security operations engineer

Ultahost, inc

<div><div>UltaHost is looking for a Senior Internal Security &amp; Security Operations Engineer to take ownership of internal security and help strengthen the protection of our workforce, identities, systems, and day-to-day operations.</div><div></div><div><br>
This is a senior, hands-on technical role with responsibility across Identity &amp; Access Management (IAM), internal security, security monitoring, SOC operations, and incident response. The position requires someone who can combine strong technical security expertise with a structured and operational approach to access control, monitoring, investigation, and risk reduction.</div><div></div><div><br>
You will be responsible for securing employee and contractor identities, privileged access, credentials, internal systems, endpoints, VPN and remote access, while ensuring that appropriate security controls are implemented and maintained throughout the account and access lifecycle.</div><div></div><div><br>
A key part of the role will also involve actively monitoring security events and investigating suspicious activity across authentication systems, endpoints, internal applications, and cloud/SaaS environments. You will take an active role in identifying potential threats, investigating security incidents, collecting evidence, containing risks, coordinating remediation, and ensuring corrective actions are followed through to closure.</div><div></div><div><br>
You will work closely with HR, IT, system owners, and other technical teams to improve access governance, strengthen internal security controls, enhance detection and response capabilities, and reduce security risks across UltaHost&rsquo;s internal environment.</div><div></div><div><br>
We are looking for someone who is comfortable taking end-to-end ownership &mdash; from implementing preventive controls and improving security monitoring to investigating real incidents and driving security improvements across the organization.</div><div></div><div><b><br>
What You&rsquo;ll Own</b></div><div><b>
Identity, Access &amp; Credential Security</b></div><ul><li>
Design and maintain RBAC across departments, roles, and critical systems.</li><li>
Manage MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets.</li><li>
Own security controls around onboarding, role changes, temporary access, contractor access, and offboarding.</li><li>
Identify and remove shared, dormant, unnecessary, and excessively privileged accounts.</li><li>
Conduct regular access reviews and maintain approval and audit evidence.</li></ul><div><b>
Security Monitoring &amp; Incident Response</b></div><ul><li>
Monitor and investigate alerts from SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, internal applications, and endpoints.</li><li>
Investigate suspicious logins, compromised accounts, credential leaks, malware, privilege abuse, insider risk, and unauthorized access.</li><li>
Collect evidence, contain threats, coordinate recovery, and drive corrective actions through closure.</li><li>
Maintain detection rules, alert quality, incident records, escalation paths, and response playbooks.</li><li>
Lead internal security incidents and support infrastructure/product incidents involving identities or credentials.</li></ul><div><b>
Internal Systems &amp; Workforce Security</b></div><ul><li>
Define security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems.</li><li>
Work closely with HR and IT on joiner/mover/leaver processes and internal security investigations.</li><li>
Support security awareness, phishing prevention, and secure handling of sensitive information and credentials.</li></ul><div><b>
What We&rsquo;re Looking For</b></div><ul><li>
5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, IT security, or a closely related role.</li><li>
Practical experience with RBAC, MFA, SSO, PAM, identity providers, password management, account lifecycle management, and access auditing.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, centralized logging, authentication logs, alert triage, and case management.</li><li>
Proven ability to investigate compromised accounts, malware, credential leaks, suspicious authentication activity, insider risk, and unauthorized access.</li><li>
Strong understanding of Linux access, SSH, VPN, endpoints, cloud/SaaS administration, email security, and remote-workforce security.</li><li>
Strong organizational skills and the ability to enforce security controls while collaborating with HR, IT, managers, and system owners.</li></ul><div><b>
Preferred Background</b></div><div>
Experience in web hosting, cloud infrastructure, data centers, SaaS, fintech, MSSP, or another distributed technology environment is highly valuable. Preferred certifications include Security+, CySA+, GCIH, SC-200, IAM/PAM vendor certifications, CISSP, or equivalent practical expertise. Certifications are a plus &mdash; hands-on experience matters more.</div><div></div><div><b><br>
What Success Looks Like</b></div><div><b>
You will help us improve:</b></div><ul><li>
MFA and privileged-access coverage</li><li>
Joiner/mover/leaver security and access-removal speed</li><li>
Control of shared, dormant, and excessive access</li><li>
Alert response and incident-resolution times</li><li>
Access-review coverage and security evidence</li><li>
Internal security standards, procedures, and playbooks</li></ul><div><b>
Important</b></div><div>
We are not looking for a policy/compliance-only profile. The successful candidate must have real hands-on experience administering access controls, operating security tooling, investigating logs, and responding to security incidents.</div><div>
You will work closely with our second cybersecurity specialist, the Product &amp; Infrastructure Security Engineer, as well as DevOps, Network, Product, Engineering, Support, Abuse, HR, Finance, Legal, and executive management.</div><div>
If you enjoy taking ownership, building security controls, investigating real incidents, and improving security in a large-scale technology environment, we&rsquo;d like to hear from you.</div></div><div></div>

