Threat analyst jobs in East Elmhurst, New YorkCreate job alerts

Judi Health is an enterprise health technology company providing a comprehensive suite of solutions for employers and health plans, including: • Capital Rx, a public benefit corporation delivering full-service pharmacy benefit management (PBM) solutions to self-insured employers,, • Judi Health, which offers full-service health benefit management solutions to employers, TPAs, and health plans, and Location: Remote Position Summary: The IT Security & Compliance Analyst works collaboratively within the IT department toidentify,manageand communicate security risks, implement andmonitorsecurity compliance, and respond to audits effectively. Position Responsibilities: • Collaborate with the engineering departments to implement security controls from approved security frameworks and drive best IT practices., • Interface with internal partner teams to help drive best practices and compliance., • Evaluate and perform Risk Assessments of new software solutions with internal partners., • Drive deployment of new systems/solutions as needed., • Write procedure documentation for end users as needed to facilitate process improvement., • Help develop IT security training content and drive completion of required security training in collaboration with Human Resources., • Respond to complex security questionnaires, RFP/RFI requests, and client audits., • Facilitate end-to-end evidence gathering for external audits, ensuring all technical and administrative artifacts align strictly with security control requirements and regulatory frameworks., • Evaluate, identify, and remediate the risks associated with current vendors, new vendor acquisitions, and consumer data exchanges., • Perform risk oversight tasks of vendor security compliance., • Help run Internal, external and vendor related audits., • Conduct security analysis of deployed software., • Monitor for risks to the enterprise and to implemented controls, • Identify, maintain, and publish the requirements for the IT department to achieve compliance and privacy standards in SOC 2, HITRUST, FedRAMP, and other frameworks., • Work with the internal team in communicating related security notifications and IT controls within the organization while collaborating with teams and vendors on changes, remediations, and updates., • Experience with incident management Drive use cases to enable threat detection and hunting based on threat intelligence frameworks., • Experience with Agile and/or Kanban with emphasis on Scrum to drive continuous process improvement., • Experience related to duties and responsibilities., • Experience working in Governance, Risk, and Compliance., • A customer-oriented approach to problem resolution, • Experience with IT control auditing and compliance., • Working knowledge of Software Development Lifecycle concepts and processes, • Working knowledge of cloud providers with respect to IT Security & Compliance controls and practices., • General knowledge of frameworks and controls: NIST 800-53, FedRAMP, HITRUST, SOC 2, PCI, ISO 27001, • General knowledge of HIPAA and the requirements to protect PHI., • Ability to communicate concepts in a concise form to management and cross-functional teams.departments or teams verbally, in writing, and through pictures or diagrams whenappropriate., • Excellent written, oral, instructional, presentation, and interpersonal skills focused on motivation and positive attitude., • Highly self-motivated with the ability to prioritize tasks and work independently., • Ability to work quickly and efficiently., • Desire to work at a rapidly growing organization in healthcare., • Experience working with remote users in a distributed environment., • Experience with Office 365 suite, Atlassian suite, Vanta (or other GRC tools)., • CCSK, • CCAK, • CISA, • AWS Cloud Practitioner Judi Health values a diverse workplace and celebrates the diversity that each employee brings to the table. We are proud to provide equal employment opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, medical condition, genetic information, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. By submitting an application, you agree to the retention of your personal data for consideration for a future position at Judi Health. More details about Judi Health's privacy practices can be found at___.

Conduct in-depth Counter Threat Finance (CTF) and Threat Finance Intelligence (TFI) analysis to disrupt and dismantle illicit financial activities. Proficiency using intelligence tools such as Palantir, Google Earth, Analyst Notebook, TAC, DataXplorer, or Voltron Suite. We’re launching a major new

