senior security engineer

help AG

<div><p>Help AG is looking for a talented and experienced Senior Security Engineer, specializing in Sentinel / Defender / Splunk who will be responsible for the creation of procedures, implementation of process development, and maintenance of security systems across client environments. The Security Engineer will work closely with Management, Senior Engineers, Threat Analysts, Solution Architects, other Security Engineers, and clients to complete high profile, critical services to existing Managed Security Service clients. This position is based out in Dubai, UAE and will be responsible for the administration, maintenance, and integration of Splunk, MS Azure Sentinel, Sentinel UEBA, AIP, Defender, CASB, ATA/ATP &amp; Intune for security operations technical engineering, assessment, and recommendations in the areas of real-time security, operational network &amp; identity management system, and applications systems security.</p><p><b><br>
Responsibilities:</b></p><p></p><ul><li><p>
Design, implement, and support solutions with SIEM (preferably Sentinel) and Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations used to deliver internet-scale intelligence and managed security products.</p></li><li><p>
Implement &amp; administer Microsoft Defender (ATP), Azure Cloud Access Security Broker &amp; Azure Threat Protection security products within customer environment Manage and oversee day-today activities of Azure IP platform and ensure adherence to enterprise standards in project execution methodology, requirements gathering, quality assurance, and continuous improvement.</p></li><li><p>
Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.</p></li><li><p>
Quickly build and solve a problem using a new technology to determine viability.</p></li><li><p>
Serve as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.</p></li></ul><p></p><p><b>
Qualifications &amp; Skills</b></p><p></p><ul><li><p>
College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.</p></li><li><p>
Experience and knowledge of Splunk, Azure M365 &amp; MS cloud security is essential.</p></li><li><p>
Security Engineer must possess minimum 5 years of professional experience &amp; Senior Security Engineer must possess minimum 7-8 years of professional experience supporting and maintaining Splunk, Azure M365 System.</p></li><li><p>
4-5 years of experience with administering &amp; managing Splunk and Sentinel SIEM including content development.</p></li><li><p>
Experience in Use cases creation and Content development on Microsoft Sentinel, Splunk SIEM.</p></li><li><p>
Experience in Custom Use cases, Dashboards, Report creation on Microsoft Sentinel, Splunk SIEM.</p></li><li><p>
Knowledge of Integration with tools, data connectors for Microsoft Sentinel, Splunk SIEM.</p></li></ul><ul><li><p>
Knowledge of Splunk, Sentinel architecture, tables and data in Sentinel.</p></li><li><p>
Knowledge of Sentinel workbooks and automation &amp; Splunk Enterprise Security.</p></li><li><p>
Professional experience working with networks and network architecture.</p></li><li><p>
Information security knowledge in one or more areas such as EDR &ndash; Enterprise end-point security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.).</p></li><li><p>
Splunk, Azure Log analytics, or equivalent big data engine experience.</p></li><li><p>
Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.</p></li><li><p>
Knowledge of Linux and Windows Operating Systems.</p></li><li><p>
Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.</p></li><li><p>
Experience working with clients in a service delivery function.</p></li><li><p>
Shift flexibility, including the ability to provide after-hours support when needed.</p></li><li><p>
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem tracking as well as procedure.</p></li></ul><p></p><p><b><br>
Benefits</b></p><p></p><ul><li><p>
Health insurance with one of the leading global providers for medical insurance.</p></li><li><p>
Career progression and growth through challenging projects and work.</p></li><li><p>
Employee engagement and wellness campaigns activities throughout the year.</p></li><li><p>
Excellent learning and development opportunities.</p></li><li><p>
Annual flight tickets to home country.</p></li><li><p>
Inclusive and diverse working environment.</p></li><li><p>
Flexible/hybrid working environment.</p></li><li><p>
Open-door policy.</p></li></ul><p></p><p><b>
About us</b></p><p></p><p>
Help AG is the cybersecurity arm of e&amp; enterprise (formerly Etisalat Digital) and provides leading enterprise businesses across the Middle East with strategic consultancy combined with tailored information security solutions and services that address their diverse requirements, enabling them to evolve securely with a competitive edge.</p><p></p><p>
Present in the Middle East since 2004, Help AG was strategically acquired by e&amp; (formerly Etisalat Group) in 2020, hence creating a cybersecurity and digital transformation powerhouse in the region.</p><p>
Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and maintaining its focus on all aspects of cybersecurity.</p><p></p><p>
With best of breed technologies from industry-leading vendor partners, expertly qualified service delivery teams and a state-of-the-art consulting practice, Help AG delivers unmatched value to its customers by strengthening their cyber defenses and safeguarding their business.</p></div>

Senior Security Engineer

LSEG (London Stock Exchange Group)

