analyst cybersecurity

T-Mobile

<div>At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That&rsquo;s how we&rsquo;re UNSTOPPABLE for our employees!
Job Overview 
This role provides cybersecurity expertise to ensure compliance with information security standards and regulatory controls across the organization. It involves coordinating with project management, development, network engineering, testing, and support teams to maintain security and privacy. The role differentiates by serving as a liaison among cybersecurity, IT operations, engineering, and management to promote security initiatives. Success is measured by effective implementation and monitoring of security procedures and adherence to regulatory requirements. The work supports organizational security posture and protects customer and enterprise information assets from threats.
Job Responsibilities:<ul><li>
Collaborate with cross-functional teams to develop and test security procedures and regulatory controls ensuring information protection
</li><li>Conduct information security reviews of new technologies, designs, and remediation plans to identify risks and mitigation strategies
</li><li>Serve as liaison among cybersecurity, IT operations, engineering, and management to facilitate adoption of security plans and controls
</li><li>Identify security needs and implement, test, and monitor improvements to enhance information security posture
</li><li>Support the information security policy lifecycle including intake, creation, review, approval, implementation, and communication
</li><li>Contribute to security projects initiated by internal and external groups to advance organizational security objectives
</li><li>Also responsible for other duties/projects as assigned by business management as needed
</li></ul> 
Education and Work Experience:<ul><li>
Bachelor's Degree OR combination of education and experience deemed equivalent (Required)
</li><li>Acceptable areas of study include Computer Science, Information Technology or related field (Preferred)
</li><li>2-4 years Experience in info security technology or related field. (Preferred)</li></ul> 

Knowledge, Skills and Abilities:<ul><li>
Communication (Required)</li><li>
Security (Required)</li></ul> 

Licenses and Certifications:<ul><li>
Certified Information Security Manager (CISM) (Preferred)
</li><li>Certified Information Systems Security Professional (CISSP) (Preferred)
</li><li>Certified Information Systems Auditor (CISA) (Preferred)
</li></ul><ul><li>At least 18 years of age</li><li>
Legally authorized to work in the United States</li></ul> 

Travel: 
Travel Required (Yes/No): No 
 
DOT Regulated: 
DOT Regulated Position (Yes/No): No 
Safety Sensitive Position (Yes/No): No 

Base Pay Range: $73,800 - $133,200
Corporate Bonus Target: 10%
The pay range above is the general base pay range for a successful candidate in the role. The successful candidate&rsquo;s actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay will vary within this range.
At T-Mobile, employees in regular, non-temporary roles are eligible for an annual bonus or periodic sales incentive or bonus, based on their role. Most Corporate employees are eligible for a year-end bonus based on company and/or individual performance and which is set at a percentage of the employee&rsquo;s eligible earnings in the prior year. Certain positions in Customer Care are eligible for monthly bonuses based on individual and/or team performance. To find the pay range for this role based on hiring location, click here.
At T-Mobile, our benefits exemplify the spirit of One Team, Together! A big part of how we care for one another is working to ensure our benefits evolve to meet the needs of our team members. Full and part-time employees have access to the same benefits when eligible. We cover all of the bases, offering medical, dental and vision insurance, a flexible spending account, 401(k), employee stock grants, employee stock purchase plan, paid time off and up to 12 paid holidays - which total about 4 weeks for new full-time employees and about 2.5 weeks for new part-time employees annually - paid parental and family leave, family building benefits, back-up care, enhanced family support, childcare subsidy, tuition assistance, college coaching, short- and long-term disability, voluntary AD&amp;D coverage, voluntary accident coverage, voluntary life insurance, voluntary disability insurance, and voluntary long-term care insurance. We don't stop there - eligible employees can also receive mobile service &amp; home internet discounts, pet insurance, and access to commuter and transit programs! To learn about T-Mobile&rsquo;s amazing benefits, check out www.t-mobilebenefits.com.
Never stop growing! 
As part of the T-Mobile team, you know the Un-carrier doesn&rsquo;t have a corporate ladder&ndash;it&rsquo;s more like a jungle gym of possibilities! We love helping our employees grow in their careers, because it&rsquo;s that shared drive to aim high that drives our business and our culture forward. By applying for this career opportunity, you&rsquo;re living our values while investing in your career growth&ndash;and we applaud it. You&rsquo;re unstoppable! 
 
T-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated. 
 
Talent comes in all forms at the Un-carrier. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing ApplicantAccommodation@t-mobile.com or calling 1-844-873-9500. Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.</div>

Analyst, Cybersecurity

Northeast Power Coordinating Council (NPCC)

<div>
 Under the direction of the Manager, Security Outreach, the Senior Cybersecurity Analyst &ndash; Infrastructure Security &amp; Outreach is responsible for advancing cybersecurity initiatives that protect critical energy infrastructure from evolving threats, while fostering collaboration and information sharing among member organizations, industry partners, and government stakeholders.
 