Job DescriptionIntelligence AnalystEmployment Type: Full-Time, Experienced Contact Government Services is hiring an Intelligence Analyst ready to be a member of a dynamic and fast paced intel analysis program for a federal agency supporting the US Government’s threat watchlisting and screening mission. As an Intelligence Analyst, you will provide embedded analysis and reach back support to a federal agency and their partners. You will provide multi-source intelligence analysis and fusion that integrates existing national-level products and databases to define patterns of operations. As required, you will interact directly with government leadership and deployed intelligence consumers during the development of intelligence products and ongoing screening operations to meet intelligence requirements across the watchlist enterprise. Duties may include the processing and verification of national security threat actor nominations, data integrity/quality control, encounter management, information sharing, and/or multiple discipline intelligence analysis. CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Primary Responsibilities Apply complex direction, including standard operating procedures and operations manuals documentation as well as appropriate oral and written guidance received. Communicates clearly and effectively, both orally and in writing, in order to tactfully and persuasively advise and guide executive management relative to a variety of issues which can be delicate in nature; includes making presentations and preparing complete, clear, and concise formal and informal reports, correspondence, briefings, charts, tables, and graphs that are distributed throughout the government and its partner agencies. Conduct research and analysis of data, information, and intelligence to produce a wide range of finished all-source intelligence products. Finished intelligence products shall include standard and non-standard Agency products as well as briefings for the tactical and strategic customers You should be able to provide daily feedback to the team lead. Basic Qualifications The ability to learn the range of pertinent laws, regulations, policies, and precedents which affect the program Effective problem-solving, analytic, written and oral communication skills Capacity to work as part of a team to provide multi-faceted intelligence products and support to operational units and Intelligence Community components Knowledge with Microsoft Outlook applications Ability to work with and engage the customer daily Active Top Secret clearance and eligible for a CI Polygraph Preferred Qualifications Experience working with IC tools and databases Degree in security or intelligence studies with a recommended focus on terrorism or other transnational security threats is highly desired Two to seven years of Experience Familiarity with programs and software such as Palantir, ESRI, Intel Analyst, ETC. Completion certificate from a commercial, military, or US government all source analysis training course or a specialized intelligence career field.Skills and attributes for success:- Drafting and development of technical documentation related to a variety of projects in the IT space.- Work closely with project stakeholders to establish technical processes and procedures.- Document projects through the SDLC.- Provide status reports for multiple ongoing projects and related documentation efforts.- Assist with both user and admin level documentation. Our Commitment:Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client’s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we’ve been growing our government-contracting portfolio, and along the way, we’ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.- Health, Dental, and Vision- Life Insurance- 401k- Flexible Spending Account (Health, Dependent Care, and Commuter)- Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: more information about CGS please visit: or contact:Email: #CJ We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Job Description Garner's mission is to transform the healthcare economy, delivering high-quality and affordable care for all. We are fundamentally reimagining how healthcare works in the U.S. by partnering with employers to redesign healthcare benefits using clear incentives and powerful, data-driven insights. Our approach guides employees to higher-quality, lower-cost care, creating a system that works better for everyone. Patients achieve better health outcomes, employers spend healthcare dollars more effectively, and physicians are rewarded for delivering exceptional care rather than performing more procedures. Garner is one of the fastest-growing healthcare technology companies in the country. Our products are trusted by the most sophisticated employers and providers in the industry, and we are building a team of talented, mission-driven individuals who are motivated to make a meaningful impact on healthcare at scale. About the role: We are seeking a Security Analyst to join our Security team. This role is critical to maintaining the security of our app and the infrastructure that supports it. You will be responsible for identifying and mitigating risks across our environment, ensuring that Garner's security posture remains robust and that our commitment to protecting member data is never compromised. Where you will work: Garner is headquartered in NYC, but this position is available for individuals who are comfortable with remote work and occasional travel to HQ. What you will do: • Independently manage day-to-day security operations (SecOps/SOC), including threat monitoring and incident triage with intense urgency., • Conduct systematic reviews of system logs and alerts using Wiz and Datadog to uncover root causes and solve for underlying vulnerabilities., • Use LLMs (like Claude) to interrogate the health of services and automate security-based data analytics at scale., • Navigate hundreds of Kubernetes clusters and disparate data sources to find the "signal in the noise" using SQL and Boolean logic., • Build and implement security controls and automated responses within the AWS ecosystem using Python, Go, or TypeScript., • Convey technical findings and forensic research concisely to engineering and product teams with clear, actionable remediation steps., • Own the execution of recurring compliance tasks and documentation, ensuring all security deliverables are error-free and meet regulatory standards., • Identify opportunities to automate manual security checks, moving the team toward a more proactive security engineering model over time.The ideal candidate has:, • 2+ years of experience in Security Operations, SOC, or a related field, preferably within a scaling startup, • Proven experience in incident response, including triage, investigation, and resolution in high-pressure environments, • Hands-on experience with security and observability tools such as Wiz and Datadog, particularly from a forensic or MTDR perspective, • Strong SQL skills and demonstrated ability to analyze large, complex datasets across distributed systems, • Experience identifying patterns and extracting meaningful insights from high-volume data ("signal vs. noise"), • Familiarity with on-call rotations and a willingness to participate as needed, • Experience or demonstrated interest in leveraging AI/LLMs (e.g., Claude) for data analysis, troubleshooting, or system interrogationTechnologies we use: Please note: We are unable to sponsor or take over sponsorship of an employment visa at this time. Compensation Transparency: The target salary range for this position is $117,000 - $130,000. Individual compensation for this role will depend on various factors, including qualifications, skills, and applicable laws. In addition to base compensation, this role is eligible to participate in our equity incentive and competitive benefits plans, including but not limited to: flexible PTO, Medical/Dental/Vision plan options, 401(k), Teladoc Health and more. Fraud and Security Notice: Please be aware of recent job scam attempts. Our recruiters use getgarner.com and garnerhealth.com email domains exclusively. If you have been contacted by someone claiming to be a Garner recruiter or a hiring manager from a different domain about a potential job, please report it to law enforcement here and to . Equal Employment Opportunity: Garner Health is proud to be an Equal Employment Opportunity employer and values diversity in the workplace. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Garner Health is committed to providing accommodations for qualified individuals with disabilities in our recruiting process. If you need assistance or an accommodation due to a disability, you may contact us at .

