information security associate

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 
 
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
 
 
 Today&rsquo;s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 1,100 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.
 
 
 Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.
 
 
 
 The opportunity
 
 
 
 To create opportunity for people starting their careers in this area of technology, we are launching an intensive paid learning program that invests in our new joiners to upskill with the latest learnings. This unique opportunity provides paid virtual, classroom and exercise-based learning in key areas of technology, communication and collaboration. Distinct technical learning paths focused on high demand areas Information Security culminate in graduation to a role where applied practice begins.
 
 
 
 What qualifications are required for this opportunity?
 
 
 
 <ul>
 <li>
 Advanced level English (verbal and written)
 </li>
 <li>
 Love for learning and applying technology.
 </li>
 <li>
 Passion for finding and solving problems.
 </li>
 <li>
 Dedication to protect our data, our client&rsquo;s data, and the infrastructure it resides on
 </li>
 <li>
 Enjoyment working as a member of a local team that is part of a larger global team.
 </li>
 <li>
 Desire to eliminate needless toil and make the world a better place.
 </li>
 <li>
 Purpose driven, self-motivated and goal oriented.
 
 
 </li>
 </ul>
 
 What else could you bring?
 
 
 
 <ul>
 <li>
 Experience with a scripting or programming language.
 </li>
 <li>
 Knowledge of automation and continuous integration tools
 </li>
 <li>
 Familiarity with Information Security concepts
 </li>
 <li>
 Knowledge about the importance of vulnerability management
 </li>
 <li>
 Experience with various operating systems such as Windows and Linux
 </li>
 <li>
 Desire to connect with globally diverse people
 </li>
 <li>
 Energized by challenges and fast paced tempo
 
 
 </li>
 </ul>
 
 Why you might like working here:
 
 
 
 <ul>
 <li>
 Our culture encourages autonomy and fun. Happy people make it happen!
 </li>
 <li>
 We invest in you. Learning supported by a coach culminates in an exciting placement on a team.
 </li>
 <li>
 Build your skills and experience at a world class technology company as a member of a global team.
 </li>
 <li>
 A wide variety of career paths with easy access to change roles and/or progress your career.
 </li>
 <li>
 Develop non-technical skills including communication, agile ways of working, cultural &amp; emotional intelligence, customer service, time management, leadership, design &amp; documentation and more.
 </li>
 <li>
 Social events like hackathons, team lunches, holiday parties, community volunteering and more.
 </li>
 <li>
 Being part of an organization where our purpose of Building a better working world is the foundation of our culture.
 
 
 </li>
 </ul>
 
 What We Look For
 
 
 
 We&rsquo;re looking for someone who can collaborate globally with different regions and cultures with an open mind and a creative approach. Critical thinking and problem-solving skills are vital traits to be successful. An individual with strong customer service and communication skills who will share their thoughts and ideas in a safe working environment. A highly motivated, diligent, and driven individual who seeks development and improvement opportunities and deliver quality services
 
 
 
 What We Offer You
 
 
 
 The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 
 
 <ul>
 <li>
 We offer a comprehensive compensation and benefits package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $60,400 to $109,600. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $72,500 to $124,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
 </li>
 <li>
 Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
 </li>
 <li>
 Under our flexible vacation policy, you&rsquo;ll decide how much vacation time you need based on your own personal circumstances. You&rsquo;ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
 
 
 </li>
 </ul>
 
 Are you ready to shape your future with confidence? Apply today.
 
 
 
 EY accepts applications for this position on an on-going basis.
 
 
 For those living in California, please click here for additional information.
 
 
 EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
 
 
 
 EY | Building a better working world
 
 
 
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 
 
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 
 
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
 
 
 EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
 
 
 EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY&rsquo;s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
</div>

