GLI Secure is seeking an experienced Cybersecurity Consultant II (penetration tester) in one of our US locations. Who We Are… Since 2001, GLI Secure has helped businesses meet their IT, cybersecurity, and compliance needs. We partner closely with our clients to understand their challenges and deliver tailored solutions that strengthen their security and expand their capabilities. Why You Should Work Here… Our employees are our biggest investment. We offer competitive salaries, top-notch benefits, a culture built around career growth, and the chance to collaborate with colleagues around the world. What You Will Accomplish Here… As a Cybersecurity Consultant II , you will independently lead assessments that identify and exploit vulnerabilities across networks, systems, cloud environments, web and mobile applications, and APIs. You will take on larger, more complex engagements, simulating real-world attacks and adapting both your methodology and your tooling to challenging environments. You will also produce and peer review detailed reports, advise clients on remediation, mitigating controls, and compliance requirements, help them build a stronger long-term security posture, and serve as a mentor and technical resource to junior members of the team. Duties And Responsibilities Include, But Are Not Limited To Plans and executes complex, multi-faceted security assessments without supervision for a wide variety of assigned clients. Takes ownership of assigned engagements end to end, coordinating with project managers, clients, and other consultants throughout the project lifecycle. Must be able to independently troubleshoot common technical issues, determine root causes, and address project blockers with clients until they are resolved. Presents findings to technical and executive audiences and leads discussions on risk ratings, exceptions, and remediation plans. Ensures testing and deliverables meet applicable regulatory and quality requirements for clients. Mentors junior consultants, providing technical guidance, feedback, and support for their professional development. Provide internal and external clients with exceptional service in a professional, courteous, and timely manner. Stays up-to-date on current tools, technologies and vulnerabilities and contributes improvements to testing methodologies and internal processes. Experience, Education, Skills, And Credentials A minimum of 3 years of prior experience in a related position is required. Must hold an industry-recognized penetration testing certification such as OSCP, eCPPT, or SANS GPEN. Must have a strong working knowledge of Linux, Windows, network, web application, and cloud security. Must have demonstrated experience independently performing network, web application, and API penetration tests. Must have excellent interpersonal and customer service skills. Must be able to work autonomously and take ownership of assigned projects from start to finish. Must have the ability to communicate, both orally and in writing, with other members of the team and clients. Must have the ability to handle and organize multiple projects and deadlines. Must demonstrate a high degree of attention to quality, details, and correctness. Bachelor's degree in Computer Science, Information Systems or a related field is preferred, however related experience may also be acceptable. The Following Skills Are Preferred, But Not Required Advanced Offensive security certifications (such as OSEP, OSWE, OSED, eWPTX, or CRTO) or cloud certifications (AWS, Azure) are a plus. Experience testing gaming, lottery, or other regulated environments, including familiarity with jurisdictional testing and reporting requirements. Scripting and automation skills (such as Python, PowerShell, or Bash) used to build custom tooling and validate findings. Understanding of information security frameworks such as ISO/IEC 27001:2022, and NIST CSF. Experience supporting team members' technical development (e.g. through mentoring, service development or research) and contributing to company technical processes overall. Experience with physical security testing, phishing and social engineering techniques. Location: This is an in-office position located in one of our US offices. Schedule: Normal hours are Monday through Friday, 40 hours per week Pay: 85k - 95k based on experience Travel: Up to 50% travel is expected for this position. Benefits For US based candidates, we offer a competitive total compensation packet, including: Comprehensive Health, Dental, and Vision Insurance 100% Employer Paid Options Currently Available Optional Health and Flexible Savings Accounts 100% Employer Paid Life and Disability Insurances 20 Days Paid Time Off (Per Year) 401K Savings Plan with 100% match up to 3% of your gross annual salary Annual Discretionary Bonus Anniversary Reward Bonus Educational Assistance Program (after 12 months of employment) Mental Health Benefits through our Employee Assistance Program Voluntary Pet Insurance Gaming Laboratories International (GLI) is a gaming services company. Any of our employees may be required to obtain a gaming license within one or all of the gaming jurisdictions. If you are requested by GLI to obtain a gaming license, your continued employment may be contingent on your ability to obtain that gaming license. This job description should not be interpreted as all-inclusive; it is intended to identify the major responsibilities and requirements of the job. The incumbent may be requested to perform other job-related tasks and responsibilities than those stated above. GLI is an Equal Opportunity Employer
Live Job Feed
Find Your Dream Career
Thousands of curated opportunities from top companies — filter by role, salary, and remote preference to find your perfect fit.