Internal Security & Security Operations Engineer

Reliable Robotics Corporation

<div><p>We're building safety-enhancing technology for aviation that will save lives. Automated aviation systems will enable a future where air transportation is safer, more convenient and fundamentally transformative to the way goods &mdash; and eventually people &mdash; move around the planet. We are a team of mission-driven engineers with experience across aerospace, robotics and self-driving cars working to make this future a reality.</p><p></p><p>
As a Security Engineer working on our infrastructure, you will be a crucial part of our IT and Security team. Your work will improve and increase our hardening and defense of Reliable&rsquo;s internal infrastructure. You will work closely with Client Platform engineers and the rest of the IT team to build and deploy our managed security tools. Efforts will involve client platform onboarding automation, reviewing cloud solutions and configurations and adapting them to our needs. You will focus heavily on securing the end-user experience by providing secure solutions.</p><p></p><h1 class="jobSectionHeader"><b>
Responsibilities</b></h1><p>
In your role as Security Engineer you will be responsible for the design, implementation and monitoring of security tools supporting the business&rsquo; internal needs and safety requirements. You will be involved in securing daily drivers, as well as supporting development infrastructure for our products.</p><ul><li><p>
EDR and client security: Partnering with the client platform team, and working with affected users, you will be responsible for enforcing security configurations on all endpoints (macOS, Windows, iOS, Android) utilizing the appropriate tools for the job.</p></li><li><p>
Identity and Access Management: Design and maintain manageable access control schemes, manage SaaS AAA and provide zero-trust designs (and implementations) for SSO.</p></li><li><p><br>
Automation &amp; Infra: Meet the automation requirements of the team by taking advantage of infrastructure as code systems in supported use, building reproducible solutions with adequate documentation to repair and manage those systems and being open to critique.</p></li><li><p><br>
Incident Response and Ops work: Be able to perform Log Analysis, participate in threat hunting exercises and be capable of investigating security alerts from EDR or externally provided IOCs.</p></li><li><p><br>
Collaboration and resilience: At Reliable we design robust systems for the purpose at hand that are easy to maintain. We demand the same level of collaboration and resiliency between our teams and our systems.</p></li></ul><p></p><h1 class="jobSectionHeader"><b>
Basic Success Criteria</b></h1><ul><li><p>
5+ years of experience in an IT/Infrastructure Security, Security Operations (SecOps), or Corporate Infrastructure Security role.</p></li><li><p>
Strong, fundamental understanding of endpoint operating systems (macOS and Windows 11) and how to securely configure them at scale via MDM platforms (e.g., Jamf, Intune, Kandji).</p></li><li><p>
Deep understanding of SSL certificates, PKI infrastructure, and credential management.</p></li><li><p>
Solid networking fundamentals and understanding of secure network architecture (VLAN segmentation, Zero Trust Network Access/ZTNA, Firewalls, WiFi security).</p></li><li><p>
Scripting proficiency in languages such as Python, Bash, or PowerShell to automate security operations and log ingestion.</p></li><li><p>
Experience with modern endpoint protection tools (EDR/XDR) and log management/SIEM platforms.</p></li></ul><p></p><p>
This position requires access to information that is subject to U.S. export controls. An offer of employment will be contingent upon the applicant&rsquo;s capacity to perform in compliance with U.S. export control laws.</p><p>
All applicants are asked to provide documentation that legally establishes status as a U.S. person or non-U.S. person (and nationalities in the case of a non-U.S. person). Where the applicant is not a U.S. person, meaning not a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident, (iii) refugee under 8 U.S.C. &sect; 1157, or (iv) asylee under 8 U.S.C. &sect; 1158, or not otherwise permitted to access the export-controlled technology without U.S. government authorization, the Company reserves the right not to apply for an export license for such applicants whose access to export-controlled technology or software source code requires authorization and may decline to proceed with the application process and any offer of employment on that basis.</p><p>
At Reliable Robotics, our goal is to be a diverse and inclusive workforce. As an Equal Opportunity Employer, we do not discriminate on the basis of race, religion, color, creed, ancestry, sex, gender (including pregnancy, childbirth, breastfeeding, or related medical conditions), gender identity, gender expression, sexual orientation, age, non-disqualifying physical or mental disability or medical conditions, national origin, military or veteran status, genetic information, marital status, or any other basis covered by applicable law. All employment and promotion is decided on the basis of qualifications, merit, and business need.</p><p>
If you require reasonable accommodation in completing an application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to work@reliable.co</p><p>
Compensation Range: $185K - $230K</p></div>