Information Security Associate - STS

Santander Consumer Bank

<div><div><div><h1 class="jobSectionHeader">Associate, Information Security</h1>
New York, New York<div><div>
</div></div><div><div><div>Job ID</div>
<div>Req1563874</div>
</div><div><div>Category</div>
<div>Technology Risk &amp; Cybersecurity</div>
</div><div><div>Date posted</div>
<div>04/11/2026</div>
</div></div></div><div><div>It Starts Here:
Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what&rsquo;s possible. This is more than a strategic shift. It&rsquo;s a chance for driven professionals to grow, learn, and make a real difference.
If you are interested in exploring the possibilities We Want to Talk to You!
The Difference You Make:
Santander is seeking an Associate, Information Security professional to join the Information Security team within the First Line of Defense. This role is primarily focused on Vulnerability Management, with exposure to Network Security as a secondary or &ldquo;nice to have&rdquo; capability. The ideal candidate is a cybersecurity professional who can support, monitor, and help maintain information security controls across on-premises and cloud environments.
As an Associate, you will:<ul><li>
Protect the Company, customers, and employees by identifying and mitigating technology threats to Santander</li><li>
Support and strengthen Santander&rsquo;s vulnerability management program through scanning, analysis, prioritization, and remediation tracking</li><li>
Help identify security risks, configuration gaps, and control weaknesses across infrastructure, applications, and cloud services</li><li>
Partner with technology and business teams to drive timely remediation and improve security posture</li><li>
Gain exposure to regulatory expectations and enterprise security operations</li><li>
Build a strong foundation in cyber risk management, with optional growth into network security disciplines.</li></ul>
What You Bring:
The role will report directly to the Director of Information Security and functionally to the Santander US Tower Head of Infrastructure Security Services. The Associate Information Security professional will work closely with multiple technology, application, and business teams across the Santander ecosystem to help advise on secure design and implementation of solutions.
Under the guidance of senior security leaders, this role supports the integration of security controls into new and existing systems while ensuring alignment with Santander&rsquo;s information security policies, standards, and regulatory expectations. The role also supports process improvement and automation initiatives, including the use of scripting and prompt engineering techniques to help streamline repetitive audit, risk, and security-related tasks within the Information Security function.
Primary Focus: Vulnerability Management<ul><li>
Create vulnerability scanning schedules and perform scans on a periodic and ad hoc basis to identify vulnerabilities</li><li>
Conduct vulnerability assessments on IT infrastructure, applications, and related information assets</li><li>
Support the operation and governance of the vulnerability management lifecycle</li><li>
Analyze and prioritize vulnerabilities using the Common Vulnerability Scoring System (CVSS), threat intelligence, exploitability, and business context</li><li>
Identify gaps and risks and drive remediation through closure within established timeframes</li><li>
Partner with infrastructure, application, cloud, and business teams to validate findings and support remediation planning</li><li>
Track remediation progress, escalate aging issues, and support risk acceptance processes when needed</li><li>
Establish, track, and report key vulnerability management metrics (e.g., scan coverage, SLA adherence, critical vulnerability aging)</li><li>
Participate in change request reviews assessing security risk and recommend solutions</li><li>
Perform risk assessments and/or control gap analysis against Information Security Policies and Standards</li></ul>
Broader Information Security Responsibilities:<ul><li>
Collaborate with technology teams to advise on secure implementation of solutions across the Santander environment</li><li>
Provide security input during solution design and change activities, ensuring controls are embedded early in the delivery lifecycle</li><li>
Translate information security requirements into practical, business-aligned guidance for partner teams</li><li>
Support automation of repetitive security and audit-related tasks using scripting tools and prompt engineering techniques</li><li>
Implement book-of-work projects and initiatives within scope, on time, and within budget</li><li>
Establish and maintain appropriate governance forums and escalation paths</li><li>
Manage and monitor technology, audit, and regulatory risk through governance, oversight, reporting, and training initiatives</li><li>
Partner with examiners and auditors on technology examinations, gathering information and responding to findings</li><li>
Bachelor's Degree or equivalent work experience: Computer Science or equivalent field. - Required.</li><li>
5+ Years Experience in information security, governance, IT audit, or risk management. - Required.</li><li>
5+ Years SAS experience. - Required.</li><li>
Understanding of regulatory expectations related to technology and cyber risk (e.g., OCC, FFIEC, DORA, SOX, NYS DFS).</li><li>
Experience with cyber security and information security program management and frameworks (e.g., NIST CSF, ISO/IEC 27000, etc.).</li><li>
Working knowledge of security systems or tools such as Qualys, AlgoSec, Microsoft SCCM, Ansible, Red Hat Satellite, ServiceNow (SNOW), CMDB, etc.</li><li>
Proven ability to work in a team environment.</li><li>
Possess the ability to perform under pressure in a challenging environment.</li><li>
A hunger to learn and take on challenging opportunities, contributing to the success of the information security team.</li><li>
Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple tasks and projects.</li><li>
Must take ownership, demonstrate a sense of urgency, and ensure accuracy and quality.</li></ul>
Certifications:<ul><li>
CompTIA Security+, CompTIA Network+, CISSP</li></ul>
It Would Be Nice For You To Have:
Experience in the following areas is considered a plus:<ul><li>
Support oversight of Network Security controls, including firewalls, proxy, Intrusion Prevention Systems (IPS), VPN, Web Application Firewall (WAF), and Network Access Control (NAC), across on-premises and cloud environments</li><li>
Conduct periodic reviews of firewall, proxy, and VPN configurations in accordance with Santander US standards and processes</li><li>
Review firewall configurations to ensure inbound and outbound traffic is limited to what is necessary for business purposes, and that all other traffic is explicitly denied and logged</li><li>
Familiarity with network segmentation, access control principles, and secure rule lifecycle management</li></ul>
What Else You Need To Know:
The base pay range for this position is posted below and represents the annualized salary range. For hourly positions (non-exempt), the annual range is based on a 40-hour work week. The exact compensation may vary based on skills, experience, training, licensure and certifications and location.
Base Pay Range:
Minimum:
$125,000.00 USD<div><div><div><div><div><div><div>
Maximum:</div></div></div></div></div></div></div>
$165,000.00 USD
We Value Your Impact:
Your contribution matters and it&rsquo;s recognized. You can expect a fair and competitive rewards package that reflects the impact you create and the value you deliver. We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future. Santander Benefits - 2026 Santander OnGoing/NH eGuide (foleon.com)
Risk Culture:
We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
EEO Statement:
At Santander, we value and respect differences in our workforce. We actively encourage everyone to. Santander is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetics, disability, age, veteran status or any other characteristic protected by law. 
 
