Find Your Dream Career

Overview GOV CIO is seeking a highly skilled Cybersecurity Engineer to design, implement, and sustain security capabilities that align with Zero Trust principles across AF IC mission systems. The Air Force Intelligence Community (AF IC) is advancing its enterprise cybersecurity posture through a comprehensive Zero Trust architecture. This role supports critical intelligence missions and requires strong collaboration with AF cyber, IT, and mission operations stakeholders. This position will be located at Hampton,Va. Responsibilities Engineer cybersecurity solutions aligned with Zero Trust architecture pillars: identity, devices, networks, applications/workloads, data, and analytics. Implement technical controls supporting continuous verification, micro-segmentation, and access enforcement. Support AF IC Zero Trust initiatives, including ICAM modernization, data tagging, and attribute-based access control. Integrate security tools and platforms such as SIEM, EDR, SOAR, identity providers, and boundary security systems. Develop and maintain security documentation: system security plans, architecture diagrams, configuration standards, and POA&Ms. Participate in and support AF and IC accreditation activities following NIST SP 800-53, CNSSI standards, and DoD cybersecurity requirements. Conduct security assessments, risk analyses, vulnerability scans, and remediation activities. Collaborate with enterprise architects, cloud engineers, and mission partners to design secure workflows and secure data flows. Evaluate emerging Zero Trust technologies and recommend adoption strategies to enhance AF IC mission resilience. Qualifications High School with 10+ years (or commensurate experience) Required Skills And Experience Clearance Required: TS/SCI Experience in the AF Intelligence Community, Air Force ISR, 16th Air Force, or other IC mission organizations IAT III Level Certification, CASP+/SecurityX, CCNP, CISA, CISSP, or CCSP Strong understanding of Zero Trust principles, frameworks, and DoD Zero Trust Strategy. Hands-on experience with security operations, vulnerability management, identity security, or network security. Familiarity with NIST RMF, NIST SP 800-53, DoD Cloud SRG, and IC security guidelines. Experience with security tools such as Splunk, ArcSight, Elastic, CrowdStrike, Tanium, or similar. Preferred Skills And Experience Background in DevSecOps, automation, or IaC tools such as Terraform, Ansible, or Kubernetes. Experience engineering solutions involving data tagging, cross-domain systems, or ABAC enforcement. #NSS #DL #TLM Posted Salary Range: USD $180,000.00 - USD $200,000.00 /Yr.

Kimball Midwest, a national distributor of maintenance, repair, and operation products, is searching for a Senior Security Engineer for our Columbus, Ohio location. As a Kimball Midwest associate, you'll be part of a company built on long-term growth and strong values. From $1 million in sales in 1983 to over $500 million today, our success has been driven by our people. Despite our growth, we have stayed true to our family-owned and operated roots—where employees are recognized as individuals and our culture remains a top priority. Responsibilities Serves as a senior, hands-on security engineer responsible for helping build, mature, and support security capabilities across multiple security domains. Partners closely with leadership to execute security initiatives across areas including identity and access management, cloud security, vulnerability management, governance, risk and compliance (GRC), and incident response. Independently owns and drives security initiatives while collaborating closely with leadership and other teams throughout the organization. Works cross-functionally with teams across the company to identify security requirements, address risks and considerations, and incorporate security into projects and technology decisions from the beginning rather than as an afterthought. Evaluates existing security capabilities and environments to identify opportunities for improvement and helps develop solutions that strengthen the organization's overall security posture. Applies broad security knowledge to complex problems and initiatives rather than focusing exclusively on a single security discipline. Qualifications 5-10 years of relevant security experience Broad technical security experience across multiple areas such as identity and access management, cloud security, vulnerability management, GRC, and incident response. Demonstrated ability to independently own and execute initiatives while working collaboratively with leadership and cross-functional teams. Strong understanding of security principles and the ability to evaluate security requirements and considerations across a variety of technologies and business initiatives. Experience working as an individual contributor in a hands-on security environment. Security certifications such as CISSP, CCSP, GIAC certifications, or relevant AWS or Microsoft Azure certifications are preferred but not required. Bachelor's degree in a related field or equivalent relevant work experience preferred. Additional Information This is a fully on-site position reporting to the office Monday through Friday. The annual salary for this position is $120,000-$160,000. We offer a benefits package that includes health, dental and vision insurance, company sponsored life, optional life and disability insurance, Health Savings Accounts and Flexible Spending Accounts, a 401(k) plus match, Tuition Assistance, Paid Parental Leave, Paid Time Off (PTO), a Dress for your Day dress code and paid holidays. Kimball Midwest is an equal opportunity employer that is committed to a program of recruitment of females, minority group members, individuals with disabilities, qualifying veterans and any other classification that is protected by federal, state or local law. We Participate in E-Verify. Participamos en E-Verify.

