information security engineer

Deluxe Corporation

<div><p>Deluxe, a global payments and data leader, is looking for a Security Engineer who is naturally curious about cyber security trends as well as the tools and technologies that can bring maximum efficiency and effectiveness to our security practices.</p><p></p><p>
The Information Security Engineer possesses deep technical knowledge and hands-on expertise implementing enterprise security solutions including identity and access management, threat protection, data security, and governance. Collaborates cross-functionally to architect, troubleshoot, and optimize security environments utilizing industry best practices and standards.</p><p><b><br>
Job Functions</b>:</p><ul><li>
Develop, implement, and support enterprise-wide security solutions.</li><li>
Serve as a security resource and implement security solutions based on provided designs.</li><li>
Provide technical support to Information Security Analysts for deploying and modifying security systems.</li><li>
Participate as a technical resource in project teams, providing expertise in information security.</li><li>
Work with various technologies to support Deluxe Treasury Management Solutions.</li><li>
Ensure compliance with information security standards and policies.</li><li>
Stay updated with emerging security technologies and industry trends.</li><li>
Collaborate with security architects and analysts to address security requirements.</li></ul><p><b><br>
Basic Qualifications</b>:</p><ul><li>
Education and Experience: Bachelor's degree in IT, Security, Business, or related field, or high school diploma and 4 years of related experience.</li><li>
Must be 18 years of age or older.</li></ul><p><b><br>
Preferred Qualifications</b>:</p><ul><li>
Education and Experience: Bachelor's degree and 2 years of related experience.</li><li>
Field of Study: IT, Security, Business.</li></ul><p></p><p><b>
Compensation</b></p>
The compensation range for this position is $95,000.00 - $115,000.00 annually. This position will be eligible for commission or an annual performance incentive plan. The base pay actually offered will vary depending on job-related knowledge, skills, location, experience and take into account internal equity.<p></p><p><b>
Benefits</b></p><p>
In line with our commitment to employee wellbeing, our total rewards benefits package is designed to support the physical, financial, and emotional health of our employees, tailored to meet their unique and evolving needs. Our approach considers our employees&rsquo; whole selves, ensuring they can thrive both in and outside of work. Here are some of the benefits we offer, which may vary based on role, location, or hours worked:</p><ul><li><p>
Healthcare (Medical, Dental, Vision)</p></li><li><p>
Paid Time Off, Volunteer Time Off, and Holidays</p></li><li><p>
Employer-Matched Retirement Plan</p></li><li><p>
Employee Stock Purchase Plan</p></li><li><p>
Short-Term and Long-Term Disability</p></li><li><p>
Infertility Treatment, Adoption and Surrogacy Assistance</p></li><li><p>
Tuition Reimbursement</p></li></ul><p></p><p>
These benefits are designed to enhance the health, protect the financial security, and provide peace of mind to our employees and their families.</p><p></p><p><b>
Deluxe Corporation is an Equal Employment Opportunity employer:</b><br>
All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, disability, sex, age, ethnic or national origin, marital status, sexual orientation, gender identity or presentation, pregnancy, genetics, veteran status or any other status protected by state or federal law.</p><p><br>
Please view the electronic EEO is the Law Poster which serves to inform you of your equal employment opportunity protections as part of the application process.</p><p></p><div><div><div><div><div><div><div><div><p><b>
Reasonable Accommodation for Job Seekers with a Disability:</b> If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to deluxecareers@deluxe.com.</p></div></div></div></div></div></div></div></div></div>

Information Security Engineer

IT Vikings

<div><div><div>ITVikings</div><div>
Careers</div><div>
Cyber Security, Infosec Engineer</div><div><br>
</div></div><div><div><div><div><div><div><div><div><div>Job Description:<br>
<ul><li>Installation, configuration and maintenance for network Security equipment (Web Security, Mail Security, End point Security, Data Security, etc&hellip;.) for IT Vikings customers.</li><li>Provides remote and on-site support to our customers.</li><li>Performing troubleshooting and root cause analysis on security appliances, Network appliances.</li><li>Prepare and perform Proof-of-Concept (POC) for the customer.</li><li>Understand the customer&rsquo;s technical requirements, business objectives and strategy.</li><li>Deep knowledge to translate customer needs to a solution and designing.</li><li>Develop project documentation.</li></ul>
<br>
*Requirements*:<br>
<ul><li>BSc. In Engineering or computer science or information security</li><li>2+ years practical experience working with security solutions services</li><li>Excellent in multiple security solutions and prefer to have knowledge in NGFW , EPP , EDR , NDR,IPS, Email Security, Web Security, WAF,ADC,PAM and IAM&hellip;. etc. (implementation and operation )</li><li>Security &ndash; related certificates are plus</li><li>Strong presentation and communication skills</li><li>Very good in English</li></ul></div><p><br>
&ndash; If interested, you can send your updated resume to jobs@itvikings.com. <b>Please mention the job title in the subject</b>.</p></div></div></div></div></div></div></div></div></div><div></div>