Security Engineer: Infrastructure and Client Platform

Intel

<div>
 <strong>
  Job Details
  <br/>
  <br/>
 </strong>
 Job Description:
 <br/>
 <br/>
 The Cyber Defense organization is seeking an Information Security Engineer to support comprehensive offensive and defensive security operations across multiple enterprise environments. You will join a highly collaborative Agile DevOps delivery team of information security professionals responsible for proactively identifying/remediating vulnerabilities, conducting threat assessments, and implementing robust security measures to protect Intel's critical assets, systems, and applications.
 <br/>
 <br/>
 The Cyber Defense team manages security controls spanning vulnerability scanning, security patching, penetration testing, application security, cloud security, and lab security across all Intel domains. Our offensive security operations include thorough security assessments of enterprise-connected assets including physical hosts, network devices, applications, virtual machines, cloud infrastructure, and social engineering vectors.
 <br/>
 <br/>
 This role requires a passion for quality, security, automation, and the skills to understand complex systems with a desire for continual improvement and innovation. You will join a DevOps team of Information Security professionals responsible for developing, configuring, and operating security controls.
 <br/>
 <br/>
 This includes security controls validation, discovery, offensive security, attack detection and containment, vulnerability detection and remediation, development of AI models and agentic systems that respond to AI generated attack paths.
 <br/>
 <br/>
 <strong>
  As an Information Security Engineer your responsibilities will be, but not limited to:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Configuration, management, and operations of core platforms within the Cyber Defense organization (e.g. vulnerability/application scanning, security patching, asset discovery/identification, exposure management, etc.).
  </li>
  <li>
   Perform external attack surface management responsibilities such as, attack path analysis, exposure exploitability analysis, and tactical remediation and containment of high-risk exposures
  </li>
  <li>
   Verify efficacy of security controls implemented on a variety of Intel enterprise systems, infrastructure, and applications.
  </li>
  <li>
   Recommend remediation actions to discovered security vulnerabilities and weaknesses.
  </li>
  <li>
   Evaluate threat intelligence and determine potential risk to Intel. Understand and emulate adversary Tactics, Techniques, and Procedures in assessing the security posture of a wide range of systems.
  </li>
  <li>
   Work closely with software development engineers, system engineers, and other information security teams in supporting information security projects and initiatives.
  </li>
  <li>
   Develop and support security solutions that integrate and interface with customers/business units.
  </li>
  <li>
   Produce quality reporting documentation, tailoring the relative detail of the content to the audience.
  </li>
  <li>
   Be a team player within the functional team, and across other Intel teams and stakeholders.
  </li>
  <li>
   Support vulnerability assessments of AI systems by running scans, documenting findings, and helping track remediation of identified issues in models and datasets.
  </li>
  <li>
   Collaborate with cross-functional teams to understand AI workflows and identify potential security gaps.
  </li>
  <li>
   Help develop defensive and / or offensive AI agents / to respond to or emulate AI assisted attackers.
  </li>
  <li>
   Support and work in an Agile and DevOps team focused on security operations, analytics, and solution development.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  The Ideal Candidate Should Show The Following Behavioral Traits
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong communication and coordination skills across multiple stakeholder groups.
  </li>
  <li>
   Demonstrated results leveraging perseverance, patience, persistence, problem-solving, vulnerability hunting, and the willingness to work well with ambiguity.
   <br/>
   <br/>
  </li>
 </ul>
 A collaborative team player with a good attitude, trustworthy, knows when to push and when to stop, and understands the potential downstream impacts of technical actions.
 <br/>
 <br/>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Minimum qualifications
 </strong>
 are required to be initially considered for this position
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor's degree in Computer Engineering, Computer Science, Information Technology, Information Security, or any other science/engineering related field.
  </li>
  <li>
   5+ years of experience supporting Information Security operations, vulnerability management, and/or service delivery.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred qualifications
 </strong>
 are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.
 <br/>
 <br/>
 <ul>
  <li>
   Experience in Offensive Security and Vulnerability Management including Vulnerability Assessment, Identification, and Remediation.
  </li>
  <li>
   Server/system architectures, operating systems, system patching, system and security configuration, auditing, and automation.
  </li>
  <li>
   Windows and Linux administration (i.e., installation, configuration, and troubleshooting).
  </li>
  <li>
   Experience in adversary emulation, network penetration testing, web application penetration testing, and cloud penetration testing (e.g. Azure, GCP, AWS).
  </li>
  <li>
   Practical experience with Windows, PowerShell, Active Directory, EntraID (Azure Active Directory), Linux OS (various flavors), networking, scripting/coding (Python, C#, Ruby, JavaScript, BASH, Go, etc.), cloud security, and DevOps/CICD/container/K8s.
  </li>
  <li>
   Developing scripting and automation solutions to support system configuration, performance, and troubleshooting.
  </li>
  <li>
   AI/LLM and AI Agents knowledge and experience.
  </li>
  <li>
   Implementing and supporting cloud-based solutions / Network protocols (TCP/IP) as well as protocols associated with common device communications / Information Security best practices and technologies.
  </li>
  <li>
   Experience working in an Agile environment and with Scrum practices.
  </li>
  <li>
   Excellent communication skills, with a breadth of technical skills, and an eagerness to Information security certifications through industry recognized organizations such as: SANS, ISACA (CISM), ISC2 (CISSP), CompTIA (Security+), MCSE, AWS, CCNA, ITIL). Offensive security certifications (e.g. CEH, OSCP, CRTO) and other pen-testing certifications.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Type
  <br/>
  <br/>
 </strong>
 Experienced Hire
 <br/>
 <br/>
 <strong>
  Shift
  <br/>
  <br/>
 </strong>
 Shift 1 (United States of America)
 <br/>
 <br/>
 Primary Location:
 <br/>
 <br/>
 US, California, Folsom
 <br/>
 <br/>
 Additional Locations:
 <br/>
 <br/>
 US, Arizona, Phoenix
 <br/>
 <br/>
 <strong>
  Posting Statement
  <br/>
  <br/>
 </strong>
 All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
 <br/>
 <br/>
 Position of Trust
 <br/>
 <br/>
 N/A
 <br/>
 <br/>
 <strong>
  Benefits
  <br/>
  <br/>
 </strong>
 We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation. Find out more about the benefits of working at Intel.
 <br/>
 <br/>
 Annual Salary Range for jobs which could be performed in the US: $89,340.00 - 175,210.00 USD
 <br/>
 <br/>
 The range displayed on this job posting reflects the minimum and maximum target compensation for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific compensation range for your preferred location during the hiring process.
 <br/>
 <br/>
 <strong>
  Work Model for this Role
  <br/>
  <br/>
 </strong>
 This role will be eligible for our hybrid work model which allows employees to split their time between working on-site at their assigned Intel site and off-site. * Job posting details (such as work model, location or time type) are subject to change.
 <br/>
 <br/>
 ADDITIONAL INFORMATION: Intel is committed to Responsible Business Alliance (RBA) compliance and ethical hiring practices. We do not charge any fees during our hiring process. Candidates should never be required to pay recruitment fees, medical examination fees, or any other charges as a condition of employment. If you are asked to pay any fees during our hiring process, please report this immediately to your recruiter.
</div>