<div><div>Role Summary</div><div>
Division, Business or Function</div><div></div><div>
Cyber Security, Security Engineering</div><div>
Career Stage &amp;</div><div></div><div>
Global Grade</div><div>
Senior Associate, GG11</div><div>
Role Title: Senior Security Engineer</div><div></div><div>
Status</div><ul><li>
New role or combination of existing roles</li><li>
If combination, what were the original grade/career stage</li><li>
Any confidentiality or regulatory constraints</li></ul><div>
New Role.</div><div>
No specific confidentiality or regulatory constraints above those of a standard LSEG employee. Not an approved person or similar.</div><div></div><div>
Role Purpose</div><div>
Developing and automating cyber defence capabilities to protect the group from cyber threats which seek to impact the confidentiality, integrity and availability of group assets. Domain area is Network Security.</div><div></div><div>
Reports to</div><div>
Senior Manager, Network Security</div><div></div><div>
Direct reports</div><div>
No direct FTE reports.</div><div>
May lead contingents and vendor/partner resources in their deliveries.</div><div></div><div>
Key relationships &amp; committees</div><div>
Collaborators include the wider security team including security architecture, cyber strategy business function, governance, risk and compliance, global security operations centre. Programme management. Entity level Business Information Security Officers (BISOs). Infrastructure &amp; Cloud operations, engineering and architectures teams. Internal risk and audit functions. Architecture and corporate approval forums. External collaborators partners/vendors and industry schemes.</div><div></div><div>
Location / flexible working</div><div>
Bengaluru</div><div>
Location is subject to where a suitable candidate for the role can be found and in conjunction with the organisation structure and location strategy.</div><div></div><div>
Responsibilities</div><div>
Key responsibilities</div><div>
Design, build, and maintain automation pipelines to deploy and run network security controls including Secure Web Gateway (SWG), forward/reverse proxy, and Zero Trust Network Access (ZTNA) aligned with LSEG&rsquo;s cyber strategy.</div><div>
Identify and lead opportunities to automate manual security processes, using tools such as Terraform, Ansible, and internal GitLab CI/CD pipelines.</div><div>
Own and manage the controls relevant to this domain, ensuring they are effective, measurable, and continuously improved through automation and engineering maturity.</div><div>
Develop and maintain supporting artefacts including standard operating procedures, implementation patterns, and design documentation, ensuring regular review and lifecycle management.</div><div>
Deliver engineering initiatives and workstreams, supporting broader cyber and infrastructure programmes.</div><div>
Implement changes to control configurations and deployment methods as part of continuous improvement or as required to respond to new risks or operational requirements.</div><div>
Define and keep control metrics, evidence artefacts, and automation telemetry to support risk-based reporting and compliance with internal policies and external regulatory standards.</div><div>
Provide engineering-level support and technical ownership during incidents related to the secure access stack or automated controls.</div><div>
Maintain awareness of emerging technologies, API integrations, and standards that support scalable and resilient security automation.</div><div>
Engage with vendors and influence product direction to support LSEG&rsquo;s automation and control objectives.</div><div>
Supply to LSEG's broader cyber engineering and automation strategy, applying strong foundational knowledge of networking and cybersecurity principles.</div><div></div><div>
Leadership responsibilities</div><div>
This role is an individual contributor and leads no FTE headcount.</div><div></div><div>
Critical work</div><div>
Delivery of activities against of agreed cyber security strategies. Shapes project delivery with the project management team and the senior manager of the domain area.</div><div>
Delivery of key artefacts associated with the role, artefacts support evidencing and assurance activities.</div><div>
Ongoing control operation and effectiveness and evidencing of such.</div><div>
Reporting, development and management of agreed measures, key performance indicators and key risk indicators.</div><div>
Design, build, and deploy automated workflows and pipelines to support the delivery and lifecycle management of network security controls, aligned with LSEG&rsquo;s cyber automation strategy.</div><div>
Deliver technical artefacts that support control implementation, monitoring, and assurance, including Infrastructure-as-Code (IaC) templates, API integrations, runbooks, and automation playbooks.</div><div>
Ensure effective and measurable operation of automated controls (e.g., SWG, proxy, ZTNA), with the ability to evidence control performance, coverage, and compliance across platforms.</div><div>
Develop and maintain automation health checks, logging, and alerting to support operational resilience and incident readiness.</div><div>
Define and report on key automation metrics, including coverage, execution success, exception rates, and control drift, mapped to key performance and risk indicators.</div><div></div><div>
Impact</div><div>
As a group level function the role has impact across all parts of the business as it has responsibility for the relevant group security controls which seek to mitigate the risk and impact to the group from cyber-attacks. Impacts include financial, economic, regulatory, customer and brand.</div><div>
The role is key to addressing regulatory concerns for all of our regulated entities related to cyber security and cyber resilience.</div><div></div><div>
