See more jobs at Latitude, Inc.

Apply for this job

See more jobs at In All Media Inc

Apply for this job

See more jobs at Imperva

Apply for this job

See more jobs at Remote

Apply for this job

Job Description

About you:

You are someone who wants to influence your own development. You’re looking for a company where you have the opportunity to pursue your interests and be able to grow professionally.

You bring to Applaudo the following competencies:

• 7+ years IT security or information security experience with a proven ability to engage with Senior Management and auditors.
• Bachelor’s Degree in a relevant technical field highly recommended.
• 4+ years of hands-on Information Security experience including execution of penetration tests, vulnerability assessments and SOC/Incident Response.
• OSCP (Offensive Security Certified Professional) required.
• OSWE (Offensive Security Web Expert) is a plus.
• Must possess capabilities in one or more of the following vulnerability scanning solutions: Tenable, Rapid7, Qualys.
• Strong written and verbal communication, presentation, and technical writing skills, coupled with a strong interest in further developing CyberSecurity skills.
• Ability and comfort level researching current and emerging issues, including regulations, industry practices, and new technologies.
• Excellent teamwork skills.
• Multi-task with minimum supervision, uphold commitments made.
• Self-learner capable of independent study of new concepts and tools.

You will be accountable for the following responsibilities:

• Perform security testing of corporate assets and cloud infrastructure, analyze issues, and assess the risks associated with identified vulnerabilities, and facilitate remediation activities across the enterprise,
• Coordinate Penetration Testing activities with third party vendors.
• Review and develop Incident Response plan and procedures, IR playbooks, prepare for tabletop exercises.
• Configure and operate the company’s SIEM solution ensuring full logs coverage, developing dedicated dashboards and alerts.
• Support the security incidents investigations and response to ensure 24/7 coverage and operations.
• Support compliance activities primarily achieving SOC 2 compliance.
• Contribute to the creation and delivery of security trainings.
• Take full responsibility for tasks including constantly reviewing your own work to identify and improve your own approach for producing quality work products.
• Complete work in a timely manner and take responsibility for all work outputs.
• Provide feedback to the broader IT team about new or emerging technologies, threats, and relevant solutions.
• Seek, develop, and present ideas to the team.

Qualifications

See more jobs at Applaudo Studios

Apply for this job

See more jobs at Nuspire, LLC

Apply for this job

See more jobs at Thirty Madison

Apply for this job

See more jobs at Torc Robotics

Apply for this job

See more jobs at Databricks

Apply for this job

See more jobs at Torc Robotics

Apply for this job

Job Description

• The Security Analyst assumes a pivotal role within our Security Operations Center (SOC), blending proficient skills in threat monitoring and detection with a readiness to cultivate expertise in incident response. This position offers a prime opportunity for individuals with a solid foundation in cybersecurity to further hone their capabilities within a dynamic and fast-paced environment.
• Guided by seasoned team members and SOC leadership, the Security Analyst actively engages in the vigilant monitoring of security alerts, meticulous analysis of security events, and comprehensive investigation of potential threats to our organization's infrastructure. Their adeptness in identifying and addressing security incidents ensures timely and effective responses to mitigate risks and minimize impacts.
• While possessing a wealth of experience in threat monitoring and detection, the Security Analyst also harbors a strong inclination towards expanding their proficiency in incident response. With a willingness to learn and grow, they actively seek opportunities to enhance their knowledge and skill set in this domain, despite having limited prior experience.
• The Security Analyst uses various tools like SIEM, EDR, and NID systems efficiently. They work with senior engineers to implement necessary tools and features, and rely on predefined playbooks for smoother incident response.
• Conduct thorough analysis of security events to ascertain the root cause, scope of impact, and extent of compromise, collaborating closely with cross-functional teams to gather and correlate information essential for incident response/remediation and potential creation of various vulnerability reports.
• Uphold transparent communication and accountability, reliably completing assigned tasks and contributing to the documentation of security incidents, findings, and remediation activities.