 
 This role supports the protection of the international, interconnected bulk power system in Northeastern North America by providing leadership, technical expertise, and program management in cyber security with a focus on Operational Technology (OT), Information Technology (IT), and Critical Infrastructure Protection (CIP).
 
 
 The position works closely with NPCC members, NPCC registered entities, the ERO Enterprise, and external partners, including governmental agencies, local, state, federal and provincial law enforcement, and industry stakeholders to enhance information sharing, threat awareness, and security posture across North America.
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Develop and drive the adoption of cybersecurity best practices and standards to mature and sustain IT/OT security risk management capabilities across member organizations.
 </li>
 <li>
 Lead and provide technical and analytical support and coordination of the NPCC Task Force on Infrastructure Security and Technology and its associated working groups activities.
 </li>
 <li>
 Promote collaboration between NPCC, its members/registered entities and industry partners through organizing workshops, briefings, and training programs to enhance cybersecurity awareness, readiness and response capabilities.
 </li>
 <li>
 Lead and support cybersecurity outreach and risk assessment initiatives, including entity assist visits, by researching relevant threats, developing awareness and risk mitigation materials, and engaging stakeholders to enhance overall security awareness and preparedness.
 </li>
 <li>
 Conducting regional risk assessments, analyzing emerging threats and vulnerabilities, supporting incident response coordination, and contributing to the development of security guidelines and frameworks.
 </li>
 <li>
 Strengthen proactive outreach, communications, relationships, and intelligence sharing with key regulatory, law enforcement, and government agencies across Northeastern North America.
 </li>
 <li>
 Monitor and support the NERC Reliability and Security Technical Committee and its subgroups&rsquo; cybersecurity-related activities, as required.
 </li>
 <li>
 Collaborate with the ERO Enterprise, NERC, E-ISAC, and other partners to promote information sharing and risk mitigation.
 </li>
 <li>
 Represent NPCC in the ERO Enterprise, regional and industry security initiatives and engagements, including Grid Security Conference, GridEx and other exercises.
 </li>
 <li>
 Monitor and analyze cyber threat intelligence from sources such as E-ISAC, DHS Cybersecurity and Infrastructure Security Agency (CISA), InfraGard, and other local, state, federal, provincial law enforcement and governmental agencies.
 </li>
 <li>
 Monitor and coordinate communication on relevant critical infrastructure protection industry activities, including CISA, FERC Rulings and Notice of Proposed Rulemakings, to provide prompt notification to NPCC members of emerging issues.
 </li>
 <li>
 Participate on applicable ERO Enterprise collaboration groups and work closely with various program areas within NPCC and with external stakeholders (NERC, FERC, etc.) to support NPCC, ERO Enterprise and industry studies, efforts, and activities.
 </li>
 <li>
 Perform other duties as assigned in support of the Reliability Services Program Areas in accordance with the NPCC Long-term strategy.
 
 
 </li>
 </ul>
 
 Required Qualifications
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Information Systems, Operational Technology, or a related field (or equivalent experience)
 </li>
 <li>
 5-10 years of experience in cybersecurity, infrastructure security, or critical infrastructure environments (electric utility preferred)
 </li>
 <li>
 Experience with IT/OT security, risk management, and/or CIP related activities
 </li>
 <li>
 Strong understanding of cybersecurity principles, threat landscapes, and risk management strategies
 </li>
 <li>
 Excellent communication, analytical, and problem-solving skills
 </li>
 <li>
 Proven ability to develop and deliver training and outreach programs
 
 
 </li>
 </ul>
 
 Preferred Qualifications
 
 
 
 <ul>
 <li>
 Strong knowledge of NERC CIP standards and regulatory frameworks
 </li>
 <li>
 Experience in OT/Industrial Control Systems (ICS) environments
 </li>
 <li>
 Familiarity with cybersecurity frameworks (e.g. NIST, CIS)
 </li>
 <li>
 Experience with cloud environments and secure communications architecture
 </li>
 <li>
 Knowledge of substation networks and protocols (e.g. IEC 61850/GOOSE)
 </li>
 <li>
 Familiarity with Artificial Intelligence Risk Management Framework (NIST AI RMF 1.0) or equivalent
 </li>
 <li>
 Professional certifications such as CISSP, CISM, CISA, or SANS certifications
 </li>
 <li>
 Government or industry security clearance (e.g. DHS or equivalent)
 