Job DescriptionDescription: Hybrid 4 in either New York, NY or Pittsburgh, PA The organization seeks a Security Operations Engineer to strengthen and operate a FedRAMP-aligned Azure environment using native Microsoft security tooling. The role will design detections, run incident response, and drive continuous monitoring with audit-ready evidence across NIST SP 800-53 control families. The engineer will collaborate with cloud engineering, platform teams, and compliance stakeholders to sustain authorization and operational excellence. The position requires proficiency with Microsoft Sentinel, Defender for Cloud, Azure Policy, Entra ID, and KQL. This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance. Rate: $84.00 to $94.00/hr. w2 Responsibilities: • Design, implement, and tune detections in Microsoft Sentinel, including analytic rules, workbooks, watchlists, and automation with Logic Apps and Playbooks., • Build incident response runbooks and orchestration for triage, enrichment, and response using Sentinel automation., • Maintain log onboarding pipelines, data connectors, and normalization in Log Analytics to ensure coverage for in-scope resources., • Conduct daily SecOps functions including alert triage, investigation, threat hunting, containment, and post-incident reviews., • Leverage Defender for Cloud, Defender for Cloud Apps, Entra ID Protection, and Microsoft Defender XDR signals to correlate and respond to threats., • Document evidence and maintain audit-ready case records, contributing to POA&M entries and corrective actions., • Manage misconfigurations and control enforcement using Defender for Cloud recommendations, Secure Score, and Azure Policy., • Partner with platform engineering to remediate vulnerabilities and configuration drift, tracking closures against FedRAMP timelines., • Maintain baseline guardrails via Azure Policy and Blueprints and monitor compliance and exceptions with Continuous Monitoring reporting., • Implement and support least-privilege patterns with Entra ID, PIM, Conditional Access, RBAC, and managed identities., • Coordinate FIPS 140-2 validated cryptography usage with Key Vault and ensure encryption standards at rest and in transit are met and evidenced., • Operate Azure Firewall, NSGs, Private Link, and DDoS Protection and monitor and remediate anomalies., • Ensure logging and telemetry for network controls are complete, retained, and queryable within Sentinel., • Produce monthly and quarterly Continuous Monitoring artifacts and maintain supporting evidence., • Update detection coverage maps, control implementation narratives, and operational runbooks as environment changes occur., • Collaborate with compliance and assessors, support interviews, evidence collection, and remediation tracking., • Embed security checks into CI/CD pipelines using native integrations and support policy compliance and validation., • 5+ years in security operations engineering or incident response, including 2+ years operating native Microsoft security tooling in Azure., • Hands-on experience building and tuning Microsoft Sentinel detections and automating response with Logic Apps and Playbooks., • Practical knowledge of FedRAMP Moderate or High baselines and NIST SP 800-53 control families relevant to operations, including AC, AU, CM, IR, RA, SC, and SI., • Proficiency with Defender for Cloud, Azure Policy, Entra ID including PIM and Conditional Access, Key Vault, Azure Monitor, and Log Analytics., • Strong incident response skills across triage, investigation, containment, and post-incident documentation with audit-quality evidence., • Experience operating vulnerability and misconfiguration management workflows and meeting remediation SLAs aligned to FedRAMP timelines., • Scripting and automation familiarity using KQL for Sentinel and PowerShell, with ARM, Bicep, or Terraform basics., • Excellent documentation and communication skills for playbooks, evidence packages, and stakeholder updates., • Experience with Azure Government or GCC High environments (preferred)., • Prior contributions to FedRAMP Continuous Monitoring reporting and POA&M lifecycle management (preferred)., • Experience aligning native controls and detections to payment or mission-critical workload risk profiles (preferred)., • Familiarity with Microsoft Purview, Defender for Cloud Apps, Entra ID Protection, and Private Link patterns (preferred)., • Relevant professional certifications such as AZ-500 Azure Security Engineer Associate (preferred)., • SC-200 Microsoft Security Operations Analyst (preferred). W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality. Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact Eliassen Group: Eliassen Group is a leading strategic consulting company for human-powered solutions. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions. With offices from coast to coast and throughout Europe, Eliassen provides a local community presence, balanced with international reach. Eliassen Group strives to positively impact the lives of their employees, clients, consultants, and the communities in which they operate. Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Don’t miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!

Join Our Talent Network Counter Threat Finance Analyst (New York City). Conduct in-depth Counter Threat Finance (CTF) and Threat Finance Intelligence (TFI) analysis to disrupt and dismantle illicit financial activities. We're launching a major new initiative and we want YOU on the front lines! Our

Job Description Position: Cybersecurity Analyst Position Summary: Proactively monitors, detects, and responds to security threats across networks, systems, and cloud environments to ensure the protection of sensitive data and maintain enterprise resilience. Drives risk reduction by analyzing incidents, implementing controls, and collaborating with cross-functional teams to strengthen the organization’s security posture. Key Duties and Responsibilities: • Perform threat triage, incident investigation, and risk analysis to protect the confidentiality, integrity, and availability of Department of Education (DOE) systems, applications, and data assets., • Analyze security alerts and events to identify indicators of compromise (IOCs), attack patterns, and emerging threats across on-premises, cloud, and hybrid environments., • Correlate security data from disparate sources to develop a unified view of organizational cyber risk, enabling informed decision-making and prioritization., • Identify vulnerabilities, misconfigurations, and protection gaps across infrastructure, cloud platforms, and data-centric environments; validate findings and assess potential business impact., • Ensure alignment with federal and regulatory security standards (e.g., NIST, FISMA) and internal cybersecurity policies and control frameworks., • Contribute to continuous improvement of security operations by documenting findings, trends, and lessons learned from incidents and risk assessments., • 5+ years of Cybersecurity Analyst experience in a similar role, • Required certifications: CISSP, CompTIA Security+, CompTIA CySA+, CEH, GCIA, CISA, GCIH, CCSP, CCSP, • Experience with the following technologies: SIEM (Devo/Splunk), Vulnerability Scanners (Rapid7/Armis), Cloud Security Platforms (AWS/Azure), Wireshark, SQL, Python, MS Power BI, and Microsoft Office Suite

