Buscar empleo: 97 ofertas de trabajo de vulnerability management en New York, New York (octubre 2025)

ASCAP

Information Security Analyst (Application Security)

hace 23 días

New York

Job Description About ASCAP The American Society of Composers, Authors and Publishers (ASCAP) is a membership association of more than one million songwriters, composers and music publishers, and represents some of the world’s most talented music creators. Founded and governed by songwriters, composers and publishers, it is the only performing rights organization in the U.S. that operates on a not-for-profit basis. ASCAP licenses a repertory of over 20 million musical works to hundreds of thousands of businesses that use music, including streaming services, cable television, radio and satellite radio and brick and mortar businesses such as retail stores, hotels, clubs, restaurants and bars. ASCAP collects the licensing fees; identifies, matches and processes trillions of performances every year; and returns nearly 90 cents of every dollar back to its members as royalties. The ASCAP blanket license offers an efficient solution for businesses to legally perform ASCAP music while respecting the right of songwriters and composers to be paid fairly. ASCAP puts music creators first, advocating for their rights and the value of music on Capitol Hill, driving innovation that moves the industry forward, building community and providing the resources and support that creators need to succeed in their careers. Learn more and stay in touch at , on X and Instagram @ASCAP and on Facebook. Are you passionate about working with customers? Are you excited to learn new technologies? Would you rather be coding than whiteboarding? If the answer is yes, then you might make a great fit for our team of talented software engineers who work with our business and product teams on high impact projects using emerging technologies and platforms. ASCAP technologists live our mission, we are passionate about what we do for our customers, and we practice what we preach. Our technologists serve with humility and a deep respect for their responsibility in helping our business partners and members achieve their goals and realize their dreams. We stand behind our mission and are committed to delivering the impossible. Bottom line? We outthink ordinary. Discover what you can do with technology at ASCAP! Job Description: Information Security Analyst (Application Security) We are looking for a motivated, detail-oriented individual with strong technical skills. This role’s primary focus is on working to secure in-house built and software as a service integrated applications plus working with management on security strategies and product owners/designers/developers/platform engineers/endpoint engineers to design, develop and implement secure systems, networks, and applications. They will also work with Sr. Security Analysts to investigate and respond to security event alerts, manage technical aspects of incident response, work on third party applications/services reviews and the organizations vulnerability management program. This role requires knowledge of Salesforce security and privacy architecture including Salesforce Shield. This role will assist with the creation of a true SDLC program with DevSecOps for our in-house built applications and work with developers to implement information security best practices ensuring that our code is proactively secured while in the pipeline prior to moving to production. The person in this role will need to prioritize and ensure the timely completion of tasks from the scrum masters and management. They should also be able to shift and adjust priorities based on changing business needs in our dynamic environment, while also remaining task-oriented to ensure completion of work from start to finish with appropriate solutions. Responsibilities: • Configures, manages, and uses security systems, security monitoring and alerting applications, and security management tools., • Works closely with Sr. Security Analysts and Security Platform Engineers to investigate and resolve security related events., • Reviews business partners, new vendors, and products/services for security stature, • Work independently with developers, system/network administrators, product owners, design teams and other colleagues to ensure secure design, development, and implementation of applications and networks - promoting a full SDLC program., • Perform security architecture design reviews of our applications (primarily Salesforce)., • Perform code analysis of large applications manually and conduct manual vulnerability analysis., • Provide remediation guidance and recommendations to developers and administrators., • Work with development teams to help prioritize and validate urgency of mitigation of identified product vulnerabilities and security feature enhancement requests., • Ensure development teams receive pertinent annual secure coding training., • Researches, evaluates, tests, and assists on implementation of new security solutions around DevSecOps and the application pipeline., • Experience supporting security products like CrowdStrike, SecureWorks, Cisco Umbrella, BitLocker, Qualys, CloudLock, SonarQube, Nexus IQ, and Checkpoint., • Cloud security experience with Salesforce Shield and AWS., • Bachelor’s degree in computer science or information security., • Experience investigating and resolving security events., • A keen eye for detail, an analytical thinker, and the ability to multitask., • The ability to thrive in fast-paced, high stress situations., • A problem solver with the ability to communicate effectively with peers, business partners, and management., • Experience working with development teams to build secure solutions., • Experience breaking down complex systems and applications to find flaws., • Able to read, write, and audit Java and the ability to pick up new languages/technologies., • Experience with secure coding practices and architecting secure applications written in Java., • The ability to communicate complicated technical issues and the risks they pose to developers, network engineers, system administrators, and management., • Self-starter, positive attitude, ability to work independently, enjoys learning and staying current with industry developments, regulations, and best practices., • You love our users. You deeply understand our users and put them at the center of everything you do. You aim to serve and delight them every day., • You do the right thing. You are respectful and act with the highest integrity. If you see something that isn’t right, you say something., • You debate it. You ask questions to understand a perspective and are comfortable respectfully challenging assumptions. You are not turned off by constructive conflict to get to the right answer., • You own your outcomes. You set clear ambitious goals. You anticipate obstacles, persevere, and are accountable for your commitments., • You make fast decisions. You are an effective and timely communicator. You understand how to collaborate, compromise, and escalate when needed. Please be aware that ASCAP is not a nut-free or other allergen-free workplace. Compensation/Benefits: Besides providing a unique and dynamic work environment, there are a few other reasons you should consider ASCAP in your career planning. We also offer generous benefit options that are comprehensive and provide the flexibility that most employees want and need. These health care and financial plan options include the following: • A choice of either network-only provider medical and dental plans or more flexible medical and dental plans where you can see providers in or out-of-network, • Vision plan that offers both in and out-of-network provider options, • 401(k) Plan that offers pre-tax, Roth, and an after-tax employee contribution option which includes a company match., • An additional employer paid discretionary profit share contribution, regardless of your participation in the 401(k) Plan, • Generous time-off policy, • 12 company holidays, • Health care and dependent care flexible spending accounts, • Short-term disability insurance/salary continuation and long-term disability insurance, • Company provided basic life and accidental death and dismemberment insurance, • Employee gym discounts at select gyms, • Commuter benefits, • Voluntary pet health insurance, • Voluntary auto and homeowners insurance, • Voluntary employee, spouse, and dependent life insurance options The anticipated base salary range for this position is $100,000.00 to $110,000.00 and will be determined on an individualized basis depending on several factors that are unique to each candidate including geographic location (due to differences in the cost of labor), skills, education and prior relevant experience.

