Your home for the best cybersecurity jobs

PrismHR is a fast-paced SaaS company which provides customers with a cloud-based payroll process software application. PrismHR also provides professional services including system implementation consulting, custom configurations, and training. Lastly, via the Company’s Marketplace platform customers and end users access other human resources and employee benefits applications from PrismHR’s Marketplace Partners.

Work with different product and IT infrastructure teams to comprehend the business and develop the knowledge required to perform job duties and responsibilities.

Document and formally report testing initiatives, along with remediation recommendations and validation.

Conduct tactical assessments that require expertise in social engineering, application security (web and mobile), physical methods, lateral movement, threat analysis, internal and external network architecture, and a wide array of commercial and bring-your-own (BYO) products.

Conduct discovery and vulnerability assessment of enterprise-wide assets.

Manage vulnerabilities across applications, endpoints, databases, networking devices, and mobile, cloud and third-party assets.

Develop and maintain tools and scripts used in penetration-testing, vulnerability management, and red team processes.

Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.

Work closely with the security operations center (SOC) to leverage intelligence sources, identify new threats in the wild and verify the organization's security posture against them.

Liaise with the security engineering team to improve tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities.

Regularly research and learn new TTPs using a variety of sources, and work with teammates to assess risk and implement and validate controls as necessary.

Arrange and provide support to business units launching new technology applications and services to verify that new products/offerings are not at risk of compromise or information leakage.

Occasionally attend and participate in change management policy discussions and meetings.

Understand breach and attack simulation solutions and work with the team to validate controls effectiveness.

Maintain and track third-party assets, their vulnerability state, remediation recommendations, overall security posture and potential threat to the business.

Perform other duties as assigned.

Required Qualifications:

• At least 5-7+ years' experience in information security administration, offensive tactics, monitoring and IR.
• Proficient in scripting languages such as Python, PowerShell, Bash and Ruby.
• Competent with testing frameworks and tools such as Burp Suite, Metasploit, Cobalt Strike, Kali Linux, Nessus, PowerShell Empire and AutoSploit.
• Experience conducting penetration-testing/red team engagements as a consultant or within a previous role in a professional organization.
• Strong operating system knowledge across *nix, Windows, and Mac; proficient with networking protocols.
• Familiarity with defensive and monitoring technologies such intrusion prevention/detection systems (IPS/IDS), security information and event management systems (SIEMs), firewalls, endpoint protection (EPP) and endpoint detection/response (EDR) tools, as well as user and entity behavior analytics (UEBA).
• Understanding of OWASP, the MITRE Telecommunication&CK framework and the software development lifecycle (SDLC).

Preferred Qualifications:

• Bachelor's degree in computer science (preferred), information assurance, MIS or related field, or equivalent.
• 5-8 years of related experience required.
• Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.
• Self-starter requiring minimal supervision.
• Excellence in communicating business risk and remediation requirements from assessments.
• Analytical and problem-solving mindset.
• Highly organized and efficient.
• About certifications, preferably, one or more of the following: OSCP, OSCE, GPEN, GWAPT, CISSP.

Diversity, Equity and Inclusion Program/Affirmative Action Plan:

We have transformed our company into an inclusive environment where individuals are valued for their talents and empowered to reach their fullest potential. At PrismHR, we strive to continually lead with our values and beliefs that enable our employees to develop their potential, bring their full self to work, and engage in a world of inclusion.

...

For information about how we collect and use your personal information, please see our privacy statement available at https://www.prismhr.com/about/privacy-policy.

For more information, visit https://www.maximus.com.

Provide support for a program, organization, system, or enclaves information assurance program; provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies; maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed; assist with the management of security aspects of the information system and perform day-to-day security operations; evaluate security solutions to ensure they meet security requirements for processing classified information; perform vulnerability/risk assessment analysis to support certification and accreditation; provide support and backup for overall security matters including facility; provide configuration management (CM) for information system security software, hardware, and firmware; manage changes to system and assess the security impact of those changes; prepare and review documentation to include Systems Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs); support security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP). This position requires a knowledge of DOD, DOE, or other industrial security program and knowledge of the DOD, DOE or other government security regulations.

• 1+ years of experience in related field

• Minimum Education: Bachelor’s degree

• Must currently hold a Secret clearance

Desired Skills:

• Cybersecurity certification(s)

NA

The Bosch Group operates in most countries in the world. With over 400,000 associates, a career at Bosch offers a chance to grow an exceptional career in an environment that values diversity, initiative, and a drive for results. If you are interested in working on the cutting-edge of technology, working at Bosch Research is the place for you!