Job Description: Building trusted markets — powered by our people At Cboe Global Markets, we inspire our people to solve complex challenges together because what we do matters. We provide the financial infrastructure that powers the global economy. As a leading provider of market infrastructure and tradable products, Cboe delivers cutting-edge trading, clearing and investment solutions to market participants around the world. We're building meaningful ways to support professional and personal development while strengthening the trust we've earned as a global market leader. Our teams are empowered to share ideas, actively pursue them and bring on a challenge. As champions of internal mobility and access to opportunity, we encourage our people to "go for it" and equip our managers with the training to coach their teams to the next level. We strive to provide employees a safe space to network, share ideas and create opportunities. To support strong partnership and team connection, this role follows a four day in office work model. Location Overview Cboe Global Markets operates a key office in the Overland Park Xchange (OPx), located in Overland Park, Kansas, a bustling suburb of Kansas City. The OPx business park is strategically positioned to provide convenient access to the Kansas City metropolitan area, offering modern infrastructure and a collaborative environment ideal for the financial services and technology industries. This location benefits from proximity to major highways, making it easily accessible for employees The OPx site provides a balance of high-quality office space, advanced facilities, and an environment conducive to productivity and growth. Role Overview The Senior Information Security Engineer will be a part of Cboe's Security Engineering and Operations Team to manage, deploy and configure various information security technologies including; Security Incident and Event Management (SIEM), Security Orchestration and Automation Response (SOAR / Case Management), Endpoint Detection and Response (EDR), Secure Email Gateways, and Email and Endpoint Data Loss Prevention (DLP) to provide optimal security controls across multiple business environments. This may include managing and optimizing custom configurations for individual customers. This individual will be required to perform tuning of security solutions, manage applying patches and performing upgrades to various security platforms. The ideal candidate must be well versed in understanding the IT landscape including security, infrastructure, network, client, server, emerging technology standards and trends and will be involved in strategy, design, and engineering to contribute to the development of secure solutions. Your responsibilities will be: Provide expert recommendations and best practices to security managers, technical managers, and stakeholders including legal and regulatory teams. Develop, implement, and monitor comprehensive security solutions utilizing a variety of security tools, programming languages, and services with minimal supervision required. Automate repetitive tasks to enhance efficiency and scalability of security operations. Normalize and integrate diverse technologies to streamline analysis and response capabilities. Document, educate and mentor team members on the use of complex security products and services. Identify and assess risks within the organization's security posture and provide detailed recommendations for potential solutions. Innovate and create new methodologies to resolve existing production security issues. Evaluate emerging technologies and assess their relevance and potential impact on our security posture. Continuously assess and test the effectiveness of security controls and recommend improvements. Act as a senior-level technical resource within the security team, providing guidance and mentorship to junior team members. Collaborate with cross-functional teams to integrate security into the development lifecycle and operational processes. Assist with security assessments and audits, ensuring compliance with internal policies and external regulations. Assist with escalated incident response activities, including containment, investigation, and recovery efforts. Stay current with industry trends, security standards, and best practices to ensure our systems remain secure against evolving threats. The ideal candidate has Proven senior-level experience (minimum 5 years) in information security or 3 years information security experience with an additional to 2-3 years IT experience (System Administration, Network Administration), with a strong focus on engineering and operations. Experience and knowledge on current security technologies (Databahn, NXlog, Google Secops, Bindplane, ProofPoint) Proficiency in scripting and automation for security operations. Experience with Linux/Unix and Windows administration, including Active Directory (AD) and EntraID. Proficiency with the Microsoft Security Stack (Defender for Endpoint, Defender for Identity, Defender for CloudApps, Purview DLP, Intune) You'll really stand out with: Bachelor's Degree in Cybersecurity or Computer Science System Administration experience in Windows or Linux Proven ability to script and automate tasks Specific experience with Google Secops SIEM, the Microsoft Security Stack, or ProofPoint Email Security Services CISSP, CASP or other related security certifications Benefits And Perks Of Working For Cboe Global Markets We value the total wellbeing of our people – including health, financial, personal and social wellness. We believe standard benefits like health insurance and fair pay are a given at any organization. Still, you should know we offer: Fair and competitive salary and incentive compensation packages with an upside for overachievement Generous paid time off, including vacation, personal days, sick days and annual community service days Health, dental and vision benefits, including access to telemedicine and mental health services 2:1 401(k) match, up to 8% match immediately upon hire Discounted Employee Stock Purchase Plan Tax Savings Accounts for health, dependent and transportation Employee referral bonus program Volunteer opportunities to help you give back to your communities Some of our associates' favorite benefits and perks include: Complimentary lunch, snacks and coffee in any Cboe office Paid Tuition assistance and education opportunities Generous charitable giving company match Paid parental leave and fertility benefits On-site gyms and discounts to other fitness centers More About Cboe Global Markets We're reimagining the future of the workplace by focusing on what matters most, our people. Our journey is an inclusive one. We're investing deeply in leadership programs and career development initiatives that ensure everyone has an equal chance to succeed. We work with purpose, solving problems with ingenuity, collaboration, and a lot of passion. We're an engaged and excited team connecting markets across borders and embracing growth in all its forms to achieve incredible outcomes. Learn more about life at Cboe on our website and LinkedIn . Equal Employment Opportunity We're proud to be an equal opportunity employer do not discriminate against any employee or applicant for employment based on any legally protected characteristic, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, or Veteran status. We are committed to fostering a workplace where all individuals are valued and respected. This position is not eligible for visa sponsorship. Candidates must be legally authorized to work in the United States without the need for employer sponsorship now or in the future. Salary Ranges (applicable for US locations only) At Cboe, we are committed to providing a competitive, transparent, and market‑informed total rewards program. The anticipated base salary range for this role is $119,000-$169,400, with actual compensation determined by job‑related factors such as skills, relevant experience, education, internal alignment, and location. This role may also be eligible for annual incentive compensation and, where applicable, participation in Cboe's long-term equity programs. Additional information about Cboe's total rewards program, including benefits and other compensation components, can be found here: Total Rewards at CBOE. Any communication from Cboe regarding this position will only come from a Cboe recruiter who has a @cboe.com email or via LinkedIn Recruiter. Cboe does not use any other third party communication tools for recruiting purposes.

Senior Security Engineer - US About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers. About the Role We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship — not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering. This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely. What You'll Do Partner with Engineering on Platform Security Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM) Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform Support disaster recovery testing and resilience exercises alongside the infrastructure team Build Tooling That Scales Security Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection Build internal tools that give engineering fast, self-service ways to check their own security posture What You'll Bring 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred) Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening Strong written communication — you'll document your own work, since we're a small, high-trust team A track record of building tools or automation that solved a security problem at scale, not just running existing tools Previous use of tools like Crowdstrike, Wiz, Security Hub Experience with golang Comfortable working directly with software engineers — in code reviews, design discussions, and incident response Incident investigation and RCA tracking Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side Experience with Google Workspace as an identity/IdP source of truth Self-directed: you'll often be the only engineer working a problem end to end Preferred Qualifications Exposure to offensive security or red/purple teaming Familiarity with Aurora or managed OpenSearch specifically What We Offer We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles, tailored to your country of employment: Generous, flexible time off Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere) Comprehensive healthcare coverage Generous paid parental leave Remote-friendly environment with flexibility Support for home office costs (phone & internet) Specific benefit details vary by country and are confirmed during the offer process. Why Join Us Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations. VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts. VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive. VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn't perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume.