 
 </li>
 </ul>
 
 Skills And Abilities
 
 
 
 <ul>
 <li>
 Excellent verbal and written communication skills
 </li>
 <li>
 Excellent interpersonal and conflict resolution skills
 </li>
 <li>
 Excellent organizational skills and attention to detail
 </li>
 <li>
 Strong analytical and problem-solving skills
 </li>
 <li>
 Strong supervisory and leadership skills
 </li>
 <li>
 Ability to work independently and collaboratively in a team environment
 </li>
 <li>
 Self-starter with the ability to manage multiple priorities, multitask effectively, and prioritize work in a fast-paced environment
 </li>
 <li>
 Proficient with Microsoft Office Suite or related software
 
 
 </li>
 </ul>
 Physical Demands
 
 
 <ul>
 <li>
 Ability to sit for long periods of time, ability to communicate verbally, and in writing, and ability to handle long periods of screen time.
 </li>
 <li>
 Ability to work and travel within the U.S. and Canada
 
 
 </li>
 </ul>
 EEOC and Disclaimer
 
 
 NPCC is an Equal Opportunity Employer. Employment, including the decision to hire, promote, discipline or discharge, will be solely based on competence, performance, and business needs. We prohibit discrimination on the basis of the individual&rsquo;s actual or perceived disability, protected veteran status, race, color, sex, age, national origin, religion, sexual orientation, gender, gender identity, gender expression, genetic information, marital status, citizenship, domestic violence victim status, or any other status protected under federal, state or local law.
 
 
 This job description is not intended to be all&ndash;inclusive, and the employee will also perform other reasonably related business duties as assigned by immediate supervisor and other management as required. This job description does not constitute a written or implied contract of employment.
</div>

Senior Cyber Security Analyst

Clearwaters.IT

<div>
 <ul>
 <li>
 This position is contingent upon award ***
 
 
 </li>
 </ul>
 
 Responsibilities:
 
 
 
 <ul>
 <li>
 Proactively monitor, detect, and respond to security threats across networks, systems, and cloud environments
 </li>
 <li>
 Analyze incidents, implement controls, and collaborate across teams to strengthen security posture
 </li>
 <li>
 Perform threat triage, incident investigation, and risk analysis
 </li>
 <li>
 Analyze security alerts/events for IOCs, attack patterns, emerging threats across all environments
 </li>
 <li>
 Correlate data, develop unified views of cyber risk, and enable decision-making
 </li>
 <li>
 Identify vulnerabilities, misconfigurations, and protection gaps; assess business impact
 </li>
 <li>
 Ensure alignment with regulatory and federal security standards (NIST, FISMA)
 </li>
 <li>
 Document findings, trends, and lessons learned
 </li>
 <li>
 Support continuous improvement of security operations
 
 
 </li>
 </ul>
 
 Location:
 
 Hybrid - 3 days onsite Brooklyn, NY, 2 days remote. Candidates must be able to reliably commute to the on-site location. Relocation assistance is not provided.
 
 
 
 Requirements
 
 
 
 
 Applicant must be a U.S. citizen residing in the U.S.
 
 
 
 
 This position requires obtaining a clearance through the Department of Education. Applicants must be willing to undergo a background check as part of the hiring process.
 
 
 
 
 Education:
 
 Bachelor's degree from an accredited university or 5-7 years of relevant experience.
 
 
 
 Experience:
 
 5+ years in cybersecurity (incident detection, response, SOC, cloud/infrastructure security)
 
 
 
 Certifications:
 
 (candidates MUST HAVE obtained at least one)
 
 
 <ul>
 <li>
 CISSP (Certified Information Systems Security Professional)
 </li>
 <li>
 CompTIA Security+
 </li>
 <li>
 CompTIA CySA+
 </li>
 <li>
 CEH (Certified Ethical Hacker)
 </li>
 <li>
 GCIA (GIAC Certified Intrusion Analyst)
 </li>
 <li>
 CISA
 </li>
 <li>
 GCIH
 </li>
 <li>
 CCSP (Certified Cloud Security Professional)
 
 
 </li>
 </ul>
 
 Technical Skills:
 
 
 
 <ul>
 <li>
 SIEM (Devo/Splunk)
 </li>
 <li>
 Vulnerability scanners (Rapid7/Armis)
 </li>
 <li>
 Cloud platforms (AWS/Azure)
 </li>
 <li>
 Wireshar
 </li>
 <li>
 SQL, Python
 </li>
 <li>
 MS Power BI
 </li>
 <li>
 Microsoft Office Suite
 
 
 </li>
 </ul>
 
 Benefits
 
 
 
 <ul>
 <li>
 Health Care Plan (Medical, Dental &amp; Vision)
 </li>
 <li>
 Retirement Plan (401k, IRA)
 </li>
 <li>
 Life Insurance (Basic, Voluntary &amp; AD&amp;D)
 </li>
 <li>
 Paid Time Off (Vacation, Sick &amp; Public Holidays)
 </li>
 <li>
 Training &amp; Development
 </li>
 </ul>
</div>

Cybersecurity Analyst

<div>Director, Cybersecurity Regulatory Engagement (1LOD)

 At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of Director, Cybersecurity Governance, Risk and Controls Regulatory Engagement Lead to join our Cybersecurity team. This role can is in NYC, NY.