• Must be willing and able to travel occasionally to Stuttgart, Germany (5-10% travel in a year)
• Help define requirements and identify gaps for performing remote compromise assessments
• Capture forensic artifacts such as memory and disk images
• Lead remote compromise assessments and produce final assessment reports
• Perform live box and dead box forensics to identify compromise and attack vector
• Provide input for Security Operations Center (SOC) improvement and identify visibility gaps for enterprise monitoring
• Collect network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential incidents
• Collect network device integrity data and analyze for signs of tampering or compromise
• Analyze identified malicious network and system log activity to determine weaknesses exploited, exploitation methods, effects on system and information
• Track and document incident response activities and providing updates to leadership through executive summaries and in-depth technical reports
• Plan, coordinate and direct the inventory, examination and comprehensive technical analysis of computer related evidence
• Serve as technical forensics liaison to stakeholders and explaining investigation details
• You will work in the Security Incident Response Team (SIRT) to build, develop, and operate a SIRT that will allow us to quickly identify, respond, and protect against threats to our global infrastructure
• You will assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycle
• You will work across functions to identify new and emerging threats and work to develop detection alarms and workflows to assist in future identification and response
• Provide expertise in the triage and identification of potential security incidents
• Develop and create alarms, dashboards, and workflows to allow quicker and more efficient insight into security events
• Identify residual risk through security monitoring and instigate security-focused projects to remediate root cause issues
• Proactively hunting threats in our environment, identifying new risk areas, and developing methods for us to proactively address these threats
• Coordinate containment, eradication, and recovery actions for high priority on-premises cybersecurity incidents and cloud cybersecurity incidents.
• Research security trends and recommend security tool optimization
• Provide training, mentoring, and subject matter expertise for Security Operations Center (SOC) staff
• Execute the incident response plan, ensuring cross-functional teams operate functionally and efficiently through incident response scenarios
• Draft, maintain, and communicate incident reports for an executive audience

Required Qualifications

• Must be willing and able to travel occasionally to Stuttgart, Germany (5-10% travel in a year)

Preferred Qualifications

• CVE certification
• Have presented at a security conference such as DefCon, BlackHat, RSA Conference, etc.
• Have at least one of the following certifications: SANS GIAC: GCIA, GCFA, GPEN, GWAPT, GCFE, GREM, GXPN, GMON, GISF, or GCIH, ISC2: CCFP, CCSP, CISSP CERT CSIH, EC Council: CHFI, LPT, ECSA; Offensive Security: OSCP, OSCE, OSWP and OSEE; Defense Cyber Investigative Training Academy: FTK WFE-FTK, CIRC, WFE-E-CI, FIW
• Have experience building security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale
• Have broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence
• Have demonstrated experience in security analytics including security and machine learning, applications of data miniing to security, intrusion detection, anomaly detection, network security,etc.
• You are intellectually curious with a genuine desire to learn and advance your career.
• You are a critical thinker with excellent problem-solving skills
• Have knowledge of the Spanish or Portuguese language
• Experience operating in an international environment.
• Conduct malware analysis using static and dynamic methodologies (e.g., debuggers [Ollydbg], disassembler [IDA Pro], sandbox execution, etc.)
• Produce malware reports to disseminate to the watch floor and enterprise

BOSCH is a proud supporter of STEM (Science, Technology, Engineering & Mathematics) Initiatives

FIRST Robotics (For Inspiration and Recognition of Science and Technology)

AWIM (A World In Motion)

By choice, we are committed to a diverse workforce – EOE/Protected Veteran/Disabled.

For more information on our culture and benefits, please visit: Culture and Benefits | Bosch in the USA

The U.S. base salary range for this full-time position is $125,000 - $140,000. Within the range, individual pay is determined based on several factors, including, but not limited to, work experience and job knowledge, complexity of the role, job location, etc. Your Recruiter can share more details about the specific salary range for this position during the interview process.

In addition to your base salary, Bosch offers a comprehensive benefits package that includes health, dental, and vision plans; health savings accounts (HSA); flexible spending accounts; 401(K) retirement plan with an attractive employer match; wellness programs; life insurance; short and long term disability insurance; paid time off; parental leave, adoption assistance; and reimbursement of education expenses. Learn more about our full benefits offerings by visiting: https://www.myboschbenefits.com/public/welcome. Pay ranges included in the postings generally reflect base salary; certain positions may include bonus, commission, or additional benefits.

We are looking for an Incident Response Analyst to work in SOC team for Fortinet StateRAMP project. The main responsibilities are monitoring, detecting, and reporting security threats. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines.

