data engineer

software engineer

data & cloud engineer

advanced software engineer - ios Jobs in New York

advanced software engineer - ios

advanced software engineer - peoplesoft Jobs in New York

advanced software engineer - peoplesoft

security engineer

Memorial Sloan Kettering Cancer Center

<p>Department: Informatics &amp; Information Technology
Location: New York, NY
Salary: 124,000.00 - 204,700.00 USD Annual</p>
<br><div><div><div><h5 class="jobSectionHeader"><b>Job details</b></h5>
<div><div><div><div><div><div><div><p><b>About Us:</b></p></div></div></div></div></div></div></div><p><br>
</p><p>The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursue our mission at MSK and around the globe.</p><p><br>
</p><div><div><p><b>Exciting Opportunity at MSK:</b><b> </b><b>Cyber Security Engineer II</b></p></div><p></p><div><p>
Join MSK&rsquo;s cutting‑edge Digital &amp; Technology team and play a pivotal role in safeguarding systems that support world‑leading cancer care! As a Cyber Security Engineer II, you&rsquo;ll dive deep into complex technologies, solve challenging security problems, and directly influence enterprise‑wide protections that keep patients, clinicians, and critical research safe every day.</p></div><p></p><div><p><b><br>
Role Overview</b></p></div><p></p><div><ul><li><p>
Apply deep technical knowledge to secure systems and network architecture across diverse platforms.</p></li></ul></div><div><ul><li><p>
Work independently toward defined cybersecurity objectives with domain-level expertise.</p></li></ul></div><div><ul><li><p>
Contribute actively to technical discussions within multidisciplinary engineering teams.</p></li></ul></div><div><ul><li><p>
Strengthen solutions through hands-on development, design improvements, and implementation.</p></li></ul></div><div><ul><li><p>
Support and execute security projects, enterprise architecture, POCs, and remediation efforts.</p></li></ul></div><div><ul><li><p>
Assist with threat investigations, incident response, and vulnerability management activities.</p></li></ul></div><div><ul><li><p>
Develop and update organizational security policies, standards, and technical guidance.</p></li></ul></div><div><ul><li><p>
Provide rotating 24/7 support for enterprise security operations and documentation.</p></li></ul></div><p></p><div><p><b><br>
Key Qualifications</b></p></div><p></p><div><ul><li><p>
Hands-on experience with secure architecture across OS, cloud, network, database, and application layers.</p></li></ul></div><div><ul><li><p>
Proficiency in at least one scripting or programming language (Python, Perl, Shell/PowerShell, C/C++, Assembly).</p></li></ul></div><div><ul><li><p>
Experience participating in security incident response, vulnerability remediation, and security operations.</p></li></ul></div><div><ul><li><p>
Working knowledge of Scaled Agile practices, including Scrum and Kanban.</p></li></ul></div><div><ul><li><p>
Ability to support enterprise security systems in a rotating on‑call schedule.</p></li></ul></div></div><p></p><div><div><p><b><br>
Core Skills</b></p></div><p></p><div><ul><li><p>
Strong problem-solving ability with the capacity to improve solutions and operate at subsystem-level depth.</p></li></ul></div><div><ul><li><p>
Effective collaborator who can confidently contribute in technical team conversations.</p></li></ul></div><div><ul><li><p>
Ability to understand complex technical discussions and generate actionable insights.</p></li></ul></div><div><ul><li><p>
Commitment to ongoing learning and staying current with new security technologies and methods.</p></li></ul></div><div><ul><li><p>
Clear communicator able to document architectures, processes, and assessments thoroughly.</p></li></ul></div><p></p><div><p><b><br>
Additional Information:</b></p></div><p></p><div><ul><li><p>
Schedule: 9:00 AM &ndash; 5:00 PM EST, Monday - Friday</p></li></ul></div><div><ul><li><p>
Location: Hybrid: 3 times a week on site between NYC and Westchester MSK locations</p></li></ul></div><div><ul><li><p>
Reporting To: Supervisor, Patient Financial Services</p></li></ul></div><p></p><div><p><b><br>
Helpful Links:</b></p></div><p></p><div><ul><li><p>
Compensation Philosophy</p></li></ul></div><div><ul><li><p>
Benefits</p></li></ul></div></div><p><br>
</p>Pay Range: $121,400.00 - $200,400.00<p><br>
</p>FSLA Status: Exempt<p><br>
</p><p><b>Closing</b>:
</p><p></p><p>At MSK, we believe in fair, competitive pay that reflects your job, experience, and skills.</p><p></p><p>
MSK is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status or any other factor which cannot lawfully be used as a basis for an employment decision.</p><p></p><p>
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</p>
</div></div><div><div><div><div><p>Application Process</p>
<div><div><div><ul><li><div><b>01</b></div>
<div><p><b>Step 1:</b></p>
<p>Complete an Online Application</p>
</div></li><li><div><b>02</b></div>
<div><p><b>Step 2:</b></p>
<p>Interview Process</p>
</div></li><li><div><b>03</b></div>
<div><p><b>Step 3:</b></p>
<p>Provide References</p>
</div></li><li><div><b>04</b></div>
<div><p><b>Step 4:</b></p>
<p>Extension of Job Offer</p>
</div></li><li><div><b>05</b></div>
<div><p><b>Step 5:</b></p>
<p>Onboarding</p>
</div></li><li><div><b>06</b></div>
<div><p><b>Step 6:</b></p>
<p>New Employee Orientation</p></div></li></ul></div></div></div></div></div></div></div></div><div></div>