About the Company Redwood Trust, Inc. (NYSE: RWT), together with its subsidiaries, is a specialty finance company focused on investing in mortgage related assets, and engaging in residential and commercial mortgage banking activities. Our employees are a team of disciplined, dedicated and talented professionals who do what it takes to make the Company a leader in innovation and reputation. We value everyone's contribution, actively soliciting feedback at all levels within the organization. Work gets done in a non-hierarchical, hard-working and fun environment. For more information about our Company, please look up the Redwood Review, published quarterly, available on our website www.redwoodtrust.com. About the Role The Sr. Security Engineer is responsible for cybersecurity design, implementation, and maintenance in alignment to business initiatives. The individual acts as a senior technical resource and escalation point across security operations, threat identification and remediation, and incident response, and works hands-on across identity, endpoint, network, cloud, email, and data protection. Redwood's environment spans Azure, Microsoft 365, and a remaining on-premises footprint, and increasingly includes AI-driven products and services built on Azure AI Foundry and Microsoft Fabric. This engineer secures all of it. Experience with AI and machine learning systems matters here because those workloads touch borrower information and material financial data, though this role covers the full breadth of the security engineering function rather than a single specialty. The successful candidate works closely with infrastructure engineering, application development, data, and database teams to embed security into how systems are built and operated, and with decision makers to identify, recommend, develop, implement, and support cost-effective security solutions. The security program at Redwood is being built out deliberately rather than inherited, so this role carries real influence over the standards and tooling we adopt. Responsibilities Design, implement, and maintain security controls across identity, endpoint, network, cloud, email, and data protection, with emphasis on the Microsoft security stack including Entra ID, Defender, Sentinel, Purview, and Intune. Analyze, evaluate, and document security risks across cloud, on-premises, and AI or machine learning applications, and recommend controls proportionate to the risk. Operate and tune the SIEM, build and maintain detections, and work alerts through to resolution. Participate in incident response, coordinating investigation, containment, remediation, and post-incident analysis, and act with a sense of urgency when reacting to incidents and vulnerabilities. Conduct vulnerability scanning and testing, document findings, and drive remediation with infrastructure, application, and database teams. Contribute to Identity and Access Management architecture and standards, including provisioning and deprovisioning processes, periodic access reviews, conditional access, and privileged access. Embed security into delivery through pipeline controls, infrastructure as code guardrails, secrets management, and secure configuration baselines. Secure AI and machine learning workloads alongside the rest of the environment, including model APIs, data pipelines, and the controls around copilot and agent deployments, and monitor for adversarial threats such as prompt injection, data poisoning, and model extraction. Perform third-party and vendor security assessments, including questionnaire review, risk findings, and remediation tracking, and evaluate new services and AI features before adoption. Integrate security monitoring across tools and platforms, and leverage automation and AI to assist with SOAR, incident response, and monitoring. Develop metrics, dashboards, and reporting for key security technologies, including Key Performance Indicators and Key Risk Indicators. Contribute to security policies, standards, and runbooks aligned to the NIST Cybersecurity Framework, and keep them current as the environment changes. Support control and regulatory obligations including SOX IT general controls, GLBA safeguards, NYDFS Part 500, and SEC cyber disclosure readiness. Provide training and guidance to engineering teams on secure development and secure AI practices. Support day-to-day coordination with outsourced security vendors and the managed security service provider. Participate in the after-hours on-call rotation for incident response. Qualifications Bachelor's degree in Computer Science, Information Security, Data Science, or a related field, or equivalent experience. Required Skills Six or more years in cybersecurity roles spanning security engineering, security operations, or application security. Hands-on experience operating a SIEM, building detections, and working real incidents through to resolution and lessons learned. Experience with core cybersecurity tooling including SIEM, endpoint protection, IAM, encryption, email security, and IDS or IPS. Solid cloud security foundations on Azure, including identity and access management, network controls, and native security tooling. Experience securing AI or machine learning systems, including familiarity with adversarial concepts such as prompt injection, data poisoning, model extraction, and data integrity attacks. Understanding of cloud-based AI platforms such as Azure AI Foundry, Azure OpenAI, or Microsoft Copilot, and the risks introduced by agent and retrieval augmented generation architectures. Practical vulnerability management experience, including scanning, prioritization, and driving remediation across teams. Scripting and automation ability in PowerShell, Python, or similar, with enough familiarity with CI/CD and infrastructure as code to build controls into pipelines. Familiarity with NIST and CIS frameworks, and awareness of emerging AI security guidance such as NIST AI RMF and the OWASP Top 10 for LLM applications. Experience analyzing and documenting security solutions and mapping them to business requirements. Ability to set and change priorities amongst multiple competing constituencies. Ability to collaborate across technical and non-technical teams and explain complex security topics clearly. Preferred Skills Experience in financial services, mortgage, or another regulated industry. Hands-on adversarial testing of LLM or agentic applications, including use of tools such as PyRIT, Garak, or Promptfoo. Penetration testing or red teaming background. Detection engineering experience in Sentinel or a comparable SIEM, and experience building cybersecurity runbooks. Knowledge of secure API design and authentication mechanisms. Experience

What You'll Do The Senior Security Engineer will work closely with IT Infrastructure, Cloud, Applications, Data, Service Desk, and Information Security & Compliance teams to implement security controls, investigate security events, remediate vulnerabilities, and improve AAA Washington's overall security posture. Who We Are At AAA Washington, we equip our members with trusted service and expertise to confidently travel through life. We provide our members with best-in-class roadside assistance, discounts and rewards, travel services and insurance. For over 120 years, we've served our members, not shareholders, so our growth supports innovation for the Club today and for the future. Seeking to reflect the communities we serve and create an inclusive culture, we encourage employees to bring their full self to work and support applicants from all backgrounds, abilities and walks of life to apply. Why You'll Love Working At Aaa Washington You'll play an important role in bringing AAA Washington's spirit of service and peace of mind to our membership. Consistently ranked as one of the Best Places to Work by Puget Sound Business Journal, we aim for work-life balance across the organization. We support hybrid and remote work options for many positions based in our corporate office (Bellevue, Washington) along with some of the best benefits in the region! Essential Duties/Responsibilities Security Engineering & Architecture Design, implement, and maintain security controls across on-premises, cloud, endpoint, network, application, and identity environments. Evaluate security architectures and provide recommendations to improve AAA Washington's security posture. Partner with IT and engineering teams to incorporate security into infrastructure, application, and technology projects. Develop and maintain secure configuration standards and technical security