Soc analyst jobs in New York, New YorkCreate job alerts

Job DescriptionCompany Description Our Mission At Palo Alto Networks®, we’re united by a shared mission—to protect our digital way of life. We thrive at the intersection of innovation and impact, solving real-world problems with cutting-edge technology and bold thinking. Here, everyone has a voice, and every idea counts. If you’re ready to do the most meaningful work of your career alongside people who are just as passionate as you are, you’re in the right place. Who We Are This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job Description The Team Unit 42 is the global threat intelligence team at Palo Alto Networks. We believe threat intelligence should be shared and available to all within the industry. We deliver high-quality, in-depth research on adversaries, malware families, and attack campaigns. Our analysts uncover and document adversary behaviors and then share playbooks that give insight into the various tools, techniques, and procedures threat actors execute to compromise organizations. If you’re looking for a career with access to the brightest minds in cybersecurity, you’ve found it. We have a hunger for researching, hunting out the world’s newest threats and sharing them with our industry to make the digital world a safer place. You will be part of a growing, passionate, and dynamic team with an opportunity to work on challenging and exciting projects — centered on what we believe is one of the most significant mission statements in the world. We also strive to be the most people-centric company ever! That means we’re constantly working to make your experience amazing, and you are part of the team breaking boundaries of what the workplace can be! Job Summary Unit 42’s Managed Detection and Response (MDR) service is growing fast — and we’re building a customer-centric team that blends technical expertise with direct customer engagement. As a Customer Focus Analyst, you’ll act as the front line of communication between our MDR analysts and our customers, helping bridge the gap between incident response and customer understanding. You’ll not only support investigations and incident triage, but also help onboard customers, answer technical questions about reports, alerts, and the service, and manage ongoing communications to ensure clarity, alignment, and satisfaction. This role is ideal for someone who is technical at their core, but enjoys customer interactions, driving clarity, and ensuring our partners feel confident and supported in their cybersecurity journey. Key Responsibilities • Be part of a customer-focused sub-function of the Unit 42 MDR team, dedicated to proactive communication and technical guidance, • Support onboarding activities for new customers, • Monitor incoming communication from customers (e.g., via email, comments), triage and route issues as needed, and answer technical questions around reports, alerts, and recommendations, • Collaborate with MDR analysts to ensure the customer’s technical questions about incidents or threats are fully addressed, • Own the customer communication lifecycle during ongoing incidents — ensure timely updates, clarity, and alignment on next steps, • Help drive consistency and quality in how incidents and threat intelligence are communicated externally, • Escalate and advocate for customer issues internally across Product, Engineering, and the broader Unit 42 teamQualifications Preferred Qualifications • 1+ years of experience in a customer-facing cybersecurity role such as professional services, customer success, or customer support — must, Tier 1/2 SOC analyst experience, • Hands-on experience with tools such as EDR, SIEM, SOAR, or XDR, • Strong customer communication skills — verbal and written — with the ability to explain complex technical details clearly, • Experience reviewing, drafting, or presenting incident reports and security findings, • Familiarity with Cortex XDR or Cortex XSOAR, • Experience onboarding new security services or clients Additional Information Salary Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $104500/YR - $169100/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Job DescriptionCompany Description Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Job Description Your Career The Worldwide Strategic Data Analyst, MSSP, drives data-informed strategy, operational excellence, and measurable growth across Palo Alto Networks’ global Managed Security Service Provider (MSSP) ecosystem—one of the company’s fastest-growing routes to market. This role combines advanced analytics, strategic program design, and cross-functional collaboration to turn complex data into business intelligence that speeds up decision-making, improves efficiency, and boosts partner success. Join a fast-moving, forward-thinking team that challenges convention and turns ideas into impact, helping shape how Palo Alto Networks expands its MSSP business through data, automation, and innovation. Your Impact Data Strategy & Intelligence * Develop and manage a comprehensive global MSSP data intelligence framework that consolidates financial, operational, and partner performance metrics. * Lead predictive modeling and visualization initiatives to identify growth opportunities