data engineer

software engineer

ai engineer

analyst, cybersecurity

application engineer

cloud security engineer

Copia Automation

<div><div>About Copia

Copia Automation builds the version control and change management platform for industrial automation. Our customers are in oil &amp; gas, manufacturing, and critical infrastructure &mdash; environments where the code running on PLCs, SCADA systems, and HMIs has direct safety implications. We bring modern software engineering practices to operational technology teams that have been underserved by tooling for decades.

We&rsquo;re a well-funded startup growing fast, with enterprise customers deploying Copia across hundreds of facilities. Our headquarters is in New York City.

The Role

We&rsquo;re hiring a Lead Security Engineer to mature Copia&rsquo;s security engineering program. You&rsquo;ll work closely with our CISO and report into engineering leadership.

This is not a siloed role. You&rsquo;ll be the person responsible for detection engineering on Monday, IAM architecture on Tuesday, compliance evidence on Wednesday, and incident response whenever it&rsquo;s needed. We need someone who can context-switch across security domains and knows which problem to prioritize on any given day.

You should be comfortable building a security program, not just operating one someone else designed. If you&rsquo;ve been the first or second security engineer at a startup before, you know exactly what this means.
</div>
<h3 class="jobSectionHeader">What you'll own:</h3><div>
<ul><li>Detection Engineering &amp; Incident Response: Build, tune, and maintain detection pipelines and alerting. Run incident investigations and root-cause analysis. Drive toward full visibility and monitoring coverage across cloud and endpoint assets.</li>
<li>Cloud &amp; Infrastructure Security: Secure our AWS environment &mdash; IAM policies, network segmentation, container security, secrets management. Codify security guardrails in infrastructure-as-code. Review architecture decisions with engineering for security impact.</li>
<li>Enterprise Identity &amp; Cloud Access: Architect and manage identity infrastructure across cloud and SaaS environments &mdash; IdP configuration, SSO/OIDC integration, SCIM provisioning, conditional access policies, and RBAC design. Own the full identity lifecycle from onboarding to offboarding, enforce least-privilege across AWS accounts and SaaS applications, and drive access certification and governance programs.</li>
<li>Security Automation: Automate everything you can &mdash; alert triage, access provisioning, evidence collection, vulnerability management workflows. You&rsquo;re one person covering a lot of ground; automation is how you scale.</li>
</ul></div><h3 class="jobSectionHeader">What we're looking for:</h3><div>

7+ years of experience in security engineering, with hands-on work across multiple security domains. You&rsquo;ve ideally done this at a SaaS company or cloud-native startup where you couldn&rsquo;t hide behind a large team.
<ul>
<li>Strong detection engineering skills &mdash; you&rsquo;ve built and tuned SIEM rules, written detection content, and investigated real alerts, not just monitored dashboards someone else built</li>
<li>Deep understanding of AWS security architecture &mdash; IAM, VPC design, multi-account strategies, and native security services</li>
<li>Proficiency with infrastructure-as-code for security &mdash; codifying policies, guardrails, and configurations rather than clicking through consoles</li>
<li>Experience with identity and access management architecture &mdash; IdP configuration, SSO/OIDC, RBAC design, and access lifecycle automation</li>
<li>Scripting and automation chops in Python, Bash, or PowerShell for security operations, orchestration, and evidence workflows</li>
<li>Clear, direct communication skills &mdash; you can explain a risk to an engineer, write a post-incident report for leadership, and answer a customer security questionnaire without corporate fluff</li>
</ul>
<div>Bonus Points
<ul>
<li>Experience with CrowdStrike Falcon (EDR + LogScale/NG-SIEM) or Datadog Security Monitoring</li>
<li>Terraform expertise, including module development and policy-as-code (OPA, Sentinel)</li>
<li>Familiarity with fleet management tools (FleetDM, osquery, Jamf, or Intune)</li>
<li>Exposure to OT/ICS security concepts, industrial control systems, or critical infrastructure environments</li>
<li>Experience with EU regulatory frameworks &mdash; NIS2, Cyber Resilience Act, IEC 62443</li>
<li>Background in vulnerability management lifecycle &mdash; scanning, triage, remediation tracking, and executive reporting</li>
<li>Experience implementing Zero Trust Network Access (ZTNA) in hybrid cloud/on-prem environments</li>
</ul></div></div><div>Benefits include unlimited PTO, employer-subsidized healthcare through Aetna, commuter benefits, in-office lunches, and more! Full-time, permanent employees also receive generous equity packages.</div>
<h3 class="jobSectionHeader">**This position is hybrid out of our New York City HQ.**</h3><div>

