Trabajos soc analyst en Newark, New JerseyCrear alertas

Job Description This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week. This role is for Officer level candidates. About the Bank Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. Department Overview: The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues. Your Role Overview: The Third Party Information Security Analyst supports the Bank’s Third Party Risk Management function by focusing on assessing and monitoring information security risks associated with 3rd, 4th, Nth parties. This role assists with vendor due diligence, security reviews, information security risk assessments, and ongoing monitoring activities to ensure these third party relationships align with the organization’s security requirements. Your Duties and Responsibilities: • Conduct initial and continuous information security risk assessments of third (Nth) parties., • Review third party provided security documentation including SOC reports, ISO 27001 certifications, security questionnaires, and Business Continuity and Disaster Recovery documentation., • Document assessment findings and risk ratings in the Bank’s TPRM platform and maintain an up-to-date tracking sheet that provides management with clear visibility into the status, due date, and completion of each assessment and related follow-up actions., • For vendor due-diligence, with a focus on information security risks, coordinate with relevant Teams (Administration, Legal, etc.) for vendor onboarding and offboarding activities, • Perform on-going monitoring of information security-related incidents involving third-parties and coordinate with relevant stakeholders to facilitate requests for necessary information from the relevant third-parties and support the assessment of potential impact to the Bank., • Participate in internal audits and external examinations related to the information security risk domains of third party risk management, • Assist in maintaining information security-related TPRM policies and procedures., • Performs other duties and responsibilities as assigned by management. Your Qualifications: • 3+ Years of experience with risk assessment methodologies and techniques as well as Third Party Risk Management Lifecycle., • Prior experience with financial industry structure and concepts a plus., • Prior experience working on a Third Party Risk Management (TPRM) platform, such as Prevalent., • Prior experience working with and assessing information security-related documentation such as SOC 2 reports, ISO 27001 certification, etc., • Strong knowledge of information security and risk management frameworks, including NIST Cybersecurity Framework, ISO/IEC 27001, and the Cyber Risk Institute Profile., • Strong Microsoft Office skills, • Strong verbal and written communication skills., • Strong analytical skills, • Self-motivated with good time management skills. Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion. • The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance., • We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals. Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application

Job Description Established in 2022, Guardz rapidly emerged as a noteworthy player in the cybersecurity sphere, securing $85M in funding and rallying a dedicated team of 120 industry professionals. Our vision is to foster a safer digital landscape for small and medium businesses across the globe. To this end, we introduced our comprehensive all-in-one platform, and continue to grow and expand our team, our partnerships and our revenue. We are looking for an experienced MDR Manager to lead our Security Operations team. The ideal candidate combines strong technical expertise with operational leadership and enjoys developing analysts, improving processes, and managing complex security incidents across multi-tenant MSP environments. As a hands-on leader, you will oversee day-to-day MDR operations, including coverage, SLAs, quality, escalation tiers, and analyst development. You will also serve as the final escalation point for Tier 3 threats and lead the team through the most complex investigations. Responsibilities: • Own 24/7 shift coverage, tiering, and escalation paths so every alert reaches the right analyst and there are no gaps in monitoring or escalation. Participate in an on-call rotation with the team., • Own response SLAs (time-to-triage, time-to-notify, MTTR) and report SOC KPIs (MTTD, MTTR, detection efficacy, false-positive rate, case aging, customer satisfaction) to leadership., • Run QA on closed alerts and incidents, drive down false positives, and maintain the teams runbooks, playbooks, and SOC standards., • Lead, coach, and mentor MDR Analysts: regular 1:1s, performance feedback, onboarding, and the T1-to-T3 training path. Run tabletop exercises and post-incident reviews., • Act as technical lead and final escalation point for T3 incidents (advanced malware, identity threats like MFA fatigue and token theft, active breaches), leading the full lifecycle with defensible documentation., • Correlate alerts across EDR (SentinelOne, Defender for Endpoint), ITDR (M365, Google Workspace), and email security, and run proactive threat hunts aligned to MITRE ATTCK., • Use Guardz AI agents, Google BigQuery, and query languages such as SQL and KQL to triage, hunt across high-volume logs, and confirm incident scope at machine speed., • Partner with MSPs on major incidents and posture reviews, and feed findings back into detection with product, threat research, and engineering. Requirements: • 5+ years in SOC, MDR, or Incident Response handling complex attacks, including 2+ years as a Team Lead, Shift Lead, or senior., • Hands-on expertise with EDR (SentinelOne, CrowdStrike, Defender for Endpoint) and ITDR (identity threat management across M365 and Google Workspace)., • Hands-on experience with Google BigQuery, Snowflake, Splunk, Elastic, or equivalent, and fluency in a query language such as SQL, KQL, or SPL., • Experience with MITRE ATTCK-aligned detection, proactive threat hunting, and AI-driven triage engines, automated playbooks, or agentic SecOps platforms., • Excellent communication skills, able to make high-risk technical findings clear to both technical and non-technical audiences., • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent hands-on experience., • Preferred: CompTIA Security+, CompTIA CySA+, Microsoft SC-200, GIAC GCIH / GCIA / GCFA, or CISSP (or equivalent DoD 8570 / 8140 IAT Level II).