Cyber Security Engineer II

Synchrony

<div><p>Job Description:</p><p></p><p><b>
Role Summary/Purpose:</b></p><p></p><p>
The VP, Staff Endpoint Security Engineer, will be part of the company&rsquo;s wide endpoint security program that safeguards the organization&rsquo;s systems, networks, and data. Skilled and proactive Security Engineer with expertise in Endpoint Detection and Response (EDR), Application Experience Monitoring (AEM), File Integrity Monitoring (FIM), and IT Operations Management (ITOM). This role ensures operational and technical stewardship over a portfolio of Information Security services, driving Operational Excellence across all capabilities within the domain. The VP will also serve as a trusted advisor and collaborator to peers, executive leadership, and stakeholders throughout the organization.</p><p></p><p><b><i>
Our Way of Working</i></b></p><p></p><p><b><i>
We&rsquo;re proud to offer you flexibility. At Synchrony, our way of working allows you to have the option to work from home near one of our Hubs or come into one of our offices. Occasionally you will be required to commute or travel for in person engagement activities such as business or team meetings, training and culture events.</i></b></p><p></p><ul><li><b><i>Field Sales and some Commercial team roles may have varied location requirements based upon partner obligations or preferences.</i></b></li></ul><p></p><p><b>
Essential Responsibilities:</b></p><div><div><ul><li><p>
Champion Operational Excellence by identifying efficiencies and synergies through automation, collaboration, and orchestration.</p></li><li><p>
Identify operational problems and clearly articulate well-founded solutions and recommendations.</p></li><li><p>
Collaborate with architecture and engineering teams to identify capability gaps, define requirements, develop solutions, and support proof-of-concept testing.</p></li><li><p>
Partner with peers to prioritize workloads effectively using agile processes, ensuring timely escalation of risks, impediments, and requests leadership.</p></li><li><p>
Design, implement, and maintain metrics (e.g., alerting, monitoring) to measure and report on adherence to service SLAs/SLOs, performance, and operational efficiency.</p></li><li><p>
Manage and evolve technology solutions end-to-end, identifying gaps and overlaps within the tech stack and coordinating cross-technology integration.</p></li><li><p>
Lead root cause analysis initiatives to reduce downtime, enhance resiliency, and cultivate a culture of continuous improvement.</p></li><li><p>
Drive incident response progress and resolve support escalation cases efficiently.</p></li><li><p>
Establish and communicate platform health reporting, dashboards, and key operational indicators.</p></li><li><p>
Provide day-to-day operational support for security tools and processes, ensuring superior customer service and identifying process improvements.</p></li><li><p>
Mentor team members and act as a subject-matter expert across the Information Security organization.</p></li><li><p>
Deploy, configure, and manage <b>Endpoint Detection and Response (EDR) solutions</b> to continuously monitor and respond to threats on endpoints across the enterprise. Analyze security alerts and conduct threat hunting activities to identify potential incidents. Collaborate with incident response teams for containment, eradication, and recovery.</p></li><li><p>
Implement and maintain Application Experience Monitoring (AEM) tools to monitor application performance and security-related metrics. Correlate application data with security events to identify anomalous behaviors that may indicate security threats.</p></li><li><p>
Configure and manage File Integrity Monitoring (FIM) solutions to detect unauthorized changes to critical system and application files. Develop and maintain baselines and alerting criteria for integrity monitoring.</p></li><li><p>
Support IT Operations Management (ITOM) platforms and processes that integrate security controls with operational workflows. Work with cross-functional teams to automate security operations and incident handling.</p></li><li><p>
Perform additional duties and special projects assigned.</p></li></ul></div></div><p></p><p><b>
Qualifications/Requirements:</b></p><div><div><ul><li><p>
Bachelor of Science in Computer Science, Engineering, or a related field with at least 3 years of relevant technology experience, or</p></li><li><p>
High School Diploma/GED with a minimum of 5 years&rsquo; technology experience, including at least 2 years in Information Security or related roles.</p></li><li><p>