Why Copia
<ul>
<li>Your work has real-world safety impact. Our customers run critical infrastructure. Security here isn&rsquo;t an abstract compliance exercise &mdash; it matters.</li>
<li>You&rsquo;ll build, not just maintain. This is a greenfield opportunity to shape the security program at a company that&rsquo;s scaling fast.</li>
<li>No bureaucracy. You&rsquo;ll work directly with engineering and leadership. Your recommendations get implemented, not lost in committee.</li>
<li>Competitive equity. Full-time permanent employees receive meaningful ownership in a company with significant upside.</li></ul></div></div>

Lead Security Engineer

<div><div>Ro is a direct-to-patient healthcare company with a mission of helping patients achieve their health goals by delivering the easiest, most effective care possible. Ro is the only company to offer nationwide telehealth, labs, and pharmacy services. This is enabled by Ro's vertically integrated platform that helps patients achieve their goals through a convenient, end-to-end healthcare experience spanning from diagnosis, to delivery of medication, to ongoing care. Since 2017, Ro has helped millions of patients in nearly every single county in the United States, including 99% of primary care deserts.</div>
<div></div>
<div>Ro is consistently recognized as a top workplace in Health Care, in New York, and for Women and Parents&mdash;earning more than 20 honors from Fortune, Great Place to Work, and PEOPLE since 2021. In 2025 alone, we ranked top 5 among medium workplaces in Health Care and New York, and top 50 nationwide.</div><div></div><h3 class="jobSectionHeader"> 
The Role</h3>
<div>As a Senior Security Engineer, Enterprise SaaS, you&rsquo;ll serve as Ro&rsquo;s hands-on technical lead and builder for SaaS security posture management (SSPM) and data loss prevention (DLP). You&rsquo;ll define the standards, automation, and monitoring that keep our SaaS platforms secure, compliant, and reliable as the business scales. This role blends architecture with execution: you&rsquo;ll engineer hands-on solutions and automated workflows while guiding how Ro integrates, governs, and secures numerous SaaS services across the enterprise. You&rsquo;ll partner across Security Operations, IT, GRC, and Product Security to shape a unified SaaS security strategy that keeps our people productive and patient data protected.</div>
<h3 class="jobSectionHeader">What You&rsquo;ll Do</h3><ul>
<li>Own the architecture, implementation, and continuous improvement of Ro&rsquo;s SSPM and DLP platforms driving security maturity across our robust SaaS landscape.</li>
<li>Define and evolve SaaS security standards, access models, and configuration baselines that balance control with business agility.</li>
<li>Engineer the SaaS lifecycle: Build scalable SaaS lifecycle automations, ranging from posture monitoring and alerting to end-to-end remediation workflows using Tines or similar orchestration platforms.</li>
<li>Partner across teams to embed SaaS security into identity management, onboarding/offboarding, and vendor risk processes.</li>
<li>Collaborate with Security Operations to investigate SaaS-related alerts, ensuring rapid, documented, and systemic remediation.</li>
<li>Lead the integration of SaaS controls into SIEM and SOAR systems (e.g., Splunk, Tines), ensuring actionable telemetry and streamlined response.</li>
<li>Contribute to compliance alignment, ensuring SSPM and DLP controls satisfy HIPAA,HITRUST and SOC 2 requirements.</li>
<li>Mentor peers and share expertise across Security and IT teams, elevating overall SaaS security awareness and discipline.</li>
</ul><h3 class="jobSectionHeader">What You&rsquo;ll Bring</h3><ul>
<li>5+ years of experience in Security Engineering or Cloud Security roles, with expertise in SaaS ecosystems, automation, and data protection.</li>
<li>Proven success implementing and managing SSPM and DLP technologies such as AppOmni, Obsidian, BetterCloud, Nightfall, Netskope, etc.</li>
<li>A sharp analytical mindset with the ability to ask the right questions to uncover hidden risks, coupled with the judgment to rationalize complex SaaS features against security policies and risk tolerance.</li>
<li>Demonstrated experience integrating SaaS controls into SIEM/SOAR systems and automating detection, response, and reporting.</li>
<li>Working knowledge of data classification, privacy, and governance frameworks relevant to healthcare or regulated industries.</li>
<li>Excellent communication and collaboration skills &mdash; able to influence both technical and executive stakeholders.</li>
<li>A builder&rsquo;s mindset &mdash; practical, automation-oriented, and focused on delivering scalable, measurable outcomes.</li>
<li>Bonus: direct experience supporting HIPAA, HITRUST or SOC 2 compliance, or prior work securing cloud-first healthcare or fintech environments.</li>
</ul><h3 class="jobSectionHeader">We&rsquo;ve Got You Covered</h3><ul>
<li>Full medical, dental, and vision insurance + OneMedical membership</li>
<li>Healthcare and Dependent Care FSA</li>
<li>401(k) with company match</li>
<li>Flexible PTO</li>
<li>Wellbeing + Learning &amp; Growth reimbursements</li>
<li>Paid parental leave + Fertility benefits</li>
<li>Pet insurance</li>
<li>Student loan refinancing</li>
<li>Virtual resources for mindfulness, counseling, and fitness</li>
</ul><div>The target base salary for this position ranges from $153,400 to $186,000, in addition to a competitive equity and benefits package (as applicable). When determining compensation, we analyze and carefully consider several factors, including location, job-related knowledge, skills and experience. These considerations may cause your compensation to vary.</div><div></div><div> 
Ro recognizes the power of in-person collaboration, while supporting the flexibility to work anywhere in the United States. For our Ro&rsquo;ers in the tri-state (NY) area, you will join us at HQ on Tuesdays and Thursdays. For those outside of the tri-state area, you will be able to join in-person collaborations throughout the year (i.e., during team on-sites).</div>
<div></div>
<div>At Ro, we believe that our diverse perspectives are our biggest strengths &mdash; and that embracing them will create real change in healthcare. As an equal opportunity employer, we provide equal opportunity in all aspects of employment, including recruiting, hiring, compensation, training and promotion, termination, and any other terms and conditions of employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, familial status, age, disability and/or any other legally protected classification protected by federal, state, or local law.</div>
<div></div>
<div>Ro is committed to providing reasonable accommodations for qualified individuals with disabilities in our application and interview process. If you require a reasonable accommodation in the application or interview process, please contact us at talent@ro.co.</div>
<div></div>
<div>See our California Privacy Policy here.</div>