Job Description Please note: This position description is for RFQ response. There is no active vacancy at this time.About FedSync:Since our inception, FedSync has stood for Accountability, Integrity, Teaming, Value, Innovation, and Quality-the core values that define who we are. Our vision is to collaborate with innovative, forward-thinking leaders to deliver solutions that look beyond today. Our mission is to provide the federal government with proven, innovative solutions that transform organizations by equipping them with the right tools and people to meet tomorrow's challenges. At FedSync, our people matter-both our employees and our clients.Position OverviewThe Cybersecurity Analyst proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive DOE data and maintain enterprise resilience. This role drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization's security posture. Five (5) Cybersecurity Analysts are required for this engagement. Work will be a hybrid schedule withe 3 days in the office and 2 days of telework.Key ResponsibilitiesPerform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of DOE systems, applications, and data assets.Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments.Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization.Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact.Monitor, analyze, and detect cybersecurity threats across multiple security domains including Security Operations (SOC), Cloud Security, Infrastructure Security, Information Protection, and Data Protection.Monitor security alerts through the SIEM platform and execute immediate triage and incident response protocols.Conduct proactive threat hunting to identify hidden threats and adversary behavior.Implement, tune, and manage DLP controls across endpoints, email, and cloud collaboration platforms.Ensure alignment with federal and regulatory security standards (NIST, FISMA) and internal cybersecurity policies.Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments.Minimum Qualifications5+ years of experience in cybersecurity analysis, security operations, or a related field.Demonstrated experience performing threat triage, incident response, and risk analysis.Proficiency with SIEM platforms, vulnerability scanners, and cloud security tools.Working knowledge of NIST and FISMA compliance frameworks.Experience supporting security in large enterprise or public-sector environments preferred.Required Certifications (one or more)CISSP, CompTIA Security+, CompTIA CySA+CEH (Certified Ethical Hacker)GCIA, GCIH, CISA, or CCSPTechnologies & ToolsSIEM: Devo / SplunkVulnerability Scanners: Rapid7 / ArmisCloud Platforms: AWS / AzureWireshark, SQL, Python, MS Power BI, Microsoft Office Suite Acceptable background check including criminal history background check and credit Check.