Working Conditions:
Frequent minimal physical effort such as sitting, standing and walking is required for this role. Depending on location, occasional moving and lifting light equipment and/or furniture may be required. 
 
Employer Rights:
This job description does not list all of the job duties of the job. You may be asked by your supervisors or managers to perform other duties. You may be evaluated in part based upon your performance of the tasks listed in this job description. The employer has the right to revise this job description at any time. This job description is not a contract for employment and either you or the employer may terminate your employment at any time for any reason.
What To Do Next:
If this sounds like a role you are interested in, then please.
We are committed to providing an inclusive and accessible application process for all candidates. If you require any assistance or accommodation due to a disability or any other reason, please contact us at TAOps@santander.us to discuss your needs.</div></div></div></div>

Associate, Information Security

Vanguard

<div><div>Provides administrative support to a department, operating under direct supervision.</div><div>
Support a Senior Leader. Be the Connector. Grow Your Career.
Are you energized by fast‑paced environments, relationships, and learning how a large organization really works? Do you thrive when trusted with responsibility and given room to grow?
We&rsquo;re looking for an Administrative Associate to support the Global Head of Identity and Access Management at Vanguard. This is an ideal entry‑level opportunity for someone who brings curiosity, professionalism, and a positive mindset&mdash;and is ready to scale quickly with the right support.<div></div>
 Why This Role Is Special
This isn&rsquo;t just calendar management.
In this role, you&rsquo;ll be at the center of how work gets done, partnering closely with a senior leader and connecting with hundreds of people across the organization. You&rsquo;ll learn how the enterprise functions, who the key players are, and how to navigate priorities at a senior level&mdash;skills that will serve you throughout your career.
 What You&rsquo;ll Do
<ul><li>Manage a dynamic, high‑visibility calendar for a senior leader</li><li>
Coordinate meetings with partners across the organization, including executive‑level participants</li><li>
Learn how Vanguard works&mdash;and quickly figure out who&rsquo;s who, what matters most, and how to get things done</li><li>
Serve as a trusted, approachable point of contact for leaders and team members across the crew</li><li>
Build strong relationships and communicate with confidence and discretion</li><li>
Help surface themes, feedback, and insights you hear across the organization in a thoughtful, professional way</li><li>
Grow your responsibilities and impact as trust and confidence build</li></ul><div></div>
✅ What We&rsquo;re Looking For
<ul><li>Strong learning agility&mdash;you pick things up fast and aren&rsquo;t afraid to ask questions</li><li>
A people‑first mindset: approachable, engaging, and collaborative</li><li>
The drive to figure things out, take ownership, and bring great energy to everything you do.</li><li>
A positive, professional, and enthusiastic attitude</li><li>
Clear written and verbal communication skills</li><li>
Solid organizational skills and attention to detail</li><li>
Comfort working with calendars, meetings, and deadlines</li><li>
Good judgment and discretion&mdash;you know what to escalate and what to keep confidential</li></ul><div></div>
➕ Nice to Have
<ul><li>Prior administrative, coordinator, or scheduling experience</li><li>
Exposure to a large organization or enterprise environment</li><li>
Experience supporting multiple stakeholders or leaders</li><li>
Familiarity with corporate tools (Outlook, Teams, etc.)</li></ul><div></div>
 Growth &amp; Development
You&rsquo;ll be supported, coached, and encouraged to grow&mdash;whether that means deepening your administrative expertise or mapping your career journey at Vanguard.<div></div>
 What We Value<ul><li>
People who speak professionally about past roles and experiences</li><li>
Curiosity over perfection</li><li>
Enthusiasm over ego</li><li>
Integrity, trust, and teamwork</li></ul>
W<div></div>
 Location &amp; Work Environment<ul><li>
Hybrid work model in PA only.</li><li>
No relocation or visa sponsorship available for this role</li></ul><div></div>
Special Factors
Sponsorship
Vanguard is not offering visa sponsorship for this position.
About Vanguard
At Vanguard, we don't just have a mission&mdash;we're on a mission.
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.
How We Work
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</div></div>

