security assurance specialist

Vanguard

<div><div>The Security Assurance Specialist III leads the end to end coordination and execution of application and infrastructure security risk assessments, ensuring consistent, timely, and high quality identification of cybersecurity risks and vulnerabilities. The role partners closely across cybersecurity, IT engineering teams, and business stakeholders to enable effective risk and vulnerability management across the enterprise. Acting as the central assessment orchestration function, the specialist manages assessment intake, prioritization, scheduling, documentation, execution tracking, reporting, and vulnerability workflow oversight. The role blends deep cybersecurity risk expertise with strong program and project management discipline, leveraging Agile and Scrum based practices to meet defined SLAs, quality standards, and reporting expectations. The Security Assurance Specialist III provides expert level technical guidance in evaluating and strengthening the security posture of Vanguard&rsquo;s systems, architectures, and configurations. This role coordinates and leads comprehensive security assessments, validates risk findings, and supports remediation strategies across critical business applications, infrastructure, networks, and web platforms. Through close collaboration with technology and business partners, the specialist influences secure solution design, drives strategic security improvements, and supports the continuous maturation of Vanguard&rsquo;s security capabilities. **this Hybrid Role (in office Tues-Wed-Thurs) is based in Charlotte, NC, Dallas, TX, or Malvern, PA**</div><div><p>
The Security Assurance Specialist III leads the end‑to‑end coordination and execution of application and infrastructure security risk assessments, ensuring consistent, timely, and high‑quality identification of cybersecurity risks and vulnerabilities. The role partners closely across cybersecurity, IT engineering teams, and business stakeholders to enable effective risk and vulnerability management across the enterprise.</p><p>
Acting as the central assessment orchestration function, the specialist manages assessment intake, prioritization, scheduling, documentation, execution tracking, reporting, and vulnerability workflow oversight. The role blends deep cybersecurity risk expertise with strong program and project management discipline, leveraging Agile and Scrum‑based practices to meet defined SLAs, quality standards, and reporting expectations.</p><p></p><p>
The Security Assurance Specialist III provides expert‑level technical guidance in evaluating and strengthening the security posture of Vanguard&rsquo;s systems, architectures, and configurations. This role coordinates and leads comprehensive security assessments, validates risk findings, and supports remediation strategies across critical business applications, infrastructure, networks, and web platforms. Through close collaboration with technology and business partners, the specialist influences secure solution design, drives strategic security improvements, and supports the continuous maturation of Vanguard&rsquo;s security capabilities.</p><p></p><p>
**this Hybrid Role (in office Tues-Wed-Thurs) is based in Charlotte, NC, Dallas, TX, or Malvern, PA**</p><p></p><p><b>
Key Responsibilities:</b></p><ul><li>
Provide programmatic support and coordination for application and infrastructure security assessments.</li><li>
Own and manage the assessment lifecycle from intake through final reporting and closure.</li><li>
Coordinate assessment scheduling across multiple concurrent engagements, balancing priorities, dependencies, and resource availability.</li><li>
Partner with application teams, infrastructure owners, and product stakeholders to gather pre‑assessment information, technical documentation, architecture diagrams, and required artifacts.</li><li>
Ensure assessment scope, assumptions, and prerequisites are clearly defined and validated prior to execution.</li><li>
Engage and coordinate assessment resources across cybersecurity and relevant IT divisions (e.g., engineering, infrastructure, cloud, platform teams).</li><li>
Act as the primary point of coordination between assessment teams and technology stakeholders to resolve scheduling conflicts, clarify requirements, and manage expectations.</li><li>
Facilitate effective communication across technical and non‑technical audiences, ensuring transparency of status, risks, and dependencies.</li><li>
Escalate risks, delays, or resource constraints in a timely and structured manner.</li><li>