Information Security Engineer

IDBNY

<div><p><b>SIEM Engineer &ndash; Job Description</b></p>
<p><b>
Role Overview</b></p>
<p>
The SIEM Engineer is responsible for designing, implementing, maintaining, and optimizing the organization's Security Information and Event Management (SIEM) platform. This role supports Security Operations by developing detection use cases, integrating log sources, improving threat visibility, and enhancing incident response capabilities across on-premises, cloud, and hybrid environments. The SIEM Engineer works closely with SOC analysts, incident responders, threat intelligence teams, infrastructure teams, and security leadership to strengthen the organization's cyber defense posture.</p>
<p><b>
Key Responsibilities</b></p>
<div>
<ul><li><b>SIEM Administration &amp; Engineering</b></li></ul>
</div><ul><li>Manage and maintain enterprise SIEM platforms.</li>
<li>Configure and optimize log ingestion, normalization, parsing, and retention.</li>
<li>Integrate security data sources including:</li>
<li><ul><li>Firewalls</li>
<li>IDS/IPS</li>
<li>EDR/XDR</li>
<li>Active Directory / Entra ID</li>
<li>Cloud platforms (Azure, AWS, GCP)</li>
<li>Network and endpoint security solutions</li>
</ul></li><li>Ensure availability, scalability, and performance of SIEM infrastructure.</li>
</ul><div><ul><li><b>Detection Engineering &amp; Use Case Development</b></li></ul>
</div><ul><li>Develop and maintain correlation rules, analytics, and detection content.</li>
<li>Create use cases aligned with MITRE ATT&amp;CK techniques.</li>
<li>Tune detection rules to reduce false positives and improve alert fidelity.</li>
<li>Work with Purple Team, Red Team, and Threat Intelligence teams to improve detection coverage.</li>
<li>Implement new monitoring capabilities for emerging threats.</li>
</ul><div><ul><li><b>Security Monitoring &amp; Incident Support</b></li></ul>
</div><ul><li>Support SOC operations through advanced threat detection and alert analysis.</li>
<li>Assist incident responders during investigations.</li>
<li>Correlate events across multiple technologies to identify malicious activity.</li>
<li>Perform root cause analysis and recommend containment improvements.</li>
<li>Develop dashboards and reporting for operational visibility.</li>
</ul><div><ul><li><b>Threat Hunting &amp; Threat Intelligence Integration</b></li></ul>
</div><ul><li>Develop hunting queries to identify malicious behavior not detected by automated alerts.</li>
<li>Integrate threat intelligence feeds into the SIEM platform.</li>
<li>Create indicators of compromise (IOC) monitoring and enrichment processes.</li>
<li>Identify suspicious trends and emerging attack patterns.</li>
</ul><div><ul><li><b>Automation &amp; Optimization</b></li></ul>
</div><ul><li>Automate SIEM administration and monitoring tasks using scripting.</li>
<li>Integrate SIEM with SOAR platforms and ticketing systems.</li>
<li>Develop workflows for alert enrichment, escalation, and incident response.</li>
<li>Improve operational efficiency through automation and orchestration.</li>
</ul><div><ul><li><b>Governance, Compliance &amp; Reporting</b></li></ul>
</div><ul><li>Support regulatory and audit requirements.</li>
<li>Maintain SIEM documentation, runbooks, and standards.</li>
<li>Produce security metrics and executive reporting.</li>
<li>Ensure log retention and monitoring practices meet compliance requirements.</li>
</ul>
<p><b>Required Qualifications</b></p>
<p><b>
Experience</b></p>
<ul>
<li>5+ years of cybersecurity experience.</li>
<li>3+ years managing and engineering SIEM platforms.</li>
<li>Experience supporting SOC operations and incident response.</li>
<li>Experience in financial services or regulated industries preferred.</li>
</ul>
<p><b>Technical Skills</b></p>
<ul>
<li>Expertise in platforms such as:</li>
<li><ul><li>Microsoft Sentinel</li>
<li>Splunk</li>
<li>QRadar</li>
<li>LogRhythm</li>
<li>Elastic Security</li>
<li>CrowdStrike NG-SIEM</li>
<li>Cribl</li>
</ul></li><li>Strong knowledge of:</li>
<li><ul><li>Windows and Linux security logs</li>
<li>Network security monitoring</li>
<li>EDR/XDR technologies</li>