baselines. Participate in security architecture and technology reviews for new systems, applications, vendors, and services. Identify opportunities to automate security controls, monitoring, and response activities. Security Monitoring & Incident Response Monitor security alerts and investigate potential security events and incidents. Participate in incident response activities, including investigation, containment, eradication, and recovery. Analyze security logs and telemetry from SIEM, EDR, identity, network, cloud, and other security platforms. Develop and improve detection rules, alerting, and security monitoring capabilities. Conduct root-cause analysis following significant security events. Participate in incident response exercises and continuously improve response procedures. Escalate significant security events in accordance with AAA Washington's incident response procedures. Collaboration & Communication Serve as a technical security advisor to IT and business stakeholders. Explain technical security risks and recommendations in language appropriate for technical and non-technical audiences. Mentor and provide technical guidance to junior security engineers and analysts. Promote a culture of security ownership throughout AAA Washington. Participate in security awareness and education activities when appropriate. Other duties as assigned Supervisory Responsibilities None Minimum Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. 5+ years of experience in information security, cybersecurity, security engineering, infrastructure security, or a related technical discipline. Demonstrated experience implementing and operating enterprise security technologies. Strong understanding of network, endpoint, identity, cloud, and infrastructure security principles. Experience with security monitoring, incident investigation, and vulnerability management. Experience working with security tools such as EDR, SIEM, vulnerability management, firewalls, WAF, DLP, IAM, or related technologies. Experience developing security configurations, standards, procedures, and technical documentation. Ability to troubleshoot complex technical security issues. Strong analytical and problem-solving skills. Ability to work independently while collaborating effectively across technical and business teams. Preferred Qualifications Experience with Microsoft security technologies and the Microsoft security ecosystem. Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Intune, and Microsoft Purview. Experience with cloud security, particularly Microsoft Azure. Experience with vulnerability management platforms and security scanning. Experience with identity and privileged access management. Experience implementing security controls aligned with NIST CSF, ISO 27001, CIS Controls, or similar frameworks. Experience supporting PCI DSS, SOX, SOC 2, or other compliance requirements. Experience with scripting or automation using PowerShell, Python, or similar technologies. Certificates, Licenses, Registrations Security certifications in the following areas, or equivalent experience: CISSP Security+ CySA+ GIAC CCSP Knowledge, Skills, Abilities Technical Security Security Engineering Network Security Endpoint Security Cloud Security Identity & Access Management Vulnerability Management Security Monitoring Incident Response Data Protection Salary Hiring Range: $159,528 - $191,454 Discretionary bonus based on company performance Benefits We Offer Health insurance (medical, vision, dental and prescription drug) Up to 22 days of Paid Time Off (PTO) in the first year Eleven paid holidays in addition to PTO 401(k) with Employer Match Life, Short-Term Disability and Long-Term Disability insurance Flexible Spending Accounts 4 Hours of Volunteer Time Off per year On-Demand Pay / Earned Wage Access Free Premier RV AAA Washington Membership Travel, Insurance, and Membership Discounts and Perks Paid, on-going training throughout your career THRIVE wellness program Tax-advantaged commuter benefit Free parking Financial Literacy Education Work Environment & Physical Demands Hybrid work from home and office required The physical environment is typical of a standard office space. It requires the employee to work inside for the duration of work. Must be able to remain in a stationary position, sitting for more than 50% of the time. This position will require occasionally moving about inside the office to access equipment, cabinets, etc. May work around office equipment which could be noisy, such as copiers and fax machines. Other Equipment used: Computer, phone, various virtual technologies, other office equipment Travel: Rarely Travel To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required. Disclaimer Position/Job characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Senior Security Engineer - US About VulnCheck Exploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers. About the Role We're hiring a Senior Security Engineer to work side-by-side with our engineering team, embedding security into how we build and ship — not bolting it on after the fact. You'll partner with engineers on design reviews, help harden the platform as it grows, and build the tooling and automation that lets security scale without slowing anyone down. You'll report to our VP of Information Security and have real autonomy to identify problems and build the solutions yourself and in collaboration with engineering. This is a builder's role. In addition to use of vendor tools, you'll be writing code and infrastructure that turns security and compliance work into repeatable, self-service processes for the business helping to automate and improve what's manual today, closing gaps in how we detect and respond to issues, and giving engineering the guardrails and feedback loops they need to move fast safely. What You'll Do Partner with Engineering on Platform Security Work directly with engineering on design and architecture reviews, threat modeling, and secure-by-default patterns for new services Review and harden IaC across our cloud environments (EKS, Aurora, OpenSearch, S3, IAM) Lead least-privilege IAM decomposition and drive adoption of stronger identity patterns across the platform Support disaster recovery testing and resilience exercises alongside the infrastructure team Build Tooling That Scales Security Design and build automation that turns detection, response, and compliance work into repeatable processes rather than manual effort Improve and extend onboarding/offboarding automation, alert triage pipelines, and identity/access anomaly detection Build internal tools that give engineering fast, self-service ways to check their own security posture What You'll Bring 5+ years in security engineering, with real depth in AWS security and Infrastructure-as-Code (Terraform/Terragrunt strongly preferred) Firm working knowledge of Kubernetes/EKS security — RBAC, network policies, pod security standards, image scanning, and cluster hardening Strong written communication — you'll document your own work, since we're a small, high-trust team A track record of building tools or automation that solved a security problem at scale, not just running existing tools Previous use of tools like Crowdstrike, Wiz, Security Hub Experience with golang Comfortable working directly with software engineers — in code reviews, design discussions, and incident response Incident investigation and RCA tracking Experience supporting a SOC 2 (or similar framework) program from the technical/evidence side Experience with Google Workspace as an identity/IdP source of truth Self-directed: you'll often be the only engineer working a problem end to end Preferred Qualifications Exposure to offensive security or red/purple teaming Familiarity with Aurora or managed OpenSearch specifically What We Offer We believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles, tailored to your country of employment: Generous, flexible time off Retirement/pension plan contributions (e.g., 401k with match in the US; local pension schemes elsewhere) Comprehensive healthcare coverage Generous paid parental leave Remote-friendly environment with flexibility Support for home office costs (phone & internet) Specific benefit details vary by country and are confirmed during the offer process. Why Join Us Built on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations. VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts. VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive. VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn't perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume.