We may use automated tools, including artificial intelligence (AI), to assist with parts of our recruiting and hiring process, such as reviewing applications, evaluating resumes, and assessing responses or job-related qualifications. These tools are used to support our recruitment team and do not replace human judgment. Final hiring decisions are made by humans.</div>

Senior Security Engineer, Enterprise SaaS

MERCOR

<div><h2 class="jobSectionHeader">About the Role</h2>
You&rsquo;ll work on security across a platform that processes large volumes of sensitive data, including AI training pipelines, expert payments, and enterprise integrations. This is a hands-on engineering role focused on building and improving the systems that keep Mercor secure.
We use AI heavily in our own security work. You should be comfortable building alongside AI code-gen tools, using LLMs to accelerate threat analysis, and automating away the repetitive work that slows security teams down. If you're the kind of engineer who writes a script instead of filing a ticket, you'll fit in here.
We're in-person five days a week at our San Francisco headquarters, with first Fridays remote. New York could be an option for the right candidate.<h2 class="jobSectionHeader">
What You'll Build:</h2><ul><li>
Detection and response pipelines that catch real threats, not checkbox alerts</li><li>
Security automation that replaces manual processes - if you're doing something twice, automate it</li><li>
Infrastructure hardening across AWS, Kubernetes, and our production environment</li><li>
Identity and access controls for a platform serving 300K+ experts and enterprise clients</li><li>
Application security tooling integrated into CI/CD - shifting security left without slowing down deploys</li><li>
Incident response runbooks and tooling - when something breaks, you'll own the fix end-to-end</li></ul><h2 class="jobSectionHeader">
What We're Looking For</h2><ul><li>
You've built security tooling or automation in a previous role - not just operated existing tools</li><li>
Strong in Python, Go, or TypeScript - you ship code, not slide decks</li><li>
Experience hardening cloud infrastructure (AWS preferred) - VPCs, IAM, container security</li><li>
You understand application security at the code level - can review a PR for auth bugs, not just run a scanner</li><li>
Comfortable with detection engineering - writing rules, tuning alerts, reducing noise</li><li>
You've done incident response and know what it means to be on-call when things break</li><li>
5+ years of professional experience in security engineering, software engineering, or a related builder role</li></ul><h2 class="jobSectionHeader">
Bonus Points</h2><ul><li>
Experience at a high-growth startup or fast-moving engineering org</li><li>
Familiarity with AI/ML security - model access controls, training data protection, prompt injection</li><li>
Offensive security skills - pen testing, bug bounty, red team experience</li><li>
Contributions to open source security tools</li><li>
You've built something from scratch that a team still uses</li></ul><h2 class="jobSectionHeader">
Why Mercor</h2><ul><li>
Build, don't babysit. We automate the boring stuff. You'll spend your time building systems, not reviewing access requests.</li><li>
AI-native security. You'll use frontier AI tools daily - for code review, threat analysis, detection writing, and anything that benefits from an AI co-pilot.</li><li>
Ownership from day one. You'll own meaningful security surface area, not a single dashboard.</li><li>
See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market.</li></ul>
Compensation Range: $130K - $500K</div>

Security Engineer

CVS Health