Seattle Public Schools

<div><div><div><h2 class="jobSectionHeader"><b>Overview of Position</b></h2></div>
<div><p>The Information Security Engineer (Intermediate), working under general direction, designs, implements, support, and operationalizes major components of the district&rsquo;s information security program aligned with ISO/IEC 27001/27002 and Information Security Risk Management aligned with ISO/IEC 27005 (NOTE: NIST Cybersecurity Framework is also used as an informative reference to the district's Information Security Program).</p><div><br>
The Information Security Engineer plays a critical role in identifying, reducing, and managing information and technology risk across the district by establishing and enforcing security standards; developing and maintaining policies, procedures, and baselines; and delivering security services that protect users, data, and systems.</div><div><br>
This role supports business operations and academic requirements by ensuring the confidentiality, integrity, availability, and responsible use of information systems&mdash;including emerging Artificial Intelligence (AI)&ndash;enabled technologies&mdash;while maintaining compliance with federal and state regulations, district policies, and industry best practices. The role also supports compliance-driven security testing initiatives such as penetration testing and regulatory assessments (e.g., PCI-DSS), ensuring findings are addressed in alignment with district risk tolerance.</div><div><br>
This role is heavily hands-on and operational, with responsibilities spanning threat detection and response, security automation, vulnerability and configuration management, security architecture, and incident response support. The position leverages Microsoft 365, Microsoft Sentinel, and Azure-native security tooling&mdash;to conduct threat hunting, analyze indicators of compromise (IOCs) and indicators of attack (IOAs), and enhance detection and response capabilities through automation.</div><div><br>
The Information Security Engineer also supports the secure adoption of Artificial Intelligence technologies across the district. This includes contributing to AI risk management activities, such as identifying and assessing risks associated with AI systems (e.g., data leakage, model misuse, bias, hallucinations, unauthorized access, and over-permissioned AI agents), recommending mitigations, and aligning AI usage with district policies, legal requirements, and ethical guidelines.</div></div><br>
<p></p>
<div><h2 class="jobSectionHeader"><b>Essential Functions</b></h2></div>
<div><p><b>25%</b></p><ul><li>
Plans and implements security controls across software, hardware, and network systems; identifies, analyzes, and mitigates vulnerabilities; participates in security architecture reviews.</li></ul><b>
15%</b><ul><li>
Provides technical support and training to staff on secure practices; conducts security needs assessments and recommends tools and configurations.</li></ul><b>
15%</b><ul><li>
Develops and recommends procedures to enhance cybersecurity operations; designs and implements incident response protocols and access control policies.</li></ul><b>
15%</b><ul><li>
Serves as a security resource to schools and departments; responds to incidents and coordinates remediation efforts.</li></ul><b>
15%</b><ul><li>
Participates in district-wide technology and security committees; contributes to policy development and special projects.</li></ul><b>
10%</b><ul><li>
Assists in the development and maintenance of secure configurations for applications and systems; evaluates and recommends cybersecurity tools.</li></ul><b>
5%</b><ul><li>
Maintains current knowledge of cybersecurity threats, tools, and best practices; monitors threat intelligence and regulatory changes.</li></ul><b>
5%</b><ul><li>
Performs related duties including documentation, audit preparation, and compliance reporting.</li></ul><br>
<b>
OTHER FUNCTIONS:</b><ul><li>
May perform related duties consistent with the scope and intent of the position.</li><li>
May perform related duties in support of Disaster Recovery and Business Continuity.</li></ul><br>
<b>
RELEVANT COMPETENCIES:</b><br>
<b>Technical Learning</b><br>
Quickly learns and integrates new technical skills and knowledge; seeks out avenues to enhance technical knowledge.<ul><li>
Picks up and integrates technical skills quickly.</li><li>
Recognizes trends and effectively prepares for changes.</li><li>
Seeks out opportunities to advance one&rsquo;s learning in relevant technical disciplines.</li></ul><b>
Time Management</b><br>
Uses time effectively and efficiently; concentrates efforts on the most important priorities; adeptly handles several tasks at once.<br>
<ul><li>
Focuses efforts on the most important priorities.</li><li>
Uses time effectively and efficiently.</li><li>
Handles multiple tasks effectively.</li><li>
Values other people&rsquo;s time.</li></ul><b>
Interpersonal Skills</b><br>
Builds constructive and effective relationships; uses diplomacy and tact to diffuse tense situations; is approachable and fair.<ul><li>
Relates well with others.</li><li>
Builds constructive and effective relationships.</li><li>
Responds appropriately to the needs and feelings of others.</li><li>
Demonstrates tact, diplomacy, and fairness</li></ul><b>
Functional / Technical Skills</b><br>
Possesses the technical knowledge and skills to perform the job at a high level; actively enhances and applies new skills.<ul><li>
Understands and stays current on technical aspects of the job.</li><li>