Ensure accurate and timely tracking of assessment activities, milestones, and deliverables leveraging enterprise toolsets and applications.</li><li>
Maintain high data quality standards for assessment records, findings, vulnerabilities, and workflow states in assessment and vulnerability tracking platforms.</li><li>
Coordinate the publication of draft and final assessment reports, ensuring appropriate review cycles, approvals, and distribution to stakeholders.</li><li>
Support audit‑ready documentation and traceability across assessments, findings, and risk decisions.</li><li>
Support the collection, review, and routing of identified vulnerabilities through defined remediation, exception, or risk acceptance workflows.</li><li>
Coordinate vulnerability review and acceptance processes with technology owners, risk stakeholders, and governance bodies.</li><li>
Ensure vulnerabilities are properly documented, tracked, and dispositioned in alignment with enterprise risk standards and timelines.</li><li>
Monitor remediation progress and support reporting on overdue, at‑risk, or escalated items.</li><li>
Support the collection, analysis, and reporting of assessment program metrics, including throughput, cycle time, backlog, and SLA adherence.</li><li>
Produce regular operational and management reporting to support capacity planning, prioritization, and performance transparency.</li><li>
Identify trends, bottlenecks, and improvement opportunities across the assessment lifecycle.</li><li>
Contribute to the continuous improvement of assessment processes, tooling, templates, and operating procedures.</li><li>
Apply program and project management best practices to manage complex, multi‑workstream assessment activities.</li><li>
Maintain assessment roadmaps, intake queues, and execution plans aligned to business and technology priorities.</li><li>
Leverage Agile and Scrum‑style practices where appropriate, including backlog management, sprint planning, stand‑ups, retrospectives, and dependency tracking.</li><li>
Act as a Scrum Master‑like facilitator for assessment delivery, removing impediments and enabling teams to operate efficiently.</li><li>
Support change management, stakeholder communications, and readiness activities for evolving assessment methodologies or tooling.</li></ul><p></p><p><b>
Education &amp; Experience:</b></p><p>
Bachelor&rsquo;s degree in Information Security, Information Technology, Risk Management, or a related field (or equivalent experience).</p><p>
5+ years of experience in cybersecurity, IT risk management, GRC, or security assessment coordination roles.</p><p>
Demonstrated experience coordinating application and/or infrastructure security assessments in large, regulated, or complex environments.</p><p>
Hands‑on experience with GRC platforms, preferably RSA Archer, including assessment tracking, findings management, and workflow.</p><p>
Strong understanding of cybersecurity risk concepts, vulnerabilities, and control assessment practices.</p><p></p><p><b>
Preferred Qualifications &amp; Certifications:</b></p><p>
Experience working with NIST CSF, NIST 800‑53, ISO 27001, CIS Controls, or similar frameworks.</p><p>
Program or project management certifications (PMP, PgMP, PRINCE2) or Agile/Scrum certifications (CSM, SAFe, PMI‑ACP).</p><p>
Familiarity with vulnerability management, remediation tracking, and risk acceptance processes.</p><p>
Experience supporting metrics, dashboards, and SLA‑driven operational reporting.</p><p></p><p><b>
Key Skills &amp; Competencies:</b></p><p>
Program &amp; Project Management: Planning, prioritization, dependency management, and delivery execution.</p><p>
Agile / Scrum Facilitation: Backlog management, impediment removal, team coordination.</p><p>
Stakeholder Management: Ability to influence and coordinate across security, IT, and business teams.</p><p>
Operational Rigor: Attention to detail, documentation quality, and audit readiness.</p><p>
Communication: Clear, concise communication of technical risk information to varied audiences.</p><p>
Process Improvement: Continuous improvement mindset with the ability to standardize and scale operations.</p><p></p><p><b>
Special Factors</b></p><p><b>
Sponsorship</b></p>
Vanguard is not offering visa sponsorship for this position.<p></p><p><b>
About Vanguard</b></p><p>
At Vanguard, we don't just have a mission&mdash;we're on a mission.</p><p></p><p>
To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.</p><p></p><p><b>
How We Work</b></p><p>
Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.</p></div></div>