<div>We&rsquo;re building a world of health around every individual &mdash; shaping a more connected, convenient and compassionate health experience. At CVS Health&reg;, you&rsquo;ll be surrounded by passionate colleagues who care deeply, innovate with purpose, hold ourselves accountable and prioritize safety and quality in everything we do. Join us and be part of something bigger &ndash; helping to simplify health care one person, one family and one community at a time.
Position Summary 
We are seeking a hands-on and highly skilled Senior Secrets Manager Engineer to join our Identity and Access Management (IAM) team. This role will focus on the design, deployment, and operational support of enterprise-grade secrets management platforms&mdash;primarily Akeyless and HashiCorp Vault&mdash;across multi-cloud environments. The ideal candidate will be a subject matter expert (SME) in secrets management, automation, and cloud-native security practices.<ul><li>
Serve as the SME for secrets management platforms such as Akeyless and HashiCorp Vault.</li><li>
Lead the integration of secrets management solutions with CI/CD pipelines, Kubernetes (AKS, GKE), and cloud platforms (Azure, AWS, GCP).</li><li>
Automate the onboarding and rotation of secrets for applications and machine identities.</li><li>
Collaborate with product managers, architects, and application teams to drive adoption and ensure secure implementation.</li><li>
Develop and maintain scripts and automation tools for secrets lifecycle management.</li><li>
Support the migration of non-person accounts from PAM tools to secrets management platforms.</li><li>
Monitor and remediate risks related to unmanaged credentials and privileged access.</li><li>
Contribute to the development of onboarding guides, SDK integrations, and operational runbooks</li></ul> 
Required Qualifications<ul><li>
5+ years of experience in security engineering with a focus on IAM and PAM.</li><li>
3+ years of hands-on experience with Akeyless, HashiCorp Vault, or CyberArk Conjur in production environments</li><li>
3+ years of experience with scripting in Python, Bash, or PowerShell.</li><li>
3+ years of experience in integrating secrets management with Jenkins, GitHub Actions, or similar CI/CD tools.</li></ul> 
Preferred Qualifications<ul><li>
Experience with Kubernetes, container orchestration, and service mesh integrations.</li><li>
Deep understanding of cloud-native architectures and secure DevOps practices.</li><li>
Familiarity with API-based secret access, SDKs, and CLI tools</li><li>
Experience working in large-scale enterprise environments.</li><li>
Exposure to hybrid secrets management strategies involving multiple vaulting solutions (e.g., Azure Key Vault, AWS Secrets Manager)</li><li>
Knowledge of Just-in-Time access, certificate-based authentication (e.g., Venafi), and Zero Knowledge encryption models</li><li>
Familiarity with compliance frameworks and audit requirements for secrets management.</li></ul>
Education<ul><li>
Bachelor&rsquo;s degree or equivalent experience (High School Diploma and 4 years relevant experience)</li></ul>
Anticipated Weekly Hours
40
Time Type
Full time
Pay Range
The typical pay range for this role is:
$83,430.00 - $222,480.00
This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above. 
Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.
Great benefits for great people
We take pride in offering a comprehensive and competitive mix of pay and benefits that reflects our commitment to our colleagues and their families. 
This full‑time position is eligible for a comprehensive benefits package designed to support the physical, emotional, and financial well‑being of colleagues and their families. The benefits for this position include medical, dental, and vision coverage, paid time off, retirement savings options, wellness programs, and other resources, based on eligibility. 
Additional details about available benefits are provided during the application process and on Benefits Moments. 
We anticipate the application window for this opening will close on: 04/17/2026
Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.</div>