Role Summary:

The Director, Cybersecurity Regulatory Engagement (1LOD) is an individual contributor role within Cybersecurity Governance, Risk &amp; Controls (CGRC). Consistent with the First Line of Defense (1LOD) mandate, this role manages and executes cybersecurity regulatory engagement activities contributing to effective risk and control outcomes.

The role supports and contributes to cybersecurity regulatory engagements, including exams, inquiries, remediation activities, new regulatory guidance and regulatory requests, by coordinating inputs, supporting control alignment, and driving disciplined execution. This position reports the Director of Cyber regulatory engagement and plays a critical role in translating regulatory expectations into clear, repeatable, and well-controlled 1LOD execution.

This position requires deep regulatory judgment, and the ability to work directly with cybersecurity leadership, Engineering Controls, and risk partners in a highly regulated environment.

Primary Responsibilities &ndash; 1LOD Alignment

Regulatory Engagement Execution:
<ul>
<li>Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).</li>
<li>Coordinate globally with cybersecurity process owners, control owners, and subject matter experts, to deliver accurate, consistent, and regulator‑ready responses &ndash; additionally, partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.</li>
<li>Reinforce a risk-aware culture through disciplined 1LOD execution.</li>
<li>Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.</li>
<li>Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.</li>
<li>Review, challenge, and approve key regulatory responses to ensure alignment with the firm&rsquo;s cybersecurity posture and risk appetite.</li>
<li>Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.</li>
<li>Prepare executive‑level briefings, materials, and talking points for senior management. Including preparing materials for senior management committees and boards.</li>
<li>Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements</li>
<li>Provide status updates and analysis to cybersecurity leadership.</li>
<li>Provide leadership, coaching, and oversight to supporting team members.</li>
<li>Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.</li>
<li>Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.</li>
<li>Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.</li>
<li>Support the design, implementation, and assessment of controls addressing regulatory expectations.</li>
<li>Contribute to 1LOD risk and control taxonomies.</li>
<li>Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.</li> 
<li>
</li></ul>Regulatory Response Management

Stakeholder Management &amp; Communication

Team Leadership, Process Improvement &amp; Reporting

Risk &amp; Control Alignment:

Required Qualifications:
<ul>
<li>12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.</li>
<li>Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.</li>
<li>Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.</li>
<li>Experience operating in a First Line of Defense (1LOD) role.</li>
<li>Demonstrated ability to operate effectively at senior leadership and executive levels.</li>
<li>Strong understanding of cybersecurity risk management, control frameworks, and regulatory expectations applicable to financial institutions.</li>
<li>Ability to synthesize complex technical and risk topics into clear, defensible regulatory narratives.</li>
<li>Exceptional written and verbal communication skills, with experience engaging regulators and senior executives.</li>
<li>Strong judgment, executive presence, and the ability to influence outcomes without direct authority.</li>
<li>Ability to manage multiple high‑stakes regulatory engagements concurrently under pressure.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $116,000 and $246,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Director, Cybersecurity Regulatory Engagement (1LOD)

Metropolitan Commercial Bank

<div>Come Work With Us:

Metropolitan Commercial Bank (&quot;MCB&quot; or the &quot;Bank&quot;) is a New York City&ndash;based, full-service commercial bank providing tailored banking solutions to businesses, institutions, and individuals. Founded in 1999, MCB operates banking centers in Manhattan and Boro Park, Brooklyn, within New York City, as well as in Great Neck on Long Island, New York, and Lakewood, New Jersey. The Bank recently expanded to Miami, Florida with their newest Brickell banking center.

Metropolitan Commercial Bank offers a comprehensive suite of commercial, business, and personal banking products and services to small businesses, middle-market and corporate enterprises, private and public institutions, municipalities, and local government entities.

The Bank has earned national recognition for its financial performance, innovation, and strategic growth. The Bank was named one of Newsweek's Best Regional Banks in 2024 and 2025. Additionally, MCB recently received Editor's Choice recognition at the Banking Tech Awards USA for Digital Onboarding &amp; Omnichannel Banking and in 2026, the Bank earned Great Place To Work certification and received the Web Award Standard of Excellence for MCBankNY.com.