• Leverage security platforms such as FortiSOAR, FortiSIEM, FortiAnalyzer, FortiClient to conduct investigations to rapidly detect and analyze security threats
• Work with NOC team to minimize the effects of a security breach
• Assist SOC manager to develop secure operation processes and playbooks.
• Conduct host-based analysis and forensic functions on Windows, and Linux systems
• Conduct network forensics and log analysis during IR engagements
• Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
• Develop complete and informative reports and presentations for both executive and technical audience
• Availability during nights/weekends as needed for IR engagements

Required Skills:

• 5+ years of experience in Information Security role.
• Hands-on experience on security incident response, log analysis
• Working knowledge of information security technologies including access control, cryptography, firewall, IPS, anti-virus, and penetration test.
• Knowledge of Linux administration and firewall policy management
• Experience with of at least one scripting language: Shell, Python, Ruby, Perl, etc
• Highly motivated, self-driven and able to work both independently and within a team
• Able to work under pressure in time critical situations and occasional nights and weekends work

Education:

• Bachelor’s Degree in Computer Engineering, Computer Science or related field
• A certification in one or more of the following desirable: Fortinet NSE-8 and above, CISSP, CCNP, RHCE, CEH, OSCP.

The US base salary range for this full-time position is $100000-$145000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program. Wage ranges are based on various factors including the labor market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location. All roles are eligible to participate in the Fortinet equity program, Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.

The SOC Analyst provides:

•   Initial response when an cyber incident is identified

•   Remediation of incidents and escalation when necessary to Tier 3 support

•   Initial assessment of the scope of the attack and affected systems

•   Data collection for further analysis.

•   Dedicated monitoring and analysis of cyber security events by use of SOC tools

•   Event of Interest (EOI) handling and escalation as appropriate

•   Incident Response generation and reporting IAW established procedures

•   Processing of incident communications to include initial reporting, follow-ups, requests for information and resolution activity

Minimum five (5) years experience

•   BS Degree or additional work experience substitution

•   Basic knowledge of cybersecurity best practices

Desired Experience/Certifications

•   Security + Certification

We're on a mission to build the best platform in the world for engineers to understand and scale their systems, applications, and teams. We operate at high scale—trillions of data points per day—allowing for seamless collaboration and problem-solving among Dev, Ops and Security teams globally for tens of thousands of companies. Our engineering culture values pragmatism, honesty, and simplicity to solve hard problems the right way.

As a Security Engineer on the Active Defense team you will build software for detecting and responding to threats in Datadog's infrastructure. You will operate as a threat detection and response subject matter expert and incident responder. By using existing platforms, building new tools and practicing your honed craft you will help secure Datadog as we seek to better serve the customers who rely on us every day.

You Will:

• Analyze known attacker methodology and, in concert with our security development teams, develop solutions to detect and defend against them.
• Create new detection capabilities using available software and in-house development.
• Develop systems that detect malicious signals in an infrastructure that processes trillions of datapoints per day.
• Develop and deploy systems that support incident response and forensics in public cloud environments.
• Participate in security event and incident response efforts.
• Work with other teams to defend and detect advanced attacks.

• You are an experienced subject matter expert in areas related to incident response and threat detection.
• You have a track record leveraging your skill set in public cloud environments.
• You value correctness and efficiency; you leave no stone unturned when diagnosing security issues.
• You handle infrastructure with code because automation lets you focus on the more difficult and rewarding problems.
• You have production experience with Amazon Web Services, GCP, Azure or Kubernetes.
• You want to work in a fast, high growth environment.
• You are fully fluent in Go or python.

Bonus Points:

• You have experience working in a distributed BeyondCorp-style zero-trust network.
• You have a documented history of relevant security research or development.

Summary: This position performs daily operational monitoring and escalation of information security events, and the examination of these events for context and criticality. This role is also responsible for the collection and monitoring of risk metrics from operational security controls such as vulnerability scanning, system patching, penetration testing, and other security event sources.

Company Overview: NA

Perform the ongoing monitoring and operation of select security and compliance-related systems

• Will identify and address security events; including driving investigation and remediation with alerts affecting other technology teams
• Track operational metrics related to alerts, incidents, and vulnerabilities
• Responsible to create and maintain appropriate documentation especially process flows and technical procedures
• The position also responds to production problems, performs troubleshooting and determines root cause analysis

Required Qualifications:

• 5+ years of experience in information security
• Experience with security incident response
• Experience with security auditing
• Experience with security risk management
• Experience with security training and awareness

Preferred Qualifications:

• CISSP, GCUH, CEH, or other forensic certification desired
• Experience with Specific product experience that is desirable includes: SentinelOne, Splunk, Insight VM, Palo Alto, Zscaler, Darktrace, Wiz, Tripwire Enterprise, etc.
• Knowledge of regulatory frameworks desired (e.g. PCI, SOX, SSAE16, ISO 27001).

