information systems security specialist

Infinite pl

<div><div>Infinite pl is a digital-led tech firm driven to become a digital logistics pioneer by harnessing the power of people, data, and platforms. We are enabled through in-house, external, network, and investment capabilities that we utilize to orchestrate and build innovative platforms tackling complex problems within logistics and adjacent sectors.

Infinite pl&rsquo;s mission is nothing short of a logistics revolution! We're here to enrich the experiences of governments, businesses, and residents around the world through cutting-edge digital solutions.

We're not just players; we're game-changers.
</div>
<h3 class="jobSectionHeader">Role Summary:</h3><div>
The Senior IT Security Specialist supports IT security operations by ensuring effective implementation of security controls across IT systems, infrastructure, and services.</div><h3 class="jobSectionHeader">
Key Responsibilities:</h3><ul><li>Implement IT security operational controls across systems and applications</li><li>Support access management and privileged account governance</li><li>Conduct operational security reviews and compliance checks</li><li>Support resolution of IT security operational issues and incidents</li><li>Monitor system security configurations and identify gaps</li><li>Assist in vulnerability remediation from an IT operations perspective</li><li>Support IT audits and compliance activities</li><li>Work closely with infrastructure and application teams to enforce standards</li></ul><h3 class="jobSectionHeader">
Key Requirements:</h3><ul><li>Strong experience in IT operations and system security controls</li><li>Good understanding of IT infrastructure, cloud, and enterprise systems</li><li>Knowledge of ITIL processes and access governance</li><li>Experience in supporting IT audits and compliance requirements</li><li>Relevant certifications (ITIL, Security+, or equivalent preferred)</li></ul><div>
Infinite pl ️ - where innovation meets logistics, and the journey is Infinitely boundless! 
Let's disrupt logistics together and explore infinite opportunities!</div>

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</div>

Senior IT Security Specialist

DOHA BANK Q.P.S.C.

Doha Bank Q.P.S.C is one of the largest private commercial banks in Qatar. Established in 1979. Offers retail, corporate, international, treasury, and investment banking servicesThe IT Infrastructure Security Specialist at Doha Bank is responsible for protecting the bank&rsquo;s IT infrastructure, networks, endpoints, and systems against cyber threats.Key Responsibilities:1. Infrastructure Security ManagementMaintain secure architecture for enterprise IT systems2. Threat Monitoring &amp; Incident Response3. Vulnerability &amp; Risk Management4. Compliance &amp; Regulatory Security5. Security Tools &amp; Technology Operations6. Collaboration &amp; ProjectsRequired Skills &amp; Qualifications:Bachelor&rsquo;s degree in Computer Science / IT / Cybersecurity / Engineering7&ndash;10+ years experience in IT security or infrastructure securityStrong knowledge of:Network securityFirewalls, IDS/IPSEndpoint securityCloud security basicsExperience in banking or financial services (preferred)Certifications (any 2&ndash;3 preferred):CCNA / CCNP SecurityCEHCISSP / CISMSecurity+ / CISAJob Type: Full-timePay: From QAR18,000.00 per monthWork Location: In person

IT Infrastructure Security Specialist (Doha Bank Q.P.S.C)