Job Description This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week. This role is for Officer level candidates. About the Bank Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches. Department Overview: The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate and cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters and issues. Your Role Overview: The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity events and alerts across the organization’s technology environment. This role serves as a frontline defender within the Information Risk Governance Department, identifying potential threats, investigating suspicious activities, and supporting incident response efforts in order to protect the confidentiality, integrity, and availability of organizational assets. Your Duties and Responsibilities: • Monitor and analyze security events and alerts generated by security systems such as the Security Information and Event Management (SIEM) system, Endpoint Detection & Response (EDR) system, Firewalls, Network Access Control (NAC), Network Detection & Response (NDR) system, and Intrusion Detection and Prevention (IDS/IPS) systems., • Triage and analyze security alerts to determine severity, scope, and potential impact and business risk., • Investigate suspicious system, network, and user activity, escalating potential security incidents to the Incident Response Team and Management as appropriate., • Maintain awareness of the evolving cybersecurity landscape including emerging threats, attack techniques, vulnerabilities, and indicators of compromise (IoC), • Conduct proactive threat-hunting activities to identify, investigate, and mitigate emerging threats, anomalous behavior, and potential indicators of compromise that may evade existing security controls., • Participate as a member of the Incident Response Team during cybersecurity incidents and investigations. Tasks include documenting incident findings, actions taken, and to collect system log evidence and forensic artifacts., • Maintain, administer, and tune SIEM and NDR Security tools including ongoing optimization of detection rules, use cases, dashboards, reports, and alert configurations., • Liaise and coordinates with vendors, service providers, and contracts to support security operations and incident response activities., • Assists with internal and external audits, regulatory examinations, and information security assessments., • Assists with the evaluation, testing, and comparative analysis of security monitoring and SOC-related technologies., • Serves as the subject matter expert (SME) for assigned security monitoring and detection platforms., • Maintains procedures, playbooks, and documentation related to security monitoring and incident response processes., • Performs other duties and responsibilities as assigned by management. Your Qualifications: • Bachelor’s degree or equivalent in Information Technology, Cybersecurity/Information Security, or a related field with 3+ years of experience., • Minimum of three (3) years of experience in cybersecurity, security operations, or a related technical field., • Strong understanding of security principles, frameworks, and best practices., • Experience with security monitoring, event analysis, and threat detection technologies., • Experience with incident investigation and response, • Excellent communication and problem solving skills, • Knowledge of threat intelligence concepts, frameworks, and operational use cases., • Understanding of Cloud Security principles and controls., • Strong knowledge of Microsoft Windows Server 2019/2022/2025 and Active Directory environments., • Strong knowledge of networking protocols, architecture, and security concepts, • Strong understanding of firewall technologies and security controls, • Strong understanding and correlation skills of security logs, including Windows Event logs, Active Directory, DNS, proxy, firewall, EDR, and Cloud platform logs., • Strong knowledge and prior experience with SIEM platforms and security event correlation tools., • Strong knowledge and prior experience with User and Entity Behavioral Analytics (UEBA) and behavioral analysis tools., • Working knowledge of Amazon Web Services (AWS) architecture, services, and operations., • Working knowledge of Linux systems would be a plus, • Excellent analytical, organization, and multi-tasking skills with strong attention to detail and accuracy., • Prior experience in the Financial institution or banking industry would be preferred. Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion. • The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance., • We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals. Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application

