senior information security consultant

WSP in the Middle East

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 At WSP, our Security Risk Management team delivers comprehensive design and advisory services to protect people, assets, and operations. We specialize in Security Threat and Risk Assessments, Project Security Briefs, and Security Strategies tailored to the unique needs of each project.
 <br/>
 <br/>
 We are seeking a Senior Security Consultant to join our growing team. This is an exciting opportunity to work on landmark developments and critical infrastructure projects across the region, influencing how security integrates into world-class built environments.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Represent WSP&rsquo;s Security Risk Management team with clients and stakeholders.
  </li>
  <li>
   Lead and deliver security risk assessments, strategic design work, and audits of existing facilities.
  </li>
  <li>
   Collaborate with multi-disciplinary teams to integrate security into complex built environment projects.
  </li>
  <li>
   Mentor junior team members and contribute to knowledge sharing.
  </li>
  <li>
   Support business development by identifying opportunities, attending client meetings, and converting leads into project wins.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Security Risk Management, Physical Security Engineering, or Business Administration (MBA preferred).
  </li>
  <li>
   8+ years&rsquo; experience in physical security within the built environment and or management consulting.
  </li>
  <li>
   Professional certifications such as CPP, PSP, or CSC (highly desirable).
  </li>
  <li>
   Proven track record delivering high-profile projects across commercial, mixed-use, residential, and critical infrastructure sectors.
  </li>
  <li>
   Strong client engagement and business development skills.
  </li>
  <li>
   Proficiency in industry-standard tools (e.g., BIM).
  </li>
 </ul>
</div>


Senior Security Consultant - Security Risk Management

Amazon Web Services

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk.<br>
<br>
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success.<br>
<br>
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries.<br>
<br>
Key job responsibilities<br>
As an experienced technology professional, you will be expected to:<br>
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants.<br>
2. Lead internal initiatives to deliver quantifiable impact<br>
3. Develop strategic relationships with internal and external leaders<br>
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs<br>
5. Enable and engage delivery partners in project delivery<br>
6. Provide mentorship and coaching to develop others<br>
<br>
A day in the life<br>
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
<br>
<br>
About the team<br>
ABOUT AWS:<br>
<br>
Diverse Experiences
<br>
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
<br>
<br>
Why AWS
<br>
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.<br>
<br>
Work/Life Balance
<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.<br>
<br>
Inclusive Team Culture
<br>
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.<br>
<br>
Mentorship and Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually<br>
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div><p></p>