We are a client-focused organization that values technological innovation and excellence. A strong technical mindset, AI fluency, and adaptive skills are essential for our employees to effectively contribute to our mission and drive our success. We foster human&ndash;AI teaming and strong governance to ensure technology is used responsibly and in alignment with Bank policies and procedures. For more information about the Bank, please visit the Bank's website at MCBankNY.com. 


Position Summary:

Metropolitan Commercial Bank (the &quot;Bank&quot;) is seeking an Applied AI Analyst to support the design, configuration, testing, and monitoring of applied AI, Generative AI, machine learning, and agentic workflow solutions in a highly regulated banking environment. Working under the guidance of AI Scientists and in partnership with engineering, risk, and business teams, this role focuses on internal human-in-the-loop use cases such as AI-assisted loan documentation generation, fraudulent transaction detection models, policy and knowledge copilots, workflow automation, and other productivity solutions. A meaningful portion of the role is dedicated to AI solution intake and delivery support&mdash; learning new business domains, engaging business owners, preparing required documentation, and supporting vendor and risk reviews, so that solutions can be built and deployed under strict control gates and documentation standards aligned to internal and external regulations. The role emphasizes strong documentation, human oversight, privacy-by-design, cybersecurity, and disciplined lifecycle controls aligned to internal and external regulations. The role also emphasizes familiarity with Microsoft Foundry / Foundry Agent Service, approved Microsoft Copilot ecosystems, RAG architectures, and enterprise data platforms such as Snowflake.

Standard 4-day in-office requirement, 1 day remote (of your choosing)