Critical metrics</div><div>
Timely and high-quality delivery of automation pipelines and infrastructure-as-code artefacts for network security control deployment and maintenance.</div><div>
Controls automated through this role are resilient, consistently effective, and do not require repeated manual remediation.</div><div>
Documentation, code artefacts, and implementation runbooks are accurate, version-controlled, and aligned to agreed design patterns and standards.</div><div>
Agreed control measures including critical metrics and KRIs are embedded into CI/CD pipelines and support continuous assurance and risk reporting.</div><div></div><div>
Technical / job functional knowledge</div><div>
Solid understanding of enterprise and service provider networking concepts (e.g., routing, switching, DNS, TLS, proxy chaining, IPSEC/GRE tunnels).</div><div>
In-depth experience with network security technologies, particularly Secure Web Gateway (SWG), forward/reverse proxy, and Zero Trust Network Access (ZTNA).</div><div>
Practical experience automating security control deployment and configuration using tools such as Terraform, Ansible, and scripting (Python, Bash, etc.).</div><div>
Familiarity with Git-based CI/CD platforms (preferably GitLab), including pipeline-as-code, testing automation, and secure deployment patterns.</div><div>
Broad understanding of cybersecurity principles, control frameworks (NIST, CIS), and threat actor TTPs, with the ability to design resilient, layered controls.</div><div>
Experience engineering observable, testable, and scalable security automation systems with appropriate alerting and error handling.</div><div>
Methodical problem-solving skills with an engineering attitude and a bias for simplification and automation.</div><div>
Preferred certifications include one or more of: CISSP, CSSLP, OSCP, CCNP, JNCIP, GIAC, or relevant certifications in infrastructure automation and cloud security.</div><div></div><div>
Business and sector expertise</div><div>
Direct experience working in cybersecurity engineering or DevSecOps roles within financial services or other regulated environments.</div><div>
Familiarity with industry regulations, risk management practices, and compliance standards relevant to the financial sector (e.g., DORA, SWIFT CSP).</div><div>
Strong appreciation of the risk and control landscape, with the ability to translate business objectives into secure, automated engineering solutions.</div><div>
Typically brings 8+ years of experience in technology roles, with at least 4 years in a security or infrastructure engineering capacity.</div><div>
Hands-on experience in designing and supporting network security automation across multiple technologies and platforms, including both cloud and hybrid environments.</div><div></div><div>
Leadership and management experience</div><div>
Experience in advocating for and influencing change in order to reach best outcome based on the needs of the organisation, stakeholders and from monitoring industry trends.</div><div></div><div>
Personal skills and capabilities</div><div>
Collaborating across the group to deliver successful sustainable outcomes for the group and its stakeholders.</div><div>
Takes ownership and commits to delivering sustainable outcomes and resolving problems.</div><div>
Demonstrates a bias for action.</div><div>
Strong track record of delivering results without compromising on quality.</div><div>
Critical thinker, takes in broad perspectives to assess and make decisions.</div><div>
Willingness and flexibility and to work across different technologies.</div><div>
Capability to quickly assimilate new concepts and technologies.</div><div>
Takes ownership of own career development and learning.</div><div>
Supports colleagues with less experience to help in their professional growth.</div><div>
Adapts messaging and presentation styles to the needs of a different audiences.</div><div>
Is measured and considered in challenging and high-pressure situations.</div><div></div><div>
Diversity &amp; Inclusion</div><div>
People are at the heart of what we do and drive the success of our business. Our colleagues thrive personally and professionally through our shared values of Integrity, Partnership, Innovation and Excellence are at the core of our culture. We embrace diversity and actively seek to attract people with unique backgrounds and perspectives. We are always looking at ways to become more agile, so we meet the needs of our teams and customers. We believe that an inclusive collaborative workplace is pivotal to our success and supports the potential and growth of all colleagues at LSEG</div><div></div><div>
Proud to share LSEG in the India is Great Place to Work certified (Jun &rsquo;25 &ndash; Jun &rsquo;26).</div><div>
Learn more about life and purpose of our company directly from India colleagues&rsquo; video: <div>Bengaluru, India | Where We Work | LSEG</div></div><div></div><div>
Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.</div><div></div><div>
LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.</div><div></div><div>
Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.</div><div></div><div>
Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.</div><div></div><div>
We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone&rsquo;s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.</div><div></div><div>
You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.</div><div></div><div>
LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.</div><div></div><div>
Please take a moment to read this <div>privacy notice</div> carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it&rsquo;s used for, and how it&rsquo;s obtained, <div>your rights and how to contact us as a data subject</div>.</div><div></div><div>
If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.</div></div>