Job Description Job Title: Security Engineer/Architect - IAM Duration: 12+ Months (Possible extension) Location: New York, NY 10286 Onsite Role (4 days a week) Responsibilities: • Seeking a hands-on Security Engineer/Architect to design, implement, and govern identity and access management for a FedRAMP-compliant Azure environment using native Microsoft security tooling., • Will own the IAM architecture and control lifecycle—policy design, privileged access, identity threat protection, lifecycle governance, and evidence generation—ensuring NIST SP 800-53 control coverage and audit readiness., • Define and maintain Azure IAM architecture and guardrails: tenant segmentation, RBAC strategy, least privilege, managed identities, Conditional Access, and Just-In-Time access via PIM., • Establish standardized access patterns for workloads, service principals, Managed Identities, and human identities across multi-tenant/multi-subscription Azure footprints., • Design and enforce secure key/secret management using Azure Key Vault (FIPS 140-2 validated modules), including rotation, access policies, and monitoring., • Integrate identity threat protection signals (Entra ID Protection, Defender for Identity) into detection and response workflows; ensure coverage for high-risk scenarios (privilege escalation, token theft, MFA fatigue, legacy protocols). Implementation and Control Enforcement, • Build and maintain Azure Policy/Blueprints to enforce IAM baselines (e.g., MFA requirements, disallow legacy auth, privileged role constraints, Key Vault access policies, managed identity usage)., • Configure Conditional Access, Authentication Strengths, and token controls; manage role assignments, custom roles, and privileged workflows consistent with FedRAMP requirements., • Partner with SecOps to ensure logging/telemetry completeness (Audit logs, Sign-In logs, Entra ID Risk events, Azure Activity logs) and Sentinel ingestion; author KQL-based detections/playbooks for IAM threats., • Maintain IAM control narratives, SSP sections, and evidence packages; support POA&M lifecycle for IAM-related findings and corrective actions., • Lead periodic access certification campaigns for privileged roles and sensitive applications; implement automated recertification workflows and exception governance., • Quantify residual risk and document compensating controls; partner with risk/compliance and 3PAOs on assessments, interviews, and artifact reviews., • Identity & Access: Microsoft Entra ID (Azure AD), PIM, Conditional Access, Authentication Strengths, RBAC, Managed Identities, • Threat Protection: Entra ID Protection, Microsoft Defender for Identity, Microsoft Defender XDR signals, • SIEM/SOAR: Microsoft Sentinel (Log Analytics, Workbooks, Playbooks/Logic Apps), • Posture & Policy: Azure Policy, Azure Blueprints, Azure Automation, • Secrets & Crypto: Azure Key Vault (FIPS 140-2), Key Vault HSM (as applicable), • Bachelor’s degree in Information Security, Computer Science, Information Systems, or related field; equivalent experience considered., • 7+ years in security engineering/architecture, with 3+ years focused on IAM in Azure using native tooling., • Deep hands-on experience with Entra ID (Azure AD), RBAC, PIM, Conditional Access, Managed Identities, and Key Vault—including policy design and enforcement at scale., • Practical knowledge of FedRAMP baselines (Moderate/High), NIST SP 800-53 control families, and audit/assessment processes; experience contributing to SSP/ConMon evidence., • Strong proficiency in Azure Policy/Blueprints and policy-as-code approaches; experience embedding controls into CI/CD., • Ability to design high-fidelity detections and automate incident response for identity threats using Sentinel and Logic Apps., • Experience operating in Azure Government or GCC High tenants and understanding telemetry/control nuances in those environments., • Background in Zero Trust principles, privileged identity strategy, and secure service-to-service authentication patterns., • Familiarity with Microsoft Purview and data access governance for sensitive workloads., • Scripting/automation skills (KQL, PowerShell, Bicep/Terraform basics) to manage identities, enforce policies, and generate evidence., • Certifications: AZ-500 (Azure Security Engineer Associate), SC-300 (Identity and Access Administrator), SC-200 (Security Operations Analyst), CISSP/CCSP, or equivalent.

Job Opportunity in Counter Threat Finance.We're launching a major new initiative - and we want YOU on the front lines! Our team has secured our recompete of an 8-year contract to support critical Counter-Threat Finance (CTF) operations for U.This long-term opportunity offers unmatched stability, pur