Senior Security Assurance Specialist

Microsoft

<div><b>Overview</b><p><br>
The <b>Principal Security Assurance Engineer</b> &ndash; Data Governance (USG Cloud) is a senior individual contributor responsible for defining, implementing, and operating data governance frameworks across Microsoft&rsquo;s U.S. Government cloud environments. This role ensures that data assets supporting classified and regulated government workloads are governed consistently, securely, and in compliance with U.S. Government regulatory, and contractual obligations.</p><p></p><p><br>
This position operates at the intersection of data governance, cloud security, privacy, compliance, and sovereign cloud operations, providing thought leadership and hands on execution across engineering, security, legal, compliance, and government customer stakeholders.<br>
The role requires deep expertise in regulated environments, strong systems thinking, and the ability to translate policy and regulatory requirements into scalable, operational governance mechanisms across complex cloud platforms.</p><p></p><p><br>
Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.</p><b><br>
Responsibilities</b><br>
<div><b>
Data Governance Strategy &amp; Frameworks</b></div><ul><li>
Define and maintain data governance standards, policies, and operating models for USG cloud environments, including Azure Government and classified cloud offerings.</li><li>
Establish governance controls covering data classification, ownership, stewardship, lineage, retention, residency, sovereignty, and disposal.</li><li>
Ensure alignment with Microsoft enterprise data governance principles while addressing US specific government and national security requirements.<br>
Regulatory &amp; Compliance Alignment</li><li>
Operationalize data governance controls to support compliance with FedRAMP, DoD SRG, NIST SP 800 53/171, ITAR, CJIS, HIPAA, and classified customer requirements.</li><li>
Partner with legal, compliance, and security teams to translate statutory and contractual requirements into enforceable and auditable governance mechanisms.</li><li>
Support audits, assessments, and ATO activities by providing governance artifacts, evidence, and subject matter expertise.</li><li>
Embody our culture and values.</li></ul><br>
<b>
Qualifications</b><br>
<div><b>
Required Qualifications:</b></div><div><ul><li>
Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 4+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND 6+ years experience in software development lifecycle, large scale computing, threat modeling, cyber security, or anomaly detection OR equivalent experience.</li></ul></div><p></p><div><b><br>
Other Requirements:</b></div><div>
</div><div>
Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:</div><div><ul><li>
The successful candidate must have an active U.S. Government Top Secret Clearance with access to Sensitive Compartmented Information (SCI) based on a Single Scope Background Investigation (SSBI) with Polygraph. Ability to meet Microsoft, customer and/or government security screening requirements are required pre-offer and post-hire for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.</li><li><b>
Clearance Verification:</b> This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.</li><li><b>
Microsoft Cloud Background Check:</b> This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.</li><li><b>
Citizenship &amp; Citizenship Verification:</b> This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance
</li></ul></div><div>
</div><div><b>Preferred Qualifications:</b></div><div><ul><li>
Proven experience leading data governance programs in highly regulated or sovereign environments (government, defense, intelligence, or critical infrastructure).</li><li>
Strong working knowledge of U.S. Government regulatory frameworks (e.g., NIST, FedRAMP, DoD, ITAR, export controls).</li><li>
Experience translating policy and compliance requirements into technical and operational controls.</li><li>
Ability to operate as a senior individual contributor delivering impact through influence, judgment, and execution.</li><li>
Demonstrated success driving cross organizational initiatives in complex, ambiguous environments.</li></ul></div><br>
<br>
<br>
<p>Security Assurance IC5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
</p><p></p><p>Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:<br>
https://careers.microsoft.com/us/en/us-corporate-pay</p><p><br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.</p><p></p><p><br>
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process<b>.</b></p></div>

Principal Security Assurance Engineer - CTJ - POLY

Systems Planning and Analysis, Inc. (SPA)