Senior Security Consultant, Global Proserve Security

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines.<br>
</div><p></p><p><b>Responsibilities:
</b></p><ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li><p>Continue to focus on process improvement for the customer facing incident response services
</p></li><li><p>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</p></li><li><p>Conduct network forensics and log analysis during IR engagements
</p></li><li><p>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</p></li><li><p>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</p></li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li><p>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</p></li><li><p>Develop complete and informative reports and presentations for both executive and technical audience
</p></li><li><p>Availability during nights/weekends as needed for IR engagements<br>
</p></li></ul><p></p><p><b>Required Skills:
</b></p><ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li><p>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</p></li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul><p><b>Education:
</b></p><ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><p>
The Security Assurance Services (SAS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world&rsquo;s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.<br>
The AWS Security Assurance Services team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping executives address their enterprise risk management requirements using highly scalable computing architectures?<br>
The AWS Security Assurance Service team is seeking a talented Senior Assurance Consultant to help the expansion of the Security Assurance practice and educate our customers on how our product-led, people-powered services helps operate their business securely on AWS while also demonstrating assurance that compliance objectives can be achieved. This is an exciting opportunity to contribute at the intersection of cloud, cyber security, and compliance. You will have the opportunity to work with multiple lines of business, and learn from (and contribute to) a variety of security and compliance use cases. This is a customer facing role where success is measured by helping enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements.<br>
We are looking for an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization.<br>
<br>
Key job responsibilities<br>
Expertise &ndash; Leads teams that include Amazonians, partners, and customers to enhance security assurance and compliance programs<br>
<br>
Solutions - Lead a team to define innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.<br>
<br>
Delivery &ndash; Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.<br>
<br>
Insights - Lead efforts with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.<br>
<br>
Ability to travel to customer sites as needed.<br>
<br>
About the team<br>
AWS Security Assurance Services LLC, a PCI-QSAC (Payment Card Industry-Qualified Security Assessor company) and HITRUST External Assessor Firm, is a team of industry certified assessors, helping our customers achieve, maintain, and automate compliance in the cloud by tying together applicable audit standards to AWS service specific features and functionality.<br>
<br>
Diverse Experiences<br>
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Why AWS<br>
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.<br>
<br>
Inclusive Team Culture<br>
Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.<br>
<br>
Mentorship and Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Hybrid Work<br>
We value innovation and recognize this sometimes requires uninterrupted time to focus on a build. We also value in-person collaboration and time spent face-to-face. Our team affords employees options to work in the office every day or in a flexible, hybrid work model near one of our Amazon offices.</p><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>5+ years in IT security, compliance and risk management, data privacy, or security controls.</li><li>3+ years experience advising customers on architectures meeting industry standards and regulations such as NIST 800-53 and GDPR.</li><li>3+ years experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment.</li><li>3+ years experience assessing security posture and producing evidence of control effectiveness in cloud environments.</li><li>Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required.</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>CPA, CMA, CISA, CIA or equivalent risk, audit, or compliance credentials</li><li>Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes.</li><li>Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance.</li><li>Technical security certification such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).</li><li>Demonstrated ability to think strategically about business, product, and technical challenges.</li><li>Master's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience.</li></ul><br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.</div>