Job Description MetTel is a global communications solutions provider with the most complete suite of fully managed services that focus on secure connectivity, and network and mobility services. We simplify communications and networking for business and government agencies. Our customers include many of the Fortune 500, and Gartner recognizes us as an industry leader. We have the broadest portfolio of technology and integrated partnerships, as well as our private network, which we use to create tailored solutions design, deployment, and ongoing management, driving cost savings, efficiency, innovation, and the ability to focus on core objectives. We believe that each team member is a key to the success and sustainability of the group. In order to achieve this, we offer an environment where all professionals can grow and develop their skills and competencies, collaborate with diverse professionals, share knowledge and enjoy a rewarding career. We are looking for a Cybersecurity Engineer to join our Corporate IT Team in NYC / NJ! ROLE AND RESPONSIBILITIES: We're looking for a Cybersecurity Engineer (not an Analyst) who can both build our security infrastructure and operate it day-to-day. This isn't a pure admin role or a pure analyst role — it's both. You'll architect and install enterprise-grade, on-prem security platforms for dual-datacenter active/active deployments. You'll then turn around and use those same tools operationally — writing detection logic, creating dashboards, building SOAR playbooks, and triaging what you built. RESPONSIBILITIES: You'll be primarily blue team — defending, detecting, and running the platforms you build. But if you have offensive security chops, this is a chance to participate and help us with red team functions as well. • Architect and implement enterprise security platforms on-prem and in the cloud: CyberArk PAS (Vault, CPM, PSM, PVWA), Splunk Enterprise/ES (indexers, search heads, clustering, HA/DR), Tenable, SOAR, OKTA/SAML, • Design for scale: capacity planning, redundancy, role-based access control, and integration with AD, applications, and infrastructure, • Then operate what you build: custom dashboards, correlation rules, detection tuning, automated playbooks, • Own incident response and threat hunting using your own tooling — you're the analyst, not just the platform owner, • Support compliance (SOC 2, PCI DSS, NIST 800-53) with the audit trails and reporting your architecture produces DESIRED QUALIFICATIONS: • 4+ years securing enterprise environments, with real hands-on time both building (installs, architecture, HA/DR design) and using (detection, dashboards, response) security platforms — not just one or the other, • Deep proficiency in at least two of: CyberArk, Splunk Enterprise/ES, Tenable, SOAR (Phantom/Demisto/Resilient), • Strong Linux and Windows administration; scripting in Python/Bash/PowerShell for automation and integrations, • Working knowledge of cloud security platforms (AWS Security Hub, Azure Security Center), • Comfortable owning something end-to-end: design it, deploy it, defend with it, • Bonus: offensive security background (Nmap, Burp, Metasploit, pentest/ethical hacking experience) — not required, but a strong plus given the red team opportunity above ADDITIONAL SKILLS - NICE TO HAVE: • CISSP, • GCIH, • CEH,, • CySA+, or vendor certs (CyberArk Defender/Sentry, Splunk Certified Admin/Architect) *The salary reflected is a good faith estimate of base pay for the primary location of the position. Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay for this position is up to $155,000 annually. Pay will vary by work location and may also depend on job -related knowledge, skills, experience and abilities of the successful candidate. Your recruiter can share more about the specific salary range for the job location during the hiring process. Keywords: #NYC #NewYorkCity #Manhatten, #Cybersecurity, Cybersecurity, CISSP, #CISSP, SecurityTools ,#SecurityTools, SIEM, #SIEM, #InfrastructureEnvirnonments, #CyberArk, CyberArk, #Splunk, Splunk, OKTA, #OKTA, Tenable, #Tenable, #SOAR, SOAR, #SOARPlatforms, SOARPlatforms, #Telecom, Telecom, #Troubleshoot, #Engineering MetTel is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, religion or belief, sex, age, national origin, citizenship status, marital status, military/veteran status, genetic information, sexual orientation, gender identity, physical or mental disability or any other characteristic protected by applicable laws. To learn more about our company visit us at www.mettel.net

Mercor is hiring SOC Investigation Specialist** on behalf of high-growth technology and enterprise partners building next-generation SOC automation and AI-driven investigation systems. Requirements - 3+ years of hands-on experience as a SOC analyst in a production SOC environment (Tier 2 or above st

