independently conduct and complete third-party risk assessments, including reviewing vendor evidence, evaluating controls, identifying deficiencies, and documenting risk ratings, findings, and recommendations., • Assess vendor security controls when SOC 2 Type II reports or equivalent certifications are unavailable, using alternative evidence such as security policies, ISO certifications, penetration testing results, and independent assessments., • Evaluate third-party risks related to cybersecurity, data privacy, personally identifiable information (PII), regulatory compliance, and Payment Card Industry (PCI) requirements., • Analyze vendor security questionnaires, including Standardized Information Gathering (SIG) assessments, and validate responses against supporting documentation., • Identify inconsistencies in vendor responses and request additional information or evidence as needed., • Utilize enterprise TPRM and GRC platforms to manage assessments, document findings, track remediation activities, and maintain effective risk workflows., • Conduct ongoing monitoring and periodic reassessments in response to security incidents, regulatory changes, financial concerns, ownership changes, and subcontractor changes., • Evaluate the effectiveness of vendor controls and recommend appropriate remediation or risk mitigation measures., • Support the TPRM framework throughout the vendor lifecycle, including due diligence, risk assessment, approval, monitoring, and offboarding., • Track and report risk metrics, including assessment completion timelines, outstanding high-risk findings, and remediation progress., • Collaborate with Procurement, Legal, Information Security, Privacy, Risk Management, and business stakeholders to communicate findings and support risk-based decisions., • Apply business and financial risk knowledge, including relevant insurance considerations involving underwriting, claims, fraud, and financial exposure. Qualifications • Required Qualifications and Experience, • Demonstrated hands-on experience independently conducting, analyzing, and completing third-party risk assessments., • Experience reviewing vendor documentation and technical evidence, evaluating security controls, identifying risks and deficiencies, and documenting conclusions and recommendations., • Working knowledge of cybersecurity risk management, data privacy, PII protection, and applicable regulatory and compliance requirements, including GDPR, CCPA, and PCI considerations., • Experience reviewing SOC reports, ISO certifications, security policies, penetration testing results, and other evidence used to evaluate vendor risk., • Experience analyzing SIG or comparable vendor risk questionnaires and validating vendor responses against supporting documentation., • Practical experience with enterprise TPRM or GRC platforms, such as KY3P, Archer, ServiceNow, Aravo, Coupa, or Mitratech/Prevalent., • Understanding of continuous and ongoing monitoring, risk remediation, periodic reassessments, and third-party risk reporting., • Strong analytical, critical-thinking, documentation, and communication skills, including the ability to explain risk findings and recommend appropriate next steps., • Ability to work independently, exercise sound risk judgment, and collaborate effectively with technical and business stakeholders. Required Skills • Hands-on experience independently conducting, analyzing, and completing third-party risk assessments., • Ability to review vendor documentation and technical evidence, evaluate security controls, identify risks and deficiencies, and document conclusions and recommendations., • Working knowledge of cybersecurity risk management, data privacy, PII protection, and applicable regulatory and compliance requirements, including GDPR, CCPA, and PCI considerations., • Experience reviewing SOC reports, ISO certifications, security policies, penetration testing results, and other evidence used to evaluate vendor risk., • Experience analyzing SIG or comparable vendor risk questionnaires and validating vendor responses against supporting documentation., • Practical experience with enterprise TPRM or GRC platforms, such as KY3P, Archer, ServiceNow, Aravo, Coupa, or Mitratech/Prevalent., • Understanding of continuous and ongoing monitoring, risk remediation, periodic reassessments, and third-party risk reporting., • Strong analytical, critical-thinking, documentation, and communication skills, including the ability to explain risk findings and recommend appropriate next steps., • Ability to work independently, exercise sound risk judgment, and collaborate effectively with technical and business stakeholders. Preferred Skills • Experience with KY3P or similar enterprise third-party risk management platforms., • Familiarity with alternative vendor assurance evidence when SOC 2 Type II reports are unavailable., • Knowledge of emerging cybersecurity, privacy, regulatory, financial, and supply chain risks., • Experience improving TPRM workflows, assessment quality, risk reporting, and remediation tracking., • Familiarity with insurance-related business risks and financial exposure. How to Apply