Boeing

<div>Tukwila, Washington
Job ID JR2026508422 Category Security &amp; Fire Protection Services Role Type Onsite Post Date May 08, 2026<div> 
</div><div>Job Description
At Boeing, we innovate and collaborate to make the world a better place. We&rsquo;re committed to fostering an environment for every teammate that&rsquo;s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.
The Boeing Company is looking for an Associate Industrial Security Specialist to join the team in Tukwila, WA.
Boeing is seeking an experienced Industrial Security Specialist that will execute Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements.
Position Responsibilities:<ul><li>
Assists with Internal Security Controls through performance of compliance assessment reviews and self-inspections to ensure compliance with government and company regulations/requirements</li><li>
Identifies deficiencies and recommends corrective action</li><li>
Assists with Administrative Inquiries (e.g., collects and analyzes data, writes reports and interviews) on personnel, processes and situations to determine level and scope of non-compliance with government and company regulations/requirements</li><li>
Assists with Communication Security (COMSEC) duties and responsibilities (including inventory, distribution and destruction)</li><li>
Assists in the protection of government, intellectual, third party and company information from unauthorized disclosures</li><li>
Develops, implements and administers an Operational Security program, security education, procedures and physical controls to ensure compliance with government and company regulations/requirements on less complex programs</li><li>
Performs Personnel Security processes to assist in obtaining individual security clearances/accesses</li><li>
Assists in developing and conducting security awareness training and education program to educate, refresh, and motivate personnel to protect people, property and information</li><li>
Assists in Physical Security duties and responsibilities within Boeing facilities (e.g., complete fixed/closed facility checklists/survey areas, review and approve facility drawings for new or remodeled classified areas) to ensure compliance with company and government regulations/requirements</li><li>
Assists in sub-contractor management to ensure compliance with government regulations/requirements</li></ul>
Basic Qualifications (Required Skills/Experience):<ul><li>
Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years</li><li>
Experience with Industrial Security</li><li>
Experience working with cross-functional or cross-organizational teams to develop and implement plans, schedules, or solutions</li></ul>
Preferred Qualifications (Desired Skills/Experience):<ul><li>
Bachelor&rsquo;s degree or higher</li><li>
1+ years of experience in Industrial Security</li></ul>
Conflict Of Interest:
Successful Candidates for this job must satisfy the Company&rsquo;s Conflict Of Interest (COI) assessment process.
Drug Free Workplace:
Boeing is a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.
Pay &amp; Benefits:
At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Pay is based upon candidate experience and qualifications, as well as market and business considerations.
Summary pay range: $69,700 - $94,300 

Applications for this position will be accepted until May. 18, 2026 

Export Control Requirements:
This position must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a &ldquo;U.S. Person&rdquo; as defined by 22 C.F.R. &sect;120.62 is required. &ldquo;U.S. Person&rdquo; includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.
Export Control Details:
US based job, US Person required
Relocation
Relocation assistance is not a negotiable benefit for this position.
Security Clearance
This position requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)
Visa Sponsorship
Employer will not sponsor applicants for employment visa status.
Shift
This position is for 1st shift 

Equal Opportunity Employer:
Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.</div></div>
 <div><h2 class="jobSectionHeader">Your Benefits</h2>
No matter where you are in life, our benefits help prepare you for the present and the future.
<ul><li><div>Generous company match to your 401(k).</div></li>
<li><div>Industry-leading tuition assistance program pays your institution directly.</div></li>
<li><div>Fertility, adoption, and surrogacy benefits.</div></li>
<li><div>Up to $10,000 gift match when you support your favorite nonprofit organizations.</div></li></ul> 

These programs are subject to eligibility requirements and other conditions, which may differ for employees of certain subsidiaries or business units, or union-represented employees depending on bargaining agreement terms. If this information conflicts with the program documents, the latter shall control. This material is informational only.</div>