Capital Security Systems

<p>We are seeking a Senior Cloud Security Engineer to design, implement, and maintain secure, compliant, and resilient cloud infrastructures across AWS, Azure, and GCP. The role requires deep technical expertise in cloud security, compliance with regional and global regulations, and the ability to drive security transformation for mission-critical environments.</p><p>The candidate will work closely with architecture, DevOps, SOC, and regulatory teams to protect cloud workloads, ensure compliance, and strengthen trust in digital services.</p><p>Key Responsibilities</p><ul><li>Lead secure cloud architecture design and reviews for IaaS, PaaS, and SaaS workloads.</li></ul><ul><li>Implement Identity and Access Management (IAM), RBAC, MFA, SSO, and secrets management.</li></ul><ul><li>Build and enforce cloud security governance frameworks aligned with ISO 27001, NIST CSF, CIS benchmarks, and GCC regulatory bodies.</li></ul><ul><li>Secure cloud networks (VPCs/VNets, security groups, firewalls, segmentation, VPN, private endpoints).</li></ul><ul><li>Manage encryption, KMS/HSM, PKI, and secure key lifecycle management.</li></ul><ul><li>Integrate security into CI/CD pipelines with DevSecOps practices (IaC scanning, SAST, DAST, container security).</li></ul><ul><li>Deploy and manage cloud-native security tools (AWS GuardDuty, Azure Defender, GCP SCC).</li></ul><ul><li>Threat detection and monitoring using SIEM/SOAR (Splunk, Sentinel, QRadar, Elastic).</li></ul><ul><li>Conduct vulnerability management and remediation for cloud workloads, including containers and serverless.</li></ul><ul><li>Lead incident response, digital forensics, and root cause analysis for cloud incidents.</li></ul><ul><li>Ensure compliance with GCC and international data regulations (see section below).</li></ul><ul><li>Mentor junior engineers and promote a security-first culture across teams.</li></ul><ul><li>Strong expertise in AWS, Azure, and/or GCP cloud security services.</li></ul><ul><li>DevSecOps &amp; IaC Security (Terraform, CloudFormation, ARM Templates, Kubernetes, Docker security).</li></ul><ul><li>Zero Trust Architecture and SASE frameworks.</li></ul><ul><li>Cloud Posture Management (CSPM) and Workload Protection (CWPP) tools.</li></ul><ul><li>Familiarity with multi-cloud and hybrid cloud models.</li></ul><ul><li>Strong scripting &amp; automation (Python, Bash, PowerShell).</li></ul><ul><li>API security, microservices security, and serverless protection.</li></ul><ul><li>Threat intelligence &amp; SOC collaboration.</li></ul><ul><li>Regulatory &amp; Compliance Knowledge (GCC Focus)</li></ul><p>Qualifications</p><ul><li>Bachelor&rsquo;s or Master&rsquo;s in Computer Science, Information Security, or equivalent.</li></ul><ul><li>6&ndash;10+ years in cybersecurity, with 4+ years focused on cloud security engineering.</li></ul><ul><li>Hands-on multi-cloud experience (AWS, Azure, GCP).</li></ul><ul><li>Deep understanding of network security, IAM, and encryption.</li></ul><ul><li>Strong incident response and forensic skills in cloud environments.</li></ul><ul><li>Certifications (highly valued in GCC):</li></ul><p>o	AWS Certified Security &ndash; Specialty</p><p>o	Microsoft Certified: Azure Security Engineer Associate / Expert</p><p>o	Google Professional Cloud Security Engineer</p><p>o	CISSP / CCSP</p><p>o	CISM / ISO 27001 Lead Implementer (bonus)</p><p>Job Type: Full-time</p>