Circle (NYSE: CRCL) is one of the world’s leading internet financial platform companies, building the foundation of a more open, global economy through digital assets, payment applications, and programmable blockchain infrastructure. Circle’s platform includes the world’s largest regulated stablecoin network anchored by USDC, Circle Payments Network for global money movement, and Arc, an enterprise-grade blockchain designed to become the Economic OS for the internet. Enterprises, financial institutions, and developers use Circle to power trusted, internet-scale financial innovation. Learn more at circle.com.What you’ll be part of:Circle is committed to visibility and stability in everything we do. As we grow as an organization, we're expanding into some of the world's strongest jurisdictions. Speed and efficiency are motivators for our success and our employees live by our company values: High Integrity, Future Forward, Multistakeholder, Mindful, and Driven by Excellence. We have built a flexible work environment where new ideas are encouraged and everyone is a stakeholder.What you'll be responsible for:The Circle Security Team works to protect Circle; our customers, clients, and partners; and the financial markets upon which we rely.As a member of this team, you'll lead projects and be responsible for key deliverables of the security program while collaborating across Circle teams. You will continue to learn and stay current in a fun and rapidly changing environment.This role sits at the intersection of three of Circle's highest-stakes threat surfaces: our blockchain and custody environments (USDC issuance, Arc, on-chain monitoring), our cloud-native infrastructure (AWS + EKS), and the AI tooling Circle adopts internally and ships in product. You'll build detection coverage and response capability across all three; not as a generalist, but as a Principal who can go deep on each.Also note that this position will require you to perform on-call duties mainly during working hours to support security operations, and you will assist the team with the occasional night time and weekend incident. We would also like someone with a strong response background and some exposure to insider risk.What you'll work on:Proactively identify and respond to emerging security threats across cloud, endpoint, blockchain, and AI surfaces.Build detection and response capability for blockchain and crypto-native threats: on-chain anomalies, custody-vault interactions, wallet abuse, smart contract exploitation, and protocol-level attackers targeting USDC and Circle's blockchain products.Develop detection coverage for cloud-native attacks across AWS + EKS: IAM compromise, identity federation abuse, lateral movement in containerized workloads, runtime exploitation, and misconfiguration drift.Extend detection for AI-specific risks: shadow AI adoption, unauthorized AI integrations, agentic workflows and MCP/tool abuse, and AI-driven credential exposure.Advance deployment of AI to the SOC function including detection triage, enrichment, and analyst-acceleration workflows.Develop plans to manage and maintain core tooling, such as SIEM and Orchestration platforms.Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection.Lead and respond to incidents and collaborate across teams to investigate and resolve.Develop detection techniques to identify anomalous behaviors and attacks across the environment.Provide security guidance to various organizations throughout the company.Support broader security team projects such as threat modeling, vulnerability scanning, audits, and custom tool building.Take on-call shifts (every 3rd week and occasional weekend).What you'll bring to Circle:Strong ability to work collaboratively across teams during high-stress situations, which sometimes involves after hours work.Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly.Self-motivated and creative problem-solver able to work independently with minimal guidance.Experience/familiarity with Slack, Apple macOS, and GSuite.We're looking for strong, impactful work experience, which typically includes:10+ years of experience in detection, response, or security engineering.3+ years of experience commanding security incidents, especially those involving engineering.Deep cloud security knowledge in AWS environments: IAM, identity federation, KMS, EKS/container attack patterns, runtime exploitation, and CSPM tooling (e.g., Wiz). Some exposure to GCP or OCI is preferred.Working knowledge of blockchain and crypto-native threats: wallet and custody attack patterns, on-chain monitoring, protocol-level risks, and smart contract abuse. Direct experience defending blockchain, custody, or DeFi infrastructure is strongly preferred.Hands-on experience using AI tooling both to accelerate work and to address threats, coupled with a strong understanding of the organizational risks AI introduces shadow AI, agentic workflows, MCP/tool integrations, and strategies to defend against them.Extensive knowledge of SIEM, Case Management, and SOAR solutions (e.g., Panther, Tines).Knowledge of operating systems, file systems, and memory on macOS.Programming experience in Python, Golang, or similar programming languages.Experience with building Detections As Code.You are the right person if you:View Security Detection & Response as a data and engineering problem.Exude positivity.Aren't afraid to share your ideas.Meet problems head-on and view them as opportunities.Are self-reliant and motivated.Communicate fearlessly.Circle is on a mission to create an inclusive financial future, with transparency at our core. We consider a wide variety of elements when crafting our compensation ranges and total compensation packages.Starting pay is determined by various factors, including but not limited to: relevant experience, skill set, qualifications, and other business and organizational needs. Please note that compensation ranges may differ for candidates in other locations.Base Pay Range: 110,000.00 - 170,000.00We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status, or any other protected status required by the laws in the locations where we hire. Additionally, Circle participates in the E-Verify Program in certain locations, as required by law.Should you require accommodations or assistance in our interview process because of a disability, please reach out to accommodations@circle.com for support. We respect your privacy and will connect with you separately from our interview process to accommodate your needs.#LI-RemoteJob SummaryJob number: JR101051Profession: Security