Job DescriptionTitle: Telecom Financial Analyst Location: NYC NY On-site/Remote/Hybrid: Onsite Duration: 12 Months Interview Process: Webcam or in person interview No of submissions: No of Positions: 1 Job Description: Note: THIS POSITION WILL REQUIRE CONSULTANT TO WORK ONSITE. NO TELEWORK WILL BE ALLOWED FOR THIS ROLE. The Telecom Expense Management Unit team manages costs associated with telecommunication services, such as mobile and landline communications, including IT services such as cloud services, and data expenses. Identifies cost savings, optimizes clients voice and data and wireless services-and all telecom expenses ensuring cost efficiency in managing telecom assets effectively by tracking usage and charges, auditing invoices, negotiating contracts and identifying cost savings opportunities and services. The incumbent candidate will assist in establishing and optimizing processes for the Telecom Expense Management Unit, including but not limited to, establishing processes for management, Analysis of spending and non-usage of mobile devices, invoice analysis, reporting large data analysis and vendor payments. The incumbent candidate will assist in establishing and optimizing processes for the Telecom Expense Management Unit including but not limited to perform financial analysis and gather business requirements and outline business needs. Incumbent will be working with Clients IT Telecom Services & Expense Management Unit to manage the high-level data reports, performing in-depth analysis of projects and communicating results to leadership. Will also be analyzing and monitoring forecasting procurement requirements for new purchases, contract modifications, and vendor payments Some of the responsibilities include generating ServiceNow reports, verifying the asset records with wireless carriers' portals for accuracy and controls. This verification includes comparing the approximately 30,000 mobile devices in the system with the databases of the four wireless carriers of AT&T, Sprint, T-Mobile, and Verizon, reviewing the records for any discrepancies, and wireless carrier bill review. Process zero usage reports, this is a very time-intensive and labor-intensive process, making it more difficult to accomplish the tasks outlined above without assistance and support from a consultant. Understand and be abreast of new technology Responsibilities: • Establish/Optimize process services, such as mobile and landline communications, in preparation for monthly carrier reports analysis for the department; Analyze report for data integrity., • Establish/Optimize process to manage costs associated with telecommunication services, review vendor reports to reduce cost by eliminating errors by eradicating cost inefficiencies identifying cost savings opportunities and optimize clients's wireless, voice and data services., • Establish/Optimize process to Analyze vendor expenses and compare to funding of contract., • Establish/Optimize process to Prepare forecast budget expense reports., • Establish/Optimize preparation status reports on in-process and completed projects. To indicate if projects are within budget parameters from both a dollar and time perspective., • Establish/Optimize process to prepare and evaluate mid-year and year-end forecasts, monitor spending, and secure rollover of unspent funds., • Establish/Optimize process to track planned and actual expenses in support of the annual budget process., • Establish/Optimize process to Investigate and resolve project budget variances Required/ Preferred Skills : • BS degree in Finance, Accounting or Economics preferred., • Experience with project-based financial management budgeting/forecasting and or auditing a plus., • Ability to independently compile, research and perform in-depth analysis of projects., • Excellent analytical and problem-solving skills., • Experience with ServiceNow, reporting and dashboards., • Experience with PeopleSoft., • Profound knowledge of analytical functions and table functions., • Ability to work with large databases and financial software applications., • Superior skills with spreadsheets and databases., • Strong communication, analytical and data organization / interpretation skills., • Proven ability to multi-task, work under pressure, and meet tight deadlines., • Attention to detail and accuracy is required., • Superior skills with Microsoft Office applications (Excel, PowerPoint, Word, Outlook), • Outstanding organizational and quantitative skills as well as experience managing and resolving complex resource allocation problems., • Ability to perform high-volume work accurately and independently., • Ability to gather business requirements and outline business needs., • Ability to perform financial and data analysis using various financial systems, • Superior analytical skills, • Excellent written and oral communications skills., • Strong knowledge in automation- manual processes., • In-depth experience analyzing very large data reports, databases and financial reports., • Ability to identify trends analyze data and make recommendations., • Invoice analysis Tracking., • Experience in Budget and project spend tracking., • Information Technology About Us: InterSources Inc, is a Small, Woman, and Minority-Owned Business Enterprise, ISO/IEC 27001, SOC 2 Type 2 certified company with massive 18 years of diversified experience in providing IT Consulting Services, Artificial Intelligence, Data Analysis, Application Development, Cloud Services, Cybersecurity, Digital Marketing, ERP Management, Custom Software Development, Web Development, UI/ UX Design, System Integration, QA Support etc. We make reasonable accommodations for clients and employees, and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud and Oracle partner company.

We are seeking an experienced Incident Response Analyst to support cybersecurity incident detection, investigation, triage, and remediation in collaboration with internal security teams and SOC providers. Job Title: Incident Response Analyst. Perform front-line incident response, including host isol

We are seeking an experienced Incident Response Analyst to support cybersecurity incident detection, investigation, triage, and remediation in collaboration with internal security teams and SOC providers. Job Title: Incident Response Analyst. Cybersecurity Incident Response.

A financial-services organization is seeking an IT Security Governance Analyst to support technology audits, security governance, risk assessments, and compliance activities. The ideal candidate will have hands-on experience with IT controls, audit evidence, and security risk processes, along with strong organizational skills and an interest in improving governance workflows. The role provides opportunities to work closely with technology, security, and business stakeholders while developing practical automation capabilities. Responsibilities • Coordinate internal and external IT audit requests., • Collect, assess, and maintain security control evidence., • Support third-party and application risk assessments., • Review access management, authentication, encryption, and data protection controls., • Document governance findings, control gaps, and risk decisions., • Coordinate remediation tracking and follow-up with stakeholders., • Prepare governance reports and maintain accurate assessment records., • Identify opportunities for process improvements and basic automation. Role Requirements • Working knowledge of IT audit, security governance, control testing, and risk assessment principles., • Experience or exposure to evidence collection and audit documentation., • Understanding of IAM, authentication, encryption, least privilege, and common security risks., • Basic knowledge of SQL, APIs, scripting, or comparable automation concepts., • Experience or exposure to regulated or controlled environments., • Strong attention to detail and organizational skills., • Ability to coordinate with technical and business stakeholders., • Willingness to learn and contribute to process improvements., • Ability to work onsite three days per week in Midtown Manhattan. Nice to Have • IT audit, cyber GRC, technology risk, or cybersecurity consulting experience., • Financial-services or other regulated-industry experience., • SOC/SOX controls or vendor risk assessments., • SQL, Python, JavaScript, dashboards, or workflow automation experience., • Experience with GRC, IAM, SIEM, or reporting platforms.