Proven excellence in devising holistic security directions and strategies that encompass a wide range of technical and organizational considerations.</p></li><li><p>
Outstanding interpersonal and collaboration skills demonstrated consistent and successful collaboration across teams on cross-functional security initiatives.</p></li><li><p>
Demonstrated ability to solve complex and intricate security problems that demand innovative solutions.</p></li><li><p>
Notable technical leader with demonstrated effective communication and influence at all levels across the organization.</p></li><li><p>
Highly regarded as a subject matter expert with deep knowledge of the enterprise technology stack.</p></li><li><p>
Recognized for their ability to teach, mentor, grow, and provide advice to other domain experts and individual contributors</p></li><li><p>
Strong ability to adapt to evolving circumstances, technologies, and strategic priorities, while leading complex initiatives</p></li><li><p>
Demonstrate strong conflict management abilities within high-impact initiatives</p></li><li><p>
Proven experience in managing and supporting EDR, AEM, FIM, and ITOM systems.</p></li><li><p>
Strong knowledge of endpoint security technologies, network security principles, and monitoring tools.</p></li><li><p>
Experience with security incident detection and response processes.</p></li><li><p><b>
Ability and flexibility to travel for business as required</b></p></li></ul></div></div><p></p><p><b>
Desired Characteristics:</b></p><div><ul><li><p>
Strong engineering and/or architecture background with hands-on experience designing, building, and managing cybersecurity solutions.</p></li><li><p>
In-depth understanding of information security practices, policies, risk management, and threat landscapes.</p></li><li><p>
Proficiency in modern programming/scripting languages, especially Python.</p></li><li><p>
Familiarity with public cloud platforms (e.g., AWS, Azure, GCP) from both infrastructure and development perspectives.</p></li><li><p>
Experience with operational disciplines including incident management, problem management, change management, and system monitoring.</p></li><li><p>
Exceptional problem-solving and analytical skills, with a creative and independent mindset while thriving in team environments.</p></li><li><p>
Ability to prioritize and deliver under pressure across multiple simultaneous projects.</p></li><li><p>
Strong verbal and written communication skills with a collaborative approach.</p></li><li><p>
Leadership experience with a track record of mentoring technical teams and influencing cross-functional stakeholders.</p></li></ul></div><p></p><p><b>
Grade/Level: 12</b></p><p></p><p>
The salary range for this position is <b>135,000.00 - 230,000.00</b> USD Annual and is eligible for an annual bonus based on individual and company performance.</p><p></p><p>
Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.</p><p></p><p>
Salaries are adjusted according to market in CA, NY Metro and Seattle.</p><p></p><p><b>
Eligibility Requirements:</b></p><ul><li><p>
You must be 18 years or older</p></li><li><p>
You must have a high school diploma or equivalent</p></li><li><p>
You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process</p></li><li><p>
You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.</p></li><li><p>
New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months&rsquo; time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months&rsquo; time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don&rsquo;t meet the time in position or performance expectations).</p></li></ul><p></p><p>
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.</p><p></p><p><b>
Our Commitment:</b></p><p></p><p>
When you join us, you&rsquo;ll be part of an inclusive culture where your individual skills, experience, and voice are not only heard &ndash; but valued. Together, we&rsquo;re building a future where we can all belong, connect, and turn ideals into action. More than 50% of our workforce is engaged in our Employee Resource Groups (ERGs), where community and passion intersect to offer a safe space to learn and grow.</p><p></p><p><br>
This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. We&rsquo;re proud to have an award-winning culture for all.</p><p></p><p><b>
Reasonable Accommodation Notice:
</b></p><ul><li><p>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</p></li><li><p>
If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am &ndash; 5pm Monday to Friday, Central Standard Time</p></li></ul><p></p><p><b>
Job Family Group:</b></p>
Information Technology</div><p></p>