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities to meet client needs and implementing data standards and governance.Pay and Benefits:Competitive compensation, including base pay and annual incentiveComprehensive health and life insurance and well-being benefits, based on locationPension / Retirement benefitsPaid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).The Impact you will have in this role:Being a member of IT Cybersecurity Engineering and Operations at DTCC, the Data Protection Senior Asscociate supports first‑line operational execution of DTCC’s Data Protection Program, with a primary focus on DLP operations and AI‑related data loss prevention (AI DLP).This role is responsible for monitoring, triaging, and responding to DLP and AI proxy alerts, validating potential data loss events, and driving remediation or escalation in accordance with established procedures. The Analyst works closely with Content Engineering and AI Data Security Engineering teams to feedback signal quality issues and help improve AI protection outcomes over time.This is an operational role, not a policy or platform engineering role, but it requires a strong understanding of how AI and DLP controls work in practice to make sound triage and risk decisions. Your Primary Responsibilities:DLP & AI DLP Alert Monitoring and TriageMonitor and triage alerts across data protection enforcement points, including: Enterprise DLP (email, endpoint, web, SaaS)AI‑related channels (e.g., AI proxy–mediated GenAI interactions, Copilot and AI tool usage where alerts are raised) Assess alerts for validity, severity, and potential data exposure, distinguishing true risk from false positives.Prioritize and process events in line with defined SLAs and escalation thresholds. AI Data Loss Investigation & ResponseReview AI‑related DLP events such as: Sensitive data detected in prompts submitted to AI toolsSensitive content detected in AI responsesPolicy violations involving AI agents or copilots Perform first‑level investigation to determine: Data type and sensitivitySource system and user contextLikely intent vs. accidental exposureExecute defined response actions (user outreach, enforcement confirmation, escalation) and document outcomes. Case Management, Escalation & RemediationMaintain accurate case records for DLP and AI DLP incidents, including investigation notes, actions taken, and resolution status.Escalate complex or high‑risk events to Tier 2 (engineering, insider threat, incident response) as required.Partner with IAM, Cloud Operations, and Insider Threat teams to support remediation activities. Signal Quality Feedback & Continuous ImprovementsIdentify recurring false positives, detection gaps, and operational friction within AI and non‑AI DLP alerts.Provide actionable feedback to Content Engineering and AI Data Security Engineers to support rule tuning and control improvementsContribute to improvements in alert routing, triage workflows, and runbooks.Metrics, Reporting & EvidenceSupport production of operational metrics related to: Alert volumes and trendsSLA performanceAI DLP incident types and outcomes Ensure operational evidence (case records, alert artifacts) is complete and audit‑ready.Assist with internal reviews or regulatory evidence requests as needed (first‑line support role).Stakeholder Interaction & User SupportConduct professional, risk‑appropriate interactions with employees when investigating DLP or AI DLP events.Educate users on acceptable use and safe handling of data in AI tools when appropriate, in line with defined scripts and guidance.Support consistent and measured user experience to avoid unnecessary friction that drives control bypass. NOTE: The Primary Responsibilities of this role are not limited to the details above.*Qualifications:Min 6 years of relevant experienceBachelor’s Degree and/or equivalent experienceTalents Needed for Success:5–8+ years (Senior Analyst) in security operations, DLP operations, SOC, or data protection roles.Experience triaging security or DLP alerts in a production environment.Working understanding of: Data Loss Prevention (DLP) conceptsData classification and sensitivity handlingAI‑related data risk patterns (e.g., sensitive data submission to AI tools) Strong investigative, documentation, and judgment skills.Exposure to AI proxy or AI usage monitoring from an operational perspective.Experience with Microsoft Purview, Zscaler, or similar DLP platforms.Familiarity with tiered security operations and escalation models.Strong Excel and ticketing / case management skillsThe salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. With over 50 years of experience, DTCC is the premier post-trade market infrastructure for the global financial services industry. From 20 locations around the world, DTCC, through its subsidiaries, automates, centralizes, and standardizes the processing of financial transactions, mitigating risk, increasing transparency, enhancing performance and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. Industry owned and governed, the firm innovates purposefully, simplifying the complexities of clearing, settlement, asset servicing, transaction processing, trade reporting and data services across asset classes, bringing enhanced resilience and soundness to existing financial markets while advancing the digital asset ecosystem. In 2024, DTCC’s subsidiaries processed securities transactions valued at U.S. $3.7 quadrillion and its depository subsidiary provided custody and asset servicing for securities issues from over 150 countries and territories valued at U.S. $99 trillion. DTCC’s Global Trade Repository service, through locally registered, licensed, or approved trade repositories, processes more than 25 billion messages annually. To learn more, please visit us at or connect with us on LinkedIn, X, YouTube, Facebook and Instagram. DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you’ll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It’s the chance to make a difference at a company that’s truly one of a kind.Learn more about Clearance and Settlement by clicking here.Full timePosting Date: 2026-08-17