and profitability drivers. * Apply first-principles thinking and hypothesis-driven analysis to break down complex challenges and create practical, high-impact solutions. * Lead AI-driven initiatives that improve automation, simplify reporting, and uncover new growth opportunities. * Conduct global MSSP discount and rebate analysis to ensure financial alignment and profitability. * Design, manage, and optimize incentive programs to boost partner adoption and platform consumption. * Collaborate with Finance, RevOps, Partner Operations, and Partner Programs to assess incentive ROI and recommend data-driven improvements. Program Leadership & Execution * Design and operationalize global MSSP programs and initiatives aligned with the Partner Program strategy. * Serve as the business owner for IT development, integrations, enhancements, and BRD documentation for MSSP operations and initiatives - including Salesforce, Tableau, Google Sheets/Excel, BigQuery, and other data-driven platforms. * Lead governance, compliance, and ongoing improvement across enablement, reporting, and automation workflows. * Support IT and Learning & Enablement initiatives to improve tool integration, data flow, and reporting. * Oversee cross-functional timelines, deliverables, and dependencies to ensure consistent and measurable execution across IT, Finance, RevOps, and Enablement teams. * Collaborate with RevOps and Finance to improve forecasting accuracy, revenue attribution, and performance reporting. * Support executive business reviews (QBRs) and ad-hoc analytics by providing data storytelling and insights that lead to measurable outcomes. Qualifications Your Experience * Proven success in managing data-driven global programs with measurable business impact. * Advanced proficiency in data visualization tools like Power BI and Tableau, along with strong analytical skills modeling. * Strong statistical and problem-solving abilities with the skill to convert complex data into insights for executives. * Exceptional communication and leadership skills in cross-functional, global settings. Preferred Experience * 5+ years of experience in cybersecurity, SaaS, or partner program strategy at a global scale. * Familiarity with indirect channel models and cybersecurity platforms (SASE, SOC, SIEM, MDR, XDR). * Background in management consulting (Bain, McKinsey, BCG, or similar) or finance, with a focus on data-driven strategy and large-scale business operations transformation. * Exposure to large-scale IT integrations and BRD development. * Experience with AI tools (e.g., ChatGPT, Gemini, or similar) to enhance data analysis, automation, and content generation efficiency. * MBA or advanced degree in Business, Data Analytics, or a related field. Additional Information The Team This role is remote, but distance is no barrier to impact. Our hybrid teams collaborate across geographies to solve big problems, stay close to our customers, and grow together. You will be part of a culture that values trust, accountability, and shared success where your work truly matters. Compensation Disclosure The compensation offered for this position will depend on qualifications, experience, and work location. For candidates who receive an offer at the posted level, the starting base salary (for non-sales roles) or base salary + commission target (for sales/commissioned roles) is expected to be between $120,000 - $193,000/YR. The offered compensation may also include restricted stock units and a bonus. A description of our employee benefits may be found here. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Job Description The client’s current peak-sales forecasting framework produces strong numerical outputs and narratives, but requires real-world forecast accountability — the kind held by people who’ve owned forecasts that drove BD, portfolio, or investment decisions. We are looking for a senior commercial / forecasting expert to: * Write “golden” peak-sales forecasts for representative drug programs and standard prompts. * Define structural checks, scenario logic, and sanity bands for automated forecast evaluations. * Make explicit the heuristics and base-rate assumptions used by experienced forecasters to tell a realistic model from a speculative one. Profile: Industry Commercial Forecaster: * Director/Sr. Director/VP-level experience in global forecasting, brand planning, or commercial insights. * Built and defended patient-based peak-sales models used in portfolio, BD, or investment contexts. * Familiar with forecasting for multiple drugs or indications, particularly during pre-launch and early commercialization stages. * Can articulate the reasoning behind base-case assumptions (penetration, price, ramp, LOE) and how they evolve post-launch. * Has written or reviewed governance-ready peak-sales models (e.g., for launch committees or investor boards). Market/VC/Buy-side Analyst: * Senior biotech equity analyst, VC incubation / BD lead, or company creation expert (e.g., from Third Rock, ARCH, Versant, RTW, Venrock, or similar). * Built patient-level and revenue models used for investment diligence or asset valuation. * Can critique or improve bottoms-up forecasts from an investor’s perspective, identifying optimistic biases and false