Applies technical knowledge to address issues promptly.</li><li>
Identifies ways to apply new developments to improve performance.</li><li>
Shares expertise with others when appropriate.</li></ul><br>
<b>
DISTRICT-WIDE CORE COMPETENCIES:</b><br>
<b>Collaboration</b><br>
Develops cooperation and teamwork while participating in a group, working toward solutions which generally benefit all involved parties.<ul><li>
Is seen as a team player who encourages efficient and effective collaborations.</li><li>
Works skillfully in difficult situations with both internal and external groups.</li><li>
Represents his/her own interests while being open-minded to other groups.</li><li>
Builds respectful and productive relationships internally and externally.</li></ul><b>
Getting Results (Action Oriented)</b><br>
Performs work with energy and drive; values planning, but will take quick, decisive action when an opportunity presents itself.<ul><li>
Demonstrates a strong sense of urgency about solving problems and getting work done.</li><li>
Focuses on achieving the goal even in the face of obstacles.</li><li>
Assumes responsibility for starting and finishing work with minimal supervision.</li><li>
Strives for new levels of performance.</li></ul><b>
Decision Quality &amp; Problem Solving</b><br>
Uses analysis, wisdom, experience and logical methods to make good decisions and solve difficult problems with effective solutions; appropriately incorporates multiple inputs to establish shared ownership and effective action.<ul><li>
Weighs the consequences of options before making a decision.</li><li>
Applies appropriate criteria to situations for the purpose of making decisions.</li><li>
Displays self-confidence in own judgment.</li><li>
Focuses in the facts and solutions instead of opinions and problems.</li></ul><b>
Integrity</b><br>
Is widely trusted; is seen as a direct, truthful individual; presents truthful information in an appropriate and helpful manner; keeps confidences; admits mistakes; doesn&rsquo;t misrepresent him/herself for personal gain.<ul><li>
Deals with people and situations in an honest and forthright manner.</li><li>
Represents information and data accurately and completely.</li><li>
Represents the confidentiality of information and concerns shared by others.</li><li>
Takes ownership if a mistake is their own and does not blame others.</li></ul><b>
Accountability</b><br>
Holds self and others accountable for measurable high-quality, timely and cost-effective results; determines objectives, sets priorities and delegates work; accepts responsibility for mistakes; complies with established control systems and rules.<ul><li>
Takes responsibility and action as if the risks (financial or otherwise) are his or her own.</li><li>
Holds individuals and team accountable for their actions and results.</li><li>
Initiates action even if outcome is uncertain and is willing to accept the consequences of failure.</li><li>
Aligns own activities and priorities to meet broader organizational needs.</li><li>
Demonstrates courage and confidence in his or her own ability.</li></ul><br>
<b>
KNOWLEDGE, SKILLS AND ABILITIES:</b><ul><li>
Analyze and respond to security incidents, including phishing, malware, and unauthorized access</li><li>
Conduct risk assessments, vulnerability scans, and security audits using tools like Nessus, Qualys, or Microsoft Defender</li><li>
Principles of secure network architecture, including firewalls, VPNs, IDS/IPS, and zero trust models</li><li>
Security frameworks and compliance standards (e.g., NIST, CIS Controls, FERPA, PCI)</li><li>
Operation and hardening of operating systems (Windows, macOS, Linux) and cloud platforms (e.g., Microsoft 365, Azure, Google Workspace)</li><li>
Identity and access management (IAM), multi-factor authentication (MFA), and role-based access control (RBAC)</li><li>
Document and communicate security findings, recommendations, and incident reports clearly and concisely</li><li>
Communicate technical security concepts to non-technical stakeholders, including school leaders and staff</li><li>
Evaluate and recommend secure solutions that align with district policies and instructional needs</li><li>
Collaborate with IT, legal, and instructional teams to implement and monitor security controls</li><li>
Data protection technologies, including encryption, DLP, and secure data lifecycle management</li><li>
Develop and maintain security configurations, baselines, and automation scripts (e.g., PowerShell, Python)</li></ul><b>
OTHER FACTORS:</b><ul><li>
Will be in an on-call rotation for emergency cybersecurity response.</li></ul></div><p></p>
<div><h2 class="jobSectionHeader"><b>Typical Qualifications</b></h2></div>
<div><p><b>EXPERIENCE/EDUCATION:</b><br>
<br>
 <b>A typical way to obtain the knowledge and abilities would be:</b><br>
<br>
(5) years of experience in a related field, with three (3) years as an infosec engineer; Bachelor's degree in Computer Science, Information Technology, Business Administration, or related field; or an equivalent of education and experience.<br>
<br>
<b>Any equivalent combination of education, experience and training that provides the relevant knowledge, skills and abilities to perform the work will be considered.</b><br>
<br>
<b>DESIRED CERTIFICATIONS &amp; LICENSES:</b><br>
Certified Associate in Project Management (CAPM), and/or Certified Information Security Manager (CISM), or equivalent (Certified Information Systems Security Professional (CISSP) is preferred)<br>
<br>
<b>CLEARANCES:</b><br>
Criminal Justice fingerprint and background check</p></div></div></div>