VP, Staff Endpoint Security Engineer

MongoDB

<div><p>MongoDB is seeking a Staff Product Security Engineer to lead cloud security initiatives for MongoDB Atlas and the cloud platforms that power it across AWS, GCP, and Azure. You'll be a senior individual contributor in the MongoDB Product Security organization, a diverse team responsible for the security of all customer‑facing products, including Atlas, self‑managed/server, and a broad ecosystem of related services and tools.</p>
<p>
Within Product Security, the Cloud Security team focuses specifically on Atlas control plane and data plane environments and the underlying cloud platforms, partnering closely with Atlas engineering, SRE, other security engineering teams, and global security operations to build and defend secure‑by‑default, large‑scale, multi‑tenant cloud services.</p>
<p>
We are looking to speak to candidates who are based in New York City.</p>
<h3 class="jobSectionHeader"><b>
Requirements</b></h3>
<ul><li>~10+ years of experience in application, product, and/or cloud security for large-scale, customer-facing systems</li>
<li>Deep hands-on expertise with cloud security architecture across AWS, GCP, and Azure, with experience across:</li>
<li><ul><li>VPC/networking (segmentation, egress controls, private connectivity)</li>
<li>IAM (roles, policies, workload identity, cross-account access)</li>
<li>Keys and secrets (KMS, HSMs, secret management systems)</li>
<li>Container/orchestration security (e.g., Kubernetes, ECS, serverless)</li>
<li>Multi-tenant control planes and blast-radius reduction patterns</li>
</ul></li><li>Strong track record leading complex security programs from definition through rollout and measurable impact</li>
<li>Ability to read and reason about code in languages like Go and Java or similar, and familiarity with IaC (e.g., Terraform/CloudFormation), CI/CD, and security automation tooling</li>
<li>Experience assessing and securing modern AI and ML-powered features in cloud environments, including data protection, model and prompt abuse, and responsible use of third-party AI services</li>
<li>Excellent written and verbal communication skills; you can explain complex risks and trade-offs to technical and non-technical audiences and influence without direct authority</li>
</ul><h3 class="jobSectionHeader"><b>In this role you will&hellip;</b></h3>
<p>
In this Staff Product Security Engineer role, you will:</p>
<ul>
<li><b>Own and lead Atlas cloud security initiatives</b> such as control plane hardening, cloud security baselines, IAM and customer account protection, and data-plane protections for multi-tenant environments</li>
<li><b>Translate risk and product roadmap goals into measurable workstreams</b>, defining problem statements, requirements, success metrics, and delivery plans that align with Atlas engineering and SRE priorities</li>
<li><b>Design and review large-scale cloud architectures</b>, including networking, identity, secrets management, and service-to-service access, and define secure reference architectures that can be reused across Atlas teams</li>
<li><b>Embed security into platforms and guardrails</b> by partnering with security engineering and platform teams to implement policies and automation that make secure-by-default behavior the easiest path for developers</li>
<li><b>Leverage CSPM, infrastructure vulnerability data, and IaC scanning</b> to drive concrete, prioritized hardening work in Atlas environments, with clear coverage and posture metrics</li>
<li><b>Lead assessments for Atlas features and platform changes</b>, including design reviews, threat modeling, code review, and targeted testing, with a focus on pragmatic, partner-friendly guidance</li>
<li><b>Partner with detection &amp; response, SRE, and other security teams</b> to provide product and cloud context during incidents, threat hunts, and cloud posture investigations</li>
<li><b>Mentor and level up others</b>, contributing to documentation, internal talks, and training that improve Atlas and cloud security practices across MongoDB</li>
<li>Serve as a <b>visible security leader and trusted partner</b> for Atlas engineering and SRE leadership on cloud security trade-offs and roadmap decisions</li>
</ul><h3 class="jobSectionHeader"><b>Nice to Haves</b></h3>
<ul><li>Prior experience as a <b>security lead for a multi-tenant SaaS or cloud platform</b>, particularly in data, database, or infrastructure-as-a-service domains</li>
<li>Direct experience with Atlas-like environments: control planes managing resources across multiple cloud providers, with strong isolation and blast-radius containment requirements</li>
<li>Experience driving improvements in <b>CSPM, vulnerability management, and IaC scanning</b> signal quality and developer adoption at scale</li>
<li>Public contributions to the security community (talks, tools, standards, or publications) in cloud, product, or application security</li>
<li>Experience mentoring other senior/staff engineers, or serving as a bar-raiser in interviews for product/cloud security roles</li>
</ul><h3 class="jobSectionHeader"><b>About MongoDB</b></h3>
<p>
MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB's unified database platform, the most widely available, globally distributed database on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.</p>
<p>
With offices worldwide and over 60,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we're powering the next era of software.</p>
<p>
Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It's what makes us MongoDB.</p>
<p>
To drive the personal growth and business impact of our employees, we're committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees' wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it's like to work at MongoDB, and help us make an impact on the world!</p>
<p>
MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.</p>
<p>
MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.</p>
<p>
Req. ID: 1273392039</p></div>