Qualifications

• Maintain a commitment to continuous learning and professional development, staying informed about emerging threats, cybersecurity trends, and best practices to enhance proficiency in security operations and incident response.
• Minimal knowledge about SIEM products (e.g., Splunk, QRadar, Elastic etc) in an endpoint EDR environment (e.g., Microsoft Defender, SentinelOne).
• Utilize a diverse range of security tools and technologies, including SIEM systems, XSOAR tools, EDR solutions, and NID systems, to execute monitoring, analysis, and investigation tasks with precision and efficiency.
• Knowledge of current IT security standards. data protection regulations (e.g. ISO/IEC 27001, MITRE ATT&CK, GDPR [german - DSGVO]) and ITIL methodologies.
• Effective communication skills in English, both written and verbal, enabling collaboration within an international team.
• German knowledge is a plus, but not mandatory.
• At least 2 years of relevant experience. 

Apply for this job

Job Description

QAD is seeking an Application Security Engineer. As an Application Security Engineer, you will contribute to ensuring the security and integrity of our organization's applications and software systems. You will assist in identifying security vulnerabilities, conducting risk assessments, and implementing security measures to protect our applications from potential threats. This role requires familiarity with application security best practices and the ability to collaborate effectively with development teams.

What you’ll do:

• Assist in conducting security assessments and penetration testing of applications.
• Support development teams in code review and analysis for security vulnerabilities.
• Collaborate on integrating security measures into application design.
• Participate in evaluating and recommending security controls for applications.
• Assist in developing and updating threat models, and contribute to mitigation strategies.
• Educate development teams on secure coding practices and stay informed about security threats.
• Support incident response team in investigating and mitigating security incidents.
• Contribute to maintaining documentation on security policies and procedures.
• Assist in generating reports on security assessments and recommendations.
• Work with cross-functional teams to integrate security into the software development lifecycle.
• Collaborate with external security organizations to stay updated on threats and vulnerabilities.
• Maintain automated processes for SCA, DAST, and SAST.

• Integrate security testing tools into CI/CD pipelines for continuous security assessments. (Gitlab, Terraform, AWS Inspector) 

Qualifications

What you'll need:

• A bachelor's degree in a relevant field such as Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 2-3 years of experience in application security with exposure to AWS, GCP, and cloud architectures.
• Strong programming and scripting skills (Java, Python, TypeScript).
• Effective written and verbal communication skills in English.
• Familiarity with common application security vulnerabilities (OWASP Top 10) and remediation techniques.
• Exposure to tools and techniques for vulnerability assessment, penetration testing, and code review, for example: Veracode, Snyk, SonarQube, Burp Suite.
• Knowledge of security standards, frameworks, and compliance requirements (SAML, OIDC, OAuth, Spring Security).
• Good communication and collaboration skills.
• Relevant certifications such as CISSP, CSSLP, or CEH are a plus.

See more jobs at QAD, Inc.

Apply for this job

Job Description

QAD is seeking a Senior Application Security Engineer. As an Application Security Engineer, you will play a critical role in ensuring the security and integrity of our organization's applications and software systems. You will be responsible for identifying and mitigating security vulnerabilities, conducting risk assessments, and implementing robust security measures to safeguard our applications against potential threats. This role requires a deep understanding of application security best practices, emerging threats, and the ability to work collaboratively with development teams to integrate security seamlessly into the software development lifecycle.

What you’ll do:

• Conduct comprehensive security assessments and penetration testing of applications to identify vulnerabilities and risks.
• Collaborate with development teams to review code, offer guidance on secure coding practices, and assist in remediation efforts.
• Work with software architects to integrate security into application design and recommend security controls.
• Develop and maintain threat models for applications, aiding in the creation of mitigation strategies.
• Educate development teams on secure coding practices and stay informed about evolving security threats and best practices.
• Assist in investigating and responding to application-related security incidents, collaborating with the incident response team.
• Create and maintain documentation on application security policies, procedures, and guidelines.
• Generate reports on security assessments and findings.
• Coordinate with cross-functional teams to integrate security into the software development lifecycle.
• Collaborate with external security organizations and researchers to stay updated on emerging threats and vulnerabilities.
• Define secure application architectures for SaaS applications.
• Develop automated processes for SCA, DAST, and SAST.
• Integrate security testing tools into CI/CD pipelines for continuous security assessments.