comparables. Experience level * ~10–15 years in biotech/pharma forecasting, investment, or commercial strategy roles. * Experience spanning pre-launch forecasts → post-launch actuals for multiple assets. * CV/LinkedIn bullets like “led global forecast for [drug],” “responsible for long-range revenue planning and peak-sales scenarios,” or “built patient-based forecasts for portfolio decisions.” * Strong comfort with market modeling logic (TPP inputs → eligible pool → penetration → price/net → ramp + LOE). * Evidence of post-hoc learning — can articulate where real-world results diverged from base-case assumptions. Expectations: Inputs we give: * Forecast prompts (representative TPPs, analogs, and SoC/pricing/launch assumptions). * Access to anonymized or simulated data sets for building base cases. Expected outputs (per prompt): * Golden Forecast Output: A benchmark-quality peak-sales forecast (peak value, revenue curve by key years) plus a concise narrative (3–5 key drivers, 2–3 downside risks). The output should show how the expert calibrates realistic vs. inflated scenarios. * Forecast Rubric: A structured evaluation framework with critical checks (market structure realism, patient flow logic, analog consistency, regional splits, LOE handling). Should define clear scoring thresholds — e.g., unacceptable → excellent. * Know-how Layer: Commentary explaining how experienced forecasters anchor their assumptions: * How they select base rates and analogs. * How they temper over-optimism (payer pushback, access limits, share ceilings). * How they identify when a model’s structure or magnitude is implausible. Engagement Model & Compensation • Contract / Part-time (Remote) — work flexibly with data science and evaluation teams.

Job DescriptionWalkMe, an SAP company, pioneered the Digital Adoption Platform (DAP) to enable business leaders to fully harness technology in today's complex digital landscape. By leveraging WalkMe's features—guidance, engagement, insights, and automation—employees boost efficiency, executives gain greater visibility into digital usage, and organizations maximize their digital assets, driving successful digital transformation. Together, SAP and WalkMe form a powerful partnership that revolutionizes the digital transformation journey. This collaboration allows businesses to unlock the full potential of SAP's robust ERP solutions while seamlessly enhancing user experience and productivity with WalkMe's intuitive digital adoption platform. WalkMe is seeking a FedRAMP Senior Compliance Analyst to lead and mature our public-sector FedRAMP program, currently in Ready status, with the goal of achieving full Authorization (ATO) and maintaining Continuous Monitoring. This role involves authoring policies, maintaining FedRAMP documentation, coordinating evidence across engineering teams, collaborating with FedRAMP advisors and auditors to ensure successful assessments and renewals, and serving as the FedRAMP compliance focal point for R&D where U.S. citizenship is required for hands-on system operations. This position is ideal for a self-starter with a can-do attitude, strong English communication skills (oral and written) and a technical background who excels at translating NIST controls into practical engineering outcomes. As this role will support our Federal business, US Citizenship is required.Hybrid role - 2 days a week in our SAP NYC officeWhat You'll Own • Own the FedRAMP RMF lifecycle, including defining/maintaining the authorization boundary, driving control implementation evidence, writing and reviewing the System Security Plan (SSP), and managing System Assessment Plan (SAP)/System Assessment Report (SAR), Plan of Action & Milestones (POA&M), and Continuous Monitoring submissions., • Author and maintain security and compliance policies, standards, and procedures, aligning with NIST 800-53r5 and organizational standards., • Drive vulnerability management, including vulnerability scanning, patching cadence enforcement, and tracking remediation., • Liaise with external FedRAMP advisors/3PAO and authorizing stakeholders, scheduling walkthroughs, coordinating requests, and resolving findings., • Serve as the U.S. citizenship compliance focal point for technical operations in the FedRAMP production environment., • Collaborate with Security (GRC/AppSec/IR), Cloud Engineering/SRE, and IT teams to operationalize NIST 800-53 Rev. 5 controls and ensure traceable evidence., • Influence engineering best practices by embedding security and compliance requirements into CI/CD pipelines, IaC, and operational processes., • Report program status, risks, and metrics to the GRC Lead/CISO, and prepare materials for audits, renewals, and leadership reviews., • Strong English communication skills (oral and written), with the ability to author clear policies, technical documentation, and reports., • Positive, can-do attitude with proven ability to take ownership and drive complex initiatives to completion., • Standard U.S. time-zone collaboration is expected, with occasional meetings with external auditors/advisors.What You Need to Succeed, • Minimum 7 years of compliance experience in FedRAMP, • Prior experience leading a FedRAMP Authorization to Operate (ATO) or renewal, including preparing for agency or JAB