We're hiring a SOC Compliance HR Analyst to own the people side of a SOC 2 program: the background checks, onboarding and offboarding records, policy acknowledgments, security training, and access changes that auditors will ask to see. If you've ever inherited a SOC 2 audit where HR evidence lived i

Senior Security Software Engineer – Security Automation & DevSecOps Location: This role can be based out of Charlotte, NC or Novi, MI. Remote candidates who are willing to travel as required will also be considered. Employment Type: W-2 Contract Only Recruiting Company: RL Enterprise Recruiting & Staffing About the Opportunity RL Enterprise Recruiting & Staffing is seeking an experienced Senior Security Software Engineer for an innovative technology organization. We are looking for a hands-on engineer who combines strong software development skills with cloud security engineering, DevSecOps, and security automation. This is not a traditional SOC, Security Analyst, or cybersecurity monitoring position. The ideal candidate has experience developing internal security tools, building automated security workflows, and embedding security controls directly into software engineering and cloud infrastructure environments. Key Responsibilities • Design, develop, and maintain internal security tools, applications, and automation frameworks., • Build security automation solutions using Python, Go, or TypeScript., • Develop integrations between security platforms, cloud services, and engineering systems using APIs., • Engineer and maintain CI/CD security controls, automated validation pipelines, and vulnerability scanning workflows., • Develop and maintain Terraform modules and Infrastructure as Code solutions., • Implement policy-as-code and automated security compliance controls., • Build security orchestration and automated remediation workflows., • Collaborate with software development, cloud, DevOps, and infrastructure teams to strengthen application and platform security., • Support secure cloud-native environments using AWS, Azure, Kubernetes, and Docker. Required Qualifications • 8+ years of software engineering, security engineering, or related hands-on engineering experience, including substantial coding responsibility., • Strong hands-on Python development and automation experience; Go or TypeScript experience is also valuable., • Demonstrated experience building internal security tools or applications from scratch., • Hands-on experience developing and maintaining Terraform modules and CI/CD security controls., • Strong knowledge of AWS and/or Azure cloud security., • Experience with Kubernetes, Docker, and cloud-native environments., • Experience integrating security solutions using REST APIs, automation, and event-driven workflows., • Working knowledge of DevSecOps, application security, vulnerability management, and secure software development. Preferred Qualifications • Experience with SAST, DAST, SCA, and automated security scanning., • Experience implementing policy-as-code frameworks such as OPA., • Knowledge of identity and access management, Zero Trust, and cloud governance., • Experience with security orchestration, SIEM integrations, and automated remediation., • Exposure to AI/LLM security, RAG, or AI-enabled security automation. Employment Requirements • W-2 Contract Only — No C2C or 1099 arrangements., • No third-party recruiters, staffing vendors, or subcontracting arrangements., • Must be authorized to work in the United States without employer sponsorship now or in the future. Interested? If you're a hands-on engineer who enjoys writing code, building security solutions, and automating complex security processes, we'd love to connect. Apply today through RL Enterprise Recruiting & Staffing to learn more about this opportunity.