Information Security Engineer - Intermediate

University of Alabama, Birmingham

<div></div><div><div><div><div><div><b>Description</b><div></div><div><p>
FOR USE BY IT AND HSIS ONLY: The University of Alabama at Birmingham UAB seeks an INFORMATION SECURITY ENGINEER III-EN to plan, design, enforce and audit security policies and procedures which safeguard the integrity of and access to enterprise systems, files, and data elements. To recognize and identify potential areas where existing data security policies and procedures require change, or where ones need to be developed, especially regarding future business expansion. To provide management with risk assessments and security briefings to advise them of critical issues that may affect customers, or corporate security objectives. To evaluate and recommend security products, services and/or procedures to enhance productivity and effectiveness. This position will commit to fostering an environment of heightened security following Information Technology Security Policies and participating in security training, such as Health Insurance Portability &amp; Accountability Act (HIPAA) and Family Education Rights and Privacy Act (FERPA), on an annual basis.</p><p>
RESPONSIBILITIES:</p><p>
This position is responsible for supporting research in maintaining institutional compliance with Controlled Unclassified Information (CUI) regulations, including NIST SP 800-171, CMMC, and other federal mandates. This position involves collaborating with partners on the Cloud-based environment for CUI, and working closely with researchers to ensure security controls align with federal standards.</p><p>
1. Develop and implement strategies for the security control requirements ensuring adherence to all applicable regulations and policies.</p><p>
2. Stay updated on relevant regulations and policies related to research compliance and regulatory affairs.</p><p>
3. Provide guidance and support to researchers, faculty, and staff on IT compliance practices.</p><p>
4. Monitor the effectiveness of the research compliance program and make recommendations for improvement.</p><p>
5. Act as a point of contact for security controls and IT compliance-related inquiries or concerns for research projects.</p><p>
6. Performs other duties as assigned.</p><p>
(Annual Salary: $94,375 - $153,355)</p></div><div>
</div></div><div><b>
Qualifications</b><div></div><div><p>
Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or similar or a related field and five (5) years of related experience required. Work experience may substitute for education requirement. Certified Information Systems Security Professional (CISSP) certification preferred. IT Experience specifically related to cybersecurity is necessary.</p><p>
Preferred Skills: Strong knowledge of NIST SP 800-171, CMMC, and federal CUI handling regulations. Experience with writing system Security Plans, POAMs, Incident Response Plans Experience working with cloud security solutions. Excellent written and verbal communication skills, with the ability to work across multidisciplinary teams. Experience with GovCloud or other secure cloud-based research platforms. Prior experience in higher education research security a big plus. Certification or credentials related to Cybersecurity (CISSP, CISM, CISA, CCP) a plus.</p><p></p><p><br>
</p><p>
UAB is an Equal Employment/Equal Educational Opportunity Institution dedicated to providing equal opportunities and equal access to all individuals regardless of race, color, religion, ethnic or national origin, sex (including pregnancy), genetic information, age, disability, and veteran's status. As required by Title IX, UAB prohibits sex discrimination in any education program or activity that it operates. Individuals may report concerns or questions to UAB's Assistant Vice President and Senior Title IX Coordinator. The Title IX notice of nondiscrimination is located at uab.edu/titleix.</p></div><div>
</div></div><div><b>
Primary Location</b><b>:</b> University</div><div><b>
Job Category</b><b>:</b> Information Technology</div><div><b>
Organization</b><b>:</b> 191300000 Enterprise Info Security</div><div><b>
Employee Status</b><b>:</b> Regular</div><div><b>
Shift</b><b>:</b> Day/1st Shift</div><div><b>
Work Arrangement (final schedule to be determined by the department/hiring manager)</b><b>:</b> Remote/Hybrid Eligible</div></div></div></div></div><div></div>