Associate Industrial Security Specialist

NMC Health plc

<div>Actively monitor the networks, systems, applications, IT assets and bio-medical equipment&rsquo;s for suspicious activity and threats. Using offensive and defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or may occur within the network and make the initial decision on the event/ threat severity.</div>
 <div><ul><li>Manage network, intrusion detection and prevention systems.
</li><li>Conduct periodic compromise assessments across selected networks and propose recommendations based on assessment results.
</li><li>Conduct physical security assessment of the organization&rsquo;s systems, including servers and networks, ensuring that any unauthorized external physical interference is not actually possible.
</li><li>Conduct ongoing network hunt activities.
</li><li>Conduct proactive vulnerability assessment across the network, subnetworks and service traffic to identify potential points of intrusion.
</li><li>Research and develop methods of tracking and detecting malicious activity within a network.
</li><li>Develop tools, signatures, and methods of detection for use in incident response activities.
</li><li>Develop SIEM integrations, dashboards, and analytics to illuminate and visualize threat activity.
</li><li>Analyze network traffic to provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
</li><li>Uses data collected from a variety of cyber defense tools (e.g., anti-virus, IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments, perform cyber defense trend analysis and reporting, and perform event correlation to mitigate threats and gain situational awareness and determine the effectiveness of an observed attack.
</li><li>Carries out triage to ensure that a genuine security incident is occurring.
</li><li>Coordinate with entity-wide cyber defense staff to validate network alerts.
</li><li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event&rsquo;s history, status, and potential impact for further action in accordance with the organization&rsquo;s cyber incident response plan.
</li><li>Document and escalate incidents (including event&rsquo;s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
</li><li>Provide daily summary reports of network events and activity relevant to cyber defense practices.
</li><li>Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
</li><li>Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
</li><li>Isolate and remove malware.
</li><li>Develop content for cyber defense tools use them for continual monitoring and analysis of network activity to identify malicious activity.
</li><li>Assist in the construction of signatures which can be implemented on cyber defense tools in response to new or observed threats within the network environment.
</li><li>Analyze and report organizational security posture trends.
</li><li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus, Threat Intelligence Providers) to maintain updated of cyber defense threat condition and determine which security issues may have an impact on the enterprise.
</li><li>Provides cybersecurity recommendations based on significant threats and vulnerabilities.
</li><li>Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operational Plans.
</li><li>Collect and analyze intrusion artifacts (e.g., source code, malware, and system configuration) and use discovered data to enable mitigation of potential cyber incidents within the enterprise.
</li><li>Use specialized equipment and techniques to catalog, document, extract, collect, package, and preserve digital evidence.
</li></ul>Utilize deployable forensics toolkit to support operations as necessary</div>
 <div>Knowledge
<ul><li>Security concepts such as cyber-attacks and techniques, threat vectors, risk and threat management, incident management etc.
</li><li>Networking concepts and protocols, and network security attacks, vulnerabilities, processes, methodologies, access control mechanisms, traffic analysis methods.
</li><li>Cyber threats and vulnerabilities and information dissemination sources (e.g., alerts and advisories).
</li><li>Cyber defense and vulnerability assessment tools and their capabilities.
</li><li>System and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
</li><li>Scripting languages (e.g., Python, Perl, Bash) used in an incident response environment
</li><li>Incident response and handling methodologies.
</li><li>Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools, applications, methodologies and techniques for detecting host and network-based intrusions.
</li><li>Threat investigations, reporting and investigative tools.
</li><li>Cyber defense and information security policies, procedures, and regulations.
</li><li>Common attack vectors, the different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks) and attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
</li><li>Cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored), and attackers&rsquo; methodologies.
</li><li>Signature implementation impact for viruses, malware, and attacks.
</li><li>Windows/Unix ports and services.
</li><li>Relevant laws, legal authorities, restrictions, and regulations pertaining to cyber defense activities.
</li><li>Packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
</li><li>Use of sub-netting tools.
</li><li>Penetration testing principles, tools, and techniques.
</li><li>Investigation, auditing and forensics methods, processes, procedures and standards.
</li><li>Different types of hardware, storage, imaging and file system analysis.
</li><li>Data backup and recovery.
</li></ul>Skills
<ul><li>Using SIEM/SOAR and Vulnerability Management tools and services.
</li><li>Sysadmin skills (Linux/Mac/Windows).
</li><li>Programming skills (Python, Ruby, PHP, C, C#, Java, Perl, and more).
</li><li>Identifying, analyzing and interpreting trends or patterns in complex data sets.
</li><li>Developing and deploying signatures.
</li><li>Detecting host and network-based intrusions via intrusion detection technologies (e.g., Snort).
</li><li>Using incident handling methodologies.
</li><li>Collecting data from a variety of cyber defense resources.
</li><li>Recognizing and categorizing types of vulnerabilities and associated attacks.
</li><li>Performing packet-level analysis.
</li><li>Conducting trend analysis.
</li><li>Using cyber defense reporting structure and processes.
</li><li>Utilizing a combination of automated and manual testing methods.
</li><li>Developing automated vulnerability testing scripts and using off the shelf vulnerability testing tools.
</li><li>Conducting vulnerability scans and recognizing vulnerabilities in networks, systems and applications.
</li><li>Using of penetration testing tools and techniques.
</li><li>Applying analytical and problem-solving skills.
</li></ul>Ability
<ul><li>Collaborate with other sections across the department to enhance detection capabilities.
</li><li>Perform Malware analysis.
</li><li>Work closely with management to respond appropriately to the results of assessments and mitigation oversight of found vulnerabilities.
</li><li>Perform data analysis, correlation, and analytics leveraging Security Information and Event Management (SIEM) tools.
</li><li>Conduct vulnerability scans and recognize vulnerabilities in security systems &amp; devices.
</li><li>Accurately and completely source all data used in intelligence, assessment and/or planning products.
</li><li>Apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
</li><li>Interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
</li><li>Prepare and create regular reports to document any security breaches/ incidents.
</li><li>Provide forensic support to Cyber Security Operations during the investigation of any detected threat or contained incident / event to determine root cause and propose response recommendations as required.
</li></ul>Education and Certification
<ul><li>Bachelor&rsquo;s degree in an information technology, computer science, cyber security or equivalent work experience.
</li><li>CompTIA Security+
</li><li>CISSP: Certified Information Systems Security Professional
</li><li>GCFA: GIAC Certified Forensic Analyst
</li><li>GCIH: GIAC Certified Incident Handler
</li><li>GCIA: GIAC Certified Intrusion Analyst
</li><li>OSCP: Offensive Security Certified Professional
</li><li>CEH: Certified Ethical Hacker
</li><li>CPT: Certified Penetration Tester
</li></ul>Experience
<ul><li>3 years of experience in cyber security operations with expertise in managing the Security Operations Center
</li><li>UAE experience preferred.</li></ul></div>