New York City, NY (Hybrid); San Francisco, CA (Hybrid) At Snorkel, we believe meaningful AI doesn't start with the model, it starts with the data. We're on a mission to help enterprises transform expert knowledge into specialized AI at scale. The AI landscape has gone through incredible changes since 2015, when Snorkel started as a research project in the Stanford AI Lab, to the generative AI breakthroughs of today. But one thing has remained constant: the data you use to build AI is the key to achieving differentiation, high performance, and production-ready systems. We work with some of the world's largest organizations to empower scientists, engineers, financial experts, product creators, journalists, and more to build custom AI with their data faster than ever before. Excited to help us redefine how AI is built? Apply to be the newest Snorkeler! We are seeking a hands-on, builder-minded Technical Compliance Analyst to serve as the operational engine behind our Trust & Security program. You will maintain our SOC 2 Type II posture, drive our second entity from Type I to Type II, and act as the bridge between compliance requirements and engineering & delivery execution. You will also lay the technical groundwork to evolve us toward CMMC 2.0, ensuring we are ready for federal contracts without slowing down our product velocity. This is not a "compliance cop" role. We practice "Yes, if..." securityyou will influence architecture, automate policy enforcement, and unblock enterprise sales by ensuring the Security team has pristine, verifiable evidence at their fingertips. Powering Customer Trust & Revenue Enablement • The Engine Behind Revenue: Help drafting accurate, technically precise responses to RFPs, security questionnaires (CAIQ, SIG, custom risk assessments), and customer portals., • Repository Stewardship: Own and continuously update the "Library of Truth"a pristine repository of pre-vetted security evidence, technical configurations, and policy documents. By keeping this repository audit-ready, you enable the Security team to respond to enterprise prospects in hours, not days., • Technical Depth on Demand: When a customer asks about AWS KMS encryption, logging pipelines, or IAM privilege escalation paths, you retrieve the granular evidence and draft the written narrative the Security and Legal Team needs to confidently close the deal. Building Compliance into the DNA • Compliance Partner: Partner with IT, Security, Product, Engineering, and Delivery early in the development lifecycle. Review new features, infrastructure changes, and vendor integrations to influence architectural decisions that bake in compliance by designwithout creating friction or slowing sprints., • Policy as Guardrails: Write, update, and operationalize security policies that accelerate delivery. Translate abstract SOC 2 and NIST controls into clear, developer-friendly tasks (e.g., IAM hardening, log retention, Zero Trust implementation)., • Compliance-as-Code: Where possible, automate policy enforcement in CI/CD pipelines so that security checks are invisible, automated, and frictionless for engineering teams., • Enablement, Not Enforcement: Conduct lightweight compliance enablement sessions with engineering teamsshowing them how to self-serve evidence collection and interpret compliance requirementsso security becomes everyone's responsibility, not just yours. Operational GRC & Audit Excellence • Audit Lifecycle Management: Drive and coordinate the end-to-end SOC 2 Type I and Type II audit cycles across our business entities. Manage audit schedules, coordinate with external auditors, and drive remediation of findings to keep us perpetually audit-ready., • GRC Automation: Be the power-user of our modern GRC stack (Vanta, Drata). Automate evidence collection, continuously monitor technical controls, and eliminate manual spreadsheet tracking., • Operational Cadences: Manage the compliance ticketing queue in Jira. Execute routine mandates including quarterly User Access Reviews (UAR), security awareness training, phishing simulations, and managing the Risk Acceptance/Exception process., • Metrics & Reporting: Build and maintain compliance dashboards (KPIs/KRIs) for the Security Lead and executive team. Track audit readiness scores, remediation SLAs, and control health trends to provide clear visibility into our posture., • Policy Governance: Manage the annual policy review and attestation cycleensuring process owners review, sign off, and update documentation on schedule, keeping our policies evergreen. Future Federal & Supply Chain Roadmap • Foundation for Federal Growth: Assist the Security Team in aligning current controls with federal standardsspecifically NIST SP 800-53, NIST SP 800-171 Rev 3, FedRAMP, and CMMC 2.0. Help draft early System Security Plans (SSPs) and Plan of Action & Milestones (POA&Ms)., • Supply Chain Risk Management (C-SCRM): Own the third-party vendor review process, assessing critical partners (Cloud, HRIS, CRM) to meet strict federal supply chain requirements and offload this operational work from the Security Lead., • Incident Readiness: Support the Security Team during security incidents by preserving audit-relevant evidence, documenting the chronology of events, and drafting post-incident reports to satisfy regulatory and audit requirements., • Experience: 25 years of experience in technical compliance, IT audit, or GRC within a SaaS or fast-paced startup environment., • Audit Mastery: Proven end-to-end experience supporting external SOC 2 Type I and Type II auditswith specific expertise auditing IT General Controls (ITGC) (Change Management, Logical Access, System Operations). You know how to manage auditors and translate their requests into actionable developer tasks., • Technical Acumen: Strong understanding of modern cloud infrastructure (AWS/GCP/Azure), IAM, CI/CD pipelines, encryption standards, and vulnerability management. You can read a Terraform plan or an AWS Config rule and interpret its compliance impact., • Tooling: Experience operating automated compliance platforms (Vanta, Drata), tracking work in Jira, and security awareness platform (KnowBe4), • Mindset: You are a business enabler. You practice "Yes, if..." securityyou negotiate secure alternatives rather than blocking releases or ignoring risks. You thrive in a partnership role, ensuring IT, Security, Engineering, and Delivery teams have everything they need to succeed., • Communication: Exceptional written and verbal communication skills with the ability to explain technical controls to customers and business risks to engineers., • Direct Revenue Impact: Your work directly correlates to revenue. By building the "Library of Truth," you ensure the Security team can close enterprise deals faster and more confidently., • Be a Builder, Not a Bureaucrat: You won't just check boxes. You will build automated, scalable compliance programs that enable the business to engineer quicker and sell faster., • Modern, Automated Tooling: Say goodbye to manual spreadsheet tracking. We leverage continuous-monitoring GRC tech so you can focus on technical risk and architecture, not admin overhead., • Future-Proof Career Growth: Gain rare, hands-on exposure to evolving a commercial SaaS startup into a federal-ready entity (FedRAMP/CMMC), highly accelerating your market value in the GRC space. Actual compensation will be determined based on factors including skills, qualifications, experience, and geographic location. Salary range(s) for this role $120,000 - $185,000 USD Be Your Best at Snorkel Joining Snorkel AI means becoming part of a company that has market proven solutions, robust funding, and is scaling rapidlyoffering a unique combination of stability and the excitement of high growth. As a member of our team, you'll have meaningful opportunities to shape priorities and initiatives, influence key strategic decisions, and directly impact our ongoing success. Whether you're looking to deepen your technical expertise, explore leadership opportunities, or learn new skills across multiple functions, you're fully supported in building your career in an environment designed for growth, learning, and shared success. Snorkel AI is proud to be an Equal Employment Opportunity employer and is committed to building a team that represents a variety of backgrounds