authorization, • Prior, hands-on FedRAMP experience in documentation, RMF, POA&M management, Continuous Monitoring, and FIPS-validated cryptography (FIPS 140-3), • Strong working knowledge of NIST 800-53r5 and RMF (NIST 800-37), with the ability to map technical controls to evidence, • Demonstrated ability to author policies, review SSPs and collaborate effectively with 3PAOs/advisors and engineering teams, • Excellent documentation, communication, and stakeholder management skills, • U.S. citizenship (required due to federal program requirements), • Positive, can-do attitude with a collaborative approach, and proven ability to take ownership and drive complex initiatives to completion.What Sets Us Apart, • At WalkMe, we are dedicated to building a workforce that reflects the diversity of our global community and clients we serve through inclusive programs and initiatives including equal pay, employee resource groups, holistic benefits and more. We are committed to fostering an inclusive culture which celebrates the unique experiences and perspectives each Team Member brings to the workplace., • Hybrid Work Arrangement: We offer a hybrid work schedule to perfectly combine the benefits of remote work and the essential connections and collaborations of onsite work., • Supportive Culture: We focus on the whole person, celebrating what makes us unique, and create space for community., • Professional Development: We encourage continuous learning and offer opportunities for career development through our career compass offering., • Stay healthy and happy with Wellness@WalkMe! Enjoy quarterly wellness reimbursements, daily BrightBreaks to recharge, and WalkMe’s annual Wellness Month every July—because your well-being matters all year long., • WalkMe provides health coverage options, where applicable, to ensure employees have access to essential medical benefits. Our offerings are designed to support the well-being and diverse needs of our global workforce., • WalkMe offers a generous annual leave policy tailored to meet regional standards, ensuring all employees enjoy sufficient time off to rest and recharge., • WalkMe offers RefreshMe Days throughout the year to further strengthen our commitment to work/life balance., • Robust Retirement Contributions: Ask HR about the specific offerings for your region!, • SAP's acquisition of WalkMe highlights a commitment to enhancing user experience and streamlining software interactions, offering opportunities to work with cutting-edge technology that drives efficiency and innovation in the workplace.Nice to have, • Exposure to AWS/Azure/GCP (GovCloud experience a plus), Kubernetes, Terraform, CI/CD, logging/monitoring (Splunk, CloudWatch, ELK, Datadog), • Familiarity with NIST 800-171/172, ISO 27001, SOC 2, vulnerability management practices, and security testing (BC/DR, IR exercises), • Experience with GRC/evidence tools (e.g., Jira/Confluence, ServiceNow, Drata/Vanta/Archer/OneTrust)

Job Description Healthcare quality is declining and soaring costs are crushing American families and businesses. At Garner, we've developed a revolutionary approach to evaluating doctor performance and a unique incentive model that's reshaping the healthcare economy to ensure everyone can afford high quality care. By providing organizations relief from surging healthcare costs, we've experienced rapid adoption in the market and have more than doubled our revenue annually over the last 5 years, becoming the fastest growing company in our space. To support our continued growth, we're expanding our team by over 50% each year, seeking exceptional talent to shape our unique, award winning culture (for example, USA Today Top Workplaces 2025) designed to cultivate teamwork, trust, autonomy, exceptional results, and individual growth that creates an inflection point in your career. About the role: We are looking for a Senior Compliance Analyst to join our Security team as we enter our next phase of scale. As a Compliance Analyst, you will collaborate with workflow owners, external auditors, and other stakeholders in order to assist with reviewing, monitoring, and resolving compliance findings. You will also have a key role in shaping the way the organization assesses risk and monitors security controls. This role is open to remote candidates across the U.S. For candidates based in New York City, the position follows a hybrid schedule with in-office work required Tuesday, Wednesday, and Thursday each week. What you will do: • Manage and support HITRUST, SOC 2, and ISO 27001 audits, • Assist go-to-market teams with customer inquiries, • Manage Garner's Security and Privacy trust center, • Maintain current knowledge of industry best practices and team procedures to maintain a suitable risk posture, • Manage security standards, policies, and practices on a recurring basis to maintain compliance and customer trust, • Use code and AI to streamline traditional, tedious GRC processes such as vendor security reviews and user access reviewsWhat you will bring to the team:, • 3+ years of direct experience in an information security role, with an emphasis on risk and compliance, • Prior experience with HITRUST, SOC 2, and ISO 27001 audits, • A GRC Engineering mindset focused on using automation to efficiently perform typical GRC tasks like user access reviews, • Experience with GRC program building at high growth, cloud-native companies