Administrative Associate: Identity & Access Management, GR&S

Arvest Bank

<div>Pay is based on a number of factors including the successful candidate&rsquo;s job-related knowledge and skills, qualifications, and prior experience. Arvest offers a comprehensive suite of benefits, including a full range of health and life, financial, and wellness benefits. For more information about benefits, please visit www.arvest.com/careers/benefits . 
 
Position is based at 201 W Walnut Street, Rogers, AR 72756.
Position requires flexible availability Monday through Friday 8am to 5pm with additional hours as needed.
The story of Arvest is one of commitment started by our founders in 1961, with an intense dedication to focusing on our customers. We will always be active and involved members of the communities we serve, and we will always work to put the needs of our customers and associates first as we continue to fulfill our mission &ndash; People helping people find financial solutions for life.
Job Title: Associate Security Operations Center Analyst
The Associate Security Operations Center (SOC) Analyst is an initial responder performing analysis, triage, and response coordination to security incidents and alerts ensuring the protection of critical systems and assets. They provide frontline support across various security tools and processes to prevent and respond to potential cyber threats.
What You&rsquo;ll Do at Arvest:
<ul><li>Support the team by gathering preliminary evidence, performing initial triage and basic threat analysis of incoming security alerts.
</li></ul><ul><li>Assist with initial response activities during security events and incidents, including cyber threats, major incident responses, physical security, and operational team notifications during outages.
</li></ul><ul><li>Help the team by performing critical event management functions, encompassing proactive severe weather communications, cybersecurity and physical security threat reporting, and the arrangement and implementation of relevant response protocols.
</li></ul><ul><li>Aid with threat intelligence analysis, frontline security incident, and initial incident reporting by collecting, reviewing, and analyzing data.
</li></ul><ul><li>Document and complete security incident and event reports while communicating findings to key stakeholders, contributes to the development of incident handling processes and security posture reports and maintain records of all security events, responses, and outcomes.
</li></ul><ul><li>Collaborate in the development and updates made to incident handling processes, standard operating procedures, playbooks, and runbooks.
</li></ul><ul><li>Identify opportunities for system and procedural improvements and recognize security gaps in critical infrastructure by adjusting alert thresholds, updating rules and security tool parameters.
</li></ul><ul><li>Understand and comply with bank policy, laws, regulations, and the bank's BSA/AML Program, as applicable to your job duties. This includes but is not limited to; complete compliance training and adhere to internal procedures and controls; report any known violations of compliance policy, laws, or regulations and report any suspicious customer and/or account activity.
</li></ul><ul><li>Other duties may be assigned. 
</li></ul> 
Responsibilities: 
 
Required Toolbox for Success:
<ul><li>High School Diploma or General Education Diploma (GED)
</li></ul><ul><li>1 year of relevant experience in Information Technology (IT), or Emergency Management including experience with security tooling
</li></ul><ul><li>Knowledge of security tools responding to security alerts using case management tool or IT ticketing system
</li></ul><ul><li>Analytical and conceptual thinking skills, with the ability to solve problems and make decisions using data
</li></ul><ul><li>Excellent communication and interpersonal skills, with the ability to build and maintain relationships with internal and external stakeholders
</li></ul><ul><li>Outstanding organizational skills and attention to detail, with the ability to manage multiple tasks and deadlines effectively
</li></ul><ul><li>Proven ability to analyze procedures and standards
</li></ul><ul><li>Ability to maintain an inquisitive mindset and desire for continuous learning
</li></ul><ul><li>Relevant military experience is considered for veterans and transitioning service members
</li></ul>Preferred Toolbox for Success:
<ul><li>Bachelor's Degree in Computer Science, Information Security, Information Technology, Emergency Management, or a related field
</li></ul><ul><li>Experience working in a regulated industry
</li></ul><ul><li>General knowledge in networking, monitoring, and incident response
</li></ul><ul><li>Knowledge of scripting or automation languages
</li></ul><ul><li>Working knowledge of Google Workspace and other applicable software
</li></ul>Physical Demands:
Regular attendance is an essential function of the job. The associate must be able to travel occasionally by themselves within the US, possibly overnight. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.
We offer competitive compensation, benefits packages, and significant professional growth.
Arvest Bank is committed to providing equal opportunity to all persons regardless of race, color, race-based hairstyles and textures, religion, marital status, sex, sexual orientation, gender identity, pregnancy, age, national origin, disability, veteran status, or any other basis, which now or in the future may be specified by law.
Along with an excellent benefits package, our associates are engaged, rewarded for performance, and encouraged to grow professionally and personally. Our future is driven by our associates. If you want to be recognized for your results and empowered to reach your potential, we urge you to apply. 
 