Member of Technical Staff: Software Engineering New York City · Hybrid (2–3 days a week in office) · Full time Own and scale the production platform behind an AI-native digital forensics and incident response (DFIR) startup, from our New York office. About the company We’re a venture-backed, seed-stage company building AI-native Digital Forensics and Incident Response. Our platform has already helped incident responders handle hundreds of cyberattacks. Building on that, we create realistic investigation environments and evaluations to train and measure AI on real defensive work, for our own agents and for our partners’ models. Our mission is to accelerate AI cyberdefense to meet the security challenges of the AGI era. We believe automated digital forensics, meaning deep security investigations, will become ubiquitous in a world with abundant intelligence. About the role We run a production, multi-tenant platform that collects evidence from customer environments, processes it into a forensic data model, and serves it to human analysts and AI agents working the same case. It is live and handling real incidents today. We’re hiring engineers in New York to own and scale that platform. The work runs from evidence collection to the pixels on screen. The bar is forensic: evidence must be complete, traceable and isolated between tenants, because findings end up in front of lawyers, insurers and regulators. What you’ll work on • Evidence collection. Scale our collectors across Microsoft 365, Google Workspace and endpoints (Windows, macOS, Linux), pulling audit logs, mailboxes and host artefacts from customer tenants reliably and within their API limits., • The evidence pipeline. Evolve the pipeline that normalises raw evidence into a common model of events and entities, and materialises investigation-ready tables on Apache Iceberg., • Investigation-scale exploration. Serve tens of millions of events per case from ClickHouse with interactive filtering, search and bulk classification., • The multi-tenant foundation. Harden tenant isolation, authorisation, auditability and least-privilege infrastructure for a security product that holds other people’s breach data. Responsibilities • Design, ship and operate backend services and data pipelines end to end, from the API to the Terraform., • Own pipeline correctness: idempotent stages, leases and retries, and provenance from every finding back to the raw evidence., • Build the analyst-facing product alongside our incident responders: investigation views, timelines, findings and reports., • Own reliability, performance and observability as volume grows: alarms that mean something, runbooks and capacity planning., • Make key architectural decisions and raise the engineering bar: testing, CI/CD, and a codebase that agents and humans can both work in safely. You may be a fit if you • Have built, shipped and operated production software that real users depend on., • Write strong backend Python: API design, async code, SQL and schema migrations (we use FastAPI, PostgreSQL, SQLAlchemy and Alembic)., • Are comfortable with data-intensive systems: large volumes of semi-structured logs, columnar formats, and how data moves through a pipeline., • Have run cloud infrastructure in production: AWS, Terraform, containers, and serverless or event-driven orchestration., • Are comfortable with a modern TypeScript front end (React, Next.js, Tailwind), or happy to work closely with engineers who are., • Use AI coding agents as a core part of how you build, and care about keeping a codebase legible to them., • Work closely with users and iterate quickly to deliver working software., • Are deeply motivated by our mission. You’re encouraged to apply even if you don’t meet every listed qualification. Nice to have • Lakehouse or analytical-database experience: Apache Iceberg, ClickHouse, DuckDB, Polars or similar., • Experience with the Microsoft Graph API, the Google Workspace Admin SDK, or endpoint forensics tooling such as Velociraptor., • Multi-tenant SaaS with tenant isolation and RBAC, or work in SOC 2 or other regulated environments., • A background in cybersecurity, incident response or digital forensics., • Site reliability experience: on-call, incident response and SLO design., • Open-source contributions or a track record of shipping side projects. Compensation and working model $220,000 – $260,000 base salary plus meaningful equity, depending on experience and level. This is a hybrid role based in New York City. You’ll spend 2–3 days a week in our NYC office, working in person with engineers and incident responders, with the rest of the week remote.

Senior Analyst, Corporate Audit Under the FOX banner, we produce and distribute content through some of the world's leading and most valued brands, including: FOX News Media, FOX Sports, FOX Entertainment, FOX Television Stations and Tubi Media Group. We empower a diverse range of creators to imagine and develop culturally significant content, while building an organization that thrives on creative ideas, operational expertise and strategic thinking. The Senior Analyst, Corporate Audit, will be a key member of FOX's Corporate Audit Department. Reporting to the Senior Director, Internal Controls, the Senior Analyst will be responsible for the execution of various fieldwork components of the Corporate Audit Plan and SOX Program. This role would be based out of FOX's New York Office, with ongoing collaboration with the team members in Los Angeles. Oversight of delivery and reporting for the approved Corporate Audit Plan. Support with the preparation of the annual SOX risk assessment to identify risks impacting internal controls over financial reporting. Support with project management of corporate audit plan and SOX program. Support with maintenance of appropriate audit documentation and upkeep of stakeholder dashboards within Optro/AuditBoard. Assist in the development of the Annual Corporate Audit Risk Assessment and drafting of the proposed Corporate Audit Plan. Execute risk-based internal audit engagements covering operational, financial, compliance, and SOX/internal control processes. Perform audit planning activities, including process walkthroughs, risk assessments, control identification, and development of audit test procedures. Conduct detailed testing of internal controls and substantive procedures to evaluate control design and operating effectiveness. Document audit workpapers in accordance with Internal Audit methodology and professional standards. Identify control deficiencies, process inefficiencies, and compliance risks, and assist in developing practical remediation recommendations. Review testing performed by co-source provider and management when needed to ensure testing meets Internal Audit Standards and best practices. Ensure, as appropriate, that management is aware of Corporate Audit activity (i.e., timing, status of audits, agreed management action plans, etc.). Ensure audit documentation complies with Internal Audit standards, company methodology, and the Institute of Internal Auditors (IIA) professional standard. Ensure Management Action Plans appropriately address identified issues. Partner with IT Audit team members to ensure a streamlined stakeholder experience and full coverage of applicable risks. Present CAD audit results to senior management and relevant stakeholders regularly. Build strong relationships with business leaders as a trusted business partner to provide subject matter insight into internal controls and risks. Liaise with consultants and the external auditors in responding to any issues on a timely basis and coordinate audit/review procedures as required. Coordinate with and provide support for external auditors with direct assistance work, reliance procedures, and audit coordination. Lead ongoing maintenance of the Optro/AuditBoard GRC platform to ensure smooth program delivery. Bachelor's degree required in Accounting, Finance, or a related field. Certified Public Accountant license or Internal Audit qualification (e.g., CIA/CISA) and be able to demonstrate a robust knowledge of Internal Audit Standards and best practices. 3+ years of internal audit experience. Working knowledge of IT controls/audit workstream including Service Organization (SOC) reporting. Working experience with using Optro/AuditBoard to manage the audit and SOX lifecycle. Demonstrated success executing concurrent workstreams/projects independently. Proven track record in delivering high-quality audits and risk assessments. Ability to communicate (both written and verbal) at the highest professional level. Assertive, confident, and able to influence the management team. High energy and drive, and flexible enough to work in an entrepreneurial, dynamic and changing environment, and the resilience to challenge/be challenged. Highly motivated self-starter with eagerness to learn and develop within an organization. Strong process, technical, and analytical skills, combined with strong commercial acumen. Excellent attention to detail. Master's degree. Experience/understanding of IT audit and related IT General Controls. Media/Entertainment industry experience. Analytical and automation experience. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, gender identity, disability, protected veteran status, or any other characteristic protected by law. We will consider for employment qualified applicants with criminal histories consistent with applicable law. Pursuant to state and local pay disclosure requirements, the pay rate/range for this role, with final offer amount dependent on education, skills, experience, and location is $102,000.00-122,000.00 annually. This role is also eligible for an annual discretionary bonus, various benefits, including medical/dental/vision, insurance, a 401(k) plan, paid time off, and other benefits in accordance with applicable plan documents. Benefits for Union represented employees will be in accordance with the applicable collective bargaining agreement.