<li>Threat hunting methodologies</li>
<li>MITRE ATT&amp;CK framework</li>
<li>Data ingestion pipelines</li>
</ul></li><li>Scripting experience:</li>
<li><ul><li>KQL</li>
<li>PowerShell</li>
<li>Python</li>
<li>SQL</li>
</ul></li>
</ul><p><b>Security Knowledge</b></p>
<ul>
<li>Log management and event correlation.</li>
<li>Detection engineering.</li>
<li>Threat intelligence.</li>
<li>Incident response processes.</li>
<li>Vulnerability management concepts.</li>
<li>Zero Trust security principles.</li></ul><br>
<p></p>
<p><b>
Preferred Certifications</b></p>
<ul>
<li>Microsoft Certified: Security Operations Analyst (SC-200)</li>
<li>Microsoft Sentinel Specialty</li>
<li>Splunk Enterprise Security Certified Admin</li>
<li>GIAC Certified Incident Handler (GCIH)</li>
<li>GIAC Certified Intrusion Analyst (GCIA)</li>
<li>CISSP</li>
</ul>
<p><b>Compensation</b><br>
The expected annual salary for this position is between $140,000 and $160,000 at the start of employment. A salary offer is determined on an individualized basis, taking into consideration factors such as an individual's skills and experience. In addition to base salary, our total rewards package also includes eligibility for an annual bonus, medical, pharmacy, dental, and vision plans, life and disability insurance, employee wellness program, retirement and savings plans with employer contributions, generous holiday and paid time off schedules, parental leave, and tuition reimbursement.<br>
Additional Information<br>
The Bank Will Make Reasonable Accommodations To The Following Employees To Allow Them To Perform The Essential Functions Of Their Position, Except Where Doing So Would Result In Undue Hardship To The Bank</p>
<ul>
<li>Those with a known mental or physical disability.</li>
<li>Pregnant individuals and/or individuals with pregnancy or childbirth-related medical conditions.</li>
<li>Victims of domestic violence, sex offenses or stalking.</li>
<li>Employees with religious observance and practice obligations.</li>
</ul>
<p>Any employee who believes he or she needs an accommodation for any of the above reasons should contact their supervisor or a member of Human Resources to request such an accommodation. In each case, the Bank will engage in a good faith written or oral dialogue concerning the individual's accommodation needs; potential accommodations that may address the individual's accommodation needs, including alternatives to a requested accommodation; and the difficulties that such potential accommodations may pose for the employer.<br>
The Bank retains the ultimate discretion to choose the appropriate reasonable accommodation. Upon reaching a final determination at the conclusion of the cooperative dialogue, the Bank will provide the requesting individual with a written final determination identifying any accommodation granted or denied. In addition, the Bank will maintain any information regarding the employee's request and status in the strictest confidence, except as requested by the employee, as required on a need-to-know basis or as otherwise required by law.<br>
<b>Disclaimer</b><br>
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.<br>
All your information will be kept confidential according to EEO guidelines.<br>
<b><i>We are operating on a Hybrid schedule.</i></b><br>
<b><i>NO AGENCIES PLEASE.</i></b><br>
IDB BANK, INCLUDING ITS SUBSIDIARIES AND DIVISIONS, PROVIDES EQUAL EMPLOYMENT OPPORTUNITIES TO ALL EMPLOYEES AND APPLICANTS FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, NATIONAL ORIGIN, AGE, DISABILITY, GENETIC STATUS, CITIZENSHIP STATUS, MARITAL STATUS, MILITARY OR VETERAN STATUS, CURRENT UNEMPLOYMENT OR ANY OTHER LEGALLY PROTECTED CATEGORY IN ACCORDANCE WITH APPLICABLE FEDERAL, STATE AND LOCAL LAW. NOTHING IN THIS SITE CONSTITUTES A PROMISE OR OFFER OF EMPLOYMENT.<br>
<b>Kindly review our </b><b>Privacy Notice</b><b> and </b><b>GLBA Consumer Privacy Notice</b><b>.</b><br>
<b>Kindly review our </b><b>Privacy Notice</b><b> and </b><b>GLBA Consumer Privacy Notice</b><b>.</b></p><p></p><div><p><b><br>
Kindly review our </b><b>Privacy Notice</b><b> and </b><b>GLBA Consumer Privacy Notice</b><b>.</b></p></div></div>