Qualifications

What you'll need:

• A bachelor's degree in a relevant field such as Computer Science, Information Technology, Cybersecurity, or a related discipline
• 3-5 years of experience in network security with a strong focus on AWS, GCP, and cloud architectures.
• Excellent written and verbal communication skills in English.
• Senior level programming and scripting skills (Java, Python, TypeScript)
• Proven experience in application security, with a strong understanding of secure coding practices.
• In-depth knowledge of common application security vulnerabilities (OWASP Top 10) and the ability to remediate them.
• Experience with tools and techniques for vulnerability assessment, penetration testing, and code review (Veracode, Snyk, SonarQube).
• Familiarity with security standards, frameworks, and compliance requirements (SAML, OIDC, OAuth, Spring Security).
• Excellent communication and collaboration skills.
• Relevant certifications such as CISSP, CSSLP, or CEH are a plus.

See more jobs at QAD, Inc.

Apply for this job

See more jobs at Abarca Health

Apply for this job

See more jobs at Raftelis

Apply for this job

See more jobs at Databricks

Apply for this job

Job Description

We are looking for an Engineer, Network Security to join our growing team. In this role, you will report directly to the Manager, Network Security. This SME role entails safeguarding all networks, including internal, customer-facing, and Telcom networks. You will actively engage in day-to-day security engineering and operations, serving as a technical authority in network security and possessing a deep understanding of security architecture. You will collaborate closely with IT and Network; and also contribute to diverse projects, demonstrating strong interpersonal skills to cultivate inter-organizational relationships. You will have effective management of project activities, including milestones and timelines, is also expected.

The primary functions of the Network Security Team include:

• Design, deploy, configure, and maintain Palo Alto firewalls
• Manage and administer Azure and GCP firewalls
• Conduct regular reviews and audits of firewall configurations
• Design, implement, and maintain DDoS mitigation solutions
• Management of network authentication technologies like RADIUS and TACACS+
• Manage network protection technologies like IDS and Honeypots

This position requires a strong background and understanding of all network and cloud security domains and works in both the Protect and Respond areas of the NIST CSF Framework. You will be required to make strong cyber security decisions while using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also in a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving along the maturity curve. 

As an Engineer, Network Security, your duties and responsibilities will include:

• Design, implement, and lead the comprehensive enterprise cybersecurity network protection programs, leveraging advanced expertise in Palo Alto firewalls
• Conduct thorough reviews and design meticulous firewall rules to ensure strict adherence to corporate security policies
• Design, review, and execute robust network security solutions aimed at safeguarding the integrity of Brightspeed networks
• Serve as the SME of the Network Security team, accountable for ensuring the overall security posture of Brightspeed networks. This includes spearheading device hardening initiatives, monitoring baseline configurations, meeting compliance standards, implementing security best practices, and overseeing remediation efforts.
• Assume ownership of all network protection applications and platforms, overseeing their management, upgrades, configurations, changes, and support
• Collaborate closely with the SOC and incident response teams to effectively resolve network security incidents
• Document, implement, and maintain all network security devices to uphold robust security standards while developing and implementing appropriate strategies for information security policies, standards, and procedures
• Engage proactively in organizational projects as needed, offering valuable insights and specialized expertise in network security domains
• Demonstrate exceptional interpersonal skills, including strong verbal and written communication abilities, enabling effective collaboration with diverse stakeholders
• Oversee the management of the enterprise's Network Security Systems, encompassing Firewalls (including cloud firewalls), DDOS mitigations, RADIUS, and TACACS+ authentication support
  Participate in an on-call rotation to ensure 24/7 coverage of network security operations
• Stay current on emerging cybersecurity threat landscape, vulnerabilities, and trends, and recommend proactive measures to enhance our security posture
• Foster a culture of mentorship by guiding Network Security Analysts and actively participating in knowledge-sharing initiatives

Qualifications

WHAT IT TAKES TO CATCH OUR EYE:

• Bachelor’s degree in Computer Science, Engineering, Cyber Security, or related field
• Demonstrated expertise with firewall management and architecture spanning over 5+ years, with expertise in Palo Alto firewalls
• Extensive background encompassing over 5+ years of hands-on experience in the Network Security field with versatility across various domains of network security
• Proficiency in network security hardening methodologies
• Experience in securing Office 365, Azure AD, and Email is essential
• Proficiency with TACACS+, RADIUS, and DDOS mitigations
• Ability to thrive in a fast-paced environment with multiple competing priorities
• Meticulous attention to detail to ensure adherence to policies and standard procedures
• Proven expertise in implementing security measures within GCP and Azure environments
• Exceptional verbal and written communication skills
• Proficient in TCP/IP routing and switching, as well as network design best practices
• Experience in mitigating DDoS attacks, coupled with proficiency in DDoS attack defense, countermeasures, and packet analysis
• Moderate understanding of BGP, OSPF, Switching topologies, and Cloud networking
• Familiarity with zero-trust architectures is advantageous
• Knowledge of incident response procedures is advantageous
• Scripting experience is beneficial