Staff Product Security Engineer, Cloud Security

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><div>
Application deadline: Mar 25, 2026<br>
<br>
Amazon&rsquo;s Information Security Penetration Testing Team is seeking a Security Engineer to help keep Amazon secure for its customers. In this role, you will attack Amazon&rsquo;s services, applications, and websites to discover security issues and report them to our internal technology teams. This position will provide you with challenging opportunities, both technologically and as a leader, but will also be a great deal of fun if hacking Amazon alongside a team of highly skilled individuals sounds exciting to you.
<br>
<br>
A Security Engineer at Amazon is expected to be strong in multiple domains. Engineers in this role work closely with teams throughout Information Security, as well as provide technical leadership and advice to teams and leaders throughout Amazon.
<br>
<br>
You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Amazon is built and how it operates at a deep, technical level. Additionally, you will leverage the knowledge you gain about Amazon to find new ways to break services, processes, and technologies throughout the company. Engineers in this role must show exemplary judgment in making technical trade-offs between short-term fixes and long-term security and business goals.
<br>
<br>
You will demonstrate resilience and navigate ambiguous situations with composure and tact. You will be expected to provide thought leadership for the organization as you discover, invent, and innovate throughout the course of your duties. Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure.<br>
<br>
Key job responsibilities<br>
<ul><li>Conducting high quality application penetration tests independently, or as part of a team</li><li>Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
</li><li>Contributing to team tooling, innovation, and improvements
</li><li>Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings</li></ul><br>
About the team<br>
About Amazon Security<br>
<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why Amazon Security<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.<br>
<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training and Career growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.</div><h2 class="jobSectionHeader"><b><br>
BASIC QUALIFICATIONS</b></h2><ul><li>Knowledge of networking protocols such as HTTP, DNS and TCP/IP</li><li>Knowledge of industry-based security vulnerabilities and remediation techniques</li><li>3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience</li><li>2+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience</li><li>3+ years of experience in a penetration testing or information security role</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of cloud service providers and their offerings, preferably AWS, and its various technologies and services</li><li>Experience in developing security tooling and automation</li><li>Experience in CTF competitions, CVE research, and/or Bug Bounty recognition * Advanced degree in Computer Science or related field</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, CO, Virtual Location - Colorado - 159,300.00 - 202,400.00 USD annually<br>
USA, NY, Virtual Location - New York - 159,300.00 - 202,400.00 USD annually<br>
USA, TX, Virtual Location - Texas - 159,300.00 - 202,400.00 USD annually<br>
USA, VA, Virtual Location - Virginia - 159,300.00 - 202,400.00 USD annually</div><p></p>