7,585 jobs
At CHAMP, we are redefining the technology used by Motor Vehicle Agencies and their stakeholders. We do so with innovative, cloud-based software that enhances efficiency, security, and interoperability. Our solutions replace outdated processes with modern, scalable platforms, enabling organizations to operate with greater speed and accuracy in an increasingly digital world. Security Analyst (Level I / Level II) Location : Cleveland (Onsite – 4 days in office) Department : Security Reports To : Director of Security Travel: Up to 10% Sponsorship: This position is not eligible for Visa Sponsorship Relocation: This position is not eligible for Relocation Assistance Your Impact We are seeking a motivated Security Analyst to join our Security team. This position is responsible for supporting Security Operations Center (SOC) activities, Detection & Response, Security Compliance, and General Security initiatives across the organization. The ideal candidate has a strong cybersecurity foundation, excellent analytical skills, and a passion for continuous improvement. Preference will be given to candidates with hands-on Security Operations Center experience, particularly with DataDog Cloud SIEM, although experience with Splunk, Microsoft Sentinel, CrowdStrike Falcon Complete, QRadar, LogRhythm, Elastic, or similar SIEM/SOC platforms is also valuable. This position requires a hands-on engineer who can balance strategic program development with day-to-day operational execution across multiple security domains. This role is ideal for a cybersecurity professional who wants broad exposure across threat detection, incident response, cloud security, compliance, vulnerability management, and security automation while helping mature CHAMP's overall security posture. Every Security Analyst, regardless of level, is expected to own something, improve something, automate something, and challenge existing assumptions. The difference between levels is not whether they contribute and demonstrate an ownership mentality, but the size and impact of what they contribute. What You Will Do Security Monitoring and SIEM Operations Support Support the implementation, administration, and ongoing operation of the enterprise SIEM platform Maintain onboarding, validation, and maintenance of security log sources across cloud, application, infrastructure, identity, endpoint, and network environments. Monitor the health, availability, and effectiveness of security logging pipelines and ingestion processes. Continuously evaluate enterprise systems and identify opportunities to onboard additional data sources that improve organizational visibility and threat detection capabilities. Develop and maintain dashboards, reports, operational metrics, and monitoring views supporting security operations, leadership reporting, and program maturity initiatives. Assist with development, testing, validation, and tuning of detection rules, alerts, correlation logic, and security monitoring content. Review false positives, detection gaps, and monitoring deficiencies and recommend improvements to increase detection effectiveness. Security Operations and Incident Response Coordination Serve as an internal point of contact for the organization's third-party Security Operations Center and managed detection and response providers. Review, validate, and oversee investigations performed by third-party Security Operations Center analysts. Coordinate incident escalations between the Security Operations Center provider and internal engineering, infrastructure, and business stakeholders. Assist with determining appropriate response actions and escalation paths for security incidents. Support incident response activities including investigation, containment, eradication, recovery, and lessons learned activities. Participate in post-incident reviews and help drive corrective actions and long-term improvements. Assist with forensic evidence collection, incident documentation, and response tracking. Develop and maintain incident response playbooks, escalation procedures, and Secruity Operations Center operational runbooks. Maintain awareness of emerging threats, vulnerabilities, attack techniques, and detection opportunities that may impact the organization. Security Programs Maturity Establish and measure key performance indicators related to security monitoring, incident response, detection effectiveness, and SOC service delivery. Monitor the effectiveness of third-party SOC services and identify opportunities for operational improvements. Partner with compliance to ensure security monitoring supports regulatory, audit, and organizational requirements. Drive continuous improvement initiatives that enhance visibility, detection capabilities, operational efficiency, and overall security posture. Promote automation opportunities that improve investigation workflows, reporting, alert triage, and security operations efficiency. Participate in security projects and initiatives that improve overall organizational security posture. Support Security Programs and Initiatives Support continuous monitoring objectives for regulatory compliance requirements. Support evidence collection efforts for major audits such as SOC2 and GovRAMP frameworks. Assist with vulnerability scan results, triage, and remediation