Job DescriptionAbout Taskrabbit: Taskrabbit is a marketplace platform that conveniently connects people with Taskers to handle everyday home to-do's, such as furniture assembly, handyman work, moving help, and much more. At Taskrabbit, we want to transform lives one task at a time. As a company we celebrate innovation, inclusion and hard work. Our culture is collaborative, pragmatic, and fast-paced. We're looking for talented, entrepreneurially minded and data-driven people who also have a passion for helping people do what they love. Together with IKEA, we're creating more opportunities for people to earn a consistent, meaningful income on their own terms by building lasting relationships with clients in communities around the world. Taskrabbit is a hybrid company with employees distributed across the US and EU and a Built In — Best Places to Work (2022, 2023, 2024) continually ranked across multiple national and regional categories. Join us at Taskrabbit, where your work will be meaningful, your ideas valued, and your potential unleashed! This role operates on a hybrid schedule requiring two days of in-office per week. The position can be based in either our San Francisco office or our new New York City office. About the Role We are seeking a Security Engineer to join our lean and high-impact team. Reporting to the Security Engineering Manager and working closely with two Senior Security Engineers, you will play a crucial supporting role in executing technical security initiatives and driving continuous security improvements. This role offers high potential for growth and is an excellent opportunity for a talented individual looking to significantly expand their career in a modern, cloud-native environment. The ideal candidate is technically versatile, detail-oriented, and driven to learn. Candidates with a strong Software Development background, coupled with a keen interest in pivoting into security engineering, are encouraged to apply. What You'll Work On: • Implement and manage technical security controls, WAF rules, and secure CI/CD pipelines aligned with CIS requirements., • Execute vulnerability management programs and system hardening, collaborating with development teams to remediate findings., • Build security automation and refine detection rules for SIEM/EDR platforms to enhance response capabilities., • Participate in the on-call rotation to triage alerts and assist with incident response., • Conduct security vendor reviews and manage responses to external security questionnaires., • Security Analyst/Security-Adjacent: 5+ years of experience in a Security Analyst or similar role, demonstrating a clear path of growth toward security engineering., • Security Engineer: 3+ years of direct experience working as a Security Engineer., • Software Developer (SDE) Pivot: 5+ years of experience in a Software Development role, with 1+ year of experience working in security or security-adjacent roles (e.g., implementing security libraries, running security tools).Required Skills:, • Proficiency with AWS and/or GCP and experience securing cloud-native infrastructure (Docker, Kubernetes, Terraform)., • Strong scripting and automation skills (e.g., Python, Bash, Go)., • Experience with SIEM/EDR tools, alert triage, and incident response workflows., • Knowledge of WAF management, CI/CD security integration, and secure coding principles., • Ability to manage vulnerability scanning, remediation lifecycles, and system hardening., • Experience conducting third-party vendor reviews and responding to security questionnaires.Bonus Skills:, • Direct experience and strong knowledge of developing or securing applications built with TypeScript and Node.js is highly desirable, • Experience with or knowledge of data streaming platforms such as Kafka., • Exposure to SOC 2, CIS, or general compliance control frameworks., • Taskrabbit is a Hybrid Company. We value flexibility and choice but also stay committed to regular in-person connection., • The People. You will be surrounded by some of the most talented, supportive, smart, and kind leaders and teams -- people you can be proud to work with!, • The Diverse Culture. We believe that we make better decisions when our workforce reflects the diversity of the communities in which we operate. Women make up half of our leadership team and our diversity representation is above that of the tech industry average. Taskrabbit is an equal opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, ancestry, citizenship, sex, gender, gender identity, sexual orientation, age, marital status, military/veteran status, or disability status. Taskrabbit is committed to working with and providing reasonable accommodation to applicants with physical and mental disabilities. Taskrabbit will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law. Taskrabbit will never use text or chat applications to conduct interviews. We have a thoughtful and interactive interview process that includes an initial recruiter phone screen and several video-based interviews with our hiring teams. Communications will always be conducted by taskrabbit.com domain names.

Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 350,000 businesses and nearly 1.5 Million active savers, with over $30 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit vestwell.com Who Are We Looking For? The Vestwell CyberSecurity team is looking for an experienced, meticulous and detail-oriented security analyst to be responsible for monitoring the security systems in our organization. The security analyst's responsibilities include securing our infrastructure, filtering for suspicious activity, and finding and mitigating security risks before any breaches can occur. You will work inter-departmentally to identify and correct any flaws in our security systems. You should have a sound working knowledge of cybersecurity, including intrusion prevention and incident response. You should be detail oriented with strong analytical skills and have good communication, interpersonal, and leadership skills. What Will You Be Doing? Manage all day-to-day activities within the Security organization. This would include: • Management of Anti-Virus and Anti-Malware solutions like CrowdStrike., • Monitoring and alerting management., • Confirm infrastructure has most recent patches, updates and libraries., • Management of 1Password, • Management of vaults and user access for both passwords and keys, • Management of KnowBe4, • Phishing tests and training and response., • Develop ongoing security posture improvements., • Evaluate existing and new tooling to confirm customer PII and sensitive corporate data is protected., • Management of Nightfall DLP solution., • Evaluate existing Detection Rules., • Implement detection rules based on growth of the Vestwell platform., • Action against alerts triggered for DLP leakage., • Work closely with Engineering to provide guidance and advice on industry best practice security., • Authentication & Authorization, • Work with stakeholders to continue evolving the A&A platforms at Vestwell to adhere to industry standards and Vestwell growth., • Work closely with Legal and Compliance teams to evaluate and improve policies. The Necessities • Professional experience in computer science, programming, or related field., • Professional experience working in computer systems with some specialization in computer security., • The ability to manage competing deadlines., • Excellent verbal and written communication skills, interpersonal, and teaching skills., • Ability to anticipate, analyze, and problem-solve, • The ability to remain current on the latest technology and best practices in information security., • Proficient, or able to gain proficiency with, a broad array of security software applications and tools., • Thorough understanding of computer-related security systems including firewalls, encryption, and password protection and authentication., • Experienced with penetration testing and techniques., • Advanced training certifications may be advantageous., • CISSP, • Training or experience with SOC audits. OUR BENEFITS We're an innovative, high-growth company, with lots of exciting milestones ahead. We value health and wellness at Vestwell and in addition to a dedicated Employee Wellbeing Committee, we offer competitive health coverage and generous vacation offering. We have adopted a hybrid office policy, but all employees are welcome at our bright, comfortable office with many workspace options in our Midtown Manhattan office, so everyone has a setting that is the most productive for them. Oh, and naturally we have a great 401(k) plan! OUR PROCESS It starts the same for every candidate: getting to know the team members through 1-2 conversations about Vestwell, your experience, and your interests. Next steps can vary by role, but the usual next steps are a skill or experience screen (e.g. a coding interview for an Engineer, a portfolio review for a Designer, deeper experience call for other roles) which leads to a virtual or in-person interview panel after that if the screens go well. Before making an offer, our interview process concludes with a references check stage for your recruiter to meet with a current or former supervisor and peer. We prioritize transparency and lack of surprise throughout the process. For your awareness you will only receive correspondence from any other domain not ending in Vestwell.com is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.