<div>Overview:
<p>
Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.</p><p><br>
</p><p>The Joint, Office of the Secretary of Defense, Interagency Division provides expert support services to a range of customers spanning across the Department of Defense, Federal Civilian, and international markets. JOID provides a diverse portfolio of analytical and programmatic capabilities to help our customers make informed decisions on their most challenging issues.</p><div></div><div><br>
SPAs NATO Allied Command Transformation Group within JOID provides capability development, portfolio management, program management, quality management, cost estimation analysis, standardization, reporting, software solutions and information management, and capability management support. We also provide an improved capability requirements capture process, including the generation, documentation and tracing of user requirements, with appropriate technical scrutiny, over the entire lifecycle of the requirements from capability definition through capability realization and capability usage.</div><p></p><p><br>
We have a near-term need for a CIS Accreditation Security Specialist to provide onsite support out of Allied Command Transformation, NATO in Norfolk, VA.</p>
Responsibilities:
<div>
The candidate will maintain records of the progress of a CIS through NATO security accreditation processes and the application of NATO security regulations. Will conduct reviews of security accreditation documentation for CIS and make recommendations for Security accreditation documentation including the CIS Description, Risk Assessment Results, System-Specific Security Requirements Statement, Security Operating Procedures, Security Test &amp; Validation Plan, Security Test &amp; Validation Results, Incident Reports, etc. The candidate will ensure that verification activities are properly executed and confirm that the agreed security measures have been implemented. Will provide support and guidance to CIS developers and service, note that some developers and service providers are based in Europe, contribute to updates of the statement of the security risk for ACT CIS, liaise with other roles in the Security Accreditation process, and represent the ACT Security Accreditation Authority (SAA) in NATO Enterprise meetings, either in person or via VTC.</div>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Bachelor's degree in computer science, network security, cyber-security, or related field.</li><li>
Certification in CIS security or cyber defense disciplines provided by a recognized certification scheme, as a Certified Information Systems Security Professional (CISSP), GIAC Security Expert, or ISACA Certified Information Security Manager (CISM).</li><li>
5+ years of demonstrated experience in CIS security, CIS development, or CIS service delivery.</li><li>
Within the 5 years of experience above, at least 3 years of demonstrated experience working in or in direct support of a national, international, or multi-national CIS security accreditation, certification, or similar field.</li><li>
Demonstrated proficiency in English as defined in STANAG 6001.</li><li>
Active NATO or National SECRET (or higher) security clearance.</li><li>
Valid NATO Nation passport with no travel restrictions to NATO nations.</li><li>
Able to prepare written documentation to transfer technical information about concepts, situations, products, services, or results to audiences with varying levels of technical knowledge.
</li><li>Thorough understanding of grammar, sentence structure, and intended audiences to the process of reviewing, editing, or constructively critiquing a document, publication, or message.</li><li>
Skill in clearly and effectively conveying information verbally to senior leaders; able to deliver clear, effective communication and ability to take responsibility for understanding others.</li><li>
Knowledge and ability to use computers and related technology; proficient in Microsoft Office products.</li><li>
Able to work fully onsite based on client needs.</li></ul></div><div></div>