SIEM Engineer

City of New York

<div>
 DCAS's mission is to make city government work for all New Yorkers. From managing New York City's most iconic courthouses and municipal buildings, to purchasing over $1 billion annually in goods and services for more than 80 City agencies. What we do ensures that all agencies can deliver on their mission. Our reach
 <br/>
 <br/>
 Touches Every Facet Of City Government And Is Instrumental To The Successful Day-to-day Operations Of The City Of New York. Our Commitment To Equity, Effectiveness, And Sustainability Guides Our Work Providing City Agencies With The Critical Resources And Support Needed To Succeed, Including
 <br/>
 <br/>
 <ul>
  <li>
   Recruiting, hiring, and training City employees.
  </li>
  <li>
   Managing 56 public buildings.
  </li>
  <li>
   Acquiring, selling, and leasing City property.
  </li>
  <li>
   Purchasing over $1 billion in goods and services for City agencies.
  </li>
  <li>
   Overseeing the greenest municipal vehicle fleet in the country.
  </li>
  <li>
   Leading the City's efforts to reduce carbon emissions from government operations.
   <br/>
   <br/>
  </li>
 </ul>
 When you work at DCAS, you're not just working for one agency, but in service to all of them. It's an opportunity to provide meaningful support, quality customer service, and help protect the future of New York City for generations to come. Visit our website at NYC.GOV/DCAS to learn more about the work we do.
 <br/>
 <br/>
 DCAS Information Technology works in conjunction with the NYC Office of Technology and Innovation (OTI) on the daily management and support of the DCAS computer network. DCAS IT team members are responsible for the agencies software and hardware needs, the development and maintenance of applications, maintenance of the DCAS internet and intranet (DCASConnect) sites, the DCAS Help Desk, telecommunications services and equipment for DCAS employees, and the Cyber Security program to thwart any attempts at unauthorized access to the network
 <br/>
 <br/>
 The Infrastructure Engineer reports directly to the agency Chief Information Security Officer (CISO), responsible for protecting, monitoring, and enhancing the infrastructure and security posture of NYC Department of Citywide Administrative Services information systems, applications, networks, and cloud environments. The position combines advanced incident response, digital forensics, threat detection, vulnerability management, cybersecurity analytics, governance, risk and compliance (GRC), and security operations functions. The role serves as a technical escalation point for cybersecurity incidents, supports enterprise security initiatives, conducts cybersecurity assessments and audits, develops policies and procedures, and collaborates with City agencies, vendors, and stakeholders to improve cyber resilience and operational security.
 <br/>
 <br/>
 <ul>
  <li>
   Assist the Agency CISO in ensuring cybersecurity-related change management and CI/CD processes align with NIST separation of duties requirements.
  </li>
  <li>
   Support the CISO with agency cyber awareness training, security onboarding and readiness assurance, and knowledge transfer for cloud-based applications.
  </li>
  <li>
   Lead and coordinate cybersecurity incident response, digital forensics, malware analysis, threat hunting, containment, eradication, recovery, and post-incident activities.
  </li>
  <li>
   Monitor and analyze security events, alerts, logs, and threat intelligence using SIEM, endpoint protection, cloud security, and monitoring platforms.
  </li>
  <li>
   Perform vulnerability assessments, risk analyses, remediation tracking, validation testing, and reporting across infrastructure, applications, cloud environments, and endpoints.
  </li>
  <li>
   Conduct cybersecurity audits, control assessments, risk reviews, and compliance evaluations aligned with NIST CSF, NIST SP 800-53, CIS Controls, Zero Trust principles, and Citywide cybersecurity policies.
  </li>
  <li>
   Develop and maintain cybersecurity policies, standards, procedures, playbooks, incident response plans, and operational documentation.
  </li>
  <li>