Essential Functions &amp; Responsibilities

Applied AI solution development &amp; analysis:
<ul>
<li>Support AI Scientists in building, configuring, and testing applied AI/GenAI solutions for high-value banking use cases such as credit memo generation, policy/regulatory summarization, knowledge assistants, and internal productivity copilots.</li>
<li>Develop and refine prompts, grounding instructions, structured outputs, evaluation datasets, and Retrieval-Augmented Generation (RAG) pipelines using embeddings, vector search, document chunking, and metadata-driven retrieval.</li>
<li>Prepare and transform structured and unstructured data; assist with API integrations, notebooks, and repeatable workflows that improve quality, traceability, and analyst productivity.</li>
</ul>
Agentic workflow design &amp; orchestration:
<ul>
<li>Assist in designing and testing agentic workflows using approved enterprise platforms and frameworks, including multi-agent patterns, human-in-the-loop approvals, handoffs, and subagent / agents-as-tools designs.</li>
<li>Work with emerging interoperability patterns such as Model Context Protocol (MCP), tool / skill / plugin integration, and Agent-to-Agent (A2A) connectivity under supervision and within approved guardrails.</li>
<li>Document workflow steps, tool schemas, fallback logic, escalation paths, and safe disablement / rollback procedures for agentic and GenAI solutions.</li>
</ul>
Microsoft Foundry, Copilot, and enterprise platform enablement:
<ul>
<li>Support prototyping and evaluation in Microsoft Foundry / Foundry Agent Service and related Microsoft ecosystems (for example, Microsoft 365 Copilot) while partnering with Engineering and Data teams operating on Snowflake and other approved enterprise platforms.</li>
<li>Assist with prompt and agent configuration, retrieval integration, logging, model / tool versioning, and operational runbooks.</li>
</ul>
Evaluation, testing, and monitoring:
<ul>
<li>Create and execute test cases for accuracy, groundedness, hallucination, task completion, retrieval quality, bias/fairness, and basic adversarial or prompt-injection scenarios; escalate issues promptly.</li>
<li>Track KPIs/KRIs, output quality, drift indicators, and user feedback; maintain evidence needed for pilot reviews, production monitoring, and periodic reassessment.</li>
</ul>
AI governance, intake documentation, and cybersecurity/privacy controls:
<ul>
<li>Support AI use-case intake and governance processes by preparing required documentation (e.g., AI intake forms, model/system inventories, change-control artifacts, and audit-ready evidence packs) aligned to MCB's Trustworthy &amp; Responsible AI Principles and internal approval processes.</li>
<li>Learn domain and process context for new use cases by speaking with business owners and control partners; translate requirements into clear problem statements, data needs, user journeys, control gates, and documentation required to comply with internal and external regulations.</li>
<li>Support third-party / AI vendor due diligence by collecting and organizing evidence, reviewing vendor documentation, and helping risk-tier AI vendors and solutions in partnership with Third-Party Risk and Cyber/IT; act as an AI subject matter expert in providing an understanding of AI-specific risks.</li>
<li>Apply privacy-by-design, data minimization, access-control, and secure prompt/data handling practices; follow approved tooling and build standards.</li>
</ul>
Cross-functional partnership and continuous learning:
<ul>
<li>Communicate findings, limitations, and recommendations clearly to AI Scientists, managers, control partners (Model Risk, Compliance/Legal, Cyber/IT, Data Privacy), and business stakeholders; incorporate feedback quickly and accurately.</li>
<li>Contribute to playbooks, standard operating procedures, and reusable templates for prompts, evaluations, agent patterns, and workflow controls.</li>
</ul>
Innovation and best practices:
<ul>
<li>Stay current on practical applied-AI methods&mdash;including RAG, evaluation frameworks, agentic workflow design, MCP, A2A, and Microsoft Foundry capabilities&mdash;and recommend fit-for-purpose uses under established control gates.</li>
<li>Demonstrate sound judgment, curiosity, and willingness to learn from senior AI Scientists while promoting responsible AI, reproducibility, and disciplined execution.</li>
</ul>
Qualifications &amp; Skills:
<ul>
<li>2+ years of work experience.</li>
<li>Bachelor's degree in Computer Science, Data Science, Statistics, Engineering, Information Systems, Mathematics, or a related field is preferred. Relevant internships, apprenticeships, or comparable hands-on AI, analytics, or automation project experience will be considered.</li>
<li>Working knowledge of Python, SQL, notebooks, REST APIs, JSON/YAML, and version control (e.g., Git) for data analysis and AI workflow support.</li>
<li>Understanding of traditional machine learning model development and lifecycle concepts, including model training, data leakage prevention, testing/validation, monitoring, and common performance metrics for classification and regression.</li>
<li>Familiarity with LLM application patterns, including prompt engineering, structured outputs, function/tool calling, Retrieval-Augmented Generation (RAG), embeddings, and vector search.</li>
<li>Familiarity with Microsoft Foundry (including Foundry Agent Service), Microsoft 365 Copilot / Copilot Studio concepts, and approved enterprise data/AI platforms such as Snowflake.</li>
<li>Understanding of agentic workflow concepts such as MCP servers/tools, skills/plugins, subagents or agents-as-tools, handoffs, human-in-the-loop controls, and A2A integration patterns.</li>
<li>Ability to test and evaluate AI outputs for accuracy, groundedness, hallucination, retrieval quality, bias/fairness, and basic security misuse scenarios.</li>
<li>Working knowledge of model and data governance concepts, including documentation, monitoring, change control, inventories, audit trails, and three-lines-of-defense oversight in a regulated environment.</li>
<li>Strong written and verbal communication skills; ability to turn technical findings into clear summaries, test evidence, and action items for business and risk stakeholders.</li>
<li>Analytical, organized, and adaptable mindset; ability to learn quickly, manage multiple workstreams, and balance innovation with risk discipline.</li>
</ul>
Preferred Qualifications &amp; Skills
<ul>
<li>Financial services exposure in fraud, AML/KYC/CDD/EDD, underwriting, commercial banking, treasury, policy governance, or contact center analytics.</li>
<li>Hands-on experience with Microsoft Foundry / Foundry Agent Service, Azure AI Search or equivalent retrieval tooling, M365 Copilot / Copilot Studio, Snowflake, or similar enterprise AI platforms is a plus.</li>
<li>Experience with RAG architectures, vector databases / vector search, document chunking, metadata extraction, OCR/document understanding, and prompt engineering.</li>
<li>Exposure to agentic workflow patterns such as MCP tool integration, skills/plugins, handoffs, subagents, A2A, and evaluation frameworks for task completion and tool-call quality.</li>
<li>Familiarity with LangChain, Semantic Kernel, LangGraph, Microsoft Agent Framework, or similar orchestration libraries/frameworks is a plus.</li>
<li>Awareness of external regulations including SR 11-7, SR 23-4, AI use-case intake / inventory processes, privacy, cybersecurity, and third-party risk expectations in a regulated environment.</li>
<li>Ability to work in a constantly evolving environment.</li>
<li>Must have excellent written and verbal communication skills.</li>
<li>Demonstrate analytical, troubleshooting, and problem-solving skills.</li>
<li>The ability to learn new technologies quickly.</li>
<li>Self-directed individual with strong organizational and communication skills.</li>
<li>Ability to synthesize multiple sources of information with an understanding of the bigger picture needs and operations of the Bank.</li>
<li>Collaborative team player who can find practical solutions in a dynamic work environment.</li>
<li>Ability to handle ambiguity, manage multiple tasks at once, and shift effectively between priorities.</li></ul> 


Potential Salary: $120,000 - $150,000 annually

This salary range reflects base wages and does not include benefits, bonus, or incentive pay. Salary bands are purposefully wide ranging to encompass the different factors considered in determining where a candidate falls in the range, including but not limited to, seniority, performance, experience, education, and any other legitimate, non-discriminatory factor permitted by law. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed here.