Rokt

Security Engineer

hace 21 días

New York

Job Description We are Rokt, a hyper-growth ecommerce leader. Rokt is the global leader in ecommerce, unlocking real-time relevance in the moment that matters most. Rokt’s AI Brain and ecommerce Network powers billions of transactions connecting hundreds of millions of customers, and is trusted to do this by the world’s leading companies. We are a team of builders helping smart businesses find innovative ways to meet customer needs and generate incremental revenue. Leading companies drive 10-50% of additional revenue—and often all their profits—from the extra products or services they sell. This economic edge unleashes a world of possibilities for growth and innovation. The Rokt engineering team builds best-in-class ecommerce technology that provides personalized and relevant experiences for customers globally and empowers marketers with sophisticated, AI-driven tooling to understand consumers better. Our bespoke platform handles millions of transactions per day. It considers billions of data points which give engineers the opportunity to build technology at scale, collaborate across teams, and gain exposure to a wide range of technology. At Rokt, we practice transparency in career paths and compensation. At Rokt, we believe in transparency, which is why we have a well-defined career ladder with transparent compensation and clear career paths based on competency and ability. Rokt’stars constantly strive to raise the bar, pushing the envelope of what is possible. We are looking for Security Engineer Target Total Compensation: $245,000 - $260,000, including a fixed annual salary of $170,000 - $185,000, employee equity grant, and world-class benefits. Equity grants are issued in good faith, subject to company policies, board approval, and individual eligibility. Rokt is looking for a Security Engineer with a strong foundation in threat intelligence, detection, response, and forensics. In this role, you will be at the forefront of protecting the platform and customer data that are fundamental to maintaining trust and delivering a smarter, faster, and better e-commerce experience. You have a product builder's mindset and will help improve our capabilities to meet the threat of AI-based threats. You will be responsible for providing the core capabilities of our threat management and incident response program. You will develop and maintain tools to provide threat awareness and intelligence, security incident and event management (SIEM), and security automation and response (SOAR), adapting them to address the modern threat of harmful, autonomous, and intelligent AI agents. You will establish an agentic SOC to ensure potential compromises or bad actors in our environment are quickly identified, contained, and eradicated on a 365/7 basis with minimal human effort. By leveraging AI code generation and workflow tools, you will scale threat intelligence gathering and ensure threat catalogues are effectively maintained and appropriate mitigating controls are put in place. Collaboration is central to this position. You will work closely with system and product owners, Legal and Public Relations teams, and the broader Senior Leadership team to ensure our detection and response capabilities are effective across the business. You will translate incident detection and response requirements into practical and scalable solutions and will ensure all key stakeholders are aware of their role and responsibility and appropriately trained to respond to incidents. As a Security Engineer at Rokt, you will pioneer how we use ‘good’ AI to protect against ‘bad’ AI. You will work alongside top-tier developers, platform teams, and governance professionals. This is a high-impact builder role for someone ready to lead the future of application security. Responsibilities • Develop AI-Driven Security Solutions — Design and implement log management capabilities, detection rules and behaviour baselines, security event triage, incident response and forensic workflows, and associated reporting. You will utilize AI workflow tools to provide 365/7 response with consistency., • Automate Threat Assessments — Leverage AI to automate threat intelligence gathering, maintain catalogues of threat actors, tactics, techniques, and procedures as they apply to our business processes and technologies, identify possible mitigations, and ensure we are prepared and ready to respond to incidents., • Subject Matter Expertise —You will provide deep expertise in application security threats, particularly in modern API-based architectures and