CIS Accreditation Security Specialist

Everwatch

<div>Job Title: Information Security System Engineer Overview:
<div>
EverWatch is a government solutions company providing advanced defense, intelligence, and deployed support to our country&rsquo;s most critical missions. We are a full-service government solutions company. Harnessing the most advanced technology and solutions, we strengthen defenses and control environments to preserve continuity and ensure mission success.</div><div></div><div><br>
EverWatch employees are focused on tackling the most difficult challenges of the US Government. We offer the best salaries and benefits packages in our industry - to identify and retain the top talent in support of our critical mission objectives.</div><div></div><div><br>
Commitment to Non-Discrimination:</div><div>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>
Responsibilities:
<div>
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies and national security organizations. In all of this &ldquo;cyber noise,&rdquo; how can these organizations understand their risks and how to mitigate them? The answer is you&mdash;an information security risk specialist who will break down complex threats into manageable plans of action.</div><div></div><div><br>
As an information security risk specialist on our team, you&rsquo;ll use your experience to work with mission owners, system engineers, and government stakeholders to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll review technical, environmental, and personnel details from subject matter experts, system administrators, and network engineers to assess the entire threat landscape. Then, you&rsquo;ll guide your client through a plan of action with presentations, white papers, and milestones.</div><div></div><div><br>
You&rsquo;ll work with your client to translate security concepts, so they can make the best decisions to secure their mission-critical systems and classified information systems. This is your opportunity to act as an information security subject matter expert while broadening your skills in cloud security and cross-domain solutions.</div><div></div><div><br>
Work with us as we protect our nation&rsquo;s most critical national security systems.</div><div></div><p><br>
Join us. The world can&rsquo;t wait.</p>
Qualifications:
<p><b>
You Have:</b></p><ul><li>
Experience with serving as a security engineering representative on cross-functional teams supporting the design, development, implementation, evaluation, and integration of secure networking, computing, and multi-enclave environments</li><li>
Experience with designing, developing, and integrating Information Assurance (IA) architectures, systems, and system components in accordance with established security standards and mission requirements
</li><li>Experience with applying IA policies, procedures, and workforce structures to ensure secure system implementation and compliance with organizational and government security standards
</li><li>Experience with collaborating with customers, stakeholders, and engineering teams to define and implement system security requirements</li><li>
Knowledge of security requirements for the protection, handling, and classification of Government data, including support for multi-enclave environments with differing data protection levels</li><li>
Ability to conduct security planning, assessments, risk analysis, and risk management activities throughout the system lifecycle</li><li>
Ability to recommend and implement system-level security solutions and support certification and accreditation (C&amp;A) and security authorization activities in alignment with RMF, NIST, and NSA/CSS requirements</li><li>
TS/SCI clearance with polygraph
</li><li>High School Diploma or GED with 18+ years of experience as an ISSE, OR a Bachelor&rsquo;s degree in Computer Science, Information Assurance, Information Security Systems Engineering, Cybersecurity, or related field with 14+ years of ISSE experience</li><li>
Certified Information Systems Security Professional (CISSP)</li></ul><div></div><p><b><br>
Nice If You Have:</b></p><ul><li>
Experience with applying system security engineering principles across the full system lifecycle, including design, integration, testing, and sustainment</li><li>
Experience with cross-domain solutions, cryptographic implementations (COTS/GOTS), and secure system integration in classified environments</li><li>
Experience with intrusion detection, incident response, contingency planning, and continuous monitoring in enterprise or mission systems</li><li>
Knowledge of certification and accreditation processes, including development and review of security documentation and artifacts</li><li>
Knowledge of security tools and technologies supporting auditing, configuration management, and change control processes</li><li>
Ability to build and support security architectures that align with enterprise standards and mission objectives</li><li>
Ability to assess complex systems to identify vulnerabilities, recommend mitigations, and improve overall security posture</li><li>
Ability to communicate technical security concepts effectively to both technical and non-technical stakeholders</li></ul><p></p><p><b><br>
Clearance:</b></p><div>
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance with a polygraph is required.</div><div></div><div><br>
Compensation at EverWatch is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86.54 to $100.97 per hour. The estimate displayed represents the typical compensation range for this position and is just one component of EverWatch&rsquo;s total compensation package for employees.</div><br>
<p></p>
Clearance Level: TS/SCI FSP Job Locations: US-MD-Annapolis Junction Skills: RMF, NIST800-53, Information Assurance, Risk Management</div>