VPN, email security, endpoint protection)Partner with Information Security and IT teams to support incident response and system improvementsAssist with routine maintenance, documentation, and configuration updatesContribute to the continuous improvement of security monitoring and detection capabilit

Senior Security Operation Center (SOC) Analyst – L2Cyber | New York, NYReports to: Cyber Incident Response ManagerRole OverviewWe are looking for a Senior SOC Analyst, within the Cyber Incident Response team to be an L2: this is a professional responsible for protecting computer systems, networks

DTCC, headquartered in New Jersey, seeks a skilled SOC analyst to monitor, investigate, and respond to cyber security events within a hybrid environment.You will lead investigations, produce clear security reports, and mentor junior staff while collaborating with the CMIR team.Expect up to 10% trave

Key Responsibilities Professionals in this role may contribute to: SOC Alert Review & Investigation Evaluation Review, monitor, and evaluate SOC alerts and investigation outputs based on predefined scenarios and criteria Distinguish true positives from false positives by validating alert context, in

About the Role Merci Technologies is seeking a SOC Analyst II to join a 24/7 security operations team supporting one of our enterprise clients. Key Responsibilities Monitor, triage, and investigate security alerts across SIEM, EDR, identity, and email security platforms Own Tier 2 investigation, con

Airport Security Agent Inter-Con Security Systems, Inc.Airport Security Agents to join our team.Schedule: Full-Time and Part-Time Opportunities Available As an Airport Security Agent, you will help maintain a safe and secure environment by protecting assigned areas, monitoring access to restricted l

Associate degree or higher preferred.

KPMG is currently seeking a Senior Associate, SailPoint Identity Security Cloud Engineer to join our Advisory Technology Organization.

Company is seeking an experienced Project Manager, R&D, (hybrid Jersey City, NJ).Reporting to the Director, Program Management, this role will support the planning and operational execution of R&D programs and cross-functional initiatives, with a strong emphasis on outsourced preclinical development

Participating in professional societies relevant to the industry. In addition to geographic location, a candidate's salary is determined by several other factors including, but not limited to, the role, function and associated responsibilities, relevant work experience, skills, required certificatio

Due to the projects associated with this position a US Citizenship is required.

Major Food Group is hiring an experienced Development Project Manager to join our team!.This role provides critical support to senior leadership on all new restaurant and hospitality projects.They should be solutions-oriented, capable of managing multiple projects, and making strategic recommendatio

We believe in the life changing impact youth sports have on and off the field.Sports encourage leadership teamwork responsibility and confidence important life lessons that have the power to propel our youth toward meaningful futures.We recognize that without coaches parents and volunteers organize

An Online Chat Support Specialist provides customer assistance through live chat messaging platforms and online support systems.The specialist responds to customer questions resolves issues provides accurate information and ensures customers receive a positive and efficient support experience.Respon

The ideal candidate will have a broad understanding of proactive security have past experience leading security assessments and have the ability to work with product and engineering teams in designing secure this role you will conduct secure design reviews code review and penetration testing develo

This role requires a dedicated professional capable of managing complex design-build projects in an Owners Representative role on a highly complex mega project program.This project has multiple locations within NYC and this requirement is for Bronx based site located in Mott Haven.The Senior Project

Komplexe Replatforming-Projekte eigenständig leiten und steuern.Systemintegratoren und externe Partner steuern um die SCAYLE-Standards sicherzustellen.Reibungslose Anbindung und den Betrieb der Kundenumgebungen nach dem Go-Live gewährleisten.Den gesamten Projektlebenszyklus von der Planung bis zum

PULLMAN aStructural Group Company integrates technology-driven engineered solutions into its industry-leading contracting services.PULLMANs capabilities include specialty design-build services for new and existing structures as well as a wide range of specialty repair and maintenance services.With o

Participate in project reviews of information security architectures associated with each initiative. Manage and maintain a good relationship with third party security vendors that support Milbank (MSSP SOC and others). Extensive knowledge of security is best practices in regard to computer systems

Follow us on social media @NYCOfficeofTech and visit to learn more.