Grade 14
Pay Range: $25.30 - $31.60 per hour</div>

Associate Security Operations Center Analyst

CareCloud

<div></div><div><div>Department: INFORMATION SECURITY Experience: 3 YearsDeadline: May 31, 2026Location: BAGH, Pakistan</div><div><h4 class="jobSectionHeader">
Job Profile</h4><div>
Job Description:
We are looking for a skilled Senior SOC Analyst to strengthen our Security Operations Center at CareCloud&rsquo;s Bagh AJK office. The ideal candidate will have 3&ndash;4 years of hands-on experience in cybersecurity operations, threat monitoring, incident response, and vulnerability management. This role requires expertise in detecting, analyzing, and responding to security threats while supporting SOC operations effectively.
Key Responsibilities:
<ul><li>Monitor and analyze security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection systems.</li>
<li>Investigate and respond to security incidents, including containment, remediation, and documentation.</li>
<li>Conduct vulnerability assessments and assist in penetration testing exercises.</li>
<li>Maintain detailed incident logs and prepare reports for management.</li>
<li>Support the SOC Manager in developing and refining SOC processes and workflows.</li>
<li>Stay updated on emerging cyber threats, attack vectors, and mitigation techniques.</li>
<li>Collaborate with IT, network, and application teams to resolve security issues.</li>
<li>Assist in training and mentoring junior SOC Analysts.</li>
</ul>
</div><div><h4 class="jobSectionHeader">Tools / Skills</h4><div>
Experience:
<ul><li>3&ndash;4 years in SOC operations, cybersecurity monitoring, or incident response roles.</li>
<li>Hands-on experience with SIEM, IDS/IPS, endpoint protection, and firewall management.</li>
<li>Exposure to penetration testing, vulnerability management, and ethical hacking preferred.</li>
</ul>
Skills:
<ul><li>Strong analytical and problem-solving skills.</li>
<li>Knowledge of cybersecurity frameworks like NIST, ISO 27001, or MITRE ATT&amp;CK.</li>
<li>Ability to prioritize and manage multiple security incidents simultaneously.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Proactive and able to work with minimal supervision.</li>
</ul>
Qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or a related field.</li>
<li>Relevant certifications preferred: CEH, OSCP, CISSP (Associate), or CompTIA Security+.</li></ul></div></div></div></div>
 <div><h5 class="jobSectionHeader">Additional Information</h5><div><div>
Total Position(s)
2 Positions</div><div>
Gender
Does not matter</div><div>
Minimum Education
Bachelors Degree</div><div>
Degree Title
Bachelors Degree</div><div>
Shift
Evening</div><div>
Nature of Job
Work From Office</div></div></div>

Senior Soc Analyst

Intelligent Technical Solutions

<div>Job Description

We are seeking a CMMC Security Engineer to design and build compliant Azure and Microsoft 365 environments for our CMMC consulting clients. This is a hands-on technical role. You will provision GCC and GCC High tenants, architect network security (Azure Firewall, VPN, NSGs), configure Entra ID with Conditional Access and Privileged Identity Management, deploy Intune for endpoint management, stand up Microsoft Sentinel for SIEM/SOAR, configure Purview for data protection, and deploy Defender for Endpoint across client environments. You will work from documented SOPs and a Control-Task Tracker that maps each NIST 800-171 control to specific Azure/M365 configurations. You will also capture technical evidence (screenshots, configuration exports, audit logs) to support the compliance documentation created by our GRC Consultants.