Security Engineer II, Stores Penetration Testing

Weill Cornell Medicine

<div><div>Title: Cybersecurity Engineer II</div>
<div>Location: Midtown</div>
<div>Org Unit: IT Security</div>
<div>Work Days:</div>
<div>Weekly Hours: 35.00</div>
<div>Exemption Status: Exempt</div>
<div>Salary Range: $134,600.00 - $154,900.00</div>
<ul><li>As required under NYC Human Rights Law Int 1208-2018 - Salary range for this role when Hired for NYC Offices</li></ul>
<div><div><div><div>
Position Summary</div>
</div><div><div>
This position involves all technical aspects of security and requires participation in project-oriented work. Role works closely with other domain engineers and architects. This position provides the opportunity to participate in multiple areas of IT infrastructure by using risk analysis, industry knowledge, security standards, and other tools to develop and implement security solutions for WCM's environment without diminishing productivity.</div>
<div>This role assumes ownership of complex security tools and trains analysts, as well as implements new technologies with help of senior engineers and architects.</div>
</div></div><div><div><div>
Job Responsibilities</div>
</div><ul><li>Improves efficiency by automating and orchestrating repeatable tasks.
</li><li>Assumes ownership of complex security technologies and trains security analysts for operational readiness.
</li><li>Implements new security technologies such as DLP, email security, CASB, NAC, WAF, &ldquo;passwordless&rdquo; authentication, and more with oversight from senior engineers and architects.
</li><li>Enhances the vulnerability management process and develops technical solutions to help mitigate security vulnerabilities and conduct research to identify new attack vectors against WCM systems.
</li><li>Develops and maintains metrics and reports to provide senior management insight and evidence supporting effectiveness of security infrastructure, controls, projects and processes.
</li><li>Ensures WCM security and identity management infrastructure is running optimally and effectively.
</li><li>Fosters close working connections with staff and management to ensure the design and operations for WCM applications and infrastructures while acquiring and retaining comprehensive working knowledge of all infrastructure and relations systems.
</li><li>Responsible for innovative security work identifying, deploying, and identity, and related technologies.
</li><li>Performs other related duties as assigned.
</li></ul></div><div><div><div>Education</div>
</div><ul><li>Bachelor's Degree
</li></ul></div><div><div><div>Experience</div>
</div><div><ul><li>Bachelor&rsquo;s degree in a related field or equivalent experience.</li>
<li>5 or more years of experience with network security technologies including IDS/IPS, stateful and application firewalls, network access control, and network segmentation.</li>
<li>5 or more years of security experience;</li>
<li>Experience in Ruby, Python, SQL, and/or shell scripting.</li>
<li>Experience with incident detection and response.</li>
<li>Experience with logging and security incident and event management systems (Syslog, Splunk, etc.).</li>
<li>Experience with network and vulnerability scanning and management tools (nmap, nexpose, metasploit, etc.).</li>
<li>Experience in incident response, penetration testing, applications security, network security, systems security or malware analysis.</li>
<li>Expert understanding of information security and related technologies, such as encryption, authentication, access controls, mobile device management, vulnerability scanning, and authentication.</li>
<li>Extensive knowledge in networking protocols (TCP/IP) and service protocols (HTTP, HTTPS, LDAP, SSL, SSH, SMTP, DHCP, DNS).</li>
<li>Strong understanding of web security standards, architecture, web security best practices and application security best practices.</li>
<li>Comfortable working with technologies at all levels of the OSI model, layers 1 through 7 desired.</li>
<li>Information Security or networking certifications i.e. Security+, CEH, GIAC, CCNA Security, CISSP or CCNP desired.</li>
<li>Previous experience within Information Technology at Health Care or Academic Institution and knowledge of regulatory requirements (HIPAA, FERPA, PCI, etc.) desired.</li>
<li>Strong understanding of virtualization and Cloud (SaaS, PaaS, IaaS) technologies and can make recommendations on its use and its security desired.</li>
</ul></div></div><div><div><div>Knowledge, Skills and Abilities</div>
</div><ul><li>Ability to create and present diagrams and reports for technical and non-technical audiences.
</li><li>Excellent written and verbal communication skills, on both technical and non-technical topics.
</li><li>Ability to deliver under tight deadlines and work off-hours as needed.
</li><li>Ability to produce professional-level documentation and reporting using Microsoft Office.
</li><li>Ability to think outside the box in terms of designing systems and solutions.
</li><li>Expert problem solving and decision-making skills and the ability to make decisions independently.
</li><li>Familiarity with SharePoint, Box, Confluence, ServiceNow or similar documentation storage and management systems.
</li><li>Fluency in navigating and using Mac OS X, Red Hat Linux, and/or Windows 7/2008/10/2016.
</li><li>Must be able to work in a very demanding and high-pressure environment.
</li></ul></div><div><div><div>Licenses and Certifications</div>
</div></div><div><div><div>Working Conditions/Physical Demands</div></div></div></div><br>
<p></p>
<p>Cornell welcomes students, faculty, and staff with diverse backgrounds from across the globe to pursue world-class education and career opportunities, to further the founding principle of &ldquo;any person, any study.&rdquo; No person shall be denied employment on the basis of any legally protected status or subjected to prohibited discrimination involving, but not limited to, such factors as race, ethnic or national origin, citizenship and immigration status, color, sex, pregnancy or pregnancy-related conditions, age, creed, religion, actual or perceived disability (including persons associated with such a person), arrest and/or conviction record, military or veteran status, sexual orientation, gender expression and/or identity, an individual&rsquo;s genetic information, domestic violence victim status, familial status, marital status, or any other characteristic protected by applicable federal, state, or local law.</p>
<p>Cornell University embraces diversity in its workforce and seeks job candidates who will contribute to a climate that supports students, faculty, and staff of all identities and backgrounds. We hire based on merit, and encourage people from historically underrepresented and/or marginalized identities to apply. Consistent with federal law, Cornell engages in affirmative action in employment for qualified protected veterans as defined in the Vietnam Era Veterans&rsquo; Readjustment Assistance Act (VEVRRA) and qualified individuals with disabilities under Section 503 of the Rehabilitation Act. We also recognize a lawful preference in employment practices for Native Americans living on or near Indian reservations in accordance with applicable law.</p></div><p></p>