Senior Secrets Management Engineer - Akeyless

CrowdStrike

<div>As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn&rsquo;t changed &mdash; we&rsquo;re here to stop breaches, and we&rsquo;ve redefined modern security with the world&rsquo;s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We&rsquo;re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We&rsquo;re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role:
The Falcon Cloud Security (FCS) Detection Engineering team enables CrowdStrike&rsquo;s primary mission of Stopping the Breach, through a shift-left approach that focuses on helping customers of cloud computing manage their risk posture. We do this by writing and maintaining detection rules that assess cloud assets to identify risks and opportunities for improvement. Our team specializes in cloud security posture management (CSPM), analyzing cloud environment configurations and settings across AWS, Azure, and GCP to identify misconfigurations, compliance gaps, and security weaknesses. We start by using research to define best practices for cloud security, which we translate into detection rules we author and deploy as code into the FCS product ecosystem. In addition to posture management, the Detection Engineering team researches threats to cloud services &amp; assets, and writes detection rules to identify abuses and attacks.
What You'll Do:
This role combines a blend of skill sets including security operations &amp; incident response, data analytics, risk management, software development, and threat research. You'll work extensively with cloud posture data&mdash;analyzing configurations like multi-factor authentication settings, access controls, encryption policies, and other security posture indicators to create detection content. If you enjoy researching cloud security issues and developing detection content as code, all in a fast-paced environment with broad collaboration across a team, this role is for you.
As a member of the Falcon Cloud Security Detection Engineering team, you will be responsible for performing research into cloud threats, vulnerabilities, and abuses, to determine configuration best practices that can be used to secure cloud services and assets. You will also be responsible for developing and deploying detection rules as code into the FCS product ecosystem along with writing descriptions that customers will use to understand and action alerts generated by these rules.
Location: New York City (Hybrid) 
Candidate should be comfortable visiting the office twice a week once the development center is established.
What You&rsquo;ll Need:<ul><li>
United States Citizenship OR Permanent Residency is necessary to retain access to resources for this role (NO Clearance necessary)</li><li>
Professional experience in cloud security-related operations and engineering roles, specifically related to threat detection, incident response, and risk management with a focus on cloud security posture management (CSPM, DSPM, or similar).</li><li>
Experience with data analytics, including searching large data sets, correlating attributes, interpreting results, extracting insights, and forming data-driven conclusions.</li><li>
Experience with searching data with analytics tools including Elastic Search, Splunk, or a SIEM.</li><li>
A working practical knowledge of at least one of the following Cloud Service Providers: AWS, Azure, GCP, OCI.</li><li>
A practical understanding of industry security standards and control frameworks such as NIST, CISA, CIS, HIPAA, HISTRUST, PCI and others.</li><li>
Experience developing, deploying, and maintaining code in formalized software development/CICD workflows including the use of BitBucket to manage code deployments.</li><li>
Familiarity with the Agile methodology for project management.</li><li>
Strong engineering skills with proficiency in Python, Go, Java, C#, or JavaScript for developing detection content</li><li>
Ability to author and run Elastic Search queries and interpret results from large data sets.</li><li>
Proficient in the English language with strong written and verbal communication skills.</li><li>
A passion for quality and experience optimizing results.</li></ul>
Bonus Points:<ul><li>
Experience writing detection rules with the Open Policy Agent query language, Rego.</li><li>
Having served in a role focused on Detection Engineering or Cloud Posture/Content Engineering; writing detection rules used by other teams.</li><li>
Experience with cloud security posture management platforms or tools (CSPM, DSPM, ASPM, or similar)</li><li>
Formalized training or certification in cloud computing, including administration, development, engineering, or architecture.</li></ul>
#LI-DR1
#LI-Hybrid
This role will require the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.
Benefits of Working at CrowdStrike:<ul><li>
Market leader in compensation and equity awards</li><li>
Comprehensive physical and mental wellness programs</li><li>
Competitive vacation and holidays for recharge</li><li>
Paid parental and adoption leaves</li><li>
Professional development opportunities for all employees regardless of level or role</li><li>
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections</li><li>
Vibrant office culture with world class amenities</li><li>
Great Place to Work Certified&trade; across the globe</li></ul>
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.
Find out more about your rights as an applicant.
CrowdStrike participates in the E-Verify program.
Notice of E-Verify Participation
Right to Work
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $140,000 - $215,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.
For detailed information about the U.S. benefits package, please click here.</div>