Job Responsibilities
<ul>
<li>Design and deploy CMMC-compliant enclave architectures in Azure: cloud-only (GCC/GCC High), hybrid (on-prem + GCC), and on-premises environments. Select and implement the appropriate topology (hub-spoke, segmented) based on client requirements.</li>
<li>Provision and configure Microsoft 365 GCC and GCC High tenants including initial setup, domain verification, licensing assignment, and tenant hardening.</li>
<li>Configure Microsoft Entra ID: user provisioning, Security Groups, Administrative Units, Conditional Access policies (MFA, device compliance, location-based, session controls), Privileged Identity Management (PIM), and Identity Protection risk policies.</li>
<li>Deploy and configure Microsoft Intune: device enrollment, compliance policies, configuration profiles, security baselines (CIS/STIG), BitLocker encryption with FIPS 140-2 compliance, Windows Update for Business rings, and application management via Company Portal.</li>
<li>Deploy and configure Microsoft Sentinel: Log Analytics workspace setup, data connector deployment (M365, Entra ID, Defender, Azure Activity, Firewall, NSG flow logs), KQL-based analytics rules, automation playbooks (Logic Apps), and CMMC compliance workbooks/dashboards.</li>
<li>Deploy and configure Microsoft Defender for Endpoint: device onboarding, antivirus policies, Attack Surface Reduction (ASR) rules, endpoint DLP, network protection, web content filtering, and vulnerability management.</li>
<li>Configure Microsoft Purview: sensitivity labels (CUI, FCI, Public), auto-labeling policies, DLP policies across Exchange, SharePoint, Teams, and endpoints, and information barriers where required.</li>
<li>Design and implement Azure networking: Virtual Networks, subnets, NSGs, Azure Firewall, Azure Bastion, VPN Gateway (site-to-site and point-to-site), Private Endpoints, route tables, and DDoS Protection.</li>
<li>For hybrid environments: configure Azure AD Connect (or Cloud Sync), hybrid device join, pass-through authentication or password hash sync, split DNS, and Azure Arc for on-premises server management.</li>
<li>Configure encryption across the environment: BitLocker (XTS-AES 256), FIPS 140-2 compliance mode, TLS 1.2+ enforcement, VPN encryption (IKEv2/AES-256), and Purview encryption for CUI-labeled content.</li>
<li>Execute remediation tasks from the CMMC Remediation Tracker as assigned by the GRC Consultant. Each task maps a specific NIST 800-171 control objective to an Azure/M365 configuration with step-by-step instructions.</li>
<li>Capture and organize technical evidence for each implemented control: configuration screenshots, policy exports (JSON), audit log samples, compliance reports, and test results.</li>
<li>Support incident response capability deployment: Sentinel playbook creation, automated notification workflows, and incident response procedure testing.</li>
<li>Perform client environment migrations to GCC/GCC High (tenant-to-tenant migration using BitTitan, ShareGate, or native Microsoft tools).</li>
<li>Work across 4-7 concurrent client environments at various stages of build and remediation.</li>
</ul>
Job Qualifications 
Required Technical Experience
<ul>
<li>Willing to work in a hybrid setup&mdash;remotely or on-site at client locations, as required.</li>
<li>3+ years hands-on experience administering Microsoft Azure and M365 environments in a professional capacity (not lab-only).</li>
<li>Direct experience configuring Conditional Access policies, Entra ID PIM, and identity architecture (cloud-only and hybrid with Azure AD Connect).</li>
<li>Direct experience deploying and managing Microsoft Intune for endpoint compliance, configuration profiles, security baselines, and BitLocker management.</li>
<li>Direct experience deploying Microsoft Sentinel including data connectors, KQL query writing, analytics rules, and automation playbooks.</li>
<li>Experience configuring Azure networking: VNets, NSGs, Azure Firewall or third-party NVA, VPN Gateway, and network security architecture.</li>
<li>Experience deploying Microsoft Defender for Endpoint including device onboarding, ASR rules, and vulnerability management.</li>
<li>Proficiency with PowerShell and Microsoft Graph API for automation and bulk configuration tasks.</li>
<li>Understanding of NIST SP 800-171 controls and how they map to specific Azure/M365 technical implementations.</li>
</ul>
Strongly Preferred Technical Experience
<ul>
<li>Experience with Microsoft 365 GCC or GCC High environments (tenant provisioning, licensing nuances, feature differences from commercial M365).</li>
<li>Experience with tenant-to-tenant migrations (commercial to GCC/GCC High) using BitTitan MigrationWiz, ShareGate, or native Microsoft tools.</li>
<li>Experience configuring Microsoft Purview: sensitivity labels, auto-labeling, DLP policies across Exchange, SharePoint, Teams, and endpoints.</li>
<li>Experience with FIPS 140-2 configuration and DISA STIG or CIS benchmark implementation via Intune or GPO.</li>
<li>Experience supporting defense industrial base (DIB) or federal contractor IT environments.</li>
<li>Experience with Azure Arc for hybrid server management and Azure Bastion for secure remote administration.</li>
</ul>
Required Certifications