Description Position Summary The Security Engineer III provides advanced technical expertise in the design, implementation, and operation of enterprise security capabilities across endpoint, cloud, network, application, identity, and data environments. The role is responsible for strengthening preventative and detective controls through security engineering, detection engineering, vulnerability management, and incident response. This position also evaluates emerging technologies and threats to continuously improve the organization's security posture. Summary Of Essential Job Functions Engineer, implement, maintain, and continuously improve enterprise security controls across endpoint, cloud, network, application, identity, web, API, and data security environments. Serve as a technical subject matter expert for assigned security capabilities, providing guidance on secure architecture, configuration, integration, and operational best practices. Identify, assess, and drive remediation of vulnerabilities, security exposures, and control gaps identified through security assessments, penetration testing, monitoring, audits, and vulnerability management programs. Design and implement security controls for cloud infrastructure, workloads, applications, and services, including identity, network security, workload protection, vulnerability management, and secure configuration. Partner with application and engineering teams to integrate security throughout the software development lifecycle, including application and API security testing, secure design, vulnerability remediation, and DevSecOps practices. Engineer and maintain network, web applications, and secure access controls, including segmentation, traffic inspection, threat prevention, secure web access, and protection of Internet-facing applications and services. Evaluate and improve identity and access security, including authentication, authorization, privileged access, service identities, least privilege, and Zero Trust principles. Develop and improve security monitoring and detection capabilities, including SIEM use cases, detection logic, telemetry requirements, alert tuning, threat hunting, and identification of suspicious or malicious activity. Provide technical expertise during security incidents, including investigation, containment, root-cause analysis, remediation, and identification of opportunities to improve preventative and detective security controls. Research emerging threats and technologies, including artificial intelligence and generative AI security risks; develop security architecture, standards, and documentation; and identify opportunities to improve security through automation, APIs, scripting, and orchestration. Position Requirements 5+ years of relevant experience in information security, security engineering, infrastructure security, or related technology disciplines, with demonstrated experience implementing and supporting enterprise security controls. Strong experience with endpoint security and threat protection, including endpoint detection and response, attack prevention, security monitoring, threat investigation, and vulnerability management. Strong understanding of cloud security architecture and engineering, including workload security, identity, networking, configuration and posture management, vulnerability management, and cloud-native environments. Experience with application and API security, including secure software development practices, application security testing, API authentication and authorization, vulnerability identification, and integration of security into development pipelines. Strong knowledge of network, web application, and secure access security, including firewalls, segmentation, web application protection, secure web gateways, proxies, traffic inspection, intrusion prevention, and Zero Trust concepts. Experience with identity and access management, including authentication, authorization, privileged access, role-based access controls, service identities, least privilege, and modern identity security concepts. Experience with SIEM and detection engineering, including log and telemetry analysis, development and tuning of detection logic, correlation of security events, threat hunting, and investigation of anomalous or malicious activity. Experience supporting security incident response, including investigation, triage, containment, root-cause analysis, remediation, and translating lessons learned into improved preventative and detective controls. Ability to assess complex technical architectures, identify security risks and control gaps, and develop practical engineering solutions across cloud, endpoint, application, network, identity, API, and AI-enabled environments. Strong analytical, troubleshooting, collaboration, and communication skills, with experience in security automation, scripting, or APIs and knowledge of NIST-based security frameworks, risk management, and compliance requirements. Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life. Credit One Bank is an equal opportunity employer committed to diversity and inclusion and does not discriminate against any employee or applicant for employment because of age, race, religion, color, disability, sex, sexual orientation, or national origin. Reasonable accommodations can be made for those who require them, including access to job applications and workplace accommodations. Employment at Credit One Bank is based on mutual consent (also known as at-will). This means that employees and the Bank may terminate the employment relationship at any time, with or without cause and with or without notice. Please contact the recruiter for this position to learn more. Credit One Bank does not accept unsolicited resumes from agencies and is not responsible for related fees.