Security Foundations is Meta's first-line-of-defense technology organization, owning the controls that manage security risk across the company. We're looking for a Security Engineer Lead to scope, design, and champion security solutions company-wide across the domains we support. This is a breadth role. Each domain below has its own engineering leaders and managers you will set technical direction across them rather than owning one. The hardest problems in this space does not sit inside a single domain. Agent identity and authorization, for example, spans identity and access, product authentication, AI security, and cloud simultaneously. Finding those problems and getting them solved once, coherently, is central to this role. The domains you'll influence: • Identity and Access Management the authorization layer every Meta system depends on, serving tens of billions of access checks per second, • Cryptography and Data Security including Meta's post-quantum migration and Encryption at Rest, • Product Identity and Access authentication for billions of end users, • AI Security the controls protecting Meta's frontier AI products, • Cloud Security securing Meta's footprint across public cloud and third-party compute providers, including identity, network egress, and posture management, • Asset Management authoritative security risk classification for assets across the company Scope and complexity: -Security Foundations is a cross-functional organization of engineers, analysts, and product managers, partnering closely with hundreds of engineers elsewhere in the company. -The role spans a large set of technical domains: Meta's products and custom technology stack, commercial off-the-shelf software (e.g. Active Directory), and commercial IaaS/PaaS services. Familiarity with industry best practices and relevant regulatory frameworks plus the ability to translate between those frameworks and deeply technical software engineers. What success looks like in the first year: -A defensible, company-wide view of the highest-risk items across these domains, with named owners and real threat models not a list. -At least one shared platform or control adopted broadly enough to measurably change the company's risk posture. -Security tradeoffs represented credibly at the VP and C-level, with decisions made rather than deferred. Set technical direction for security solutions and platforms shared across the company, working through Security Engineering, Security Analyst, and Software Engineering teams. Determine the highest-risk items across these domains company-wide, then lead development of detailed threat models and solutions. Define how AI agents are identified, authorized, and audited across Meta's infrastructure a space where neither existing industry practice nor our own human-centric models are sufficient. Navigate tradeoffs between security and friction or cost, so the company can keep moving fast securely. Drive solution design, including technical architecture, and lead implementation as needed. Build partnerships across security, infrastructure, corporate engineering, and legal then use those partnerships to translate ambiguous business and regulatory requirements into well-articulated tradeoffs between "secure the company and our users" and "slow the company down.". Represent those tradeoffs credibly to senior leadership, including VPs and C-level executives (CTO, CISO), to drive decisions. B.S. Computer Science or related field Deep technical expertise in at least one of these domains, and a demonstrated ability to become credible quickly in unfamiliar ones Significant experience in driving large cross-company engineering initiatives Experience managing security risk and navigating the tradeoff between security and friction in a large organization Experience communicating and influencing across functions to drive solutions Ability to operate in high-ambiguity environments and balance technical solution design with complex business processes and requirements Hands-on engineering experience and the ability to lead across a blended Security Engineering and Software Engineering organization Experience with identity and access management, cryptographic systems and massively scaled infrastructure Experience securing AI/ML systems or agentic workloads Familiarity with SOX, SOC 2, or comparable control frameworks and the engineering work required to satisfy them Experience leading security work spanning both production (Linux) and corporate (Windows, Active Directory, SaaS) environments