Job Description Job Code 839 Department Name IT Infrastructure Reports To Manager, Information Security FLSA Status Exempt Union Code N/A Management No About Us: Building Services 32BJ Benefit Funds (“the Funds”) is the umbrella organization responsible for administering Health, Pension, Retirement Savings, Training, and Legal Services benefits to over 100,000 SEIU 32BJ members. Our mission is to make significant contributions to the lives of our members by providing high quality benefits and services. Through our commitment, we embody five core values: Flexibility, Initiative, Respect, Sustainability, and Teamwork (FIRST). By following our core values, employees are open to different and new ways of doing things, take active steps to improve the organization, create an environment of trust and respect, approach their work with the intent of a positive outcome, and work collaboratively with colleagues. The Funds oversees and manages $9 billion of dollars in assets, which are made up of many, varied and complex funds. The dollars come from a number of sources, including the property owners who pay into the funds on behalf of their employees, and as such, requires those who oversee and manage the money to be highly skilled financial management people. For 2025 and beyond, 32BJ Benefit Funds will continue to drive innovation, equity, and technology insights to further help the lives of our hard-working members and their families. We use cutting edge technology such as: M365, Dynamics 365 CRM, Dynamics 365 F&O, Azure, AWS, SQL, Snowflake, QlikView, and more. Please take a moment to watch our video to learn more about our culture and contributions to our members: youtu.be/hYNdMGLn19A Job Summary: Under the supervision of the Manager, Information Security, the Information Security Analyst is responsible to plan and carry out security measures to protect Funds’ computer networks, systems, and digital and physical technology assets. Performs assessments, develops and implements information security policies, procedure, and guidelines. Works inter-departmentally to identify and correct flaws in the Funds’ security systems, solutions, and applications while recommending specific measures that can improve the Funds’ overall security posture. Essential Duties and Responsibilities: • Provide guidance and expertise in the field of risk management regarding the protection and security of digital assets in the cloud and on premise., • Design and develop Information Security Architectures to prevent unauthorized access to our information and data breaches., • Develop and implement information security policies and procedures; develops security guidelines and safe practices for Funds’-wide computing and networking systems, and maintain the documentation., • Manage, maintain and monitor security technologies such as vulnerability scanning solutions, IDS/IPS, anti-virus technologies, DLP capabilities, SIEM technologies, host forensics and malware analysis, web application firewalls and proxy solutions., • Manage real time threat detention technologies to identify and quarantine threats, Monitor Endpoint Security Alerts and take corrective action., • Minimize security threats by examining governance, technology infrastructure, and facilities to identify security deficiencies, using risk analysis and follow up with corrective action plan., • Monitor internal control systems to ensure appropriate access levels are maintained, protect against unauthorized system access, modification and destruction., • Review security related reports, logs and occurrences; escalate issues and initiate security response procedures., • Create and review vulnerability reports, track compliance with vulnerability management policies, and escalate., • Research and evaluate emerging technologies in support of security technology enhancements, propose technical solutions to management, to address security weaknesses and coordinate with relevant stakeholders to implement., • Reviews, updates, and enforces data security practices within the organization; tests for exposures to ensure adherence to guidelines and procedures, and works with platform experts to implement remedial measures as appropriate., • Tests security controls and manages the associated remediation of any deficiencies as needed., • Assess security information, triaging and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents., • Perform Project Management tasks for security initiatives /projects., • Manage incident-handling processes, which include implementation of containment, protection, and remediation activities., • Coordinates the handling and resolution of security incidents, to include system intrusions and abuse, and acts as a primary point of contact., • Develop responses to internal & external audits, penetration tests and vulnerability assessments., • Support Information Security training and awareness by providing ideas and content, assist HR with employee security awareness education and training., • Manage multiple priorities and deadlines concurrently., • Provide support after hours, on weekends and through on-call rotation., • Performs other duties as assigned Qualifications (Competencies): • To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required., • Minimum 4 years in Information Security, or IT OPS management and systems administration with at least 2 years specific to IT Security;, • Strong knowledge of Information Security design, principles, and processes; Experience in writing and /maintaining information security policies, standards, and guidelines;, • Demonstrated ability to monitor and audit network security systems such as Firewalls, IPS, SIEM, DLP, web proxy, NAC, and Vulnerability scanners;, • Hands on experience with mitigating security controls (i.e., anti-virus, IPS/IDS, DLP, web and network proxies, URL content filtering, multi-factor authentication, SSL VPNs);, • Experience in incident response required; In-depth knowledge of Windows/Unix operating system forensics, event logging systems, authentication methods, remote and local web application security, penetration testing);, • Advanced experience in networking (TCP/IP) protocols, DNS, LDAP, AD, DHCP, HTTP, Web browsers, Firewalls, and other computer/network security and system administration;, • Familiar with regulatory compliance regulations (PCI, SOX, PII, HIPAA, etc.);, • Strong knowledge of common security frameworks (ISO, NIST, etc.);, • Experience in risk assessments and vulnerability management;, • General knowledge of Endpoint protection solutions;, • Knowledge of mainstream operating systems (Microsoft Windows, Linux, IOS) and a wide range of security technologies;, • General knowledge of Database technologies and queries (Microsoft SQL, MySQL, Oracle, etc.);, • Ability to independently identify, research and resolve issues with minimal amount of supervision, and ability to work with peers in a team effort; Soft Skills (Interpersonal Skills): • Detail oriented with excellent organization and analytical skills;, • Ability to plan, take initiatives to accomplish objectives in timely fashion, and work independently;, • Ability to prioritize work and meet deadlines;, • Ability to establish and maintain effective working relationships with project team members, supervisors, and other employees. Education: Bachelor’s degree in Computer Science, or a related discipline. Language Skills: Speak, read, write and understand English Reasoning Ability: High Certificates, Licenses, Registrations: CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), or CISA (Certified Information Systems Auditor) certification are highly preferred. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals to perform the essential functions. • Under 1/3 of the time: Standing, Walking, Climbing or Balancing, Stooping, Kneeling, Crouching, or Crawling, • Over 2/3 of the time: Talking or Hearing, • 100% of the time: Using Hands Work Environment: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions. • 1/3 to 2/3 of the time: Work near moving or mechanical parts, exposure to radiation, moderate noise.