Senior Assurance Consultant, AWS Security Assurance Services

Thndr

<div><p><b>About The Role</b></p><p>
Thndr is looking for a Head of Information Security to serve as the company's most senior security leader with full ownership of the information security program across, governance, risk, compliance, assurance, and engineering (security planning and operations).</p><p>
Reporting directly to executive leadership, you will set the vision and direction for how Thndr manages security risk, and ensure the security function is performing at the level the business and its regulators expect, balancing business agility with risk management. You will lead two established teams and be accountable for their output, development, and alignment to the broader security strategy:</p><ul><li><p><b>
Information Security (Governance, Risk, Compliance &amp; Assurance)</b> &mdash; owns the security program at the governance level, including the policy and control framework, cyber risk management, regulatory alignment, and independent oversight across all business functions.</p></li><li><p><b>
Security Engineering</b> &mdash; designs, plans and builds, and operates Thndr's security capabilities and tech stack, from access controls and CI/CD security to logging, and the broader tooling estate.</p></li></ul><p>
This is not a hands-on technical role. It is a leadership role for someone who knows the domain deeply enough to ask the right questions, set the right expectations, and hold the right people accountable &mdash; while building a function that is trusted by the business, respected by regulators, and capable of scaling with Thndr's growth across Egypt, the UAE, and KSA.</p><p><b>
What You'll Do</b></p><p><b>
Security Strategy &amp; Program Ownership</b></p><ul><li><p>
Define and own Thndr's information security strategy and multi-year roadmap, balancing risk reduction, regulatory obligations, and business velocity.</p></li><li><p>
Set the operating model for the security function, including how teams are structured, how accountability is distributed, and how performance is measured at the individual level and the function level.</p></li><li><p>
Act as Thndr's most senior security voice &mdash; advising executive leadership, representing the function in governance committees, and providing clear, independent views on residual risk and strategic priorities.</p></li></ul><p><b>
Governance, Risk &amp; Compliance</b></p><ul><li><p>
Own the information security program at the governance level: policy framework, control framework, and cyber risk management approach.</p></li><li><p>
Drive the organisation's alignment to applicable frameworks and regulations &mdash; including ISO 27001, NIST CSF, PCI DSS, SOC 2, and the regulatory requirements of EG-FRA, ADGM-FSRA, and the emerging KSA landscape.</p></li><li><p>
Ensure the risk register, KPIs/KRIs, and maturity measures are maintained and used to drive accountability &mdash; with your teams executing the underlying work.</p></li><li><p>
Commission, lead and review independent reporting on the security program's effectiveness; challenge control owners where performance falls short of expectations.</p></li></ul><p><b>
Security Engineering &amp; Technical Oversight</b></p><ul><li><p>
Sufficient depth across application security, cloud and infrastructure security, IAM, and CI/CD pipeline security to set architectural direction, review engineering proposals, and challenge technical decisions &mdash; without operating tools directly.</p></li><li><p>
Familiarity with the capabilities and trade-offs of a modern security tooling estate (SIEM/SOAR, SAST/DAST/SCA, WAF, EDR, secrets management) to evaluate coverage gaps and prioritize engineering investment.</p></li><li><p>
Ability to assess security engineering output &mdash; including detection logic, automation coverage, and operational readiness &mdash; and hold engineering leads accountable for quality, SLAs, and alignment to the security roadmap.</p></li><li><p>
Experience defining or influencing secure-by-design standards across product and platform engineering teams in a cloud-native, fast-shipping environment.</p></li></ul><p><b>
Team &amp; Function Leadership</b></p><ul><li><p>