   Support Identity and Access Management (IAM) operations, including SSO, MFA, RBAC, access reviews, provisioning, deprovisioning, and privileged access governance.
  </li>
  <li>
   Analyze cybersecurity metrics, trends, vulnerabilities, incidents, and operational performance indicators; develop executive-level reports and recommendations.
  </li>
  <li>
   Partner with internal technology teams, application owners, vendors, City agencies, and external partners to improve cybersecurity capabilities and remediation outcomes.
  </li>
  <li>
   Support cloud security reviews, application security assessments, secure application onboarding, and software security initiatives.
  </li>
  <li>
   Provide technical leadership, mentoring, and guidance to junior cybersecurity staff and cross-functional stakeholders.
  </li>
  <li>
   Assist with audit readiness, evidence collection, regulatory compliance activities, and cybersecurity governance initiatives.
  </li>
  <li>
   Research emerging threats, technologies, attack techniques, and industry best practices to strengthen defensive capabilities.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  To Apply
  <br/>
  <br/>
 </strong>
 Please go to www.nyc.gov/jobs, or www.nyc.gov/ess for current NYC employees, and search for Job ID #788324.
 <br/>
 <br/>
 No phone calls, faxes or personal inquiries permitted. Only those candidates under consideration will be contacted.
 <br/>
 <br/>
 IT INFRASTRUCTURE ENGINEER - 95714
 <br/>
 <br/>
 <strong>
  Minimum Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   A baccalaureate degree from an accredited college in computer science, engineering or a related field and four years of satisfactory full-time experience related to datacenter engineering and operations, cloud engineering and operations, complex IT infrastructure engineering; or,
  </li>
  <li>
   A baccalaureate degree from an accredited college and eight years of satisfactory full-time experience related to datacenter engineering and operations, cloud engineering and operations, complex IT infrastructure engineering; or,
  </li>
  <li>
   Education and/or experience which is equivalent to "1" or "2" above.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Skills
  <br/>
  <br/>
 </strong>
 The preferred candidate will bring the following skills and experience to this position. - Experience with Qualys, Wiz, Rapid7, Veracode, HCL AppScan, Snyk, CrowdStrike, Microsoft Defender, SolarWinds SEM, ServiceNow, Jira, GitHub Enterprise Copilot Security, GitHub Copilot, BitSight, Security Scorecard, Shodan, or similar platforms. - Experience supporting Microsoft Entra ID (Azure AD), SAML 2.0, OAuth 2.0, OpenID Connect, Conditional Access, MFA, RBAC, and enterprise identity governance. - Experienced SaaS Security Support for Air Table, Miro, Canva, SurveyMonkey and similar Enterprise cloud-based applications. - Digital forensics, malware analysis, threat hunting, SIEM operations, threat. - Knowledge of digital forensics, malware analysis, threat hunting, SIEM operations, threat intelligence, and incident response methodologies. - Experience conducting cybersecurity audits, GRC assessments, risk reviews, and control testing. - Experience analyzing large datasets, cybersecurity metrics, trends, KPIs, and operational performance indicators. - Strong understanding of cloud security principles and enterprise application security. - Excellent written, verbal, presentation, and stakeholder management skills. - Ability to work independently, manage multiple priorities, providing technical leadership. - Industry certifications such as Microsoft Security and Compliance SC-900, Azure AZ-900, AWS Cloud Practitioner, Security+, CySA+, GCIH, GCFA, CISSP, CISM, CEH, or comparable. - Experience supporting public-sector, regulated, or large enterprise environments.
 <br/>
 <br/>
 Public Service Loan Forgiveness
 <br/>
 <br/>
 As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education&rsquo;s website at https://studentaid.gov/pslf/.
 <br/>
 <br/>
 Residency Requirement
 <br/>
 <br/>
 New York City Residency is not required for this position
 <br/>
 <br/>
 Additional Information
 <br/>
 <br/>
 The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
 <br/>
 <br/>
 , $115,000.00 &ndash; $141,180.00
</div>