Job DescriptionCompany Description About CyberArk CyberArk, a Palo Alto Networks company, is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk’s AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With Identity Security, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com. Copyright © 2026 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders. Job Description We’re hiring a builder to help us scale Competitive Intelligence Programs as we join forces with Palo Alto Networks. Our function is responsible for deeply understanding why we win and lose, supporting our go-to-market and product teams by translating research into focused content, and ultimately making a measurable impact on pipeline and win rate with competitive programs. The new Senior Manager brings a platform mindset, understanding how identity, access, privilege, and AI all interlock. This should be a strategic marketer with competitive DNA: someone who can absorb complex insights from SMEs and transform them into insights for our GTM teams and security leaders. Why This Role Matters Identity Security is at a market inflection point. Machine identities now outnumber humans by more than 80 to 1. The rapid adoption of AI agents presents a new identity challenge: they are privileged actors that need to be discovered, secured, and governed. Competitors and platforms are pushing hard on “control plane” narratives, such as the convergence of identity & SOC, all-in-one bundling, and AI-driven workflows, raising the bar for clarity, speed, and credibility in competitive execution. Our win/loss program shows we win when we operationalize what’s true about CyberArk: our ability to secure the full spectrum of identities, provide comprehensive use-case coverage, and do this in a way that directly maps to CISO and CIO goals. Those advantages need a leader who can convert technical and GTM insight into repeatable, field-usable playbooks. What You’ll Do * Orchestrate offense + defense playbooks. * Lead competitive playbook strategy across key competitors and segments, ensuring the field has current, high-confidence guidance. * Ensure product launches, platform stories, analyst submissions and messaging are competitively distinct with a ‘show, don’t tell’ mindset. * Partner with Enablement to integrate competitive scenarios into onboarding and ongoing training. * Create high-impact content and executive briefs. * Produce (and/or orchestrate) critical assets when stakes are high: this can include rapid responses, exec-ready briefs, field kits, and strategy decks. * Distill deep SME input across teams into output that’s relevant to security leaders, aligned with how we are positioned to help. * Run the competitive operating cadence. Qualifications * 5–8+ years in product marketing, competitive intelligence, strategy, or technical marketing (cybersecurity / enterprise software strongly preferred). * Demonstrated ability to translate complex technical topics into field-ready guidance that changes behavior and improves outcomes. * Strong working understanding of identity/security concepts (e.g., privileged access management, secrets/machine identities, cloud access, IGA/IAM adjacencies), along with the curiosity to go deep fast. * Excellent communication: concise writing, confident presenting, and the ability to tailor messaging from reps → execs. Strong program discipline: prioritization, stakeholder management, operating cadence, and measurement. * Deep experience in identity security (IAM/IGA, privileged access / machine identity / AI agent landscape) and/or adjacent security platforms. * Track record building competitive programs that scale: win/loss operationalization, takeout plays, competitive enablement systems, experience working with security research organizations (Labs / Red Team) to convert research into GTM advantage. * Experience operating through M&A, integration, or large matrix environments. * Strong grasp of emerging AI/agentic identity and governance trends and their implications for privilege controls and enterprise security narratives. Additional Information CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status. We are unable to sponsor or take over sponsorship of employment Visa at this time. The salary range for this position is $165,000 – $200,000/year, plus commissions or discretionary bonus, which will be based on the employee’s performance. Base pay may also vary considerably depending on job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits.

The Senior Threat Analyst role is a critical part of NYC Cyber Command’s effort to defend the city's infrastructure and sensitive data against escalating cybersecurity threats. This position ensures ongoing threat detection, analysis, and incident response to minimize risks, prevent breaches, and

A city government agency in New York is seeking a Senior Threat Analyst to safeguard critical infrastructure by monitoring and analyzing cyber threats.