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves effectively in an era where AI is fighting AI on the cyber battlefield. Our platform brings a new approach to the $100B security operations market, building a live model of each customer's environment and using AI agents to detect, investigate, hunt, and respond to threats at machine speed. Just one year after our founding, Artemis is one of the fastest-growing cybersecurity companies of all time, with customers including multiple Fortune 500 companies, Global 2000 enterprises, and AI innovators like Cursor. We have raised $70M from Felicis, First Round Capital, Theory Ventures, Two Sigma Ventures, Lockstep VC and Brightmind. We are also backed by some of the most prominent operators in cybersecurity, including the CEO of Crowdstrike, the former CEO and CTO of Splunk, and the founders of Abnormal AI and Demisto. Artemis's founders have built and scaled security products used by tens of thousands of customers. Shachar Hirshberg (CEO) led Amazon GuardDuty, the world's largest cloud detection product, was an early employee at Demisto, the company that invented the SOAR category, was an engineering leader at Palo Alto Networks, and holds an MBA from Harvard. Dan Shiebler (CTO) led all AI and machine learning at Abnormal AI, the pioneer of behavior-based detection, spent five years building analytics using machine learning and vector databases at Twitter, and holds a PhD in machine learning from Oxford. Our team of software engineers, AI researchers, security engineers, and product designers comes from Google, Meta, AWS, Wiz, CrowdStrike, SentinelOne, Abnormal AI, Perplexity, Bridgewater, Mercor, CERN, and more. We're growing fast and looking for builders who want to help us serve our rapidly expanding customer base. Job Overview We're looking for a Senior Security Analyst to join Apollo, the managed detection and response service Artemis delivers on top of its platform, as one of its founding analysts. Apollo analysts are the senior security minds our customers count on: the people who determine what a threat really is, what it means for that business, and what happens next. You will be one of the few who establish how that work gets done before the team scales. The Artemis platform is built to give you the strongest possible starting position. Detections are written for each customer's environment, cases arrive with the investigation done and the evidence assembled, response actions come staged and impact-checked, and the platform already holds a living picture of every user, device, account, and AI agent in the environment. The routine work that fills most analysts' days is handled, which means your day is spent on the work that actually calls for an expert. You will lead investigations across cloud, identity, endpoint, and SaaS, own the decision on the cases you take, guide customers through what matters and why, and carry incidents from first signal to a clean resolution. Because you work across the full range of environments we protect, you will build fluency in modern attacker tradecraft far faster than a single environment allows. And your reach extends well past the case. You sit with the engineers building the platform, so what you learn in one investigation can ship into the product and go on protecting every customer we defend. Responsibilities Own the investigation and the decision - Take cases from pickup to close: establish what happened, determine the impact and blast radius, set the verdict and severity, and put your reasoning on the record. You are the one who makes the call. Investigate with real depth - Reconstruct attacker activity across identity, cloud, endpoint, and SaaS telemetry: initial access, lateral movement, persistence, and exfiltration. Pair AI-assisted investigation with hands-on log analysis, and know which one to lean on for what. Drive response, with the customer in control - Recommend and execute containment within each customer's authorized limits, with every action impact-previewed and reversible before it runs. Where the decision belongs to the customer, bring them the recommended action, its full impact, and a clear next step. Move at the speed the threat demands - Work by risk, acknowledge and reach a verdict inside the response targets for each severity, and keep the most consequential work moving first. Be the security partner customers trust - You are the voice the customer hears. Your summaries, your reasoning, and your final analysis reach them in your own words. Hunt what nothing has alerted on yet - Run hypothesis-driven and AI-assisted threat hunts across customer environments, and turn what you surface into new cases and new detections. Help design the service, not just deliver it - Founding analysts shape what Apollo becomes: the investigative standards, the response workflows, the reporting customers receive, and the console the team works in. You will be in the room where those decisions get made, and the improvements you argue for get built. Make the platform sharper - Your verdicts, your reasoning, and the patterns you recognize feed straight into detection engineering and product, so a problem you solve once gets engineered away rather than worked twice. Qualifications 4+ years of hands-on security operations experience in a SOC, MSSP, or MDR environment, at a senior or Tier 3 level where the investigation ended with your decision Proven investigation depth across identity (Okta, Entra ID), cloud (AWS, Azure, GCP), endpoint (EDR), and SaaS (Microsoft 365, Google Workspace) Fluency in attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they present in real telemetry Rigor about evidence: you know what separates suspicious from confirmed, and exactly what you need to see to close that gap Hands-on experience working with AI-assisted investigation or automation, and the judgement to know where it is strong and where it needs you Strong customer-facing instincts. You have walked the people affected by a live security situation through what is happening and what to do about it Excellent written communication. What you write reaches the customer as you wrote it A high personal bar for the quality of your analysis, and a preference for being measured on it Comfortable working a defined shift as analyst coverage expands to 24x7 Bonus Experience in a multi-tenant MDR or MSSP practice, working across several customer environments Experience writing or tuning detection rules (Sigma, YARA-L, SPL, KQL, or similar) Incident command experience, including customer executive briefings Dedicated threat hunting or DFIR background Daily hands-on use of AI or agentic coding tools to build your own tooling Compensation We offer a competitive compensation of $120,000-$160,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed. Why Work at Artemis? Join early enough to shape it. A founding analyst leaves fingerprints on all of it: how the service is designed, the standards the team holds, and what customers receive. The way you work a case becomes the standard the analysts who follow you learn from. Make a real world impact. Every case you work and every call you make protects a real company and the people who depend on it. You are not working theoretical security problems, you are on the front lines of active defense, with customers who rely on the quality of your judgement. Range you cannot get anywhere else. You work across the full set of environments we protect and the full spectrum of attacker behavior we see, so a quarter here builds experience that years inside one environment cannot. Be challenged to be better than ever before. Our team includes some of the smartest and most driven people in the world. We guarantee you will learn more in 1 year here than 10 years in another place. Push the boundaries of technology. The platform handles the detection, investigation, and prioritization that consume most analysts' days, so your time goes to judgement, response, and the customer. You will help define what an AI-native SOC actually looks like. Innovative culture. We obsess about customers, move fast with high quality, and value open communication, mentorship and learning. You will have the autonomy to drive investigations, shape the platform, and own outcomes, not just follow a runbook.

AWARD PENDING*** Zen Strategics, a Titan Technologies company, is seeking a Cybersecurity Incident Response & Threat Detection Analyst to support the Defense Logistics Agency (DLA). This program provides highly specialized Cyber Defense analysis, Cybersecurity Content Development, Vulnerability Management (VM), and Operational Technology (OT) cybersecurity support. Duties And Responsibilities Participate in 24x7x365 monitoring of SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats within the Enterprise Network Environment. Perform actions to protect, monitor, detect, analyze, and respond to unauthorized activity. Employ Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats. Review logged events for trends that are indicative of attack or compromise within the environment. Actively monitor logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment. Maintain awareness of possible threats with the use of intelligence resources which include Open Source Intelligence (OSINT). Provide technical analysis and sustainment support for the enterprise for Cybersecurity tools and applications and assist with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats. You MUST Have Must possess a DOD Top Secret Clearance and be eligible for an IT-1 and be eligible for SCI access Must possess IT-I Critical Sensitive security clearance or Tier 5 (T5) at time of proposal submission Five (5) years relevant experience Two (2) years performing root cause analysis of cybersecurity events and incidents Working knowledge of at least two types of security tools: Firewall, IDS/IPS, Host based antivirus, Data loss prevention, Vulnerability Management, Forensics, Malware Analysis, Device Hardening Understanding of Defense-in-Depth Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell) Education Bachelor's degree required Company Description Titan Technologies, LLC and our wholly owned subsidiaries, TelaForce, LLC, Titan Facilities, Inc. and Zen Strategics, design, build, integrate, and manage innovative solutions and software applications. Our remarkable people, working collaboratively under a shared vision, have earned a reputation with our customers for delivering results with maximum impact. Sound intriguing? Consider Titan Technologies for the next step in your career journey and be part of an impactful team! Titan is proud to be a Service-Disabled Veteran Owned Business.