Senior Cloud Security Engineer

Bread Financial

<div><div>Every career journey is personal. That's why we empower you with the tools and support to create your own success story.</div><div></div><div>
Be challenged. Be heard. Be valued. Be you ... be here.</div><div></div><div>
Job Summary</div>
The Senior Cloud Security Engineer is responsible for coding, configuring and administering cloud information security systems. This role is expected to champion processes and technology as a subject matter contributor and researcher in various cloud infrastructure and system technical areas. The Senior Cloud Security Engineer works closely with teams in other Information Security disciplines, infrastructure, and operations areas to help provide superior protection to Bread Financials information assets. This role serves as a cloud security practitioner that builds and operates information security controls, specific to cloud processing platforms. Senior Cloud Security Engineers identify threats to cloud systems, develop new features to meet security needs and build, maintain, upgrade and continuously improve cloud-based systems. The Senior Cloud Security Engineer does everything from planning and architecting secure cloud system requirements to constructing, validating and deploying the system to monitoring and detecting malicious activity once the system is deployed. Additionally, this role identifies and recommends/remediates security gaps on the platform and infrastructure.<div></div><div><br>
Essential Job Functions</div><ul><li><div>
Cloud Software Development Lifecycle, Security and Tooling - Demonstrate ability to leverage agile experience by integrating security tools into the CI and CD pipeline (Dev-Sec-Ops), developing scripts, monitoring results, generating metrics and tracking issues to resolution. Demonstrate maturity with maintaining and enhancing a set of cyber security tools and products designed to improve and evaluate cloud security. Test new tools and products by developing use cases and performing proof of value activities. Perform automation and orchestration when possible.</div></li></ul><div></div><ul><li><div>
Process and Project Management - Support the implementation of key cloud projects and initiatives as they pertain to the organization's long-term security strategy. Identify areas of improvement where processes do not currently exist and drive the development and delivery of new processes to address these gaps. Deliver quality results with minimal supervision in coordinating projects, collaborating with others and other deliverables. Demonstrate a willingness to escalate identified issues as necessary and the ability to identify when to partner with leadership to resolve issues, risks or obstacles. Build consensus for delivering results while finding common ground for collaboration and partnership. This position assists in the research, design, validation, and implementation of systems, components, and technologies and provides recommendations for strategies, roadmaps, and solutions. Submits RFQ/RFPs, obtains quotes, aggregates documents, and proposals, maintains current and proposed End-of-Life schedules, and tracks the progression of key vendors.</div></li></ul><div></div><ul><li><div>
Documentation, Metrics and Presentations &ndash; Create and maintain relevant documentation including the ability to deliver run books, project updates, process documentation, architecture and technical requirements and presentations. Develop and deliver key performance indicators (KPIs) through the understanding of the tools and deliverables by helping to develop, maintain and mature the associated reporting structure. Produce meaningful and actionable metrics through data analysis. Conduct data analysis exercises using Excel pivot tables, database queries, and other data driven analysis tools. Produce presentations at various levels of abstraction dependent on intended audience using Microsoft Power Point, Visio or equivalent tools.</div></li></ul><div></div><ul><li><div>
Leadership and Development - Successfully work in a team-fostered, fast-paced, multi-threaded environment. Serve as a champion of cloud security researching tools and process specific to cloud computing. Demonstrate self-learning in gaining knowledge of new technical developments and ensure they are shared appropriately and applied within the department. Identify and understand drivers for change and be an individual champion or partner with leadership to deliver those changes. Be an effective collaborator and problem solver. Strong negotiation and oral communication skills expected.</div></li></ul><div></div><ul><li><div>
Human Relations &ndash; Maintain a high level of confidentiality and professionalism. Proactively identify potential issues and provide options for solutions. Decompose complex topics and break them down into laymen's terms or analogies that help drive clarity and understanding. Be an enabling partner that provides alternative options or supporting information when saying no to business or IT requests. Be creditable, trustworthy and respectful.</div></li></ul><div></div><div>
Reports to: Manager, Information Security</div><div></div><div>
Working Conditions/ Physical Requirements: Normal office environment. Some travel may be required. As the need of the business continue to evolve, this role may be asked to work an on-call rotation to include evenings or weekends.</div><div></div><div>
Direct Reports: None</div><div></div><div>
Minimum Qualifications:</div><ul><li><div>
Degree Required: Bachelor&rsquo;s degree in computer science, networking or information technology</div></li><li><div>
Years of Work Experience Required: 5+ years</div></li><li><div>
Type / focus of work experience required: Experience in Information Security or Infrastructure, with large scale platforms (cloud technologies), complex inter-dependent technologies, data centers, AWS, internal software systems and tools e.g. AWS Security Hub, Prisma, Jenkins, etc.</div></li></ul><div></div><div>
Type / focus of work experience preferred: Certification: Security +, Network+, CISSP, SSCP, CCSP, Cloud+.</div><div></div><div>
Knowledge, Skills and Abilities (e.g.) REQUIRED (needs to align with minimum experience)</div><ul><li><div>
Networking, LDAP directories, vulnerability/patch management, encryption and key management, web application firewall (WAF), network access control (NAC) and privileged access management (PAM).</div></li><li><div>
Change management, Incident management, server and desktop management and access management.</div></li><li><div>
Cloud architecture and computing and software application general computing controls.</div></li><li><div>
Business continuity/disaster recovery.</div></li><li><div>
Systems development lifecycle and project management methodologies, specifically Agile/Scrum.</div></li><li><div>
Working knowledge of web services, API, REST, RPC and how to properly secure them in conjunction with experience and practical application of cloud security controls based on industry frameworks e.g. Cloud Security Alliance.</div></li><li><div>
Knowledge of overall Microsoft Office 365 security including knowledge of azure active directory, azure information protection, information rights management, single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security)</div></li></ul><div></div><div>
Other Duties</div><div></div><div>
This job description is illustrative of the types of duties typically performed by this job. It is not intended to be an exhaustive listing of each and every essential function of the job. Because job content may change from time to time, the Company reserves the right to add and/or delete essential functions from this job at any time.</div><div></div><div><div>
About Bread Financial</div></div><div></div><div><div>
At Bread Financial, you&rsquo;ll have the opportunity to grow your career, give back to your community, and be part of our award-winning culture. We&rsquo;ve been consistently recognized as a best place to work nationally and in many markets and we&rsquo;re proud to promote an environment where you feel appreciated, accepted, valued, and fulfilled&mdash;both personally and professionally. Bread Financial supports the overall wellness of our associates with a diverse suite of benefits and offers boundless opportunities for career development and non-traditional career progression.</div><div></div><div><div>
Bread Financial&reg;</div> (NYSE: BFH) is a tech-forward financial services company that provides simple, personalized payment, lending, and saving solutions to millions of U.S consumers. Our payment solutions, including Bread Financial general purpose credit cards and savings products, empower our customers and their passions for a better life. Additionally, we deliver growth for some of the most recognized brands in travel &amp; entertainment, health &amp; beauty, jewelry and specialty apparel through our private label and co-brand credit cards and pay-over-time products providing choice and value to our shared customers.</div><div></div><div>
To learn more about Bread Financial, our global associates and our sustainability commitments, visit <div>breadfinancial.com</div> or follow us on <div>Instagram</div> and <div>LinkedIn</div>.</div></div><ul><li><div>
All job offers are contingent upon successful completion of credit and background checks.</div></li><li><div>
Bread Financial is an Equal Opportunity Employer.</div></li></ul><div></div><div>
Job Family:</div><div></div>
Information Technology<div></div><div>
Job Type:</div><div></div>
Regular</div><div></div>