Information Security System Engineer

Astrion

<div>
 <strong>
  Overview
  <br/>
  <br/>
 </strong>
 <strong>
  Cybersecurity Specialist
  <br/>
  <br/>
 </strong>
 <strong>
  Type:
 </strong>
 Full-Time, Regular
 <br/>
 <br/>
 <strong>
  Location:
 </strong>
 Robins AFB, GA
 <br/>
 <br/>
 <strong>
  Clearance:
 </strong>
 Top Secret
 <br/>
 <br/>
 <strong>
  Program:
 </strong>
 EPASS 75
 <br/>
 <br/>
 Astrion has an exciting opportunity for
 <br/>
 <br/>
 &Acirc; an experienced DoD
 <strong>
  Cybersecurity Specialist
 </strong>
 to join our team supporting the efforts of the
 <strong>
  EPASS75
 </strong>
 program located onsite at Robins AFB in
 <strong>
  Warner Robins, GA
  <br/>
  <br/>
 </strong>
 <strong>
  Required Qualifications / Skills
  <br/>
  <br/>
 </strong>
 <strong>
  Education:
 </strong>
 Bachelor's or Master's
 <br/>
 <br/>
 degree
 <br/>
 <br/>
 <strong>
  Experience:&Acirc;
 </strong>
 3 yrs relevant experience in DoD environment with proper certifications; 7 years of directly related experience with proper certifications, 5 yrs relevant in DoD
 <br/>
 <br/>
 <strong>
  Certifications:
 </strong>
 Information Assurance Manager (IAM) Level III certification and 8140/DODM8140.03 baseline certification (CISSP) are preferred
 <br/>
 <br/>
 <strong>
  Clearance:
 </strong>
 Active Top Secret(Tier 5); US citizenship required in this instance.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Evaluate the technical implementation of the security design
  </li>
  <li>
   Evaluate the ability of the security architecture of designs and solutions to defend
  </li>
  <li>
   Support the identification of current and future cyber analyses
  </li>
  <li>
   Maintain Assessment and Authorization (A&amp;A) documentation required for compliance
  </li>
  <li>
   Track the accreditation status of the aircraft system(s) and submit accreditations
  </li>
  <li>
   Support the execution of Cybersecurity RMF and A&amp;A for the SOF/PR aircraft platforms and mods
  </li>
  <li>
   Provide support to Platform Information Technology (PIT) A&amp;A
  </li>
  <li>
   Perform site audits to verify architecture analysis, security requirements and controls, verify mitigation actions, witness cybersecurity T&amp;E, and to support approval for IATT, IATO and/or ATOs
  </li>
  <li>
   Document and report cybersecurity site audit findings and recommendatio
   <br/>
   <br/>
  </li>
 </ul>
 ns
 <br/>
 <br/>
 LI-LP1
 <br/>
 <br/>
 CJ
</div>