(must hold at least two from this list):
<ul>
<li>Microsoft Certified: Azure Solutions Architect Expert (AZ-305) - Architecture design and decision-making.</li>
<li>Microsoft Certified: Azure Administrator Associate (AZ-104) - Core Azure resource management.</li>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200) - Sentinel, Defender, and security operations.</li>
<li>Microsoft Certified: Identity and Access Administrator Associate (SC-300) - Entra ID, Conditional Access, PIM.</li>
<li>Microsoft Certified: Information Protection and Compliance Administrator (SC-400) - Purview, DLP, sensitivity labels.</li>
<li>Microsoft Certified: Endpoint Administrator Associate (MD-102) - Intune and device management.</li>
</ul>
Preferred Certifications

(significant advantage):
<ul>
<li>CompTIA Security+ (SY0-701)</li>
<li>CMMC Registered Practitioner (RP) - Understanding of CMMC framework from technical perspective.</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Microsoft 365 Certified: Administrator Expert (MS-102)</li>
<li>Certified Information Systems Security Professional (CISSP)</li>
<li>GIAC certifications (GSEC, GCIA, GCIH) - Deep security operations knowledge.</li>
</ul>
Skills &amp; Competencies
<ul>
<li>Execution-focused: ability to follow SOPs and runbooks precisely while identifying when something does not match documented steps and escalating appropriately.</li>
<li>Multi-tenant management: comfortable switching between 4-7 different client Azure/M365 environments daily without cross-contaminating configurations.</li>
<li>Documentation discipline: every configuration change is documented, every evidence artifact is captured, every deviation from the SOP is noted.</li>
<li>Troubleshooting: when Conditional Access blocks legitimate users, when Sentinel data connectors go unhealthy, or when WDAC blocks a required application, you can diagnose and resolve without waiting for escalation.</li>
<li>Security mindset: you understand why least privilege matters, why default-deny is the correct network posture, and why FIPS-validated encryption is required for CUI.</li>
<li>Clear written communication: when you find something in the client environment that does not match what the GRC Consultant scoped, you can document it clearly so the team can make decisions.</li>
</ul>
Compensation

 Pay rate ranges from $120,000.00/annum up to $170,000.00/annum and may vary by experience and location.

Benefits
<ul>
<li>Medical Insurance Plan</li>
<li>Dental &amp; Vision</li>
<li>Life Insurance</li>
<li>Disability Coverage</li>
<li>Paid Time Off (starts at 15 days per year)</li>
<li>Maternity/Paternity Leave</li>
<li>Paid US Holiday</li>
<li>Retirement Plan</li>
<li>Salary Advancement/Loan</li>
<li>Health &amp; Wellness Program</li>
<li>Company-paid training and certification</li>
<li>Supplemental Life Insurance (Employee-paid)</li>
<li>Supplemental Health Plans (Employee-paid)</li></ul></div>

CMMC Security Engineer (US Hybrid)