Job Description Overview Formed in 1972, Related is the most prominent privately owned real estate firm in the United States. Headquartered in New York City, the company has offices and major developments across the world. Related owns and manages a premier portfolio of assets valued at over $70 billion, including the 28-acre Hudson Yards neighborhood on Manhattan’s West Side. Related believes in investing in its talent and cultivates a positive, team-oriented environment where every voice is valued. Employees are encouraged to boldly take on new challenges, transcend the status quo, and demonstrate strong entrepreneurial spirit. In its relentless commitment to excellence, Related works to foster an innovative approach in its team members so that they can positively impact the communities in which they conduct business. Learn more about Related at . We are proud to be an equal opportunity employer and are deliberate about the team and culture we are building. We aim to ensure competitive total compensation that is commensurate with experience, workplace geography, and market standards. For information about how we use your personal information, including information submitted for career opportunities, please review our Privacy Policy at . Responsibilities Related Companies is seeking an experienced and motivated Cybersecurity/SOC Analyst II with at least 3-5 years of security operations center experience. Focused on Threat Monitoring and Detection, Response, Analysis, Cyber Threat Intelligence to protect and maintain the overall security of the enterprise. Key Responsibilities: • Security Operations Monitoring: Investigate and analyze detections from a diverse set of security tools (NGFW, EDR, NDR, TIP, SIEM) within a high-availability, 24/7/365 operational environment to ensure proactive threat detection and continuous protection., • Security Operations Management: Oversee the configuration, optimization, and management of security tools utilized by the SOC to enhance detection, response, and overall security posture., • Incident Response: Conduct thorough investigations of detections escalated by junior analysts to evaluate the scope of the attack, identify affected systems, and determine the necessary steps for further analysis., • Program Enhancement: Collaborate in the development and refinement of SOC processes and procedures to keep the SOC aligned with the ever-evolving threat landscape, ensuring operational efficiency and readiness., • Threat Intelligence and Awareness: Stay informed on emerging and existing threats by analyzing attacker tactics, techniques, and procedures, and reviewing security event reports to proactively strengthen defenses., • Mentorship and Guidance: Provide guidance and support to junior analysts in reviewing detections and incidents, ensuring they follow best practices for investigation and response., • Threat Analysis: Perform analysis of threats, including malware analysis and network forensics, to uncover malicious activity and enhance detection capabilities. Compensation: The anticipated base salary range for this position is listed below. In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives and a comprehensive benefits package. Anticipated base salary range: $110,000 - $120,000 / year Actual base salary within the anticipated range will be determined by several components including, but not limited to, the individual's experience, skills, qualifications, and market factors. Qualifications Competencies/Security Technologies: • Ability to develop specific proactive procedures for detection of security breaches, • Strong working knowledge of incident response and handling methodologies, • Strong working knowledge in operating systems, networking, MS Active Directory, • Good working knowledge of SaaS-based cloud application security and cloud platforms such as Azure, • Experience in collaborating with system and network administrators to help remediate the impact of identified risks and vulnerabilities at the platform level., • Demonstrate conceptual, analytical and innovative problem-solving skills, • Ability to conduct independent research and analysis in the event of a security breach, • Identify issues, formulate strategy, and proactively remediate security risks, • Ability to draw conclusions and make recommendations based on analysis and findings, • Self-starter who is a team player that embraces collaboration., • Demonstrate knowledge of security controls for network, application and operating systems., • Knowledge and use of the MITRE ATT&CK framework, • Demonstrate interpersonal skills; including the ability to work effectively in a team environment., • Capacity to work independently and willingness to seek advice/assistance from others., • Security Incident Handling and Response and Threat Management, • Encryption/cryptography standards, protocols and best practices, • Strong knowledge on analyzing malicious payloads (malware/spyware), • Strong knowledge on performing email investigation, • In-depth knowledge of various security technologies including:, • IDS/IPS, • EDR/NDR/XDR, • CASB, • Firewalls and next-generation firewalls (NGFW), • Cyber threat intelligence feeds and databases, • Log management systems/SIEM, • Web application firewalls, • Vulnerability scanners and penetration testing tools, • Network security best practices Qualifications: • Experience working in a 24/7 SOC environment, • Bachelor’s Degree in Computer Information Systems, Computer Science, MIS, Engineering or related technical discipline. Equivalent work experience in the Information Technology field will be considered coupled with relevant Cyber Security certifications, • Minimum 3 years of direct information security experience within an Information Technology organization, • Relevant industry certifications preferred, • Blue Team Level I, • Blue Team Level II, • Palo Alto Network Security Professional, • CompTIA Cloud+, • Cisco Certified Network Associate (CCNA), • CompTIA Cybersecurity Analyst (CYSA+), • One or more MITRE ATT&CK Defender certifications preferred but not required (e.g., Cyber Threat Intelligence, SOC Assessment), • Willingness to work outside of regular business hours as required which may include evenings, nights, weekends, holidays., • Excellent time management and organizational skills., • Excellent documentation skills. Hybrid role (Week 1 [3 days onsite] / Week 2 [2 days onsite] / & vice versa) On-call Rotation Required Benefits: • Personalized Health Care: Multiple medical, dental, and vision plan options; Employee Assistance Program, • Financial Benefits: Competitive salary and incentive packages; matching 401(k); FSAs and HSA; employer-paid life and AD&D insurance; paid leave & disability programs, • Social Wellness: 19+ days of PTO; mental health counseling & resources; fertility, surrogacy, and adoption assistance; volunteer days and donation matching, • Career Development: Learning & training programs; tuition & certification reimbursement; internal advancement opportunities #LI-RB1 #TRC #Onsite

In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. Our team is driven by curiosity and a shared belief that Essential Intelli

Job DescriptionJunior Cybersecurity Analyst On-site New York Cit Salary up to $125k plus bonus No Sponsorship Available, No Third-Party Resumes We are seeking a motivated and detail-oriented Junior Cybersecurity Analyst to join our clients security team. In this entry-level role, you will support the monitoring, detection, and response to cybersecurity threats, assist with security operations/projects, and help maintain the organization's security posture. This is an excellent opportunity for someone early in their cybersecurity career to gain hands-on experience working with best-in-class cybersecurity technologies that form the foundation of cybersecurity program and grow under the guidance of experienced professionals. Key Responsibilities • Monitor security alerts and logs from SIEM, endpoint protection, and other security tools, • Assist in identifying, analyzing, and escalating potential security incidents, • Support incident response activities, including investigation and documentation, • Help maintain and update security policies, procedures, and documentation, • Perform basic analysis and remediation of security events reported by end users, • and discovered via various tools – DLP, CASB, SSPM, AI Security, Threat Intelligence., • Support user access reviews and security controls testing, • Assist with the collection of forensic evidence for eDiscovery activities, • Assist with project activities related to Cybersecurity initiatives, • Assist with security awareness initiatives and phishing simulations, • Stay current on emerging threats, vulnerabilities, and security best practices, • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience), • Basic understanding of cybersecurity principles (e.g. incident response, threat detection, operating systems, and vulnerabilities), • Familiarity with common security tools or concepts (SIEM, antivirus, EDR, DLP), • Strong analytical and problem-solving skills, • Passion and acumen for automating Security Operations tasks via AI and other automation technologies, • Attention to detail and ability to follow procedures, • Good written and verbal communication skills, • Foundational experience in cybersecurity or infrastructure, • Familiarity with Windows, and basic networking concepts (TCP/IP, DNS, HTTP), • Exposure to cloud platforms & SaaS Apps ( i.e. Azure), • Entry-level certifications such as Security+, Associate of (ISC)², or equivalent (or willingness to obtain), • Hands-on training and mentorship from experienced security professionals, • Opportunities for career growth and professional development