All gender identities and orientations are encouraged to apply. Please let Tiffany know if you request any accommodations for interview, we are happy to make any accommodation needed. #LI-Hybrid #LI-JG1

The Bosch Group operates in most countries in the world. With over 400,000 associates, a career at Bosch offers a chance to grow an exceptional career in an environment that values diversity, initiative, and a drive for results. If you are interested in working on the cutting-edge of technology, working at Bosch Research is the place for you! We are committed to quality at Bosch. Our environment celebrates diversity and promotes career progression. We seek highly skilled, creative, results-oriented people who can look at technology from a new perspective and provide surprising insight. We are looking for candidates who want to shape and drive innovation at Bosch. Bosch Cyber Defense has multiple open positions for passionate, skilled, and experienced cyber forensic and incident response analysts to work as part of a newly formed cyber defense team in Pittsburgh, PA, USA. This is a unique opportunity become part of a global distributed team tasked with protecting the Robert Bosch Group from cybercriminal attacks and threats. We are seeking outstanding professionals at all levels of experience to bring new ideas and deep skills of value to Bosch’s cyber defense organization. These are hands-on roles that will be expected to dive into cyber security incidents, investigate new attacks and vulnerabilities with impact on the global Bosch organization and proactively consider how to prevent the same type of incidents from occurring in the future. The successful candidate will be expected to play a key role in the identification of threats as well as the corresponding response.

Our security analysts will be expected to perform a variety of duties during an average day including but not limited to log analysis, incident response, forensics, system/tooling development, and risk assessment, just to name a few. You must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks. Candidates also need to balance technical risks against business needs and be able to articulate risks and mitigations to members of the global team as well as member of leadership at various levels. You should have a good mix of deep technical knowledge and a demonstrated background in information security.

Basic Qualifications - Cyber Forensics B.S. in computer science, electrical engineering or closely related field 3+ years experience with host or digital forensics, static malware code disassembly/analysis, and/or runtime malware code analysis or network forensic experience (not including certification) Proficient working in a Windows environment Proficient in one more of the following computer languages Python, Bash or Powershell in order to support cyber threat detection or automation Experience with reconstructing a malicious attack or activity Ability to characterize and analyze network traffic, identify anomalous activity / potential threats, analyze anomalies in network traffic using metadata Ability to create forensically sound duplicates of evidence (forensic images) Experience with disc forensic, creating images and using tools for analyzing Experienced with network topologies and network security devices (e.g. Firewall, IDS/IPS, Proxy, DNS, WAF, etc) Desired experience and proficiency with the following tools and techniques: EnCase, FTK, SIFT, X-Ways, Volatility, Sleuth Kit/Autopsy, Experienced with Windows Forensics (Windows Eventlogs, Registry, …) and creating the needed forensic/tirage images (Velociraptor, …) Experienced with Memory Forensics, creating dumps and analyzing the dump Experienced with tools for automatic compromise assessment and IOC searches on clients and analyzing the results Basic Qualifications - Incident Response B.S. in computer science, electrical engineering or closely related field 3 years of incident response experience (not including certification) Splunk (or other SIEMs) MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK) EDR Tools Carving and extracting information from PCAP data Designing cyber security systems and environments in an enterprise environment Virtualized environments Thorough understanding of enterprise security controls in Active Directory/Windows environments Experience with investigating using a wide variety of detective technologies such as SIEM, SOAR, packet capture analysis, host forensics and memory analysis tools. Experience with authentication, authorization, and auditing technologies and how they are implemented in different environments. Preferred Qualifications CVE certification Have presented at a security conference such as DefCon, BlackHat, RSA Conference, etc. Have at least one of the following certifications: SANS GIAC: GCIA, GCFA, GPEN, GWAPT, GCFE, GREM, GXPN, GMON, GISF, or GCIH, ISC2: CCFP, CCSP, CISSP CERT CSIH, EC Council: CHFI, LPT, ECSA; Offensive Security: OSCP, OSCE, OSWP and OSEE; Defense Cyber Investigative Training Academy: FTK WFE-FTK, CIRC, WFE-E-CI, FIW Have experience building security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale Have broad and deep technical knowledge, specifically in the fields of cryptography, network security, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence Have demonstrated experience in security analytics including security and machine learning, applications of data miniing to security, intrusion detection, anomaly detection, network security,etc. You are intellectually curious with a genuine desire to learn and advance your career. You are a critical thinker with excellent problem-solving skills Have knowledge of the Spanish or Portuguese language Experience operating in an international environment. Conduct malware analysis using static and dynamic methodologies (e.g., debuggers [Ollydbg], disassembler [IDA Pro], sandbox execution, etc.) Produce malware reports to disseminate to the watch floor and enterprise