Japanese cheese cake and co snacks

<p>What you&rsquo;ll work on</p><p>&middot; <b>Protocol implementation (Java): </b>Extend and harden our current Java simulation for the Bio-Hybrid TESLA flow (key chain derivation, delayed disclosure, MAC verification, time windows, key commitment, and revocation handling).</p><p>&middot; <b>Biometric binding: </b>Define how iris features/quality metrics bind to TESLA key schedules without leaking PII/templates; design privacy-preserving verification artifacts.</p><p>&middot; <b>IoT integration: </b>Package the protocol for edge devices (e.g., mini-PC/industrial controller) interfacing with an <b>iris scanner </b>(e.g., CMITech EF-45 or similar) and site networks.</p><p>&middot; <b>Secure storage &amp; key management: </b>Keystore/TPM/HSM use on server/edge; nonce handling, replay protection, and secure audit logs.</p><p>&middot; <b>Resilience: </b>Handle clock drift, packet loss, lossy links, offline windows, and device compromise scenarios; DoS-aware verification.</p><p>&middot; <b>API &amp; data paths: </b>Define secure APIs between React/Django back end, Java services, and MS SQL Server; ensure encrypted transit &amp; at-rest data with clear key rotation plans.</p><p>&middot; <b>Threat modeling &amp; tests: </b>STRIDE-style analysis, unit/prop tests for cryptographic invariants, and red-team scripts for tamper/fuzz testing.</p><p>&middot; <b>Documentation: </b>Developer-ready specs, message diagrams, and ops runbooks for deployment at construction sites.</p><p>Required qualifications</p><p>&middot; <b>6+ years </b>in security engineering or applied cryptography for production systems.</p><p>&middot; Strong <b>Java </b>(security, concurrency, performance) and experience with at least one of:</p><p><b>Kotlin, Python, C/C++ </b>for edge utilities.</p><p>&middot; Hands-on with <b>TESLA-like broadcast authentication </b>or time-based key disclosure schemes; comfort with <b>HKDF</b>, <b>HMAC-SHA-256</b>, <b>AES-GCM/ChaCha20-Poly1305</b>, and rolling key chains.</p><p>&middot; <b>IoT/edge </b>security: device onboarding, attestation basics, secure boot, firmware signing, and field update strategies.</p><p>&middot; <b>Network security: </b>TLS 1.2/1.3, mTLS, certificate pinning, API auth (JWT/OAuth service-to-service), replay defense, rate limiting.</p><p>&middot; Data protection for <b>biometrics</b>: template handling, unlinkability concepts, and privacy- by-design patterns.</p><p>&middot; Proven delivery of a security-critical component (protocol/library/service) used in production.</p><p>&middot; Experience with <b>biometric devices </b>(iris or face), image/template pipelines, and liveness/quality scoring.</p><p>&middot; Formal methods or model-checking (TLA+, ProVerif) for protocol sanity checks.</p><p>&middot; Windows/Linux edge deployments, Docker, CI/CD, observability (OpenTelemetry).</p><p>&middot; MS SQL Server hardening, secure logging pipelines, KMS/Key Vault (Azure/AWS).</p><p>&middot; Bilingual UI contexts (EN/AR) awareness and data residency/regulatory familiarity in the GCC.</p><p>Apply</p><p>Email <b>raffas@tristarsystem.com</b></p><p><b>raffas66@icloud.com</b></p><p>with:</p><p>1. CV/LinkedIn + links to relevant repos or redacted code samples.</p><p>2. A short write-up (&le; 300 words) on how you&rsquo;d design <b>key disclosure and replay protection </b>for a TESLA-style protocol over unreliable links.</p><p>3. One diagram (PNG/PDF) of a <b>device&rarr;edge&rarr;server </b>message flow showing time windows, keys, and logs.</p><p><b>Subject: </b><i>Senior Security &mdash; Bio-Hybrid TESLA</i></p><p>Job Type: Full-time</p>