tracking. Participate in automation development and identifying opportunities to reduce manual efforts. Support daily operations of endpoint security including security event investigations, findings review, remediation tracking, and identifying/implementing improvements for endpoint security. Assist with cloud security findings and identity security solutions. Review identity-related alerts, suspicious sign-in activity, privileged account events, guest user activity, and data-sharing risks in Microsoft EntraID environment. Requirements and Qualifications Bachelor's or Associate's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related discipline (or equivalent experience). Level I: 1-3 years of cybersecurity, SOC, IT operations, systems administration, or related experience. Level II: 3-5 years of cybersecurity, SOC, incident response, threat detection, or related experience. Experience working with SIEM, EDR, security monitoring, or security operations platforms. Understanding of common cyber-attack techniques, indicators of compromise, and threat actor behaviors. Familiarity with incident response processes and security investigations. Ability to analyze logs, alerts, and security telemetry. Strong analytical, troubleshooting, and problem-solving skills. Strong analytical, troubleshooting, and problem-solving skills. A high level of organization and attention to detail is required Excellent communication and interpersonal skills Strategic thinker Demonstrated curiosity and desire to continuously learn. Flexible approach, able to operate effectively with uncertainty and change Driven, self-motivated, and enthusiastic with the ability to build and maintain positive relationships Preferred Requirements Hands-on DataDog Security Monitoring or Cloud SIEM experience. Previous Security Operations Center (SOC) experience. Experience with tools such as CrowdStrike, Microsoft Sentinel, Splunk, AWS Security Hub, GuardDuty, Okta Experience with vulnerability management programs and tooling. Experience writing Python or other scripting language. Understanding of cloud security concepts within AWS. Familiarity with MITRE ATT&CK Framework. Security certifications such as CySA+, Security+, SSCP, GSEC, GCIH, GCIA, or GMON Experience supporting regulated environments and compliance frameworks. Perks + Benefits Competitive Salary Annual Bonus Potential Health, Dental & Vision Insurance Unlimited PTO Policy Matching 401K with immediate vesting Subsidized Lunches at our Cleveland Headquarters Fast Paced work environment in a growth company Newly Renovated Office Space Salary Range Level I - Associate Security Analyst: $80,000 - $100,000 Level II - Security Analyst: $95,000 - $115,000 This is a good faith estimate, and final compensation may vary based on experience and skills. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applicants of all backgrounds, including veterans and individuals with disabilities. If you need accommodations during the application or interview process, please let us know. We are here to help. By joining CHAMP, you will be an integral member of our team with many opportunities for personal growth and upward mobility in a growing organization. We have a great culture that is flexible, collaborative and welcoming.
About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you. Job Description Information security is an integral part of Visa's corporate culture. It is essential to maintaining our position as an industry leader in electronic payments, which is why Visa has made it a priority to create top-tier security operations and incident response teams to defend the company against evolving cyber threats. If you would like to join a company where security is truly valued, where you can work with like-minded peers who are passionate about the art & science of cyber defense, and where you can use state of the art tools for maximum impact, then we have a home for you. The successful candidate will work with a team of incident responders at one of Visa's Cyber Fusion Centers. The team is part of a larger organization located across multiple geographical sites that are responsible for the comprehensive cyber defense of Visa and its subsidiaries. Essential Functions Manage and address cybersecurity incidents through all stages, including identification, containment, and eradication. Perform deep-dive analysis on systems, accounts, and networks to identify the root cause and impact of incidents. Act as an engagement point for broader technology teams, including Cyber Defense and Engineering. Perform proactive threat hunting to identify and mitigate potential threats before they can cause harm. Develop and refine detection rules to improve the identification and response to security incidents. Provide detailed reports and documentation of incidents and response actions. Develop and maintain incident response playbooks and runbooks to ensure standardized and efficient response processes. Contribute to identifying process improvement opportunities to enhance security incident response processes. Support and manage cybersecurity projects to enhance overall security posture. Work Arrangement This position is staffed in shifts supporting a 24x7x365 global security operations center. Analysts work a series of 12-hour shifts (followed by days off). Staff assigned to the operations center are considered critical and may need to cover holidays and weekends, if scheduled. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager. Qualifications Basic Qualifications: Bachelor's degree, OR 3+ years of relevant work experience Experience working in an enterprise-level incident response team or security operations center. Professional experience in cybersecurity or computer network defense roles. Experience with GenAI and Agent automation Preferred Qualifications Experience working in an enterprise-level incident response team or security operations center. Professional experience in cybersecurity or computer network defense roles. Relevant security-related certifications a plus: CISSP, GCIH, GCIA, GCED, GCFA, CySA+. Demonstrated expertise in areas like incident response, intrusion and malware analysis, web application security, or security engineering. Extensive understanding of malware types and network attack methods. Strong grasp of TCP/IP, packet analysis, routing, and network security. Extensive expertise in operating systems (Windows and Linux), as well as network services and applications. Direct experience in handling cyber security incidents and associated incident response tools. Strong working knowledge of common security tools such as SIEM, AV, WAF, IDS, Netflow, Packet Analyzer and Endpoint Detection & Response tools. Understanding of web application security vulnerabilities, such as cross-site scripting, cross-site request forgery, SQL injection, denial-of-service attacks, and API attacks. Good understanding of Web Application Security risks. Excellent understanding of DDoS techniques and mitigation mechanisms. Display great problem-solving skills, with tenacity and resilience to resolve issues. Excellent communication and presentation skills with proven skill in presenting analytical data effectively to varied audiences. Strong interpersonal and leadership skills to influence and build credibility as a peer. Strong understanding of cloud technologies and related security best practices. Information for US Applicants For roles located in the US, the estimated salary range for this position is $84,500.00 to $ 131,400.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program. Work Hours Varies upon the needs of the department. Travel Requirements This position requires travel 5-10% of the time. Mental/Physical Requirements This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers. Visa is an EEO Employer Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.
About Rocket Lab Rocket Lab is an end-to-end space company delivering responsive launch services, complete spacecraft design and manufacturing, payloads, satellite components, and more – all with the goal of opening access to space. The rockets and satellites we build and launch enable some of the most ambitious and vital space missions globally, supporting scientific exploration, Earth observation and missions to combat climate change, national security, and exciting new technology demonstrations. Our Electron rocket has become the second most frequently launched U.S. rocket annually and has delivered more than 230 satellites to orbit, all while we work to develop Neutron, our upcoming medium-lift, reusable launch vehicle for larger constellation deployment. Our Space Systems business designs and builds our extensive line of satellites, payloads, and their components, including spacecraft that have been selected to support NASA missions to the Moon and Mars and components used on the James Webb Space Telescope. SPACE SYSTEMS At Rocket Lab, we're not just launching rockets — we're building the future of space. Our Space Systems team builds everything from complete spacecraft, precision payloads to the components and subsystems that allow them to thrive in space, like solar panels, flight software, star trackers, optical systems, separation systems, radios, and more. Our Space Systems team has enabled more than 1,700 missions, ranging from interplanetary exploration, in-space manufacturing to national security and defense initiatives. The team has built spacecraft, payloads, and components for missions to the Moon and Mars, working with partners including NASA, the Space Development Agency, and the U.S. Space Force. Whether it's a single high-performance spacecraft, constellation, or the vertically integrated components that help them get to space — our world class Space Systems team is empowering some of the boldest and most ambitious space missions. SENIOR CYBERSECURITY ENGINEER I - SECRET CLEARANCE Based out of Long Beach, CA, the Senior Cybersecurity Engineer I - Secret Clearance will be responsible for designing, implementing, and maintaining the security infrastructure of SDA programs. This role requires a deep understanding of security principles, advanced technical skills, and the ability to stay ahead of emerging threats. The ideal candidate will have extensive experience in software security engineering, a proactive approach to problem-solving, and a passion for protecting sensitive information. What You'll Get To Do Design, implement, and manage security solutions to protect the programs IT infrastructure, including networks, servers, and applications. Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate security risks. Develop and enforce security policies, procedures, and standards to ensure compliance with industry regulations and best practices. Monitor security systems and respond to security incidents, providing detailed analysis and remediation. Collaborate with IT and development teams to integrate security best practices into the software development lifecycle. Stay current with the latest security trends, technologies, and threats, and recommend enhancements to improve the organization's security posture. Mentor and provide guidance to junior security engineers and other IT staff. You'll Bring These Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Active Secret security clearance required upon hire 5+ years of experience in system security engineering or a related role. 8140 Intermediate or Advanced certification (e.g. Security+, Cloud+, CISSP, CISM, CEH, or equivalent) Strong knowledge of security frameworks and standards (e.g., NIST 800, ISO 27001, CIS Controls). Proficiency in security tools and technologies (e.g., firewalls, IDS/IPS, SIEM, endpoint protection). Experience with cloud security (AWS, Azure, GCP) and securing hybrid environments. U.S. citizenship is required, due to program requirements. These Qualifications Would Be Nice To Have Master's degree In Computer Science, Information Security, or related field. Excellent understanding of network protocols, operating systems, and application security. Experience with DevSecOps practices and tools. Experience with incident response and digital forensics. Familiarity with scripting and automation (e.g., Python, PowerShell) Strong analytical and problem-solving skills, with the ability to think critically and act decisively under pressure. Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams. This position may require prolonged periods of sitting, standing, walking, computer work, and occasional exposure to moderate levels of noise, dust, and fumes in production areas. Level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.Base salary is just one component of our total rewards package at Rocket Lab. Employees may also receive company equity and access to a robust benefits package including: top tier medical HMO, PPO & a 100% company-sponsored medical HSA plan option, dental and vision coverage, 3 weeks paid vacation and 5 days sick leave per year, 11 paid holidays per year, flexible spending and dependent care savings accounts, paid parental leave, disability insurance, life insurance, and access to a 401(k) retirement plan with company match. Other perks include: Discounted employee stock purchase program, subsidized EV charging stations, onsite gym, food and drinks, and other discounts. Eligibility for benefits may vary based on employment status, please check with your recruiter for a comprehensive list of the benefits available for this role. Benefit programs are subject to change at the company's discretion. Base Pay Range (CA Only): $130,000 USD - $198,000 USD What To Expect We're on a mission to unlock the potential of space to improve life on Earth, but that's not an easy task. It takes hard work, determination, relentless innovation, teamwork, grit, and an unwavering commitment to achieving what others often deem impossible. Our people out-think, out-work, and out-pace. We pride ourselves on having each other's backs, checking our egos at the door, and rolling up our sleeves on all tasks big and small. We thrive under pressure, work to tight deadlines, and our focus is always on how we can deliver, rather than dwelling on the challenges that stand in the way. Important Information FOR CANDIDATES SEEKING TO WORK IN US OFFICES ONLY: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), Rocket Lab Employees must be a U.S. citizen, lawful U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum, or be eligible to obtain the required authorizations from the U.S. Department of State and/or the U.S. Department of Commerce, as applicable. Learn more about ITAR here. Rocket Lab provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment at Rocket Lab, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. Applicants requiring a reasonable accommodation for the application/interview process for a job in the United States should contact Giulia Johnson at g.biow@rocketlabusa.com.This dedicated resource is intended solely to assist job seekers with disabilities whose disability prevents them from being able to apply/interview. Only messages left for this purpose will be considered. A response to your request may take up to two business days. FOR CANDIDATES SEEKING TO WORK IN NEW ZEALAND OFFICES ONLY: For security reasons, background checks will be undertaken prior to any employment offers being made to an applicant. These checks will include nationality checks as it is a requirement of this position that you be eligible to access equipment and data regulated by the United States' International Traffic in Arms Regulations. Under these Regulations, you may be ineligible for this role if you do not hold citizenship of Australia, Japan, New Zealand, Switzerland, the European Union, or a country that is part of NATO, or if you hold ineligible dual citizenship or nationality. For more information on these Regulations, click here ITAR Regulations.