Stonebridge Companies

<div><h1 class="jobSectionHeader">City, State:</h1>
Greenwood Village, Colorado 
PURPOSE
The CHIEF MAINTENANCE is responsible for: maintaining the entire hotel facility; including physical building structure; all mechanical, electrical, HVAC systems and related equipment.
ESSENTIAL DUTIES AND RESPONSIBILITIES:<ul><li>
Oversee the implementation of all property and equipment repairs and preventative maintenance, monitor life safety systems</li><li>
Oversees and ensures that the administration of the department is in compliance with all corporate and brand standards and all federal, state and local laws</li><li>
Responds in a courteous and timely manner to all guests&rsquo; questions, complaints or requests.</li><li>
Performs maintenance and repair work on the interior and exterior of building, hotel rooms and contents, laundry and kitchen/refrigeration equipment, lighting, heating/air conditioning (HVAC) ventilation, water treatment systems and swimming pools.</li><li>
Schedules staff to perform Preventative Maintenance Program and follows and enforces procedures that ensure the security of inventory such as tools, supplies, equipment, furniture, televisions, etc.</li><li>
Monitor supplies and inventory in a timely and efficient manner, minimizing waste and ensuring that equipment is prepared and operational for the next shift.</li><li>
Monitors work order volume and prioritizes assignments for team as necessary.</li><li>
Inspects work assignments o maintenance staff to ensure that work is completed in a timely manner and within specifications.</li></ul><ul><li>
Manages shift operations including staff scheduling, training and coaching.
</li><li>Maintains regular attendance, is consistently on time, and observes prescribed work, break and meal periods in compliance with standards.</li><li>
Maintains high standards of personal appearance and grooming, which include compliance with the dress code.</li><li>
Performs any other duties as requested by supervisor.</li></ul>
Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential duties of the position.
DESIRED COMPETENCIES, WORK SKILLS, AND KNOWLEDGE
To perform the job successfully, an individual should demonstrate the following competencies. Other competencies may be required.
Associate demonstrates a high QUALITY of work<ul><li>
Looks for ways to improve and promote quality.</li><li>
Applies feedback to improve performance.</li><li>
Work is accurate, thorough, and neat.</li></ul>
Associate demonstrates acceptable PRODUCTIVITY standards<ul><li>
Meets or exceed productivity standards.</li><li>
Assists staff in achieving their personal productivity expectations.</li></ul>
Associate demonstrates SAFETY AND SECURITY measures<ul><li>
Observes, adheres to safety and security procedures, promoting a safe work environment.</li><li>
Provides proper safety and security training to staff.</li><li>
Practices and enforces proper safety techniques.</li></ul>
Associate demonstrates INITIATIVE
<ul><li>Seeks out new assignments and assumes additional duties when necessary.</li><li>
Undertakes self-development activities.</li><li>
Includes appropriate people in decision-making.</li></ul>
Associate demonstrates effective TEAMWORK<ul><li>
Contributes to building a positive team spirit.</li><li>
Works effectively with other departments to accomplish goals.</li></ul><h1 class="jobSectionHeader">
Associate demonstrates effective CUSTOMER SERVICE SKILLS</h1><ul><li>
Manages difficult or emotional customer situations.</li><li>
Demonstrates the desire and ability to provide high quality service to both internal and external customers.</li></ul>
Associate demonstrates effective SUPERVISING skills<ul><li>
Makes self available to staff to answer questions and provide direction.</li><li>
Delegates work assignments and follows up to ensure completion.</li><li>
Develops staff so that successful customer service scores are achieved.</li></ul>
Associate demonstrates clear and effective ORAL / WRITTEN COMMUNICATION<ul><li>
Able to communicate effectively with staff and other departments.</li><li>
Practices attentive and active listening with all employees.</li><li>
Able to read and interpret written information</li></ul>
Associate demonstrates ACCOUNTABILITY for their job performance<ul><li>
Performs work with little or no supervision; works independently.</li><li>
Takes responsibility for own actions.</li><li>
Follows instructions and responds to management direction.</li></ul>
EDUCATION AND EXPERIENCE REQUIREMENTS:
High school diploma or general education degree (GED); or five to seven years related experience and/or training; or equivalent combination of education and experience.
General knowledge of repairing/replacing plumbing systems, HVAC equipment, refrigeration and all kitchen equipment.
Knowledge of swimming pool maintenance and correct chemical balance.
QUALIFICATIONS
Ability to interpret and perform basic computer functions, including MS Office, Outlook, Word, and Excel.
Possess Pool Certificate, CPR and AED
WORK ENVIRONMENT
The work environment normally entails the following:<ul><li>Indoor or outdoor work environment.</li><li>Moderate to high noise levels consistent with hotel environment.</li><li>Work shop environment.</li></ul>
SUPERVISOR RESPONSIBILITIES
This position has supervisory responsibilities.
PHYSICAL DEMANDS
During the course of performing the physical demands of this position, associates are expected to observe and adhere to safety and security procedures, promoting a safe work environment.
The physical activity normally entails the following attributes.<ul><li>The physical activity normally entails the following attributes.</li><li>Walk more than 75% of the time</li><li>Sit less than 25% of the time</li><li>Push / pull up to 25 lbs.</li><li>Climb or balance 50% of time</li><li>Stoop, kneel, crouch, or crawl 50% of time</li><li>Carry / Lift up to 75 lbs.</li><li>Push / pull up to 75lbs</li></ul> 
Equal Employment Opportunity: Stonebridge is committed to equal employment opportunities. We do not discriminate based on race, color, religion, sex, pregnancy, national origin, ancestry, age, marital status, sexual orientation, veteran status, physical or mental disability, or medical condition. All aspects of employment, including recruitment, hiring, advancement, compensation, benefits, training, promotion, transfer, discipline, layoff, recall, and termination, will be conducted without discrimination. Reasonable accommodations will be made for disabled team members.
Resumes and applications for employment will be evaluated based on qualifications and the ability to meet the position's requirements.
All Stonebridge openings are projected to close within 30 days of the original posting date. This position will no longer be available 30 days from:
2026-04-13
Stonebridge offers comprehensive benefits including medical, dental, vision, PTO, 401(k) matching, wellness support, life and disability coverage, savings accounts, tuition aid, and travel and lodging perks.</div>

Chief Maintenance

Search 10000+ Information security associate jobs near you this May. New roles added regularly across leading industries. Apply today.