About the Company Our client is a publicly traded, cloud-first SaaS platform that thousands of global brands rely on to engage their customers. The platform processes data at massive scale for some of the most recognizable companies in the world, which means security is not a checkbox here. It is core to the business. Since going public, the company has been scaling globally, and leadership has made security engineering a top investment. Security operates as its own engineering organization reporting to the CISO, fully separate from IT and DevOps. What You’ll Actually Be Working On The platform runs on AWS and a large self-managed Kubernetes footprint, with engineering teams shipping constantly. The security team’s job is to make the secure path the easy path and to catch what slips through. This includes: • Guardrails and secure-by-default patterns across AWS and Kubernetes, built in Terraform and Python, • Detections written as code for cloud and infrastructure telemetry, • Cloud forensics and incident response when something real happens, • Securing AI agents and LLM-powered features as the company builds them into the product About the Role This is a hands-on security engineering role. You will build controls, write detections, and run incidents yourself, rather than manage them through vendor consoles. This is not a DevSecOps role. This is not a SOC analyst role. This is not a GRC or compliance role. The ideal candidate is a true security engineer who writes code, has owned cloud security inside a dedicated security organization, and wants to work on a team where security leads instead of reacts. What You Will Do • Design and build security guardrails across AWS and self-managed Kubernetes using Terraform and Python, • Write, tune and own high-signal SIEM detections for cloud and infrastructure telemetry, • Lead cloud forensics and incident response from first signal through root cause and remediation, • Drive threat modeling with engineering teams on new systems and features, • Strengthen CI/CD and software supply chain security, • Help define how the company secures AI agents, LLM features and agentic workflows, • Participate in the security on-call rotation, • Partner with engineering leadership on long-term security architecture What We Are Looking For • 5+ years of hands-on security engineering experience, • Most recent experience reporting into a dedicated security organization, not IT or DevOps, • Production cloud security experience on AWS, • Hands-on Kubernetes security experience, ideally on self-managed clusters, • Has personally written detections, built security controls, and automated security work in code, • Has led real incident response and forensics investigations end to end, • Experience at a technology-driven company with a strong security engineering culture Senior-Level Expectations • You have been the person engineers come to when they need a security decision made, • You have built security programs or controls from the ground up, not just maintained them, • You are comfortable owning ambiguous, high-impact problems with limited direction Nice To Have • Experience securing AI agents, LLM-driven systems or agentic workflows, • GCP experience alongside AWS, • Supply chain security experience (artifact signing, SBOMs, secrets management), • A background in SRE or platform engineering before moving fully into security, • Certifications such as GIAC, OSCP, CISSP or AWS Security Specialty This Role Is Not A Fit If • Your experience is primarily in DevOps or platform engineering with security as a side responsibility, • Your security work has been mostly monitoring alerts rather than building controls and detections, • You have not personally led incident response on real production systems, • Your background is primarily compliance, audit or GRC, • You prefer managing security tools over writing code Compensation and Benefits • Salary range: $150,000 to $235,000 USD depending on experience, with flexibility for the right person, • Annual bonus, • Competitive equity package (RSUs) and ESPP, • 401(k) program, • Comprehensive health, dental, and vision coverage, • Flexible PTO and paid holidays, • Paid parental leave, • Mostly remote, with the NYC office about once a month Why This Role Matters The systems this team protects are trusted by thousands of global brands and their customers. The guardrails, detections and response capabilities you build will directly shape how securely the company scales worldwide. If you are a security engineer who wants to build, not just monitor, this role was built for you.