BOSCH is a proud supporter of STEM (Science, Technology, Engineering & Mathematics) Initiatives FIRST Robotics (For Inspiration and Recognition of Science and Technology) AWIM (A World In Motion) By choice, we are committed to a diverse workforce – EOE/Protected Veteran/Disabled. For more information on our culture and benefits, please visit: Culture and Benefits | Bosch in the USA The U.S. base salary range for this full-time position is $125,000 - $140,000. Within the range, individual pay is determined based on several factors, including, but not limited to, work experience and job knowledge, complexity of the role, job location, etc. Your Recruiter can share more details about the specific salary range for this position during the interview process. In addition to your base salary, Bosch offers a comprehensive benefits package that includes health, dental, and vision plans; health savings accounts (HSA); flexible spending accounts; 401(K) retirement plan with an attractive employer match; wellness programs; life insurance; short and long term disability insurance; paid time off; parental leave, adoption assistance; and reimbursement of education expenses. Learn more about our full benefits offerings by visiting: https://www.myboschbenefits.com/public/welcome. Pay ranges included in the postings generally reflect base salary; certain positions may include bonus, commission, or additional benefits.

NA

NA

NA

NA

Summary

In this role, you will work closely with various security engineers, architects, and analysts to design, configure, and implement security controls for the business portfolios.

Company Overview

NA

• Work, with guidance of our senior architects and engineers, on fast-paced, complex, security architecture and engineering initiatives.
• Support the security architecture and engineering team on a variety of projects and tasks including things like tool testing, configuration, scripting, tuning, documentation, and training.
• Support the larger security organization by participating in design sessions, bringing new views and perspectives, and asking questions.
• Be exposed to a wide variety of technical security challenges, in multiple domains (including, for example: cloud, network, application, and operations), and be asked to quickly absorb new concepts and build on your previous work to deliver increasingly more sophisticated technical outcomes.

Required Qualifications

• 0-2 years of professional information security experience.
• A basic understanding of information security and technology concepts gained via self-learning or formal education.
• A basic understanding of networking and server concepts.
• Examples of self-driven or school-based project work that demonstrates how you think about security and shows how you approach solving technical problems.
• A strong desire to learn, try new things, take chances, and push yourself outside your comfort zone.

Preferred Qualifications

• Entry-level security or IT certifications
• Tech bootcamp, OSS contributions, projects on GitHub, etc.
• Prior work or volunteering experience in Helpdesk, Technical Support, or other similar roles
• Prior hands-on use of Linux, Windows Server, setting up a basic network, etc.

You will be successful:

• If you like complex problems, learning and trying new things, and have a passion for personal growth.
• By using your beginner's mindset to push our more senior architects and engineers to think about and explain their ideas and plans.
• By jumping in and not being afraid to try things, even if they ultimately don't work out.
• If you don't let perfect be the enemy of good.
• If you listen hard, think clearly, and act decisively.

In this role, you will work closely with various security engineers, architects, and analysts to design, configure, and implement security controls for the business portfolios.

You have:

0-2 years of professional information security experience.

A basic understanding of information security and technology concepts gained via self-learning or formal education.

A basic understanding of networking and server concepts.

Examples of self-driven or school-based project work that demonstrates how you think about security and shows how you approach solving technical problems.

A strong desire to learn, try new things, take chances, and push yourself outside your comfort zone.

Strong plusses:

Entry-level security or IT certifications

Tech bootcamp, OSS contributions, projects on GitHub, etc.

Prior work or volunteering experience in Helpdesk, Technical Support, or other similar roles

Prior hands-on use of Linux, Windows Server, setting up a basic network, etc.

Work, with guidance of our senior architects and engineers, on fast-paced, complex, security architecture and engineering initiatives.

Support the security architecture and engineering team on a variety of projects and tasks including things like tool testing, configuration, scripting, tuning, documentation, and training.

Support the larger security organization by participating in design sessions, bringing new views and perspectives, and asking questions.

Be exposed to a wide variety of technical security challenges, in multiple domains (including, for example: cloud, network, application, and operations), and be asked to quickly absorb new concepts and build on your previous work to deliver increasingly more sophisticated technical outcomes.

Required Qualifications:

0-2 years of professional information security experience.

A basic understanding of information security and technology concepts gained via self-learning or formal education.