Metropolitan Commercial Bank provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.</div>

Applied AI Analyst

Xbow

<div><h2 class="jobSectionHeader">About XBOW</h2>
At XBOW, we&rsquo;re redefining the future of cybersecurity by building the world's first autonomous pentester, powered by AI. Today, the gold standard for securing software systems is human pentesters, but with the rise of artificial intelligence, we&rsquo;re stepping up to scale offensive security to meet the ever-growing demand.
AI is transforming the landscape of both cybersecurity and cyberattacks. While millions of people without security expertise are creating software, bad actors are using AI to launch more effective attacks. XBOW fights back with AI-driven superpowers, enabling security teams to stay one step ahead.
Backed by Sequoia Capital and Altimeter, and a team that includes the creators of GitHub Copilot and GitHub Advanced Security, XBOW is not just keeping up with the times&mdash;we&rsquo;re shaping the future of cybersecurity. Our mission is simple: to defeat the bad actors before they strike, using AI to revolutionize how we approach offensive security.
We&rsquo;re building something that must be built, and we&rsquo;re the team to do it. Join us in shaping the next frontier of autonomous security.<h2 class="jobSectionHeader">
Your Role: Manager, Business Development</h2>
We&rsquo;re looking for an experienced and hands-on Manager, Business Development to lead and scale our AMER BDR function at XBOW. This is a foundational leadership role within our business development organization&mdash;you&rsquo;ll be responsible for building the outbound engine, developing top-performing BDRs, and partnering closely with Sales and Marketing to drive predictable, high-quality pipeline.
You&rsquo;ll join early, with significant ownership over strategy, process, and people. This role is ideal for someone who thrives in ambiguity, enjoys coaching and developing talent, and wants to leave a lasting mark on how a category-defining company goes to market.<h2 class="jobSectionHeader">
What You'll Do</h2><ul><li>
Build and lead the BDR team: hire, onboard, coach, and develop high-performing BDRs as we scale.</li><li>
Own pipeline generation for the sales organization, ensuring consistent, high-quality outbound contribution.</li><li>
Define and refine outbound strategy, including ICPs, segmentation, messaging, and campaign design.</li><li>
Partner closely with Sales Leadership, Account Executives, and Marketing to align on targets, priorities, and GTM motions.</li><li>
Establish and continuously improve processes, metrics, and tooling (e.g. CRM hygiene, activity benchmarks, conversion rates).</li><li>
Provide ongoing coaching and feedback, including call reviews, messaging refinement, and deal support.</li><li>
Stay close to the field&mdash;jump into prospecting, experimentation, and deal support when needed.</li><li>
Translate learnings from the BDR team into actionable insights for positioning, messaging, and GTM strategy.</li><li>
Create a strong team culture centered on curiosity, accountability, and continuous improvement.</li></ul><h2 class="jobSectionHeader">
Who You Are</h2><ul><li>
A proven sales development leader with a minimum of 2 years experience managing and scaling BDR/SDR teams.</li><li>
Located in Arlington, VA or D.C. Metro area, and willing to commute to an office to best build the teams capabilities and culture</li><li>
Comfortable operating in early-stage, fast-moving environments where structure is built&mdash;not inherited.</li><li>
A strong coach who enjoys developing talent and helping individuals exceed their potential.</li><li>
Highly organized and data-driven, with a strong understanding of outbound metrics and funnel performance.</li><li>
Confident engaging with technical buyers and helping your team build credibility with engineering and security stakeholders.</li><li>
Collaborative by nature, with the ability to influence cross-functional partners.</li><li>
Persistent, resilient, and motivated by building something from the ground up.</li></ul><h2 class="jobSectionHeader">
Bonus if you have:</h2><ul><li>
Experience in B2B SaaS, especially developer tools, security, DevOps, or infrastructure products.</li><li>
Previous experience building a BDR function at an early-stage startup.</li><li>
Familiarity with tools like Salesforce, Apollo.io, Outreach, LinkedIn Sales Navigator, or similar platforms.</li><li>
An interest in cybersecurity, AI, and emerging technology trends.</li></ul><h2 class="jobSectionHeader">
What We Offer</h2><ul><li>
Compensation &amp; Equity: Competitive salary, clear performance-based incentives, and equity package, making you an integral part of XBOW&rsquo;s growth story.</li><li>
Career Growth: Significant opportunities to progress within the sales organization and shape your career trajectory as we scale.</li><li>
Meaningful Work: You&rsquo;ll directly impact XBOW&rsquo;s mission to revolutionize cybersecurity and protect organizations worldwide.</li></ul><h2 class="jobSectionHeader">
What Else You Should Know</h2><ul><li>
Location: Arlington, VA / D.C. Metro (Hybrid - In-office 3-5 times a week)</li><li>
Contract: Full-time</li><li>
Hiring Process:<ul><li>
Introduction with TA screen</li><li>
Interview with Hiring Manager</li><li>
Interview with Sales Leadership</li><li>
Final Interview with CRO</li></ul></li></ul>
At XBOW, we leverage AI every day, it's embedded in our product and our sales approach. But for this role, we&rsquo;re seeking someone who brings genuine curiosity, empathy, and persistence. If that's you, we'd love to connect.
Compensation Range: $150K - $200K</div>