Snr Project Manager (Financial Systems) needs 5-10 years of Project Management and managing Finance system projects experience.Minimum experience with 5 full Project Life Cycles (preferably with MNCs).Experience with both Waterfall and.Expertise in using Project Planning Management tool.Excellent co

The Department of Housing Preservation and Development (HPD) oversees housing standards across all 3.As the nations largest municipal housing agency HPD is responsible for building and preserving affordable housing protecting tenants from harassment and displacement and holding landlords accountable

In this role the Associate Project Manager (APM) will:. Consistent with this commitment Hospital for Special Surgery provides care admits and treats patients and provides all services without regard to age race color creed ethnicity religion national origin culture language physical or mental disabi

Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,50

The Global Security Operations Center (GSOC) Analyst supports Tapestrys global security operations by monitoring and assessing events that may impact employees executives travelers stores offices facilities and business operations. The Analyst supports threat and protective intelligence emergency co

Grade Level (for internal use):.The Private Markets group within the S&P Global Market Intelligence Software Solutions division is redefining portfolio monitoring for investment managers across private equity private credit venture capital limited partner and real estate strategies.As part of th

The salary range for this position is estimated to be 126000.Manage daily project activities of Special Projects Division (SPD) staff and stakeholders of multiple projects of various sizes and complexity or individual larger projects.Take active role in business development for growth of SPD for Bus

Project Site Manager Brooklyn NY $70000 $100000.A growing subcontracting company is looking for a Project Site Manager to own the day-to-day pulse of multiple active job sites.Youll be the eyes on the ground keeping safety quality and coordination tight while building the kind of subcontractor re

Business Intelligence Analyst II. The Business Intelligence Analyst II will join the Analytics team and serve as a key partner in advancing research analytics through data-driven insights.

We believe that the way people interact with their finances will drastically improve in the next few years.Were dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products.Plaid powers the tools millions of people re

Youll operate independently and collaboratively to implement protective systems and mentor junior associates in security concepts. The company has been consistently recognized as a Leader in marketing technology by industry analysts and was named a G2 Best of Marketing and Digital Advertising Softwa

As a Business Systems Analyst you will help identify promising markets companies products operators and investment or growth opportunities.

The AWS Security Hub team is looking for a passionate and innovative security engineer with a focus on compliance and security best practices for AWS Azure and GCP services.AWS Security Hub is the security and compliance center for AWS customers.One of its main functions is conducting automated chec

Follow us on social media @NYCOfficeofTech and visit to learn more.

Palantir builds the worlds leading software for data-driven decisions and operations.By bringing the right data to the people who need it our platforms empower our partners to develop lifesaving drugs forecast supply chain disruptions locate missing children and more.Palantirs Offensive Security tea

A Customer Relations & Retention Specialist is responsible for building strong relationships with customers resolving concerns and helping retain customers over the long term.The specialist communicates with customers by phone email or chat identifies their needs provides solutions and works to

Associates degree with 3 years of relevant HR compliance experience;.

Headquartered in San Francisco our investors include.Evaluate the quality fidelity and completeness of vulnerability-reproduction and remediation tasks for AI model training.Assess CVE reproductions for faithfulness and ensure fixes are sound.Verify rigorous logic and ensure Docker-based lab environ

Senior IT Project Manager Enterprise Finance Systems**.This is not a role for someone still learning the fundamentals of project leadership.You will own complex high-stakes IT projects from inception to closure with minimal oversight operating as the single point of accountability when timelines sl

Headquartered in San Francisco our investors include.Track project and annotator performance using.Review annotator quality to ensure high standards.Handle contributor communications effectively.Demonstrate high agency and strong organizational skills.Apply an analytical mindset to enhance.Own unfam