Senior Security Engineer Command Post Technologies, Inc. Senior Security Engineer Orlando, FL Description This position is for the NCRC Range Modernization (RM) Senior Security Engineer position providing senior-level development, testing, and security support associated with their designated NCRC product scrum teams. Responsibilities: Vulnerability Management: Implement patching procedures for multiple Operating Systems (Linux, Windows, VMware, Cisco) 2. Run and review vulnerability scans and STIGs 3. Prioritize vulnerability remediation efforts across endpoints, networks, and applications 4. Automate patching process for multiple Operating Systems (Linux/Windows) 5. Responsible for securing and hardening hardware and software systems. Governance, Risk & Compliance: Support tracking, resolution, and milestones for the program's Plan of Action and Milestones (POA&M) items 2. Develop and maintain security policies, procedures, and standards 3. Ensure compliance with relevant standards, directives, and regulations 4. Conduct risk assessments and support audit activities 5. Remain abreast of emerging technologies, cyber threats, and security tools Security Architecture & Engineering Design, implement, and manage security solutions (e.g., SIEM, EDR, firewalls, IDS/IPS, IAM, VPN) 2. Evaluate and integrate new security technologies and tools Advise ISSO and ISSM on issues related to securing and monitoring classified DoD networks Creation and maintenance of data flow and system boundary diagrams Agile/Scrum process Requirements Must be a U.S. citizen and have an active security clearance Bachelor's (BS) degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience) Strong understanding of network protocols, security architecture, and security practices Experience with Linux-based and Windows-based systems Proficient in scripting (e.g., Python, PowerShell, Bash) Experience with automation tools (e.g., Ansible, Terraform, Chef, Puppet) Understanding of CI/CD In-depth knowledge of modern threat landscapes, vulnerabilities, mitigation techniques, and security tools and processes Familiarity with NIST 800-53, NIST 800-171, SOC 2 and/or ISO 27001 Ability to write clear and concise cybersecurity guidance, procedures, and documentation Security+ Certified Preferred Skills and Experience: DoD RMF security practices and regulations Virtualization (preferably VMware) Familiarity with open-source security tools Familiarity with ACAS, Tenable Security Center, and Tenable Nessus About us: We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all CPT's collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results. What's In It for You Great health benefits (for more info contact us directly) Leadership training 401k with generous company matching Employee Stock Ownership Plan (ESOP) Career professional development Tuition reimbursement Flexible hours Work/Life balance Rewards and recognition Paid Time Off Parental Leave Command Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA, with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients' productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event. Command Post Technologies Inc. (CPT) is an Equal Employment Opportunity and Affirmative Action employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We take Affirmative Action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants. An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions. By clicking "Accept All Cookies", you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies Privacy Preference Center When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. More information Allow All Manage Consent Preferences Targeting Cookies Targeting Cookies These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. Strictly Necessary Cookies Always Active These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information. Performance Cookies Performance Cookies These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance. Performance Cookies Clear checkbox label label Apply Cancel Consent Leg.Interest Switch Label label Switch Label label Switch Label label Reject All Confirm My Choices
Reach — qualified candidates
Post your job today and get applications within 24 hours.
Austin Industries is one of the nation's largest, most diversified U.S.-based construction companies. With more than 8,000 employee-owners, Austin Industries provides nearly every type of civil, commercial and industrial construction services through the expertise of our operating companies: Austin Bridge & Road, Austin Commercial and Austin Industrial. Austin Industries has an outstanding opportunity for a Senior Cybersecurity Engineer at our corporate headquarters in Dallas, Texas . Under the direction of the Director of Cybersecurity, the Senior Cybersecurity Engineer is a critical member of the Cybersecurity team, responsible for designing, implementing, improving, and maintaining security controls and solutions that protect the organization's information systems, networks, cloud environments, and data assets. This role serves as a technical authority on cybersecurity engineering and works closely with IT Helpdesk, Operations, Infrastructure, and business teams to reduce cyber risk, improve organizational resiliency, and support regulatory, compliance, and business objectives. The position requires deep technical expertise, strong analytical and troubleshooting capabilities, and a proactive, threat‑driven mindset. The ideal candidate demonstrates exceptional customer service skills and the ability to translate security requirements into scalable, reliable, and operationally effective solutions that align security initiatives with business needs. The role also requires the highest ethical and professional standards, with a strong emphasis on trustworthiness, reliability, and accountability. Responsibilities Security Engineering & Architecture Design, implement, and maintain security controls across on‑premises, cloud, and hybrid environments. Engineer and support security solutions supporting endpoint protection, identity and access management (IAM), network security, data protection, and cloud security. Lead secure architecture reviews for new systems, applications, and infrastructure initiatives to ensure security requirements are integrated by design. Evaluate, select, and implement cybersecurity tooling, including EDR/XDR, SIEM, DLP, CASB, email