About Us At Office Ally, we've been revolutionizing healthcare administration since our inception. What started as a clearinghouse focused on simplifying insurance claims processing for healthcare providers has grown into a full-suite healthcare technology company. We offer a range of affordable, cloud-based revenue cycle management solutions –from eligibility verification and claims management to revenue recovery and payment processing –that help healthcare organizations of all sizes streamline operations and reduce administrative burdens so they can focus on what matters most: patient care. In April 2026, Office Ally acquired Jopari Solutions, Inc, a leader in straight-through electronic claims processing for Property & Casualty (P&C), Commercial, and Government healthcare. Jopari brings deep industry expertise and innovative enterprise payment solutions that are transforming how disbursements are handled across the insurance ecosystem. Together, we are expanding our capabilities across the full healthcare transaction lifecycle, connecting claims, payments, and data exchange to deliver a more seamless and efficient experience for providers, payers, and partners. At the core of our company are four key values that guide our mission and work: Ownership : We take pride in our responsibilities, driving results and taking accountability for the success of our projects. Empowerment : We believe in giving our team the autonomy and support to make decisions that lead to innovative solutions. Innovation : We continuously seek new and better ways to improve healthcare administration, embracing creativity and forward-thinking technology. Transparent Communication : Open, honest communication is at the heart of our collaborations, internally and with our clients, ensuring alignment and trust. About the Role The Security Operations Analyst serves as the first line of defense for Office Ally's security program, monitoring and triaging alerts across a broad set of security platforms spanning SIEM, endpoint detection and response, identity, email security, and data protection. This is a hands-on role with real ownership: you'll close incidents, investigate anomalies, and help build the runbooks and detection logic that make the next response faster. This role works closely with the security engineering team, cloud infrastructure, and IT operations to investigate threats, coordinate response actions, and maintain the audit trail required by our applicable regulatory and compliance obligations. What You'll Do Incident Triage & Response Monitor and triage security incidents across our environment - assessing severity, investigating context, and closing or escalating with clear, complete documentation Investigate Endpoint alerts: review device timelines, process trees, and file events; initiate live response sessions when needed Analyze Internal alerts - risky OAuth applications, unusual download activity, shadow IT, and policy violations Manage Security investigations - correlate log data, track User Behavior Analytics alerts, and coordinate vulnerability findings through triage and remediation Track and document all incidents in tickets, maintaining complete investigative records that serve as audit evidence and support post-incident review Email & Collaboration Security Triage - phishing, malicious attachments, BEC attempts, and user-reported messages Review email threat investigation findings and coordinate remediation actions including message recall, sender block, and user notification Monitor chat and file share activity for anomalous sharing behavior, external collaboration risks, and DLP policy hits Threat Detection & Hunting Run advanced hunting queries (KQL) to investigate indicators of compromise and identify threats not surfaced by automated rules Perform log analysis across sign-in logs, MDE device events, email transport logs, and cloud activity logs Use Identity logs to investigate on-premises login anomalies - lateral movement indicators, Kerberos abuse, and unusual authentication patterns Identify patterns of false positives and contribute to tuning requests and suppression logic for high-volume alert sources Identity & Access Monitoring Review sign-in logs and Conditional Access policy results to identify compromised accounts, token abuse, MFA gaps, and authentication anomalies Support identity-related incidents including AD lockout investigation, account compromise response, and offboarding verification Verify Intune device compliance state during investigations - flag unmanaged or non-compliant devices involved in security events Identify accounts with stale sessions, unrevoked tokens, or privilege inconsistencies and escalate for remediation Data Protection & Compliance Respond to DLP incidents across mail and file share, coordinating with data owners on sensitive data policy violations Support compliance program activities including control evidence collection, audit log review, and documentation of security control operation Flag potential data exposure events and escalate to security engineering with complete investigative context Documentation & Process Improvement Write and maintain SOC runbooks and incident response procedures, keeping documentation current as the environment evolves Contribute to playbook improvements and false-positive suppression logic based on real triage experience Maintain accurate ticket incident records that support compliance audit trails and post-incident review What You'll Need Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience or relevant industry certifications 2+ years in a SOC, IT security, or incident response role Working knowledge of Microsoft Sentinel and the Microsoft Defender suite (MDE, MCAS, Defender for Identity, Defender for Office 365) Ability to read and write KQL - comfortable building hunting queries and modifying analytics rules Understanding of Active Directory and Entra ID fundamentals: sign-in flows, token lifetimes, Conditional Access, and MFA Familiarity with email-based threat investigation - phishing triage, header analysis, and safe/unsafe sender management Working knowledge of SOC 2, HIPAA, or HITRUST requirements and the role security operations plays in maintaining compliance Clear written communication - your incident notes are part of the compliance audit trail Ability to manage competing priorities in a fast-moving alert environment without losing investigative rigor Nice to Have Rapid7 InsightIDR experience - LEQL queries, investigation dashboards, UBA alert triage Exposure to Palo Alto or similar NGFW log analysis Familiarity with Microsoft Intune device compliance and endpoint management concepts CompTIA Security+, SC-200 (Microsoft Security Operations Analyst), or equivalent certification Experience with PowerShell for basic automation, log parsing, and remediation scripting Prior experience supporting SOC 2 Type II, HITRUST, or HIPAA audit evidence collection Healthcare, SaaS, or regulated industry background Experience working in Jira for incident tracking and workflow management Travel Requirements This role requires up to 5% travel, which may include client meetings, team gatherings, or company events. Travel will typically be scheduled in advance and supported by the company. Pay Transparency Office Ally is committed to fair and equitable compensation practices in alignment with pay transparency laws. Compensation for this position may vary based on individual skills, experience, and location. In addition to base pay, employees may be eligible for performance-based bonuses and a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) with company match, paid time off, and other benefits. Actual compensation will be determined considering the candidate's qualifications, relevant experience, and internal equity. Office Ally Pay Transparency $90,000—$100,000 USD Why You'll Love Working at Office Ally At Office Ally, your work has a direct impact on healthcare providers and their ability to deliver exceptional care. We're driven by a mission to simplify healthcare administration, making it easier for providers to focus on what they do best—helping patients. As an Office Ally employee, you'll be at the heart of our efforts to deliver exceptional service and software solutions to our clients in the healthcare space. EEO Note Office Ally is an Equal Opportunity Employer and does not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law.