Cybersecurity Specialist

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><div>
The AWS Security Messaging team is seeking a high-judgment, high-performing individual to lead strategic communication initiatives for the largest cloud provider in the world. This role requires a blend of technical knowledge, passion for incorporating AI and automation into their workflows, security fundamentals and public communications experience, as well as stakeholder management and influence skills.<br>
<br>
This is a highly visible team, involved in curation, management and approval of time sensitive security communications for external AWS customers, working alongside Security Incident Response Teams, engaging with Senior Security and Business Leadership, and advocating for the best for our AWS customers. The Security Communications PM owns the communication strategy and lifecycle, drives process improvement, and bolsters the maturity of the program. A successful candidate considers business and brand risk when making recommendations, efficiently produces quality deliverables, proactively removes roadblocks, and handles competing priorities in a dynamic environment.<br>
<br>
Key job responsibilities<br>
<ul><li>Advises on communications strategy, managing unpredictable issues and addressing blockers</li><li>Translates complex technical concepts into digestible, audience-appropriate messages</li><li>Successfully aggregates data from multiple sources to enable effective decision making</li><li>Drives continuous improvement by embracing new strategies, tools, and processes</li><li>Regularly tracks, analyzes and reports on progress against goals, and overall program health for team business reviews and reports</li><li>Continuously identifies opportunities to optimize and enhance the Security Messaging workflow through AI, automation and simplified solutions</li></ul><br>
A day in the life<br>
On any given day you will be involved in working through a queue of security messaging requests, engaging with incident responders and vulnerability management experts, driving discussions with service teams and security leadership. This is a highly visible role where you have the opportunity to deliver impact through accurate, quality security communications for our customers.
<br>
<br>
About the team<br>
Diverse Experiences<br>
AWS Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why AWS Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.<br>
<br>
Inclusive Team Culture<br>
In AWS Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>Bachelor's degree</li><li>3+ years of recent professional communications or public relations experience</li><li>5+ years working in an information technology, cloud computing and/or information security environment</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of Security Incident Response processes, experience of drafting security communications, reactive security communications, proactive security communications</li><li>Actively experimenting with GenAI tools to enhance the communications workflow</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, VA, Arlington - 76,600.00 - 134,000.00 USD annually<br>
USA, VA, Herndon - 76,600.00 - 134,000.00 USD annually<br>
USA, WA, Seattle - 82,700.00 - 134,000.00 USD annually</div><p></p>

Security Communications Specialist, AWS Security Messaging, AWS Security Messaging