A basic understanding of networking and server concepts.

Examples of self-driven or school-based project work that demonstrates how you think about security and shows how you approach solving technical problems.

A strong desire to learn, try new things, take chances, and push yourself outside your comfort zone.

Preferred Qualifications:

Entry-level security or IT certifications

Tech bootcamp, OSS contributions, projects on GitHub, etc.

Prior work or volunteering experience in Helpdesk, Technical Support, or other similar roles

Prior hands-on use of Linux, Windows Server, setting up a basic network, etc.

You will be exposed to a wide variety of technical security challenges, in multiple domains (including, for example: cloud, network, application, and operations), and be asked to quickly absorb new concepts and build on your previous work to deliver increasingly more sophisticated technical outcomes.

You will be successful if you like complex problems, learning and trying new things, and have a passion for personal growth. By using your beginner's mindset to push our more senior architects and engineers to think about and explain their ideas and plans. By jumping in and not being afraid to try things, even if they ultimately don't work out. If you don't let perfect be the enemy of good. If you listen hard, think clearly, and act decisively.

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2022 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company 's commitment to hiring and supporting active-duty and veteran employees.

As a Cybersecurity Analyst, you will assist the Program Manager and Cybersecurity Engineers with Risk Management Framework (RMF) related activities including Security Control Assessments (SCA) and assisting system owners in the transition to RMF compliance. In assuming this position, you will be a critical contributor to meeting Empower AI 's mission: To deliver innovative, cost-effective solutions and services that enable our customers to rapidly adapt to dynamic environments. This position is located in Fort Huachuca, Arizona; relocation assistance, while not guaranteed, may be available.

Highlights of Responsibilities:

• Assist the Project Manager and Cybersecurity Engineer to edit and process cybersecurity deliverables, including RMF packages and associated artifacts.
• Assess DoD Information Systems against the RMF security controls IAW DoDI 8500, DoDI 8510 and NIST SP 800-53
• Develop and review RMF documentation and artifacts such as Configuration Management Plans, Network Infrastructure Plans, Business Continuity and Disaster Recovery Plans, Plan of Action and Milestones (POA&M&Ms), topology diagrams and all supporting policies in support of RMF A&A activities
• Interview technical Subject Matter Experts (SMEs) as well as non-technical management personnel to ascertain the security posture of an IT system
• Evaluate a wide array of IT devices for Security Technical Implementation Guide (STIG) compliance using ACAS/ Nessus, SCAP Compliance Checker, and manual checklist reviews.
• Apply STIGs to a variety of devices to ensure compliance
• Experience with eMASS and a strong understanding of the CNSS 1253 CCIs

Requirements:

• Current/active Secret clearance.
• At minimum 3 years of Cybersecurity Experience.
• Bachelors degree or equivalent combination of edcucation and experiencesÂ
• DoD 8570.01-M IAT II and Computing Environment certification required.

PHYSICAL REQUIREMENTS:

• Sitting for long periods
• Standing for long periods
• Ambulate throughout an office
• Ambulate between several buildings
• Travel by land or air transportation 25 %

It is the policy of Empower AI to provide equal opportunity in recruiting, hiring, training, and promoting individuals in all job categories without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other protected class or category as may be defined by federal, state, or local laws or regulations. In addition, we affirm that all compensation, benefits, company-sponsored training, educational assistance, social, and recreational programs are administered without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, or gender identity. It is our firm intent to support equal employment opportunity and affirmative action in keeping with applicable federal, state, and local laws and regulations  Empower AI is a VEVRAA Federal Contra ctor.

Qmulos is recruiting cybersecurity specialists who want to challenge themselves by working with brilliant people to solve some of today 's most important cybersecurity problems. As an emerging cybersecurity software and consulting company in the heart of Washington D.C., we need highly motivated individuals who think of big ideas, work well with others, and can help solve game-changing problems. We need creative people whose intelligence is matched only by their grit. Among only a small group of Silicon Valley-style startups in D.C., Qmulos you 'll work with industry trailblazers and global private-sector and public-sector clients to help solve national security problems.

Research, verify and document information security controls using the Federal Certification and Accreditation (C&A) processes. Propose, communicate, and enforce security policies, procedures and methodologies. Collect, compile, and report IA and CND metrics relating to Connection Approval Process, Certification and Accreditation Compliance, Information Assurance Vulnerability Management Compliance, Inspection Compliance Status, and FISMA Compliance. Analyze reports from vulnerability assessment scanners, patch management tools, and emerging threat information to advise on the risk and remediation of security issues. Develop Plan of Action and Milestones (POA&Ms) for identified vulnerabilities to initiate, coordinate and track the patching and remediation of security weaknesses. Conduct reviews: security authorization documents, event logs, security incidents. Report on security status and security incidents. Coordinate Authorization packages.