Manager, Business Development (AMER)

Wisetek Providers, Inc

Company Overview Wisetek Providers, Inc. has been a leader in delivering innovative software solutions since 1997, leveraging modern technology tools to meet the evolving needs of the information system industry. With a team of highly skilled professionals, the company is committed to providing cutting-edge services that address complex cybersecurity challenges across various sectors.We have several openings in different cybersecurity roles.Location: Brooklyn, New York (Hybrid - 3 days in-person, 2 days remote)Cyber Security Network EngineerOpen position:1Objective: Work with DC Architect to assess and map the network in all Locations / Environments using existing tools such as SNOW ITOM and app dynamics, and any configuration management database.Scope:<ul><li>Map network elements in all environments and locations - hoteling, OTI, Cloud.</li></ul>Tasks Breakdown:<ul><li>Inventory and asset discovery in ALL locations / Environments</li><li>Identify critical applications and services</li><li>Identify critical infrastructure</li><li>Create network architecture map of sufficient detail</li><li>Identify network traffic and behaviorCyber Security Disaster Recovery (DR) Architecto Design DR solution for the agency for services for all locations / environments (hoteling, cloud, OTI) leveraging existing solutions like Commvault and native Cloud Services solutions.</li></ul>Cyber Security Disaster Recovery (DR) ArchitectScope:<ul><li>Design DR solutions for all locations and environments for critical applications and services.</li></ul>Tasks Breakdown:<ul><li>Data recovery solution that leverages existing tools (combination of hardware and software) for each environment and location.</li><li>Application and workflow recovery solution that leverages existing tools for each environment and location</li><li>Create DR solution security pattern for each location / environment.</li><li>Activation of DR solution</li><li>Test and Validate DR solution(s)</li><li>Cyber Security Disaster Recovery Specialist</li></ul>Tasks &amp; Duties:Objective:<ul><li>Determine RTO and RPO for critical services and applications.</li></ul>Scope:Program area-specific application and data RTO and RPO for disaster recoveryTasks Breakdown:<ul><li>Application Inventory</li><li>Business Impact and Risk analysis</li><li>Work with the development team and business team to determine appropriate RPO and RTO</li><li>Develop recovery strategies</li></ul>Senior Cybersecurity ManagerOpen position:1Objective:o To ensure prompt identification and prioritization of IT/security service disruptions and alerts arising during the DSS Data Center migration from Brooklyn to a hybrid Cloud and NJ DR facility. Security triage in data center migration refers to the process of identifying, assessing, and responding to security incidents and vulnerabilities that arise throughout the various stages of a data center migration project.Scope:Analyze infrastructure Vulnerability service tickets related to the migration project for all new hardware / environments and locations.Tasks Breakdown:<ul><li>Maintain proactive communication with stakeholders including ITS, OTI, DSS Legal Affairs, and NYC Cyber Command.</li><li>Coordinate across legacy, cloud, and DR environments, leveraging knowledge of SIEM (Splunk), EDR (CrowdStrike), and endpoint policy management (Trellix).</li><li>POC for all infrastructure Vulnerability findings found for all locations and environments for the D/C move.</li><li>Coordinate vulnerability remediation for new infrastructure and environments as part of D/C move.</li><li>Create remediation workflows affecting systems and environments related to the DC implementation.</li><li>Maintain structured management and communication for vulnerabilities related to the DC implementation.</li><li>Document resolutions and practices for institutional knowledge and audit.</li></ul>Pay: $85,000.00 - $120,000.00 per yearWork Location: In person

Cybersecurity Engineer

Explore 174+ Analyst cybersecurity in New York this April. Find roles across top companies and apply now to boost your career.