Sr. Engineer - Cloud Posture Detection (Hybrid)

Veracity Software Inc

<div>
 
 Job Title: Information Security Engineer
 
 
 
 
 Duration:
 
 
 12 months, with potential to extend and/or convert
 
 
 
 
 Location: Chandler, AZ / New York, NY / Dallas, TX / San Francisco, CA / Charlotte, NC / Raleigh, NC / Minneapolis, MN / Columbus, OH - Hybrid Role (3 days onsite every week)
 
 
 
 
 Interview:
 
 
 First Round will be onsite in any of the listed locations. If required, a second or third round.
 
 
 
 
 Overview:
 
 
 
 We are seeking an Information Security Engineer to support enterprise IAM platforms, including both vendor solutions such as CyberArk and internally developed IAM applications. This role focuses on operational stability, execution of daily service requests, adherence to SLAs, and full lifecycle management of change requests. The engineer will troubleshoot issues, support integrations, perform hygiene/audit tasks, and participate in on&hyphen;call rotations for critical IAM services.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Provide day&hyphen;to&hyphen;day operational support for IAM platforms including CyberArk and in&hyphen;house IAM applications.
 </li>
 <li>
 Perform BAU activities such as account unlocks/unsuspends, onboarding/offboarding, password rotations, health checks, and access lifecycle tasks.
 </li>
 <li>
 Analyze, create, validate, implement, and close change requests in alignment with established processes.
 </li>
 <li>
 Support requests from IAM integration teams and internal stakeholders.
 </li>
 <li>
 Perform operational hygiene tasks including human/non-human account cleanup, permissions reviews, and audit activities.
 </li>
 <li>
 Troubleshoot incidents, assist in root-cause analysis, and support platform upgrades, patching, and maintenance.
 </li>
 <li>
 Identify and implement automation opportunities using scripting and APIs.
 </li>
 <li>
 Participate in on&hyphen;call rotations to ensure high availability of IAM services. (Mon to Sun 7am to 7pm - once in every 4-6 weeks)
 
 
 </li>
 </ul>
 
 Required Qualifications:
 
 
 
 <ul>
 <li>
 5+ years of experience in Information Security or Identity &amp; Access Management.
 </li>
 <li>
 Hands-on experience with CyberArk or similar privileged access platforms.
 </li>
 <li>
 Experience supporting IAM operational environments with defined SLAs.
 </li>
 <li>
 Ability to manage change requests through full lifecycle (analysis &rarr; build &rarr; validation &rarr; implementation &rarr; closure).
 </li>
 <li>
 Scripting skills (PowerShell, Python, REST APIs).
 </li>
 <li>
 Solid understanding of IAM concepts, access lifecycle processes, and operational security controls.
 