Kubernetes-based operating environments. You will address security challenges associated with detecting and responding to actors empowered with Large Language Models (LLMs) and Agentic AI., • Collaborate Across Teams — Work closely with system and product owners, Legal and Public Relations teams, and Senior Leadership to ensure incident readiness. Translate complex detection and response requirements into practical and scalable solutions., • Stay Informed on Security Trends — Keep abreast of the latest security trends, threat actors, vulnerabilities, and technologies. Apply this knowledge to improve existing security measures and develop new strategies to protect against emerging threats., • Mentor and Educate — Provide guidance and mentorship to the business on the threat landscape and how that translates to security requirements, including logging guidelines, secure coding and architectural practices, vulnerability remediation, or compliance adherence. Conduct security training and outreach for business teams., • Drive Continuous Improvement — Continuously seek opportunities to improve security processes and tools. Advocate for new technologies and methodologies to enhance the organization's ability to detect, prevent, and respond to security threats effectively., • Be a Force for Good — Uphold our commitment to being a "Force for good" by considering the ethical implications of AI in security and ensuring our protective measures are aligned with our company values and respect for user privacy Requirements About you: • Threat Expertise — Strong understanding of application security threats, particularly in modern API-based architectures, Kubernetes-based operating environments, CI/CD pipelines and newer threats related to LLMs and Agentic AI. Familiar with threat modelling and use of threat catalogues to capture threat actors, tactics, techniques, and procedures., • Detection Expertise — Technical ability to establish user and entity behavioural analysis (UEBA) and rule-based detections to provide security events in a large scale, high log volume environment. Experience with automated event correlation to improve our signal-to-noise ratio and minimise alert fatigue., • Response & Forensics — Experience providing hands-on incident response and forensics to contain and eradicate., • Programming Skills — Desired proficiency in at least one modern programming language such as Go or Python., • Cloud Platforms — Experience with cloud platforms, notably AWS or GCP, and containerized environments. About Rokt’stars: As a mission-driven, hyper-growth community of curious explorers, our ambition is to unlock real-time relevancy in ecommerce and beyond. Our bias for action means we are not afraid to quickly venture into uncharted territories, take risks, or challenge the status quo; in doing so we either win or learn. We work together as one aligned team, never letting egos get in the way of brilliant ideas. We value diversity, transparency, and smart humble people who enjoy building a disruptive business together. We pride ourselves on being a force for good as we make the world better. About The Benefits: We leverage best-in-class technology and market-leading innovation in AI and ML, with all of that being underlined by building and maintaining a fantastic and inclusive culture where people can be their authentic selves, and offering a great list of perks and benefits to go with it: • Become a shareholder. Every Rokt’star gets equity in the company, • Enjoy catered lunch every day and healthy snacks in the office. Plus join the gym on us!, • Access generous retirement plans like a 4% dollar-for-dollar 401K matching plan and get fully funded premium health insurance!, • Dog-friendly office, • Extra leave (bonus annual leave, sabbatical leave etc.), • Work with the greatest talent in town, • See the world! We have offices in New York, Seattle, Sydney, Tokyo and London We believe we’re better together. We love spending time together and are in the office most days (teams are in the office 4 days per week). We at Rokt choose to create a company that is as diverse and inclusive as the world we live in by attracting, growing & keeping the best talent. Equal employment opportunities are available to all applicants without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If this sounds like a role you’d enjoy, apply here, and you’ll hear from our recruiting team.

Trabajos vulnerability management en New York, New YorkCrear alertas

Búsquedas de empleo más populares en New York, New York

Lugares de trabajo vulnerability management más populares