INFORMATION SECURITY ENGINEER III-ENT

Wells Fargo

<div><p><b>Title</b><b>: </b>Information Security Engineer 3 - Contingent</p><p><b>
Location</b><b>: </b>Charlotte, NC</p><p><b>
Duration</b><b>: </b>12 months</p><p><b>
Work Engagement</b><b>: </b>W2</p><p><b>
Work Schedule</b>: Hybrid 3 days in office/2 days remote</p><p><b>
Benefits on offer for this contract position</b>: Health Insurance, Life insurance, 401K and Voluntary Benefits</p><p></p><p><b>
Summary:</b></p><p><br>
In this contingent resource assignment, you may: Consult on or participate in moderately complex initiatives and deliverables within Information Security Engineering and contribute to large-scale planning related to Information Security Engineering deliverables. Review and analyze moderately complex Information Security Engineering challenges that require an in-depth evaluation of variable factors. Contribute to the resolution of moderately complex issues and consult with others to meet Information Security Engineering deliverables while leveraging solid understanding of the function, policies, procedures, and compliance requirements. Collaborate with client personnel in Information Security Engineering. Required Qualifications: Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work or consulting experience, training, military experience, education.</p><p></p><p><b><br>
Key Requirements:</b></p><ul><li><p>
Applicants must be authorized to work for ANY employer in the U.S. This position is not eligible for visa sponsorship.</p></li><li><p>
Administration experience in working on large, complex CyberArk environments</p></li><li><p>
In depth knowledge of PAM CyberArk tool / CyberArk PAS Vault, DR, CPM, PSM, PVWA, CP, CCP, and SIA</p></li><li><p>
Credential management expertise and advanced management of credential management systems.</p></li><li><p>
Credential/secrets management experience in a cloud or DevOps environment</p></li><li><p>
Advanced Information Security technical skills and understanding of information security practices and policies</p></li><li><p>
Windows OS administration experience</p></li><li><p>
Experience with automating workflows (Powershell, Python, Shell, etc)</p></li><li><p>
Experience working with SailPoint and CyberArk integration</p></li><li><p>
Ability to manage complex issues and develop solutions</p></li><li><p>
Excellent written and oral communication</p></li><li><p>
Experience with databases (Oracle, Sybase, MSSQL, MySQL etc.,)</p></li><li><p>
Experience with Directories (LDAP, AD)</p></li><li><p>
Experience with Jira and Confluence</p></li><li><p>
Documentations of technical configuration</p></li><li><p>
CyberArk certifications will be an added advantage</p></li></ul></div>

Information Security Engineer 3 - Contingent (contract)