Information Security Specialist

Akima

<div>Company Overview:
<div></div><div>
Akima Data Management (ADM), an Akima company, is not just another federal IT contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</div><div></div><div> 
At ADM, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</div><div></div><div> 
For our shareholders, ADM provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</div><div></div><div> 
For our government customers, ADM delivers agile and innovative cloud and IT services and solutions that enable mission dominance.</div><div></div><div> 
As an ADM employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</div>
Description:

Akima Data Management (ADM) is seeking a highly skilled and mission‑focused Information System Security Officer (ISSO) to support and oversee cybersecurity Governance, Risk, and Compliance (GRC) activities across Department of War (DoW) Office of Inspector General (OIG) information systems. The ISSO will ensure systems adhere to federal, DoW, and organizational cybersecurity requirements by developing security documentation, validating controls, supporting audits, and guiding risk mitigation efforts. 
The ideal candidate brings deep knowledge of cybersecurity frameworks, strong communication skills, and the ability to collaborate with technical teams, leadership, and external stakeholders. This role is essential to safeguarding OIG&rsquo;s mission‑critical systems and ensuring secure, compliant, and resilient operations across ashore and afloat environments. 
To join our team of outstanding professionals, apply today!
Responsibilities:
<ul><li>Develop, maintain, and enforce cybersecurity policies, plans, standards, and procedures to protect systems and sensitive information.</li><li>
Create, update, and manage System Security Plans (SSPs) and all ISSO‑related documentation in alignment with NIST, FISMA, and DoD frameworks.</li><li>
Ensure all security documentation remains accurate, complete, and audit‑ready throughout the system lifecycle.</li><li>
Conduct and support security risk assessments, vulnerability analyses, and compliance reviews.</li><li>
Document, prioritize, and track remediation of findings to ensure alignment with mission and regulatory requirements.</li><li>
Provide expert guidance on security controls, compliance strategies, and risk mitigation approaches.</li><li>
Support the development, management, and closure of Plan of Actions and Milestones (POA&amp;Ms).</li><li>
Coordinate and support internal and external audits, inspections, and assessments.</li><li>
Prepare and maintain evidence repositories, artifacts, and audit‑ready documentation.</li><li>
Ensure timely responses to findings and drive corrective actions to closure.</li><li>
Collaborate with system administrators, engineers, and development teams to ensure proper implementation and validation of security controls.</li><li>
Review system architectures, configurations, and processes to ensure compliance with applicable frameworks and best practices.</li><li>
Support continuous monitoring activities, including ongoing control assessments and documentation updates.</li><li>
Provide oversight of security incident monitoring, investigation, response, and reporting.</li><li>
Ensure timely mitigation actions and integration of lessons learned into security processes.</li><li>
Serve as a trusted advisor to leadership on emerging threats, regulatory changes, and security posture improvements.</li><li>
Act as a primary communicator with clients, leadership, and external stakeholders on cybersecurity requirements and system security status.</li><li>
Deliver clear updates, briefings, and recommendations to ensure alignment between cybersecurity activities and mission objectives.</li><li>
Translate complex security requirements into actionable guidance for technical and operational teams.</li><li>
Educate and train personnel on information security best practices, compliance requirements, and secure system operations.</li><li>
Monitor emerging technologies, policies, and threat trends to recommend enhancements to the organization&rsquo;s security posture.</li></ul>
Qualifications:
<ul><li>Active TOP SECRET with SCI clearance (required).</li><li>
Bachelor&rsquo;s degree and at least 5-10 years of relevant experience, or 10+ years of experience in lieu of a degree.</li><li>
IAM Level III certification (e.g., CGRC, CASP+ CE, CISSP, CISM) required; IAT Level III preferred.</li><li>
Strong understanding of NIST, FISMA, DoD, and organizational cybersecurity frameworks.</li><li>
Experience developing and maintaining SSPs and other RMF documentation.</li><li>
Strong communication, analytical, and documentation skills.</li></ul>
Job ID: 2026-22943 Work Type: Hybrid</div>