Provide unified leadership across both the Information Security and Security Engineering teams, ensuring they operate cohesively with clear mandates, aligned priorities, and shared accountability to the security strategy.</p></li><li><p>
Lead, develop, and retain high-performing teams &mdash; creating clear career pathways, a culture of ownership, and a bench of future leaders, while holding functional leads accountable for outcomes without directing day-to-day work.</p></li><li><p>
Build the security function's reputation as a trusted partner internally and a credible, independent voice on risk externally &mdash; with regulators, auditors, and commercial stakeholders alike.</p></li></ul><p></p><p><b>
What You'll Need</b></p><p><b>
Experience</b></p><ul><li><p>
8+ years in information security, with at least 4&ndash;5 years in a senior leadership role (CISO, Head of Security, or equivalent) owning a security function end-to-end.</p></li><li><p>
Proven track record leading multi-disciplinary security teams spanning both GRC and technical/engineering domains.</p></li><li><p>
Experience operating in a regulated financial services or fintech environment, with direct exposure to regulatory engagement and audit defense.</p></li><li><p>
Demonstrated ability to build and scale security programs in high-growth environments.</p></li></ul><p><b>
Domain Knowledge</b></p><ul><li><p>
Deep understanding of the security landscape across GRC, application security, infrastructure security, IAM, and cloud environments &mdash; sufficient to set direction, challenge practitioners, and make informed risk trade-offs.</p></li><li><p>
Familiarity with the tooling and capabilities underpinning a modern security function (SIEM, SAST/SCA, WAF, DLP, access management, etc.), without being expected to operate them directly.</p></li></ul><p><b>
Frameworks &amp; Compliance</b></p><ul><li><p>
Strong working knowledge of ISO 27001, NIST CSF, PCI DSS, and/or SOC 2 &mdash; including how to govern against them at scale.</p></li><li><p>
Experience managing regulatory relationships and preparing board- and committee-level security reporting.</p></li></ul><p><b>
Leadership &amp; Communication</b></p><ul><li><p>
Exceptional executive presence &mdash; able to represent security credibly at the board level and translate complex risk into clear business language.</p></li><li><p>
A natural leader who builds trust with technical and non-technical stakeholders alike, and who holds teams to high standards without micromanaging.</p></li><li><p>
Strategic thinker with the judgment to prioritise effectively, navigate ambiguity, and make decisions under uncertainty.</p></li></ul><p><b>
Nice to Have</b></p><ul><li><p>
Familiarity with financial regulatory requirements across Thndr's operating markets: EG-FRA (Egypt), ADGM-FSRA (UAE), and the emerging KSA regulatory landscape.</p></li><li><p>
Relevant certifications: CISSP, CISM, or equivalent.</p></li></ul><p></p><p><b>
Who Are We?</b></p><p>
Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we&rsquo;re shaping the future of investing while actively driving the economies we serve by promoting local investment products.</p><p>
History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:</p><ul><li><p>
High barriers to entry &mdash; In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.</p></li><li><p>
Irrelevant experience &mdash; Catered toward expert traders and financial specialists, therefore alienating the majority of the population.</p></li><li><p>
Fragmented offering &mdash; Investment products were not gathered in a single, intuitive outlet.</p></li></ul><p>
We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:</p><ul><li><p><b>
3 million</b> app downloads</p></li><li><p><b>
$8.8bn</b> in annualized traded value</p></li><li><p><b>
#1 platform</b> in terms of traded value</p></li><li><p><b>
84%</b> of our users are investing for the first time</p></li><li><p><b>
65%</b> of our users come from outside of capital cities and have previously had limited access to financial institutions</p></li></ul><p>
Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.</p><p><b>
Rumble </b>was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry&rsquo;s top experts.</p><p>
Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.</p><p>
At <b>Thndr</b>, we're looking for people driven by our mission to help us democratize investing across the MENA region.</p></div>