Cyber Security Analyst

Pacific Life

<p></p><div><p><b>Job Description:</b></p><p></p><div><div><p>
Providing for loved ones, planning rewarding retirements, saving enough for whatever lies ahead &ndash; our policyholders count on us to be there when it matters most. It&rsquo;s a big ask, but it&rsquo;s one that we have the power to deliver when we work together. We collaborate and innovate &ndash; pushing one another to transform not just Pacific Life, but the entire industry for the better. Why? Because it&rsquo;s the right thing to do. Pacific Life is more than a job, it&rsquo;s a career with purpose. It&rsquo;s a career where you have the support, balance, and resources to make a positive impact on the future &ndash; including your own.</p><p></p><p>
We&rsquo;re actively seeking a talented Senior Endpoint Projection Engineer to join our</p><p>
Cloud Shared Services team in Charlotte, NC.</p><p></p><p>
As a Senior Endpoint Protection Engineer you&rsquo;ll move Pacific Life, and your career, forward by serving as the primary administrator and operational owner of Pacific Life&rsquo;s endpoint protection platform. This role is responsible for ensuring reliable, secure, and effective endpoint protection through policy administration, alert response, platform health management, and integration with enterprise security and IT operations processes.</p></div><p></p><div><p>
The role requires strong technical depth, disciplined execution, and the ability to work independently while partnering across Security Operations, Infrastructure, IAM, and Cloud teams.</p></div><p></p><div><p><b>
How you'll help move us forward:</b></p></div><p></p><div><p><b><br>
Platform Ownership &amp; Administration</b></p></div><div><ul><li><p>
Act as the <b>primary administrator and subject matter expert</b> for the endpoint protection platform</p></li></ul></div><div><ul><li><p>
Proactively configure, maintain, and optimize endpoint prevention and detection policies</p></li></ul></div><div><ul><li><p>
Manage sensor lifecycle, coverage, versioning, and health across enterprise endpoints</p></li></ul></div><div><ul><li><p>
Administer role‑based access controls and identity integrations (e.g., SSO, RBAC)</p></li></ul></div><p></p><div><p><b>
Security Operations &amp; Incident Support</b></p></div><div><ul><li><p>
Execute response actions such as host containment, process termination, and IOC management in support of Security Operations and Incident Response teams activities</p></li></ul></div><div><ul><li><p>
Ensure alerts integrate effectively with SIEM and ITSM platforms</p></li></ul></div><div><ul><li><p>
Support triaging and investigating detections and alerts in coordination with Security Operations and Incident Response teams</p></li></ul></div><div><ul><li><p>
Partner with Security Operations and Incident Response teams on investigations and post incident reviews</p></li></ul></div><p></p><div><p><b>
Operational Excellence &amp; Continuous Improvement</b></p></div><div><ul><li><p>
Maintain documentation, runbooks, and standard operating procedures</p></li></ul></div><div><ul><li><p>
Participate in change management and risk review processes for policy updates</p></li></ul></div><div><ul><li><p>
Support audits, assessments, and compliance reviews related to endpoint security</p></li></ul></div></div><div><div><ul><li><p>
Identify opportunities to improve platform efficiency, reliability, and automation</p></li></ul></div><p></p><div><p><b>
The experience you bring:</b></p></div><div><ul><li><p>
8+ years of experience in systems or security platform administration</p></li></ul></div><div><ul><li><p>
Hands‑on experience administering CrowdStrike Falcon or a comparable EDR platform</p></li></ul></div><div><ul><li><p>
Strong understanding of endpoint security concepts and incident response workflows</p></li></ul></div><div><ul><li><p>
Experience supporting Windows, Linux, and macOS environments</p></li></ul></div><div><ul><li><p>
Ability to operate independently in a production enterprise environment</p></li></ul></div><p></p><div><p><b>
What makes you stand out:
</b></p><ul><li><p>Experience integrating endpoint security platforms with SIEM or ITSM tools</p></li></ul></div><div><ul><li><p>
Scripting or automation experience (PowerShell, Python, Bash)</p></li></ul></div><div><ul><li><p>
Experience in regulated or highly controlled environments</p></li></ul></div><div><ul><li><p>
Relevant security or platform certifications</p></li></ul></div></div><p></p><p><b>
You can be who you are.</b></p><p></p><p>
We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential. What&rsquo;s life like at Pacific Life? Visit Instagram.com/lifeatpacificlife</p><p></p><p>
#LI-TM1</p><p></p><p><b>
Base Pay Range:</b></p><p></p><p>
The base pay range noted represents the company&rsquo;s good faith minimum and maximum range for this role at the time of posting. The actual compensation offered to a candidate will be dependent upon several factors, including but not limited to experience, qualifications and geographic location. Also, most employees are eligible for additional incentive pay.</p><p></p>
$125,100.00 - $152,900.00<p></p><p><b>
Your Benefits Start Day 1</b></p><p><br>
Your wellbeing is important to Pacific Life, and we&rsquo;re committed to providing you with flexible benefits that you can tailor to meet your needs. Whether you are focusing on your physical, financial, emotional, or social wellbeing, we&rsquo;ve got you covered.</p><p></p><ul><li><p>
Prioritization of your health and well-being including Medical, Dental, Vision, and Wellbeing Reimbursement Account that can be used on yourself or your eligible dependents</p></li><li><p>
Generous paid time off options including: Paid Time Off, Holiday Schedules, and Financial Planning Time Off
</p></li><li><p>Paid Parental Leave as well as an Adoption Assistance Program</p></li><li><p>
Competitive 401k savings plan with company match and an additional contribution regardless of participation</p></li></ul><p></p><p><b>
You Can Be Who You Are</b></p><p></p><p>
We are committed to a culture of diversity and inclusion that embraces the authenticity of all employees, partners and communities. We support all employees to thrive and achieve their fullest potential.
</p><p></p><p>What&rsquo;s life like at Pacific Life? Visit Instagram.com/lifeatpacificlife</p><p></p><p><b>
EEO Statement:</b></p><p></p><p><i>
Pacific Life Insurance Company is an Equal Opportunity /Affirmative Action Employer, M/F/D/V. If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our career center as a result of your disability. To request an accommodation, contact a Human Resources Representative at Pacific Life Insurance Company.</i></p></div>

Senior Endpoint Protection Engineer

QNBeyond Plus

<div>
 <p>
  We are looking for a
  <strong>
   DevSecOps Security Engineer
  </strong>
  to integrate security practices throughout the software development lifecycle and ensure secure delivery of digital banking services.
 </p>
 <p>
  Key Responsibilities
 </p>
 <ul>
  <li>
   Implement security controls within CI/CD pipelines.
  </li>
  <li>
   Manage SAST, DAST, and security scanning solutions.
  </li>
  <li>
   Conduct vulnerability assessments.
  </li>
  <li>
   Support cloud and container security.
  </li>
  <li>
   Collaborate with engineering teams on secure coding practices.
  </li>
 </ul>
 <p>
  Required Qualifications
 </p>
 <ul>
  <li>
   4+ years cybersecurity experience.
  </li>
  <li>
   DevSecOps implementation experience.
  </li>
  <li>
   Cloud security expertise.
  </li>
  <li>
   OWASP and application security knowledge.
  </li>
 </ul>
</div>


DevSecOps Security Engineer

Search 10000+ Security operations engineer jobs near you this August. New roles added regularly across leading industries. Apply today.