Cybersecurity Engineer II

Google

<div>Note: By applying to this position you will have an opportunity to share your preferred working location from the following: <b>New York, NY, USA; Austin, TX, USA; Chicago, IL, USA; Mountain View, CA, USA</b>.<h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor&rsquo;s degree in Engineering, Computer Science, a related field, or equivalent practical experience.<br>
</li>
<li>8 years of experience working with client-side web technologies (e.g., HTML, CSS, JavaScript, or HTTP).</li>
<li>8 years of experience coding with one or more programming languages (e.g., Java, C/C++, Python).</li>
<li>Experience troubleshooting technical issues for internal/external partners or customers.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Master&rsquo;s degree in Engineering, Computer Science, Business, or a related field.<br>
</li>
<li><div><div>Certification in Google Cloud Professional Cloud Architect, Professional Google Workspace Administrator, or CISSP/CCSP.</div></div></li>
<li>5 years of experience in solutions architecture, with 2 years of experience in zero trust or endpoint security.</li>
<li>Experience with threat modeling, network security principles (e.g., segmentation, IDS/firewalls), security automation and orchestration, and compliance frameworks (e.g., HIPAA, PCI DSS, SOX) as they relate to context-aware access and enterprise security.</li>
<li>Ability to lead proof of concept (PoC) engagements, translate browser telemetry into business risk mitigation for C-level stakeholders.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
gTech&rsquo;s Professional Services team takes a creative, collaborative, and customer-centric approach to provide foundational services and forward-looking business solutions to top advertiser and publisher customers. Through technical implementation, optimization, and key solutions, gTech Professional Services helps customers attain their business goals while building long-term capabilities.</p>
<p>
The goal is to connect customers and partners with the best of Google products such as Chrome Enterprise Premium, Cameyo, ChromeOS, and Android to provide a powerful, secure end user experience.</p><div>
We are seeking a highly skilled Chrome Enterprise Engineer to lead the deployment and management of secure browser environments.
</div><div><p>In this role, you will need to possess a robust understanding of the Google Cloud Platform (GCP) ecosystem, specifically regarding service accounts, and the security of Google Cloud Workstations. You will act as a bridge between identity and endpoint management, integrating Chrome with major providers while ensuring seamless policy alignment.</p><p>
Beyond core management, you will drive security maturity through integrations with partners and utilize virtualization tools for legacy application delivery. A strategic mindset is essential; you must be able to navigate the competitive landscape to articulate the unique value of cloud-native security. Ultimately, you will optimize the architecture to reduce reliance on traditional solutions.</p></div><p>
Google's mission is to organize the world's information and make it universally accessible and useful. Our Devices &amp; Services team combines the best of Google AI, Software, and Hardware to create radically helpful experiences for users. We research, design, and develop new technologies and hardware to make our user's interaction with computing faster, seamless, and more powerful. Whether finding new ways to capture and sense the world around us, advancing form factors, or improving interaction methods, the Devices &amp; Services team is making people's lives better through technology.</p><p>
The US base salary range for this full-time position is $183,000-$265,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</p><p>
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</p></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Design end-to-end security architectures utilizing Chrome enterprise premium for secure SaaS access, private web app delivery, and unmanaged/bring your own device (BYOD) strategies.</li>
<li>Lead the technical implementation of identity-aware proxy (IAP) and context-aware access (CAA) policies within the Google Cloud Console to secure corporate resources.</li>
<li>Integrate Chrome telemetry with the customer&rsquo;s security stack, specifically linking browser signals to Google SecOps (Chronicle) or third-party SIEM/XDR platforms.</li>
<li>Build granular data loss prevention (DLP) rules to prevent data exfiltration across web apps, including the governance of Generative AI (Gemini) tools within the browser.</li>
<li>Provide field insights to inform product strategy, deliver executive briefing center (EBC) content on Chrome's roadmap, and develop enablement resources for Google Cloud and Chrome customer engineers, advocating Chrome enterprise security solutions.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Solutions Architect, Devices and Services