This position will be posted for a minimum of five calendar days internally. All internal applicants are required to inform your current supervisor/manager prior to applying. Internal applicants are required to be in "good standing" in your current role, which is defined as a performance rating of "met all objectives" or higher. You cannot be on a current performance improvement plan or written warning for any reason and must have been in your current role for a minimum of 6 months, unless otherwise approved for an early transfer by your current leader and the People Department. Your opportunity This role will focus on Cyber Incident Response and Vulnerability Management Incident response and management Perform alert triage of security alerts to validate and prioritise incidents. Determine severity, impact, and root cause of incidents using MSSP and internal tools. Conduct initial triage and assessment of incidents to determine severity and impact. Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and endpoint detection and response (EDR) systems, in a timely manner meeting SLAs. Perform routine reviews of IAM to identify and address abuse of permissions by authorised users. Monitor for policy violations and report suspicious user behaviour. Assist in isolating affected systems to contain threats under supervision. Reporting, documentation, and communication Work notes and artefact logging in ITSM (ServiceNow / Confluence) incident tickets. Facilitate handovers to other SOC team members at the end of a shift, ensuring a smooth transition of ongoing incidents. Provide clear and timely updates to other SOC members and escalation points. Seek guidance from and escalate where necessary to Mid-level Tier 2 analysts. Vulnerability Management Support daily security operations, by conducting regular vulnerability scans, analyze resulting reports and triage identified issues to ensure timely risk mitigation. Lead the end ‑ to ‑ end process of identifying, assessing, and coordinating the remediation of vulnerabilities across applications, infrastructure, and cloud environments, working closely with development and operations teams to implement effective and sustainable security controls. Optimize vulnerability scanning profiles, dashboards, and reports to ensure comprehensive coverage and actionable insights, while analyzing data to prioritize risks and provide clear remediation guidance. Contribute to the continuous improvement of vulnerability management processes, policies, and procedures, including supporting incident response activities and aligning with industry best practices. Other Stay up-to-date on the latest cyber security threats, vulnerabilities, and attack techniques. Participate in on-call rotations and provide triage and escalation support. Flexible working hours may require scheduled work on weekends and/or holidays, including being on-call. Participate in handling queries from the security inbox, ensuring timely response to security-related inquiries. Carry out other duties as assigned What to expect when you join our firm Hybrid working and reasonable accommodations Generous Holiday policies Excellent Health and Wellbeing benefits including corporate membership to Wellhub Paid volunteer time to step away from your desk and into the community Support to grow through professional development courses, tuition/qualification reimbursement and more Maternal/paternal leave benefits and family services Unique employee events and programs including a 14er challenge Complimentary beverages, snacks and all employee Happy Hours Must have skills 2+ years in an Information Security role with proven experience in Security Operations or Threat Analysis roles Proven hands-on experience with SIEM and EDR platforms Analytical mindset and knowledge of TTPs, malware behaviour, and incident handling methodologies. Familiarity with IAM concepts and monitoring — able to review user permissions, detect abuse, and flag suspicious behaviour or policy violations. Experience performing alert triage and incident escalation within defined SLAs, using ITSM tooling such as ServiceNow and documentation platforms such as Confluence. Strong collaboration skills working with application and infrastructure teams within a security context In-depth working knowledge of security best practices and frameworks (e.g., MITRE ATT&CK, OWASP Top 10, NIST) Excellent written and verbal communication skills, with the ability to produce clear work notes, handover reports, and stakeholder updates. Ability to manage multiple projects and tasks. Analytical ability to capture and summarise information, find solutions to various tactical and strategic problems and prioritise work Exposure to public cloud infrastructure (SaaS, IaaS, and PaaS) Nice to have skills 1+ years of experience within Incident Response and/or Security Operations Scripting or automation experience (e.g., Python, PowerShell, KQL) to enhance SOC playbooks, enrich alerts, or reduce manual triage effort. Exposure to SOAR platforms and use-case development for automating repeatable response actions. Experience working alongside an MSSP or within a co-managed SOC model. Familiarity with Threat Intelligence platforms (e.g., OpenCTI, Recorded Future, MISP) and applying CTI to detection and hunting. Relevant Information Security certifications (e.g. CompTIA Security+, CySA+, CEH, SANS, Cloud Certifications). Supervisory responsibilities No Potential for growth Mentoring Leadership development programs Regular training Career development services Continuing education courses Compensation information The base salary range for this position is $110k to $120k. This range is estimated for this role. Actual pay may be different. This position will be open through November 15, 2026. Colorado law requires an estimated closing date for job postings. Please don't be discouraged from applying if you see this date has passed. At Janus Henderson Investors we're committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don't worry if you don't think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can't accommodate every flexible working request, we're happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at recruiter@janushenderson.com . Annual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance. Benefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here . Janus Henderson Investors is an equal opportunity employer . All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks. Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licenses where not supported by an employee's job functions (as determined by Janus Henderson at its sole discretion). You should be willing to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants' past political contributions or activity may impact applicants' eligibility for this position. You will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.