Head Of Information Security

Crocs

<div></div><div><div><div><div><div>Requisition ID: 14011
</div></div></div></div><div><div><div><div>Job Location(s):
Broomfield, CO, US, 80021
</div></div></div></div><div><div><div><div>Time in Office: Hybrid
</div></div></div></div><div><div><div><div><div>At Crocs, Inc., every career offers a chance to make a real impact. No two journeys look the same. And that's exactly how we like it. Whether you&rsquo;re welcoming customers into our stores, collaborating with global teams at our headquarters, or keeping operations moving at our distribution centers, your impact is real and valued. At Crocs, Inc. you&rsquo;re not expected to fit a mold. You&rsquo;re encouraged to break it and create something better.</div><div></div><div><div><div><h2 class="jobSectionHeader"><b><br>
Overview</b></h2>
</div><div><p><b>
The Senior Information Security Engineer at Crocs, Inc.</b> will be responsible for leading detection engineering efforts for our SIEM and partnering with our Managed Security Service Provider (MSSP). This role will also help drive AI Security and Data Security Posture Management (DSPM) capabilities by improving visibility, controls, and monitoring across cloud, SaaS, and on-prem environments. The position involves developing advanced detection and monitoring, tuning and optimizing SIEM rules, collaborating with the SOC team to enhance threat detection and incident response, and strengthening the security posture of sensitive data and AI-enabled applications.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What You'll Do</b></h2>
</div><div><ul><li>Lead the design, implementation, and maintenance of advanced detection and monitoring mechanisms within the SIEM and related security platforms.</li>
<li>Partner with application, data, and platform teams to implement AI Security controls for AI-enabled applications and services (e.g., secure design reviews, threat modeling, monitoring, and guardrails).</li>
<li>Lead DSPM initiatives, including sensitive data discovery, classification, exposure analysis, and remediation tracking across cloud, SaaS, and on-prem data stores.</li>
<li>Develop, tune, and optimize SIEM rules and use cases to improve the accuracy and effectiveness of threat detection.</li>
<li>Collaborate with the SOC team and MSSP to enhance threat detection and response capabilities.</li>
<li>Integrate security telemetry (logs, events, and signals) from endpoint, cloud, SaaS, identity, data, and application sources into the SIEM to ensure comprehensive visibility and monitoring.</li>
<li>Conduct regular assessments of detection coverage and security posture (including data exposure and AI-enabled application monitoring) to identify and remediate gaps in visibility, controls, or performance.</li>
<li>Analyze and interpret security logs, alerts, and data posture findings to identify potential threats, misconfigurations, sensitive data exposure, and AI abuse patterns.</li>
<li>Conduct attack simulations and purple-team exercises to validate and improve detections for endpoint, identity, cloud, data, and AI-related threats.<br>
Review and apply threat intelligence to improve detections for emerging threats and vulnerabilities, including cloud, SaaS, data exfiltration, and AI/LLM-related attack techniques.</li>
<li>Develop and implement automation playbooks for SOAR to streamline and enhance incident response processes, including data exposure/exfiltration scenarios and AI-related alerts.</li>
<li>Provide guidance and mentorship to junior security engineers and SOC analysts on detection engineering and incident response best practices.</li>
<li>Manage ticket queues, handle escalations, and review operational metrics to ensure the effectiveness of detection and response efforts.</li>
<li>Maintain strong communication with partners, including senior management, to report on detection capabilities and security incidents</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>What You'll Bring to the Table</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree or equivalent experience in computer science, information security, or a related field preferred; certifications such as CISSP, GIAC, or similar are preferred.</li>
<li>9+ years of experience in IT and information security roles, with a focus on detection engineering and SIEM management.</li>
<li>In-depth knowledge of SIEM platforms and experience with rule development and optimization.</li>
<li>Experience working with MSSPs and SOC teams to enhance detection and response capabilities.</li>
<li>Hands-on experience with DSPM and/or data security capabilities, such as data discovery and classification, exposure analysis, data access governance, and remediation workflows; familiarity with data governance and privacy principles and how they apply to sensitive data handling and AI use cases.</li>
<li>Experience with AI Security concepts and practices, including securing AI-enabled applications, understanding common AI/LLM risks (e.g., prompt injection, data leakage), and implementing monitoring/guardrails.</li>
<li>Solid understanding of log management, correlation, analysis, and security telemetry across endpoint, identity, cloud, SaaS, and data platforms.</li>
<li>Experience with integrating various log sources into SIEM platforms.</li>
<li>Knowledge of security frameworks and standards, including NIST, ISO/IEC 27001, and PCI-DSS.</li>
<li>Proficiency with security tools and technologies across endpoint, network, cloud, and data protection domains (e.g., EDR, IDS/IPS, firewalls, CASB/SSE, DLP).</li>
<li>Advanced knowledge of Windows and Linux operating systems and their security configurations.</li>
<li>Strong analytical and problem-solving skills with the ability to interpret complex security data.</li>
<li>Superb communication and collaboration skills, with the ability to simplify technical concepts for non-technical partners.</li>
</ul></div></div></div><p>
The Company is an Equal Opportunity Employer committed to a diverse and inclusive work environment. We accept applications on an ongoing basis.</p><br>
<p></p>
<p>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability, or any other classification protected by law.</p><br>
<p></p>
<p>
Title: Sr. Information Security Engineer</p>
<p>
Salary or Pay Range: $150,000 - $160,000</p>
<p>
Pay offered will vary based on job-related factors such as location, experience, training, skills, and abilities.</p><br>
<p></p>
<p>
At Crocs, Inc. we believe in the power of a blend of in-person and virtual collaboration to drive creativity and strengthen relationships. Your participation in this flexible schedule plays a key role in building a connected and successful team. In-office requirements vary by our work personas: Resident (5 days), Collaborator (4 days), Connector (2-3 days), Explorer (fully remote). This role has been aligned to the Collaborator persona.</p><br>
<p></p>
<p>
This position is eligible to participate in a company incentive program.</p><br>
<p></p>
<p>
This position is eligible for company benefits including but not limited to medical, dental, and vision coverage, life and AD&amp;D, short and long-term disability coverage, paid time off, employee assistance, participation in a 401k program that includes company match, and many other additional voluntary benefits.</p><br>
<p></p>
<p><i>
The application window is 45 days, but applicants are encouraged to apply as soon as possible after the posting date in order to ensure optimal consideration. The posting will be removed if the job is filled before the application window deadline.</i></p>
<p>
Job Category: Corporate</p><br>
</div></div></div></div><p><br>
<b>Nearest Major Market: </b>Denver</p></div>