<div>At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data. Those in security architecture at PwC will focus on designing and implementing robust security frameworks to protect organisations from cyber threats. You will develop strategies and solutions to safeguard sensitive data and enable the integrity of systems and networks.<p><br>
Focused on relationships, you are building meaningful client connections, and learning how to manage and inspire others. Navigating increasingly complex situations, you are growing your personal brand, deepening technical expertise and awareness of your strengths. You are expected to anticipate the needs of your teams and clients, and to deliver quality. Embracing increased ambiguity, you are comfortable when the path forward isn&rsquo;t clear, you ask questions, and you use these moments as opportunities to grow.</p><p></p><p>
Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:</p><ul><li>
Respond effectively to the diverse perspectives, needs, and feelings of others.</li><li>
Use a broad range of tools, methodologies and techniques to generate new ideas and solve problems.</li><li>
Use critical thinking to break down complex concepts.</li><li>
Understand the broader objectives of your project or role and how your work fits into the overall strategy.</li><li>
Develop a deeper understanding of the business context and how it is changing.</li><li>
Use reflection to develop self awareness, enhance strengths and address development areas.</li><li>
Interpret data to inform insights and recommendations.</li><li>
Uphold and reinforce professional and technical standards (e.g. refer to specific PwC tax and audit guidance), the Firm's code of conduct, and independence requirements.</li></ul><p><b><br>
The Opportunity</b></p><p>
As part of the Cybersecurity team you assist our clients in designing and implementing secure network architectures, including Zero Trust, SASE/SSE, and network segmentation. As a Senior Associate, you analyze complex problems, mentor others, and maintain exceptional standards while building client relationships and developing a deeper understanding of the business context. You have hands-on experience configuring and securing enterprise-grade network and security technologies, working with vendors such as Cisco, Juniper, Palo Alto, Check Point, Fortinet, and Zscaler, and contribute to team projects by explaining technical concepts to different stakeholders.</p><p></p><p><b>
Responsibilities</b></p><ul><li>Design and implement secure network architectures, including Zero Trust and network segmentation</li><li>Configure and secure enterprise-grade network and security technologies</li><li>Collaborate with vendors like Cisco, Juniper, and Palo Alto to enhance security measures</li><li>Mentor team members and provide guidance on technical concepts</li><li>Build and maintain enduring client relationships</li><li>Analyze complex cybersecurity challenges and develop practical solutions</li><li>Contribute to team projects by communicating technical concepts to stakeholders</li></ul><p></p><p><b>
What You Must Have</b></p><ul><li>Bachelor's Degree</li><li>3 years of hands-on experience in network security, cybersecurity engineering, or security consulting, including practical implementation, configuration, troubleshooting, and management of security technologies such as firewalls, IDS/IPS, SIEM, endpoint security, and cloud security solutions</li></ul><p></p><p><b>
What Sets You Apart</b></p><ul><li>Preferred field(s) of study: Computer Science, Computer and Information Science, CyberSecurity, Information CyberSecurity, Information Technology, Management Information Systems, or Systems Engineering</li><li>Certification(s) Preferred: AWS/Microsoft Solutions Architect, CCNP Security, PCNSE, or ZCCP</li><li>Excelling in designing modern network security architectures</li><li>Implementing Zero Trust principles and SASE/SSE solutions</li><li>Managing firewall and zero trust policies with Cisco and Palo Alto</li><li>Analyzing network traffic and managing enterprise networks</li><li>Securing cloud environments using native and 3rd party tools</li></ul><p><br>
The salary range for this position is: $77,000 - $202,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance</p><p></p><p>
As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law.</p><p></p><p>
PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.</p><p></p><p>
Learn more about how we work: https://pwc.to/how-we-work</p><p></p><p>
For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all.</p></div><p></p>

Cyber Defense & Engineering - Network Security - Sr Associate

Explore 314+ Security engineer in New York this March. Find roles across top companies and apply now to boost your career.