Job DescriptionSalary: $80K - $95K Media Development Investment Fund (MDIF) is seeking to appoint a full-time highly competent and organized professional for the position of Financial Planning and Grants Analyst in our New York City office. The successful candidate will lead MDIFs financial planning and reporting processes including creation of annual operating budgets, program grant budgets and periodic forecasts, variance reports, and analyses. This position will be responsible for creating plans and communicating financial results to varied audiences, including MDIF management, funders, and Board of Directors. As a member of MDIFs finance team based in MDIF's New York City office, the position will report to the CFO and work collaboratively across MDIFs global organization. Duties include: • Work with program and regional staff to develop budgets and forecasts for all programs, grants, departments, and offices globally., • Oversee the financial reporting of all departments, regions and grants (restricted or unrestricted) and ensure that reporting guidelines are met as stipulated per grant agreements., • Communicate with departments and regional staff regarding a variety of financial matters, including but not limited to budgeting, allocations and reporting., • Maintain restricted and unrestricted grant budget to actual report templates and report balances per grant, monthly or as requested., • Monitor and maintain all active grants and related coding (fund, activity, etc.)., • Submit Budget to Actual reports to Chief Program Officer and program directors quarterly or as needed., • Assist regional offices with the allocation of funds toward fixed costs, • ensure that accurate and appropriate percentages/allocations are maintained, • provide analysis of grant coverage as needed (particularly when drafting proposals), • Review and approve coding for contracts and payment requests related to restricted grants., • Monitor and ensure compliance with internal controls, company policies and procedures., • Maintain Grants Receivable schedule and update unrestricted and temporarily restricted net asset schedules monthly., • Maintain salary allocation spreadsheet., • Coordinate with the development team to reconcile grant revenues to meet all donor requirements and deadlines and to maintain fiscal year allocation of grant revenues., • Provide assessment of financial implications for proposals and new projects., • Review regional offices expense and advance requests., • Manage annual grant audits and support annual statutory audits (i.e. gathering support for payments, preparing financial reports for submission to auditors, reviewing audit drafts and comments, etc.)., • Assist with coordination of cash flow projections and reporting., • Perform ad-hoc financial modelling and reporting requests., • Contribute to an array of cross-disciplinary projects and initiatives, as well as drive continuous improvements in financial processes, systems, tools, and documentation., • Other duties as assigned. Education: Minimum of a bachelors degree in accounting/finance or related professional training in grant reporting. Experience: At least three years of progressively responsible work experience, preferably in FP&A or grants administration; experience with accounting, financial planning and grants-management software and general ledger analysis. Related Skills and Knowledge: • Excellent financial analysis, written and verbal communication skills in English., • Advanced experience and proficiency in Microsoft Excel and PowerPoint required., • Experience and proficiency with Business Intelligence (BI) or Corporate Performance Management (CPM) tools (e.g., Power Pivot, Power BI, Tableau, DataRails, Prophix, Solver, Tagetik, TM1, EssBase) preferred., • Strong organizational abilities with attention to detail in a fast-paced environment is essential., • Experience in a complex multi-entity, multi-national corporation, or not-for-profit preferred., • Ability to work independently and across teams as a global subject matter expert., • Identification with MDIFs mission and a passion for Freedom of the Press. About Media Development Investment Fund: MDIF is a not-for-profit impact investment fund specializing in the media sector, principally in news businesses in countries where the press is not free. We are an organization of 65 people working across the globe. Headquartered in New York with offices in Prague and Belgrade, we have regional representation in countries around the world including Colombia, India, Indonesia, Poland, and South Africa. Since 1995 MDIF has invested $323m in 153 independent media businesses in 48 countries, typically where the independence of journalism cannot be guaranteed and access to information is under threat. Our financing helps independent media companies fulfill their commercial potential while safeguarding their editorial independence. We work with a range of businesses from early-stage ventures to established players seeking to expand audiences or diversify revenues. The companies we partner with often lack access to investment capital, and all companies in our portfolio are committed to the highest standards of independent, quality journalism. Total Compensation includes: Salary Range $80k 95K (commensurate with experience) Paid Time Off / Paid Sick Leave / Paid Personal Days Up to 100% medical and dental benefits for employees and family members Generous employee 401(k) contribution - no match required To Apply: Please send your Resume and Cover letter by Mar 20, 2026. MDIF is an equal opportunity employer. Heavily AI-generated resumes and cover letters are less likely to be reviewed favorably