Required Qualifications:

• Clearance Requirement: Active Top Secret
• Bachelor's Degree (Preferable: Computer Science, Information Systems, Software Engineering or other related analytical, scientific, or technical disciplines)
• 5-7 years experience in IT security, including Certification and Accreditation and/or IT security risk analysis/advice, preferably in support of the Federal government.
• Knowledge of Federal government C&A practices and policies (Preferable: ICS 503, FISMA, NISP SP 800-53, and DHS 4300)
• 5-7 years experience with information assurance tools preferred
• 5+ years experience working directly with a federal client

Preferred Qualifications:

• CISSP (Preferred)Â
• Ability to work independently and also collaborating closely with project managers, engineers, and others
• Working knowledge of Ongoing Authorization with in the NIST Framework
• Excellent written and oral communication skills

All your information will be kept confidential according to EEO guidelines.

Computer Futures is a leading IT recruitment consultancy, specializing in placing IT experts in permanent and contract roles across the US, Europe, and Asia. With a proven track record in IT recruitment, we enjoy success within all sectors and business types, placing a candidate every 38 minutes. From single job vacancies to large-scale projects, our proficiency in providing exceptional professionals across the board has carved our reputation as a secure and significant supplier partner. A robust and financially strong business, we have grown organically from our first office in London in 1986, to 7 offices across the US including: New York, Boston, Chicago, San Diego, San Francisco, Houston, and Austin. We also have 18 offices in Europe including: Amsterdam, Brussels, Dublin, Edinburgh, Frankfurt, Hamburg, Munich and Paris. Passionate about recruitment, our 350+ specialist IT recruitment consultants’ priority is to secure the right person for the right role, within a specified timeframe and budget. Through Computer Futures’ methodology, our consultants – who are there to help provide you with the best service and support whatever your IT requirement is – we pride ourselves on our quality of candidates, our speed of delivery and the ability to provide a bespoke service to meet our individual clients’ recruitment needs. http://www.computerfutures.us.com/

Required Qualifications: -Min 3 years of experience penetration/vulnerability testing for web and applications in an enterprise environment -Automated and manual testing experience -Strong understanding of web technologies, e.g. HTTP, HTML, CSS, Forms, Database Connectivity, etc. -Understanding of compliance and regulatory requirements such as PCI DSS, SOX, HIPAA, etc.

James Benjamin H. Ilagan Computer Futures 737-202-2477

Dun & Bradstreet unlocks the power of data through analytics, creating a better tomorrow. Each day, we are finding new ways to strengthen our award-winning culture and accelerate creativity, innovation and growth. Our 6,000+ global team members are passionate about what we do. We are dedicated to helping clients turn uncertainty into confidence, risk into opportunity and potential into prosperity. Bold and diverse thinkers are always welcome. Come join us!

• Responsible for architecting, reviewing various product designs, and providing guidance on secure design principles.
• Work with security architects and enterprise architects to establish software security design standards.
• Perform security design reviews to ensure systems are in compliance with the established software design standards.
• Support new technologies and frameworks from the development teams by providing security guidelines and solutions.
• Perform comprehensive security assessments including threat modeling for the firm’s critical assets.
• Provide Subject Matter Expert support to development teams on secure design principles and recommended frameworks.
• Provide web security guidelines and solutions to development teams on authentication, authorization, session management, data protection (encryption) and key management.
• Provide leadership on different forums on promoting security awareness, including recommended solutions, and staying current on net new threats, vulnerabilities, and OWASP best practices.
• Involves the opportunity to telecommute from within the Jacksonville, FL area up to two (2) days per week, as feasible.

• Bachelor’s degree (U.S. or foreign equivalent) in Computer Science, Engineering, Information Systems, or a related field plus five (5) years of progressively responsible, post-baccalaureate experience in a related cyber security role.
• Five (5) years of experience with/in: defining security frameworks and application security for enterprise-wide projects; performing comprehensive security assessments including threat modeling on web applications; providing web security guidelines and solutions to development teams on authentication, authorization, data protection (encryption techniques) and key management; utilizing security frameworks including any one of the following: Microsoft Security Development Lifecycle (SDL), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM); working with core security networking concepts including any one of the following: Transport Layer Security (TLS), Secure Shell (SSH), Domain Name System (DNS), or Firewalls; and working with top security frameworks including any one of the following: NIST 800-53, CIS, ISO 27000 series, or COBIT.
• Three (3) years of experience required working with each of the following: Lightweight Directory Access Protocol (LDAP), Single sign-on (SSO), Security Assertion Markup Language (SAML), and Active Directory.
• Involves the opportunity to telecommute from within the Jacksonville, FL area up to two (2) days per week, as feasible.