 
 </li>
 </ul>
 
 Preferred Qualifications:
 
 
 
 <ul>
 <li>
 CyberArk certifications (Defender, Sentry, Client) or equivalent IAM solution experience.
 </li>
 <li>
 Experience supporting custom or in-house IAM applications.
 </li>
 <li>
 Familiarity with Active Directory, Windows/Linux administration, and cloud (AWS/Azure) IAM integrations.
 </li>
 </ul>
</div>

Information Security Engineer

Wisetek Providers, Inc

Company Overview Wisetek Providers, Inc. has been a leader in delivering innovative software solutions since 1997, leveraging modern technology tools to meet the evolving needs of the information system industry. With a team of highly skilled professionals, the company is committed to providing cutting-edge services that address complex cybersecurity challenges across various sectors.We have several openings in different cybersecurity roles.Location: Brooklyn, New York (Hybrid - 3 days in-person, 2 days remote)Cyber Security Network EngineerOpen position:1Objective: Work with DC Architect to assess and map the network in all Locations / Environments using existing tools such as SNOW ITOM and app dynamics, and any configuration management database.Scope:<ul><li>Map network elements in all environments and locations - hoteling, OTI, Cloud.</li></ul>Tasks Breakdown:<ul><li>Inventory and asset discovery in ALL locations / Environments</li><li>Identify critical applications and services</li><li>Identify critical infrastructure</li><li>Create network architecture map of sufficient detail</li><li>Identify network traffic and behaviorCyber Security Disaster Recovery (DR) Architecto Design DR solution for the agency for services for all locations / environments (hoteling, cloud, OTI) leveraging existing solutions like Commvault and native Cloud Services solutions.</li></ul>Cyber Security Disaster Recovery (DR) ArchitectScope:<ul><li>Design DR solutions for all locations and environments for critical applications and services.</li></ul>Tasks Breakdown:<ul><li>Data recovery solution that leverages existing tools (combination of hardware and software) for each environment and location.</li><li>Application and workflow recovery solution that leverages existing tools for each environment and location</li><li>Create DR solution security pattern for each location / environment.</li><li>Activation of DR solution</li><li>Test and Validate DR solution(s)</li><li>Cyber Security Disaster Recovery Specialist</li></ul>Tasks &amp; Duties:Objective:<ul><li>Determine RTO and RPO for critical services and applications.</li></ul>Scope:Program area-specific application and data RTO and RPO for disaster recoveryTasks Breakdown:<ul><li>Application Inventory</li><li>Business Impact and Risk analysis</li><li>Work with the development team and business team to determine appropriate RPO and RTO</li><li>Develop recovery strategies</li></ul>Senior Cybersecurity ManagerOpen position:1Objective:o To ensure prompt identification and prioritization of IT/security service disruptions and alerts arising during the DSS Data Center migration from Brooklyn to a hybrid Cloud and NJ DR facility. Security triage in data center migration refers to the process of identifying, assessing, and responding to security incidents and vulnerabilities that arise throughout the various stages of a data center migration project.Scope:Analyze infrastructure Vulnerability service tickets related to the migration project for all new hardware / environments and locations.Tasks Breakdown:<ul><li>Maintain proactive communication with stakeholders including ITS, OTI, DSS Legal Affairs, and NYC Cyber Command.</li><li>Coordinate across legacy, cloud, and DR environments, leveraging knowledge of SIEM (Splunk), EDR (CrowdStrike), and endpoint policy management (Trellix).</li><li>POC for all infrastructure Vulnerability findings found for all locations and environments for the D/C move.</li><li>Coordinate vulnerability remediation for new infrastructure and environments as part of D/C move.</li><li>Create remediation workflows affecting systems and environments related to the DC implementation.</li><li>Maintain structured management and communication for vulnerabilities related to the DC implementation.</li><li>Document resolutions and practices for institutional knowledge and audit.</li></ul>Pay: $85,000.00 - $120,000.00 per yearWork Location: In person

Cybersecurity Engineer

Explore 454+ Cloud security engineer in New York this April. Find roles across top companies and apply now to boost your career.