Instawork Internal

<div><div><p>Instawork is on a mission to create meaningful economic opportunities for skilled hourly professionals in communities around the globe. Our AI-powered labor marketplace helps local businesses scale, and enables global technology companies to push the frontiers of robotics and AI. Backed by world-class investors like Benchmark, Spark Capital, Craft Ventures, Greylock, Y Combinator, and others, we&rsquo;re looking for exceptional talent to reimagine the way the world works.</p></div><div><p>
At Instawork, the safety of our marketplace is our highest priority. We are looking for a Trust &amp; Safety Specialist who is, first and foremost, a meticulous and objective investigator. You will be responsible for protecting our community by resolving complex safety incidents with a firm commitment to evidence and policy.</p>
<p>
To excel at the scale we operate, you must be highly proficient in modern operational leverage. This means using vibe coding (Natural Language to SQL) and AI-driven automation to gather facts, synthesize data, and streamline your workflow. We aren't looking for someone to just follow a manual&mdash;we want an investigator who uses the latest technology to find the truth faster and more accurately.</p>
<h3 class="jobSectionHeader"><b>
Who You Are:</b></h3>
<ul><li><b>The Master Investigator:</b> You have a &quot;detective&quot; mindset. You know how to weigh conflicting evidence, identify biases, and reach a fair conclusion under pressure.</li>
<li><b>AI-Native &amp; Tech-Fluent:</b> You are proficient in using AI to enhance your productivity. You understand how to use natural language to interface with data (vibe analytics) and automate repetitive administrative tasks.</li>
<li><b>High Agency:</b> You take extreme ownership of your cases. You don't just &quot;process&quot; a ticket; you solve the underlying problem.</li>
<li><b>Experience:</b> 3+ years in Trust &amp; Safety, Operations, or Compliance. Experience communicating with external stakeholders (clients, legal, or law enforcement) is a must.</li>
<li><b>Data-Inquisitive:</b> You are comfortable navigating internal systems and using data to build a narrative of facts.</li>
</ul><h3 class="jobSectionHeader"><b>What You&rsquo;ll Do:</b></h3>
<ul><li><b>Lead Complex Investigations:</b> Your primary focus is the end-to-end resolution of safety incidents. You will conduct objective, unbiased, and thorough evidence-based investigations to protect all stakeholders on the platform.</li>
<li><b>Evidence-Based Resolution:</b> Manage escalated support tickets with a cool head. You will communicate clearly and consistently with professionals and partners, ensuring that resolutions are grounded in facts and aligned with our terms.</li>
<li><b>Vibe Analytics (NL-to-SQL):</b> Proactively interrogate our databases using natural language to generate SQL queries. You will pull your own data to identify fraud patterns and safety trends without needing a technical intermediary.</li>
<li><b>Policy Stewardship:</b> Act as a subject matter expert on Instawork&rsquo;s Community Guidelines. You will apply these policies with precision and help evolve them as the marketplace grows.</li>
<li><b>Automated Workflow Design:</b> Identify manual bottlenecks in the investigation process and use AI or low-code automation to build scalable enforcement solutions.</li>
</ul><h3 class="jobSectionHeader"><b>For CA-based applicants:</b></h3>
<ul><li>The base salary for this position is $90,000 - $100,000</li>
<li>This position is eligible for equity in the form of stock options</li>
<li>This position is eligible for Instawork benefits, including:</li>
<li><ul><li>A variety of medical, dental, and vision plans with coverage beginning on the date of hire</li>
<li>Flexible paid time off and paid company holidays</li>
<li>Phone stipend</li>
<li>Commuter stipend</li>
<li>Supplemental pay on qualified leaves</li>
<li>Employee health savings accounts (HSA) contribution</li>
<li>Flexible spending plans</li>
<li>401K plan</li>
<li>Employee discount program</li>
</ul></li>
</ul><p>#LI-Onsite</p></div><div><p><b>
Our Values</b></p>
<ul>
<li><p><b>Empathy, Trust &amp; Candor</b><br>
We put ourselves in the shoes of our colleagues and customers and don&rsquo;t shy away from uncomfortable conversations, instead building trust through honest and direct feedback.</p>
</li>
<li><p><b>Bias for Action</b><br>
We practice high-velocity decision-making, clear-eyed that we often operate with incomplete information. Growing quickly means it&rsquo;s OK to be wrong, so long as we learn from our mistakes and course correct!</p>
</li>
<li><p><b>Always Be Learning</b><br>
We&rsquo;re a curious bunch, and with AI transforming our workplace we encourage everyone to learn from each other, compounding our knowledge and experience to help us change an entire industry.</p>
</li>
<li><p><b>Act Like an Owner</b><br>
We work long, hard, and smart, building products that delight our users and drive growth. Your ability to impact Instawork is limited only by your courage and conviction, not your job description.</p>
</li>
</ul><p><b>About Instawork</b></p>
<p>
Founded in 2015, Instawork is the nation&rsquo;s leading online labor marketplace for food services, hospitality, light industry, and logistics, connecting more than 7M skilled workers with local restaurants, hotels, warehouses, stadiums, and more. Our AI-powered platform serves thousands of businesses across more than 50 major markets in the United States and Canada. We're not just helping fill shifts, we're supporting local economies&mdash;and we're just getting started!</p>
<p>
Instawork has been featured by CBS News, The Wall Street Journal, The Washington Post, and the Associated Press. Forbes included us on their Next Billion Dollar Startups list; RetailTech Breakthrough named us Workforce Hiring Solution of the Year for 2025; and Inc. 5000 recognized us as one of the country's top 10% fastest-growing companies two years in a row. But what matters most is our impact. We're solving real problems for real people, and we&rsquo;re doing it at scale.</p>
<p>
Join our team to help us build something that matters! We&rsquo;re looking for superstars who want to help us shape the future of work. With hubs in San Francisco, Bangalore, and Chicago, city offices in New York, Phoenix, and Singapore, we're back to working together in-person five days a week because we believe the best ideas happen when great people collaborate face-to-face. We also value diverse perspectives and encourage applications from candidates of all backgrounds.<br>
<br>
Ready to make an impact? Learn more at www.instawork.com/about.</p>
<p>
Personnel Privacy Policy</p></div></div><p></p>

Trust & Safety Specialist New

Search 10000+ Security assurance specialist jobs near you this March. New roles added regularly across leading industries. Apply today.