DataDome is a global leader in bot and cyberfraud protection, trusted by some of the world's largest brands to protect their digital assets from automated threats. As AI agents, autonomous LLMs, and sophisticated bots become more prevalent, DataDome is at the forefront of introducing new trust and security solutions to the market in the age of AI-driven traffic. As a PMM at DataDome, you'll be able to make a real impact in a fast-growing, mission-driven company. About the team: Every Product Marketing Manager (PMM) at DataDome plays a highly visible, strategic and cross-functional role in our journey. Our team that operates in a fast-paced, collaborative, and fun culture that is excited about helping customers protect themselves against sophisticated bots and cyberfraud. Reporting to the Senior Director of Product Marketing, you will be based in our NYC or Paris office. This new role enables you to collaborate with world-class product and marketing teams, translating complex technical capabilities into clear customer value and category leadership. You will own how DataDome defines and enables trusted relationships in a world of AI agents, where ecommerce will begin to transition from direct human to agent-to-agent interactions. You'll lead the go-to-market strategy and execution throughout the product lifecycle, creating impactful product messaging and collateral, enabling sales and partner teams, and supporting evangelism and demand generation efforts with the marketing team. Your scope: You will be more specifically in charge of things like: • Define and evolve DataDome's product positioning and messaging for AI-driven threats, agent trust, and anti-fraud solutions. Develop a deep understanding of AI agents, bots, LLM-driven automation, and emerging trust frameworks. Conduct market and competitive analysis to identify differentiation and white-space opportunities., • Create marketing & communication plan for new product launches and feature releases aligned to the target audiences. Create compelling, differentiated value propositions, use cases & narratives with a clear understanding of target customer personas' needs and core capabilities of the offering., • Collaborate with marketing to produce content including product collateral, thought leadership and solution presentations, website content, videos, blogs, bylined articles and more to execute communication strategies and accelerate the buyer journey., • Partner with Product Management to influence roadmap priorities based on customer, market and analyst insights., • Partner with our revenue and account teams to maintain a coordinated go-to-market and sales enablement strategy. Lead enablement training sessions on new products and solutions. It would be great if: • You have 5-7 years of product marketing and/or management experience in the cybersecurity or fraud prevention industry, with some experience at a high-growth or scale-up company., • You have expert content creation skills across multiple mediums, including video, whitepapers, blogs, customer decks, product and solution briefs., • You have strong written, verbal, and visual capabilities across multiple communication channels for highly technical buyers (security teams, engineers, data scientists)., • You have demonstrated experience in technology marketing, including the ability to take technical concepts and communicate them to both business and technical audiences., • You have advanced project management skills with the ability to manage competing deliverables and timeline. Detail oriented and able to turn around mockups, edits, etc. quickly., • You have experience or interest in using AI and AI agents within the marketing function as well., • You are comfortable acting as a public-facing spokesperson (events, webinars, analyst briefings)., • You are a native or strong English speaker. French language a plus. What's in it for you? • Hybrid work setup (3 days/week in office) with access to our Soho, NYC office, a $50/month allowance for those coming in regularly (10+ days/month), and a $500 home office stipend to set up your ideal workspace fostering the collaboration, fairness, and alignment that fuels DataDome's growth., • Health Benefits: We offer medical, dental, & vision insurance options to keep you feeling your best., • Professional Development: #Growth is part of our DNA, therefore we invest in your personal learning and development., • Events & Teambuilding: Feel the #TeamSpirit both virtually & onsite, with several events and workshops planned throughout the year including an annual company offsite, winter party, lunch & learns, & much more., • Parent Care: Gifts & care packages to celebrate growing families., • PTO: 27 days + 12 national holidays., • 401K: eligibility + matching. What are the next steps? • You x Talent Acquisition Manager, • You x Sr Product Marketing Director, • You will complete a presentation and present it to the team, • You x Member of the leadership team, • You x our CEO, • Welcome to DataDome! DataDome delivers real-time bot and agent trust management, giving businesses complete visibility and control over all traffichuman, bot, or AI. Named a Leader in the 2026 The Forrester Wave for Bot Management, DataDome is trusted by enterprises like Etsy, PayPal, and Soundcloud. DataDome's multi-layered AI engine leverages thousands of models and 5 trillion signals daily to analyze intent and stop fraud in under 2 millisecondsletting legitimate users through seamlessly across websites, apps, APIs, and MCPs. Backed by a 24/7 SOC and expert threat researchers, DataDome stops 20k+ attacks every second. With 30+ global PoPs, and 50+ ready-made integrations, DataDome is a recognized Leader on G2 across several categoriesdelivering protection that outperforms. DataDome is an equal-opportunity employer, and proud to be committed to diversity and inclusion. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.

Audit Analyst to support DoD enterprise financial and transportation systems, including JTMS. Ideal candidates have 5+ years in DoD/federal audits, knowledge of SOC-1, GAGAS, and federal frameworks, and an active Secret clearance.

Diversified is a global leader in audiovisual and media technology.We design and build innovative spaces and experiences for clients across industries such as corporate, entertainment, sports, retail, and government.Our team partners with organizations around the world to create environments that co

As a Data Analyst in Stout's Transformative Change practice, you'll turn complex structured and unstructured information into clear, accurate analyses and accessible visualizations. Proficiency with Tableau; Tableau Desktop Specialist or Tableau Certified Data Analyst credential preferred, not requi

Judi Health operates a FedRAMP Moderate platform in addition to SOC 1, SOC 2, HITRUST, and HIPAA obligations. Translate FedRAMP, SOC 1, SOC 2, and HITRUST control requirements into practical, auditable technical implementations in partnership with the IT Audit and Compliance team.

A place to share your ideas freely - even if they're daring or different.Where the true you can learn, grow, and thrive.At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy.We do what we love - driving innovation, creativity, and impact in the wo

We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. That's why we offer a culture, compensation and opportunities that empower our associates to build successful and prosperous careers. More than 9,000 associates in 30+ offices around the

The P&C Data Analyst supports the development and improvement of analytical models and insights that inform pricing, underwriting, and portfolio management decisions. The P&C Data Analyst works closely with pricing actuaries, underwriting, claims, distribution, product partners, data experts, and IT

At Selective, we don't just insure uniquely, we employ uniqueness.Selective's unique position as both a leading insurance group and an employer of choice is recognized in a wide variety of awards and honors, including listing in Forbes Best Midsize Employers in 2025 and certification as a Great Plac

Directly contribute to and provide oversight over the Underwriting Data Analyst team's infrastructure including. Manage a team of Underwriting Data Analysts as direct reports. Manage the Underwriting Data Analyst work queue and assignments.

We are seeking a highly technical Security Engineer to join our Product Security team.This role is integral to ensuring the security and integrity of our products and services.You will conduct in-depth code reviews, implement security best practices, and influence the overall security strategy.Your

The Data Exchange Analyst is a crucial member of our Data Operations team, responsible for ensuring the accurate, efficient, and secure exchange of healthcare data between Capital Rx - JUDI Health and its various partners, including employers, providers, and other TPAs.

We are seeking a highly skilled Infrastructure Security Engineer to join our team.This role is integral to ensuring the security and integrity of our platform.You will be responsible for securing large cloud environments, orchestrating and securing various compute clusters, and reviewing infrastruct

More than 9,000 associates in 30+ offices around the world help our clients and each other grow and thrive every day. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. That's why we offer a culture, compensation and opportunities that em