KYOCERA AVX Components Corporation

<div>
 <strong>
  PRIMARY FUNCTION:
 </strong>
 <br/>
 <p>
  Design, implement, audit, and maintain governance, risk management, and compliance (GRC) controls for the organization&rsquo;s information security program aligned to the National Institute of Standards and Technology (NIST), the Center for Internet Security (CIS), and the International Organization for Standardization (ISO) 27000 family of frameworks. Drive policy, risk assessments, third party risk, audit readiness, and continuous compliance with regulatory and industry standards, using an organized and project managed approach.
 </p>
 <br/>
 <br/>
 <strong>
  DUTIES &amp; RESPONSIBILITIES:
 </strong>
 <br/>
 <ul>
  <li>
   <strong>
    Governance, policy &amp; control design:
   </strong>
   Maintain policies/standards; map obligations to NIST CSF, NIST SP 800-53/800-171, CIS, and ISO 27001; define testable controls, procedures, and evidence requirements.
  </li>
  <li>
   <strong>
    Risk management &amp; exceptions:
   </strong>
   Conduct risk assessments; document scenarios and residual risk; maintain risk register, compensating controls, and remediation plans; support exception/acceptance decisions with rationale and evidence.
  </li>
  <li>
   <strong>
    Compliance &amp; audit readiness:
   </strong>
   Test controls (design/operating effectiveness), document gaps, assemble audit evidence, and track findings to validated closure.
  </li>
  <li>
   <strong>
    Third-party risk:
   </strong>
   Assess vendor security (questionnaires, SOC/ISO artifacts, evidence review), document risk and required controls/terms, and drive remediation follow-ups.
  </li>
  <li>
   <strong>
    Control implementation support &amp; monitoring:
   </strong>
   Partner with IT/SecOps to implement and run controls (access, logging, vuln mgmt, encryption, backup/DR) and define monitoring, evidence sources, and test cadence.
  </li>
  <li>
   <strong>
    Metrics &amp; stakeholder communication:
   </strong>
   Produce dashboards and brief status reports on risk, control health, audit readiness, and remediation aging for technical and non-technical stakeholders.
  </li>
  <li>
   <strong>
    Operational support &amp; enablement:
   </strong>
   Provide GRC support for incidents/vulnerabilities and privacy obligations; publish practical guidance (standards, job aids, FAQs) to increase control adoption and reduce exceptions.
  </li>
 </ul>
 <br/>
 <br/>
 <strong>
  REQUIREMENTS:
 </strong>
 <br/>
 <p>
  <strong>
   REQUIRED QUALIFICATIONS:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor's degree
  </li>
  <li>
   10+ years experience in information security, including GRC, or risk/compliance roles.
  </li>
  <li>
   Demonstrated experience with NIST frameworks (NIST CSF, NIST SP 800-53, NIST RMF, NIST SP 800-171), CIS 8.1, and ISO 27001.
  </li>
  <li>
   Hands-on experience conducting risk assessments, control assessments, and audit responses.
  </li>
  <li>
   Experience with regulatory requirements relevant to the organization (e.g., CMMC, TISAX, CTPAT, GDPR, IATF).
  </li>
  <li>
   Strong communication skills; experience producing executive-level reporting.
  </li>
  <li>
   Experience with GRC tooling (e.g., Archer, ServiceNow GRC, OneTrust, RSA) and security monitoring platforms.
  </li>
 </ul>
 <p>
  &nbsp;
 </p>
 <p>
  <strong>
   PREFERRED QUALIFICATIONS:
  </strong>
 </p>
 <ul>
  <li>
   Master&rsquo;s degree or relevant advanced certification.
  </li>
  <li>
   Certifications: CISSP, CISM, CRISC, CGEIT, or equivalent.
  </li>
  <li>
   Experience with cloud security (AWS/Azure/GCP) controls and cloud compliance frameworks.
  </li>
 </ul>
 <br/>
 <br/>
 <strong>
  EEO STATEMENT:
 </strong>
 <br/>
 <p>
  <strong>
   Kyocera-AVX is an Equal Opportunity Employer:
  </strong>
  &nbsp; All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or status as a protected veteran.
 </p>
</div>


Information Security Engineer, GRC

Tabby

<div><h3 class="jobSectionHeader"><b>Description</b></h3><div><br>
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
<br>
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.<br>
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
<br>
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems.<br>
<br>
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h3><br>
<ul>
<li>
<b>Penetration Testing</b>: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li><b>Adversary Simulation (Red Teaming):</b> Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li><b>Vulnerability &amp; Application Security Analysis:</b> Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li><b>Report Development:</b> Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li><b>Control Evasion &amp; Social Engineering:</b> Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li><b>Tool Development &amp; Reporting:</b> Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li><b>Security Awareness</b>: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Skills, Knowledge &amp; Expertise</b></h3><br>
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
About Tabby</b></h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.<br>
<br>
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>
<br>
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.<br>
<br>
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Search 10000+ Information security engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 information security engineer jobs Near Me

Information Security Engineer

Information Security Engineer

Information Security Engineer - Intermediate

INFORMATION SECURITY ENGINEER III-ENT

Information Security Engineer 3 - Contingent (contract)

Information Security Engineer, GRC

Information Security Engineer - VAPT (Saudi National)