Information System Security Officer - TOP SECRET Clearance REQUIRED with SCI

<div>
 At EY, we&rsquo;re all in to shape your future with confidence.
 
 
 We&rsquo;ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
 
 
 Today&rsquo;s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of almost 1,100 people who collaborate to support the business of EY by protecting EY and client information assets! Our Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond to security events as they happen. Together, the efforts of our dedicated team help protect the EY brand and build client trust.
 
 
 Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting, and enabling the business through innovative, secure solutions that provide speed to market and business value.
 
 
 
 The opportunity
 
 
 
 To create opportunity for people starting their careers in this area of technology, we are launching an intensive paid learning program that invests in our new joiners to upskill with the latest learnings. This unique opportunity provides paid virtual, classroom and exercise-based learning in key areas of technology, communication and collaboration. Distinct technical learning paths focused on high demand areas Information Security culminate in graduation to a role where applied practice begins.
 
 
 
 What qualifications are required for this opportunity?
 
 
 
 <ul>
 <li>
 Advanced level English (verbal and written)
 </li>
 <li>
 Love for learning and applying technology.
 </li>
 <li>
 Passion for finding and solving problems.
 </li>
 <li>
 Dedication to protect our data, our client&rsquo;s data, and the infrastructure it resides on
 </li>
 <li>
 Enjoyment working as a member of a local team that is part of a larger global team.
 </li>
 <li>
 Desire to eliminate needless toil and make the world a better place.
 </li>
 <li>
 Purpose driven, self-motivated and goal oriented.
 
 
 </li>
 </ul>
 
 What else could you bring?
 
 
 
 <ul>
 <li>
 Experience with a scripting or programming language.
 </li>
 <li>
 Knowledge of automation and continuous integration tools
 </li>
 <li>
 Familiarity with Information Security concepts
 </li>
 <li>
 Knowledge about the importance of vulnerability management
 </li>
 <li>
 Experience with various operating systems such as Windows and Linux
 </li>
 <li>
 Desire to connect with globally diverse people
 </li>
 <li>
 Energized by challenges and fast paced tempo
 
 
 </li>
 </ul>
 
 Why you might like working here:
 
 
 
 <ul>
 <li>
 Our culture encourages autonomy and fun. Happy people make it happen!
 </li>
 <li>
 We invest in you. Learning supported by a coach culminates in an exciting placement on a team.
 </li>
 <li>
 Build your skills and experience at a world class technology company as a member of a global team.
 </li>
 <li>
 A wide variety of career paths with easy access to change roles and/or progress your career.
 </li>
 <li>
 Develop non-technical skills including communication, agile ways of working, cultural &amp; emotional intelligence, customer service, time management, leadership, design &amp; documentation and more.
 </li>
 <li>
 Social events like hackathons, team lunches, holiday parties, community volunteering and more.
 </li>
 <li>
 Being part of an organization where our purpose of Building a better working world is the foundation of our culture.
 