Job Description Job Title: Security Operations Center (SOC) Analyst (NYC, BOS, ATL) Primary Location: Remote (Must Reside in ATL, BOS, NYC) Position Type: Full-Time, 2nd Shift (3:00 PM 12:00 AM ET, Monday Friday) Overview TalentFish is casting a line for a Security Operations Center (SOC) Analyst. This is a full-time role operating remotely in the United States. The purpose of this position is to serve as the first line of support for Information Security operations including threat hunting, security tool support, and triage of security detections to help maintain and strengthen the organization's overall security posture. What You Bring to the Role (Ideal Experience) • 2+ years of experience in Cybersecurity or a related IT field., • Intermediate to expert knowledge of cybersecurity operations, including incident response, vulnerability management, and endpoint security., • Strong understanding of security principles, protocols, and ticket workflow processes., • Excellent communication skills and the ability to translate technical concepts into business language., • Relevant Cybersecurity Operations certifications such as CompTIA Security+, ISC2 CC, CISSP, or Palo Alto Networks PCNSE (preferred)., • Ability to think critically and exercise independent judgment when responding to security events. What You'll Do (Skills Used in this Position) • Actively search for threats, indicators of compromise, and data exfiltration across the environment., • Monitor and respond to incident and task-related events using discretion and sound judgment to determine the appropriate response., • Triage and remediate security detections, escalating issues to Tier 2/3 teams as necessary., • Assist Tier 2/3 teams in implementing changes and performing routine maintenance tasks., • Create and maintain documentation supporting the security environment., • Collaborate with Information Security and Information Technology teams to ensure the firm's security controls are effective and up to date. Compensation Information The expected salary range for this position is 60k-85k per year , depending on experience and qualifications. This role also qualifies for comprehensive benefits such as health insurance, 401(k), and paid time off. TalentFish is committed to pay transparency and equal opportunity. The salary range provided is in compliance with applicable state and federal regulations. This role requires authorization to work in the U.S. without current or future visa sponsorship. All offers are contingent upon the completion of a background check, which may include but is not limited to: reference checks, education verification, employment verification, drug testing, criminal records checks, and any required certifications or compliance requirements based on the end client's background check policies and applicable laws. About TalentFish: TalentFish is an employee-owned company pioneering a new realm in talent acquisition. We are redefining IT staffing through AI-driven matching, video screening, and our unique proprietary platform. Our focus is to provide the best experience for employees, consultants, and clients alike. At TalentFish, we are an Equal Opportunity Employer we embrace and encourage diversity!

Job Description Security Consultant – HIPAA / NIST CSF Our client is seeking a Security Analyst Consultant to join their company for a part-time contract position that is remote capable. The Security Analyst will lead client-facing security assessments and HIPAA/NIST CSF compliance reviews—scoping engagements, evaluating controls, conducting tabletop exercises, and delivering clear remediation guidance. • Location: Remote, • Conduct vulnerability assessments and penetration testing to identify and prioritize security weaknesses, focusing on HIPAA and NIST CSF controls., • Analyze security logs and identify potential security incidents with a focus on PHI and HIPAA compliance., • Investigate and respond to security incidents according to established procedures, adhering to HIPAA breach notification requirements., • Implement and maintain security controls, such as firewalls, intrusion detection/prevention systems, and data encryption, ensuring compliance with HIPAA and NIST CSF requirements., • Manage and update security policies and procedures aligned with HIPAA and NIST CSF., • Assist in developing and delivering security awareness training for employees, emphasizing HIPAA and NIST CSF best practices., • Stay up-to-date on the latest security threats, industry regulations, and NIST CSF updates, recommending preventative measures., • Prepare and present security reports to the ISO and other stakeholders, highlighting HIPAA compliance and NIST CSF adherence., • Assist with security audits and compliance requirements related to HIPAA and NIST CSF., • Knowledge of HIPAA Security Rule, • Knowledge of CIS Controls, • Bachelor's degree in Information Security, Computer Science, or related field., • Minimum of 5 years of experience in information security or a related field., • CISSP, CISM, CBCP, CHPS, CISA, or equivalent certification required, • Familiarity with the HIPAA Security Rule, NIST CSF, and other relevant healthcare regulations., • Experience with security tools and technologies, such as vulnerability scanners, SIEM/SOC platforms, and SIEM/SOC platforms., • Ability to identify and mitigate network vulnerabilities Irvine Technology Corporation provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Irvine Technology Corporation complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