Senior Security Engineer — Bio-Hybrid TESLA (IoT & Biometrics)

IG Group

Job TitleSenior Infrastructure Security EngineerJob DescriptionSo, who are we? The tasty family of companies is committed to empowering individual investors and traders by providing educational media, intuitive and powerful trading software, high-speed order execution, competitive pricing, and innovative financial products. Our engineers have access to a wide range of tools and technologies, offering the opportunity to tackle diverse problems while honing in specific areas. We are looking for self-motivated, engineering-driven professionals who are pragmatic, enjoy working in a fast-paced environment, and take pride in creating and large-scale, highly available, and high-performance systems. With a lean team and a management philosophy that values autonomy, have the freedom to shape impactful solutions. We work in cross-functional teams and are laser-focused on increasing the number of active clients we serve to drive sustainable growth. Your Team The infrastructure team is responsible for the stability, and performance of our back-end systems, which directly the experience of our customer-facing applications. Reporting directly to the Chicago based infrastructure management, y will be part of the team that infrastructure is , and well positioned to support the business as it continues to . Your Role in the Team&amp;#39;s Success As a Senior Infrastructure Security Engineer, be responsible for supporting, , automating, and improving our IT Security platforms. You will perform a variety of technical tasks within the structure Engineering team, ensuring the smooth and effective operation of a growing set of security products and solutions. Beyond maintenance, you will be the go-to person for security tooling, offering guidance and consultation to developers and engineers to ensure a best practice, &amp;#34;security-by-design&amp;#34; culture within the business. What You&amp;#39;ll Do Security Integration &amp;amp; Migration Lead the transition from Rapid7 to Qualys for comprehensive vulnerability management Collaborate with infrastructure teams to SLAs for patching and remediation processes Integrate systems with Google Chronicle, fine-tuning alerts to meet infrastructure and engineering team requirements uous Perform necessary upgrades and troubleshoot issues across all security tools, with focus on Vault platforms, plus AWS native security tooling Maintain and enhance scripts and utilities within Git that support our security operations Drive improved integration between security tools to new capabilities and solve existing challenges Adapt security tools to evolving requirements, keeping pace with technology roadmap and industry best practices Who you are about the client experience, and the rapidly evolving of fintech. You a evaluate existing security approaches, opportunities to modernize legacy processes and technical debt You&rsquo;re comfortable cultural change, looking to hallenge traditional security mindsets that create friction, advocating for security solutions that enhance rather than hinder developer productivity. mindset is to s ahead of industry trends, piloting new security technologies and methodologies that can provide competitive advantages naturally able to ridge silos down barriers between security, infrastructure, and development teams by how integrated approaches solve complex problems more effectively What You&amp;#39;ll Need for This Role This is a role with significant independence. Candidates are expected to satisfy most of the listed technical requirements while the ability to work both independently and as part of a team. Successful candidates will an independent and self-motivated approach to continuing the development of their skills and knowledge. Technical Requirements: years&rsquo; experience in technology or security roles in an enterprise environment Public Cloud: AWS experience preferred, with knowledge of security services and best practices Infrastructure as Code: in Terraform for automated infrastructure deployment Scripting &amp;amp; Programming: Strong skills in Python, Go, and/or Bash for automation and tooling Networking &amp;amp; DNS: Solid understanding of network security principles and DNS management Version Control: Experience with GitHub workflows and CI/CD pipelines Operating Systems: Linux system administration and security hardening Security Foundations: Understanding of core security concepts, threat modelling, and security frameworks Preferred Experience with SIEM platforms (Google Chronicle preferred) Vulnerability management platform experience (Qualys, Rapid7) Advanced tection eb application , F5 App Pro Secrets management ( Vault) Containers (Nomad/Kubernetes) &amp;amp; Virtualization Terraform &amp;amp; Scripting languages (Python/Go/Bash) Cloud security posture management tools (Wiz) Financial services or fintech industry experience The perksYour growth fuels our success! Thrive with tailored development programs, mentoring opportunities with leaders, and clear career progression. Expand your network through committees, sports and social clubs. Enjoy extra time off for volunteering and community work.Matched giving for your fundraising activityFlexible working hours and work-from-home opportunitiesPerformance-related bonusesInsurance and medical plansCareer-focused technical and leadership training in-class and online, incl. unlimited access to LinkedIn Learning platformContribution to gym memberships and moreFree Lunch/Snacks/FruitsA day off on your birthdayTwo days&rsquo; volunteering leave per year.Learn more about the Perks &lt;a href=&quot;https://www.iggroup.com/careers/what-you-will-get&quot; target=&quot;_blank&quot;&gt;hereJoin us in building secure, scalable platforms that power the future of trading technology! Apply now!Number of openings1