NA

NA

NA

NA

Please see standard Work, Physical and Mental Requirements for all Quantech roles. Work Environment: This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, scanners, filing cabinets, and fax machines. Physical Demands: This is largely a sedentary role mostly sitting; however, some filing may be required. This would require the ability to move files, or boxes with file data, open filing cabinets and bend or stand as necessary, ability to lift up to 40lbs. Mental Demands: Reading; communicate effectively (verbal and written); maintain emotional control and professionalism.

The Information Security Officer/Security Officer is responsible for implementing, maintaining, monitoring, and reviewing the Bank's security controls of its business applications, business processes, third party vendors, and IT data security and controls. The qualified candidate will also be responsible for assisting with identifying, developing, and maintaining the information security metrics for the Bank, serving as the leader of the Incident Response Team, communicating effectively with all employees, customers, third party vendors, internal auditors and regulators, and taking appropriate action to reduce the overall risk to the Bank and its customers. Responsibilities may change as the needs of the department evolve. Rhinebeck Bank is an Equal Opportunity / Affirmative Action Employer.

Assist in compliance with 23 NYCRR Section 500 and all other applicable laws and regulations. Investigate security events and if necessary, escalate to the Incident Response Team and coordinate the response, and work with General Counsel and CRO to determine if notification to the regulators is required. Identify and communicate threat intelligence to appropriate stakeholders. Review internal and external vulnerability assessments and recommend remediation actions. Maintain updated knowledge of security threats, vulnerabilities, and mitigation techniques and communicate to relevant stakeholders. Perform risk analyses and security assessments to identify gaps, new threats and evaluate mitigation actions. Work together with the BSA Officer, BSA Analyst, the Operations' Department, and the Customer Solutions Center on fraud related matters related to information security. Provide reporting for trending and key performance indicators related to the Bank's Information and Cyber Security Program. Review patching and validation that was performed by the IT team to ensure it is complete. Coordinate with IT to develop and maintain a ransomware response playbook. Track cyber security related actual expenses against expected expenses. Review and recommend enhancements to the security programs of all informational platforms, including both physical and electronic. Strong knowledge of SOC 1, SOC 2/Type 1 or SOC2/Type 2 reporting and review procedures. Track, risk rate and monitor vendor cyber security incidents and performance. Must remain current on all BSA/AML laws and regulations and serve as back up to the BSA officer when necessary. Monitor vendor's performance - cases opened, effectiveness of resolutions, timeliness of resolutions. Responsible for maintaining the operational aspect of the vendor management program. Develop and implement physical security procedures, conduct security reviews, and train all employees in accordance with the provisions of the Security Plan and the Bank Protection Act. Manage the relationship with the Bank's outside security firms. Draft and present annual physical Security Risk Assessment to the Board of Directors and update the security risk assessment in Nrisk. Give robbery training classes to staff as necessary. Provide active shooter training to staff as necessary. Work with local and state police and other law enforcement as necessary. Conduct Bi-Annual reviews of ATMs, coordinate any necessary repairs with the Facilities Department and file the appropriate certification with the NYSDFS before January 15th and July 15th of each year. Maintain alarm call lists, which are tracked via the Employee Access Matrix. Assist with fire department inspections and elevator inspections. Conduct monthly reviews of Cameras and DVRs and coordinate any necessary repairs. Review and submit for approval all vendor security invoices. Testify before the Grand Jury when necessary, on behalf of the Bank. Maintain the Employee Access Matrix which tracks both employees and vendors physical access and software and system access, and update when necessary. Issue or disable keys, key fobs and alarm access codes when necessary. Responsible for helping departments to obtain and review due diligence materials when necessary on new or existing vendors. Train employees how to maintain and review their vendors at a minimum on an annual basis. Oversee the operational aspect of the vendor management program and escalate any vendor issues as appropriate.

Education & Experience:

• Bachelor's Degree Cybersecurity, Information Security, Computer Science, or Information Systems preferred with 3 to 5 years prior experience with BSA/AML, cyber security or information security.
• Strong Knowledge of Information Security concepts including audit reviews, risk assessment, incident management, data protection, Patch Management, Incident Management, Vendor Management, and Risk Assessments.
• Must have experience in Verafin or the capability to learn it.
• Knowledge of vulnerability assessments and Governance Risk and Compliance tools is desirable.
• Must have a valid Driver's license.

Salary Range: $100k - $120k