Sr. Information Security Engineer

Wells Fargo

<div><b>About this role:</b><br>
<br>
Wells Fargo is seeking a Senior Counsel-Senior Assistant Vice President as part of the Cybersecurity Legal Team within the Technology Law Division with tangible expertise and experience in U.S. and global cybersecurity and privacy laws, rules, and regulations.<br>
<br>
For additional information on this line of business, refer to the external Careers Site at Wellsfargo.com/career.<br>
<br>
This Senior Counsel-Senior Assistant Vice President will provide legal support and advice to the Chief Information Security Office and the Enterprise Business Resiliency Office, including the Enterprise Incident Management team. The Senior Counsel-Senior Assistant Vice President will serve as a trusted legal advisor and strategic partner in the supported functions.<br>
<br>
<b>In this role, you will:</b><ul><li>
Provide legal advice and represent the Company in highly complex matters and initiatives including but not limited to information security, third-party risk management, incident response, privacy and data, and security policies, procedures, and controls</li><li>
Provide guidance to internal clients on legal matters, legal risk assessment, planning and policy decisions, claims against the Company, probability of loss, and cost-effective risk mitigation strategies</li><li>
Draft complex legal documents, review and negotiate documents prepared by outside counsel, and advise on vendor agreements related to information security issues</li><li>
Independently resolve complex issues and assist the Cybersecurity Legal team to meet deliverables</li><li>
Collaborate with peers, colleagues, and mid-level managers to resolve issues and achieve goals</li><li>
Work directly with business clients and develop an in depth understanding of business unit activities and products</li><li>
Partner with business leaders and management of other corporate departments to develop and implement risk management programs</li></ul><b>
Required Qualifications:</b><ul><li>
4+ years of Law experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li><li>
Active State Bar membership or the equivalent in a country outside the United States</li></ul><b>
Desired Qualifications:</b><ul><li>
Experience as a practicing attorney in global financial services cybersecurity laws, regulations, and best practices, and in particular an understanding of the FFIEC, CFTC, NYDFS Cybersecurity Regulation, NIST 800-53, NIST Cyber Framework, ISO, and PCI compliance as it relates to banks.</li><li>
Experience with data breach and incident response investigations</li><li>
Experience working on policy issues related to cybersecurity, investigations, threat sharing, and privacy as it intersects with cybersecurity</li><li>
Experience working with law enforcement and national security authorities.</li></ul><b>
Job Expectations:</b><ul><li>
Position requires an onsite presence in any of the posted locations.</li><li>
This position offers a hybrid work schedule.</li><li>
Ability to travel up to 10% of the time.</li><li>
Relocation assistance is not available for this position.</li><li>
This position is not eligible for Visa sponsorship.</li></ul><b>
Pay Range</b><br>
<br>
Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.<br>
$139,000.00 - $260,000.00<br>
<b>Benefits
</b><br>
<br>
Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.<ul><li>
Health benefits</li><li>
401(k) Plan</li><li>
Paid time off</li><li>
Disability benefits</li><li>
Life insurance, critical illness insurance, and accident insurance</li><li>
Parental leave</li><li>
Critical caregiving leave</li><li>
Discounts and savings</li><li>
Commuter benefits</li><li>
Tuition reimbursement</li><li>
Scholarships for dependent children</li><li>
Adoption reimbursement</li></ul><b>
Posting End Date:</b><br>
14 Apr 2026<br>
<ul><li><b>Job posting may come down early due to volume of applicants.
</b></li></ul><br>
<b>We Value Equal Opportunity</b><br>
<br>
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.<br>
<br>
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.<br>
<br>
<b>Applicants with Disabilities</b><br>
<br>
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .<br>
<br>
<b>Drug and Alcohol Policy</b><br>
<br>
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.<br>
<br>
<b>Wells Fargo Recruitment and Hiring Requirements:</b><br>
<br>
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.<br>
<br>
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Senior Cybersecurity Counsel - Senior AVP

Search 10000+ Senior information security consultant jobs near you this April. New roles added regularly across leading industries. Apply today.