Senior Infrastructure Security Engineer

Microsoft

<div><p>Microsoft runs on trust, and our trusted cloud was built on the foundational principles of security, privacy, compliance, and transparency. We&rsquo;re looking for people to help us keep that promise every day. Do you have a passion for security and excitement about impacting some of the largest and most complex security challenges Microsoft is involved with? Do you want to help us protect Microsoft customers and their data from adversaries? We are looking for a <b>Security Operations Engineer </b>to help protect our customers and services from those who try to abuse and misuse our services. In this role, you will leverage a mix of data analytics, engineering skills, on-line services experience, and collaboration skills to help create automated detection and response systems to protect our cloud services from those who try to abuse them.</p><p></p><p><br>
As a <b>Security Operations Engineer</b> for the Microsoft Centralized Fraud Abuse Risk team (CFAR), you will work closely with other cloud and security experts across Microsoft to investigate abuse of our platform and services. You will also work with data science team members to apply big data analytic skills to proactively identify attack patterns and automate our detection and response capabilities. You will work to understand how adversaries misuse and abuse our platform and disrupt their activities. We work in a DevOps model within the security business, so we are looking for someone who has a passion for applying data analytics to scale to millions of users, hosts, and operations. Working as a part of the Centralized Fraud Abuse Risk team (CFAR), you will work to solve issues related to the latest fraud and abuse trends and early warning indicators, as well as help design solutions for emerging threats. CFAR is a fast-paced team that constantly provides new opportunities to learn and grow.</p><p></p><p><br>
This is a unique opportunity within Microsoft to work in a dynamic team, taking on complex challenges in the business. Come and bring your technical data analytics acumen, collaboration, and automation skills to help protect our customers!</p><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul><li>
Perform investigation on suspected compromised assets and services and analyze log data and other artifacts to determine what occurred.</li><li>
Apply big data analytics to identify how to detect adversary attacks and work closely with data science and engineering teams to implement detections at scale.</li><li>
Participate in and contribute to:</li><li>
Cyber threat intelligence sharing forums and platforms</li><li>
Organizing and curating threat intelligence</li><li>
Forming macroscopic perspective on adversaries, actors, and campaigns</li><li>
Partner with other teams across Microsoft to ideate, implement, and evolve systems and features to combat fraud.</li></ul><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><p><b>
Required Qualifications:</b></p><ul><li>
7+ years of experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, Security Operations Center (SOC) detection, threat analytics, security incident and event management (SIEM), information technology (IT), and operations incident response</li><li>
OR Bachelor's Degree in Statistics, Mathematics, Computer Science or related field.</li><li>
5+ years of experience in anti-abuse/anti-fraud/anti-cybercrime space OR in a field that has transferrable hands-on technical skills such as: cyber security threat intelligence, security research, etc.</li><li>
3+ years of experience in applying big data analytics techniques to solve security problems.</li></ul><p></p><p><b><br>
Other Requirements:</b></p><p>
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:</p><ul><li><b>
Microsoft Cloud Background Check</b>. This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
7+ years of experience in software development lifecycle, large-scale computing, modeling, cyber security, and anomaly detection</li><li>
OR Master's Degree in Statistics, Mathematics, Computer Science or related field.</li><li>
CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, and/or Security+ certification.</li><li>
Experience working in large scale cloud products: Azure, Microsoft 365, or similar competitive products in the industry.</li><li>
Exposure to security-related subjects and trends such as digital forensics, reverse engineering, penetration testing, and malware analysis.</li><li>
Prior experience working with large data sets analytics to answer complex and ambiguous questions using tools and languages like: SQL, KQL/Azure Data Explorer, Jupyter Notebook, Spark, R, U-SQL, Azure Synapse, Azure Machine Learning, Azure Data Lake, Python, or PowerBI.</li><li>
Experience in creating and improving process automation and tools/systems/API integration using Python or PowerShell.</li></ul><div></div>
Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.</div>

Senior Security Operations Engineer

Search 10000+ Senior security engineer jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 senior security engineer jobs NEAR_ME

Senior Security Engineer

Senior Security Engineer

Senior Cloud Security Engineer

Senior Cloud Security Engineer

Senior Security Engineer — Bio-Hybrid TESLA (IoT & Biometrics)

Senior Infrastructure Security Engineer

Senior Security Operations Engineer