 
 </li>
 </ul>
 
 What We Look For
 
 
 
 We&rsquo;re looking for someone who can collaborate globally with different regions and cultures with an open mind and a creative approach. Critical thinking and problem-solving skills are vital traits to be successful. An individual with strong customer service and communication skills who will share their thoughts and ideas in a safe working environment. A highly motivated, diligent, and driven individual who seeks development and improvement opportunities and deliver quality services
 
 
 
 What We Offer You
 
 
 
 The compensation ranges below are provided in order to comply with United States pay transparency laws. Other geographies will follow their local salary guidelines, which may not be a direct conversion of published US salary ranges. At EY, we&rsquo;ll develop you with future-focused skills and equip you with world-class experiences. We&rsquo;ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.
 
 
 <ul>
 <li>
 We offer a comprehensive compensation and benefits package where you&rsquo;ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $60,400 to $109,600. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $72,500 to $124,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
 </li>
 <li>
 Join us in our team-led and leader-enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.
 </li>
 <li>
 Under our flexible vacation policy, you&rsquo;ll decide how much vacation time you need based on your own personal circumstances. You&rsquo;ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
 
 
 </li>
 </ul>
 
 Are you ready to shape your future with confidence? Apply today.
 
 
 
 EY accepts applications for this position on an on-going basis.
 
 
 For those living in California, please click here for additional information.
 
 
 EY focuses on high-ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.
 
 
 
 EY | Building a better working world
 
 
 
 EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
 
 
 Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
 
 
 EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
 
 
 EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
 
 
 EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY&rsquo;s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
</div>

Information Security Associate - STS

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving its business objectives
 
 
 Description: This position acts as IS resource having strong concepts of web application assessments and penetration testings. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IEBX Global assets.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Conduct full scale security assessments and manual penetration testing of web, APIs, AI/LLM, mobile applications.
 </li>
 <li>
 Participate in red team and automated pentest exercises internally or by third party.
 </li>
 <li>
 Active coordination for any third party penetration testing exercises.
 </li>
 <li>
 Using open source tools, scripts and techniques to enumerate and map publically exposed assets and vulnerability surface.
 </li>
 <li>
 Coordination with IT infrastructure &amp; development teams for remediation.
 </li>
 <li>
 Reviewing application design and flow to identify business logic flaws.
 </li>
 <li>
 Using various tools for vulnerablilty scanning of IT assets and dynamic/static application assessments.
 </li>
 <li>
 Support development teams for secure coding practices.
 </li>
 <li>
 Perform Cloud security review and prepare reports with gaps and remediation guidelines.
 </li>
 <li>
 Fair understanding with prompt injection, adversarial input, model inversion, hallucination attacks for LLM testing
 </li>
 <li>
 Familiarly with Gen-AI applications security assessment.
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 EducationBachelors Degree in IT/CS/Software Eng./TelecomExperience3-5 years in IT Security fieldSkills and Abilities-- Must have a passion to work in the IT Security field
 
 
 <ul>
 <li>
 Does have experience in
 </li>
 <li>
 Penetration testing
 </li>
 <li>
 Vulnerability Assessment
 </li>
 <li>
 Burp Pro and other pentest tools
 </li>
 <li>
 Source Code Analysis tools
 </li>
 <li>
 OWASP strong understanding
 
 
 </li>
 </ul>
 '-- Must have good presentation skills
 
 
 <ul>
 <li>
 OSCP/OSWP/CEH (Practical) certification is required.Reporting Time03:00 PM-12:00 am (PKST)
 </li>
 </ul>
</div>

IT Security Specialist, IT

Search 10000+ Information systems security specialist jobs near you this May. New roles added regularly across leading industries. Apply today.