BONUS POINTS FOR:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)

#LI-SS1

See more jobs at Brightspeed

Apply for this job

Job Description

JOB PURPOSE-

The Sr. Manager, Application Security at Skechers is a key member of our global information security leadership team who will work as a subject matter expert, trusted partner, and ambassador to help protect Skechers critical customer facing and core business applications. We are looking for someone who can help lead our practice; who appreciates that securing applications requires an end to end approach that accounts for the full development, integration, and operations lifecycle.

Skechers’ digital technology strategy demands an individual who is well versed in modern application development and public cloud infrastructure and brings a broad understanding of secure development and information security best practices. The candidate who will find the most success and fulfillment brings a genuine passion for information security, a love for learning, a positive attitude, a desire to roll up their sleeves and dive into the deep end, and a belief that being excellent doesn’t mean you have to give up on having fun. 

ESSENTIAL JOB RESULTS-

• Lead the team and practice responsible for application and cloud security at Skechers
• Remain accountable for the selection and maintenance of tools and technology which :
  • Help protect production applications, e.g. bot mitigation, code injection prevention, WAF, etc.
  • Support application risk assessment, secure code training, code review, etc.
  • Enable cloud security posture management, workload protection, and security monitoring
• Collaborate with various groups in the global technology organization on the development of standards and best practice guidelines and procedures
• Participate in the development of application security training plans and provide input on security awareness and secure coding initiatives
• Proactively identify potential issues at various stages of the SDLC and provide input on issue avoidance
• Work with development, cloud engineering, and devops teams to provide remediation guidance and perform post-remediation validation
• Coordinate and manage periodic application audits and manual penetration tests
• Plan and oversee internal and external security assessments and red team exercises
• Stay up-to-date and informed on changing IT and information security trends
• Create, communicate, and continuously monitor and improve metrics and KPIs
• Manage vendor relationships for both technology and operations
• Collaborate effectively with diverse internal teams to help drive security maturity
• Contribute positively to the culture of information security across the org

ADDITIONAL RESPONSIBILITIES-

• Other duties as assigned.

SUPERVISORY RESPONSIBILITIES-

• Yes

Qualifications

JOB REQUIREMENTS-

• Thorough understanding of common application security vulnerabilities and how to detect and fix them, including OWASP Top 10 and SANS CWE 25
• Significant experience with application security testing including static and dynamic analysis techniques and web app pentesting
• Understanding of general enterprise network and system components and their roles
• Familiarity with web application firewalls (CloudFlare, F5, ModSecurity, etc.)
• Experience with programming and scripting languages such as Java, .NET, Python, Perl, PowerShell, Scala, etc.
• Familiarity with libraries and frameworks such as Akka, Angular, React, Netty, Node.js, Play Framework, etc.
• Strong knowledge of network and application protocols and their associated security implications (TCP/IP, HTTP, TLS, SSH, DNS, etc.)
• Ability to communicate issues effectively to both technical and non-technical audiences
• Excellent written and oral communication skills
• Strong work ethic with attention to detail
• Ability to excel in a fast paced and rapidly changing environment

EDUCATION AND EXPERIENCE-

• 5+ years of experience in an application development and/or information security role
• 5+ years of management experience
• Proven ability to mentor, grow, and develop a team
• Experience programming as part of an enterprise development team a plus
• GIAC, (ISC)2, or Offensive Security Certification a plus

ADDITIONAL QUALIFICATIONS-

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.  The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.

PHYSICAL DEMANDS-

While performing the duties of this job, the employee is regularly required to stand; use hands to finger, handle, or feel, and talk or hear.  The employee frequently is required to walk; sit, reach with hands and arms, and stoop, kneel. The employee is occasionally required to sit for long period of times.  

See more jobs at Skechers

Apply for this job

See more jobs at Synack

Apply for this job