Job DescriptionCompany Description We are a reputable software company specialized in the healthcare industry. We have various products for Laboratories, Hospitals, Doctors, and almost all areas of healthcare since 1988 When you join us at Comtron you’ll be part of a smart, driven team that shares your passion for exploration and discovery in the Healthcare Software vertical. With significant investment in people, process and technology, we give our people the resources and opportunities to make significant contributions to all of our clients partnering with our organization. Job Description Position Overview We are seeking a highly skilled and experienced Senior IT Analyst with strong expertise in Microsoft system administration, virtualization technologies, and IT security. The successful candidate will play a key role in managing, securing, and optimizing our IT infrastructure, ensuring high availability, reliability, and compliance with best practices and security standards. Key Responsibilities Systems Administration * Manage, maintain, and troubleshoot Microsoft server environments (Windows Server, Active Directory, Group Policy, DNS, DHCP). * Administer Microsoft 365 / Azure AD environments, including Exchange Online, Teams, and SharePoint. * Oversee patch management, updates, and system upgrades. * Facilitate physical and virtualized equipment across the internal team. Virtualization & Cloud * Implement, manage, and support virtualization platforms (VMware, Hyper-V, or similar). * Monitor performance and capacity, ensuring optimal resource utilization. * Support hybrid and cloud infrastructure initiatives, including Azure deployments. Security & Compliance * Maintain and enforce IT security policies, standards, and procedures. * Administer endpoint security tools (antivirus, EDR, firewalls, SIEM, etc.). * Conduct vulnerability assessments, remediation, and incident response. * Support compliance with standards such as ISO 27001, SOC 2, or HIPAA (if applicable). * Lead an annual internal privacy audit across all departments in the organization. Operational Support * Work closely with our onboarding team to facilitate and support client environments. * Work closely with development and support to address client environment issues. * Provide advanced technical support for escalated issues across infrastructure, servers, and applications. * Participate in on-call rotation for critical systems support. Project & Strategy * Lead IT infrastructure and security improvement projects. * Research and recommend emerging technologies to enhance system performance and security posture. * Collaborate with business units to align IT initiatives with organizational goals. Qualifications * Bachelor’s degree in Information Technology, Computer Science, or equivalent experience. * 5+ years of experience in Microsoft systems administration (Windows Server, Active Directory, Microsoft 365, Azure AD) * 5+ years of experience using Linux - Centos/Redhat/Alma- ability to read and write scripts in Linux, preferably Bash * Hands-on experience with virtualization platforms (VMware, Hyper-V). * Strong understanding of IT security frameworks, firewalls, and intrusion detection/prevention. * Experience with backup, disaster recovery, and business continuity planning. * Knowledge of scripting (PowerShell preferred) for automation and administration. * Excellent problem-solving, communication, and documentation skills. * Relevant certifications preferred (e.g., MCSA/MCSE, Microsoft 365 Certified, VMware VCP, CompTIA Security+, CISSP). * Must possess a valid drivers license and maintain an acceptable driving record * Perform hardware and software system configuration, maintenance, and upgrades * Troubleshooting of servers, routers, workstations, laptops, mobile devices and printers * Be available to travel to alternate business sites as needed * Work on weekends and beyond normal business hours when required * Living near Great Neck NY Additional Information Why join us? We offer the opportunity to work with passionate technology professionals who value customers, teammates and providing some robust IT infrastructure. Our collaborative environment also provides many growth and leadership opportunities. Competitive compensation and benefits package. All your information will be kept confidential according to EEO guidelines.