security, and vulnerability management platforms. Threat Detection & Incident Support Develop, tune, and maintain threat detection mechanisms aligned with threat intelligence and MITRE ATT&CK techniques. Support security incident response activities, including investigation, containment, eradication, remediation, and post‑incident analysis; participate in recurring incident response drills and tabletop exercises. Partner with SOC, IT Operations, and Infrastructure teams to improve detection accuracy, response effectiveness, and mean time to resolution. Vulnerability & Risk Management Lead vulnerability management efforts, including vulnerability scanning, risk‑based prioritization, remediation guidance, and validation of fixes. Perform technical risk assessments and contribute to formal enterprise risk register entries. Assist with threat modeling and security assessments of critical business systems and infrastructure. Cloud & Identity Security Secure cloud platforms (e.g., Microsoft Azure, AWS) using native security capabilities and industry best practices. Implement and manage identity‑centric security controls, including MFA, Conditional Access, and Privileged Access Management (PAM). Administer, support, and advance Zero Trust and passwordless authentication initiatives. Compliance & Governance Support Provide technical expertise in support of cybersecurity frameworks and standards such as CIS, NIST CSF, NIST SP 800‑171, CMMC, and ISO/IEC 27001. Support audits, assessments, and third‑party security questionnaires by providing technical evidence, system documentation, and control explanations. Ensure implemented security controls align with documented policies, standards, and procedures. Collaboration & Leadership Serve as a trusted cybersecurity technical advisor to IT leadership, technology teams, and business stakeholders. Mentor cybersecurity analysts and junior engineers; contribute to technical standards, procedures, and engineering best practices. Develop knowledge base documentation and deliver periodic training to Helpdesk staff to support first‑level cybersecurity troubleshooting and triage. Communicate complex cybersecurity concepts clearly and effectively to both technical and non‑technical audiences. Qualifications Bachelor's degree in Information Technology or Cyber Security from an accredited university desired but not required. Proven experience designing and implementing security controls in enterprise environments. Experience implementing, administering and supporting enterprise Data Loss Prevention (DLP) solutions Experience implementing, administering, and supporting enterprise SIEM/XDR platforms. Experience implementing, administering, and supporting SOAR solutions across security operations environments. Hands‑on experience with scripting and security automation, using tools such as PowerShell, Python, Ansible, Puppet, or agentic AI–driven automation platforms. Experience implementing or supporting compliance initiatives aligned to frameworks such as NIST 800‑171, CMMC, or similar regulatory standards. Experience implementing or supporting cybersecurity controls and frameworks, including CIS Controls, NIST SP 800‑53, and the NIST Cybersecurity Framework (NIST‑CSF). Familiarity with penetration testing methodologies and tooling, including practical experience conducting or supporting offensive security assessments. Strong analytical and problem‑solving skills. Strong investigation and research skills Deep understanding of modern security architectures and Zero Trust principles. Knowledge and understanding of current penetration testing methodologies and techniques Strong knowledge of Windows, Linux, networking fundamentals, and security protocols. Strong analytical and problem‑solving skills. Ability to prioritize work based on risk and business impact. High attention to detail. Excellent written and verbal communication skills. Ability to work independently while collaborating across teams. Requirements Minimum 5 years of hands‑on experience in a Cybersecurity Engineering role Deep expertise in at least three of the following security domains: Endpoint security Identity and Access Management (IAM) Cloud security Data Loss Prevention (DLP) Network security Vulnerability management. Eligible candidates must possess one or more of the following valid certifications: ISC2 CISSP GIAC Security Professional (GSP) Microsoft Certified: Cybersecurity Architect Expert Advanced proficiency with Microsoft security platforms, including Entra ID, Conditional Access, Microsoft Defender, Intune, and Purview. Advanced experience managing and supporting enterprise Next‑Gen cloud security solutions, such as Palo Alto Prisma and Zscaler. This role may occasionally be required to travel to remote job sites and office locations on an as-needed basis. Additionally, occasionally travel may be required to attend industry-related conferences and training. Applicants must be legally authorized to work for ANY employer in the United States. Austin Industries is unable to sponsor or take over sponsorship of an employment visa for this position. Benefits & Compensation We offer excellent benefits including medical, dental, life and disability insurance, and a matching 401K plan. We are proud to be a 100% Employee-Owned Company (ESOP)! To learn more about our employee-ownership structure, please go to https://www.austin-ind.com/our-company/100-employee-owned. Austin Industries is an Equal Opportunity Employer. See the "Know Your Rights" poster available in English and Spanish. About Austin Industries Austin Industries and its operating companies engage in almost every type of civil, commercial and industrial construction. Austin is owned entirely by its employees through its Employee Stock Ownership Plan (ESOP). Austin Industries has a rich history. We are one of the largest and most diversified construction firms in the nation. Austin stands on the core values of Uncompromising Integrity, Employee-ownership, Exemplary Service and Excellence in Safety. To learn more about our history, culture and operations, visit us at www.austin-ind.com. No Third-Party Inquiries Please This Company does not accept and will not consider unsolicited resumes or any other unsolicited candidate information submitted to the Company or any of its employee-owners by staffing agencies, search firms, or third-party recruiters in response to a posted vacancy. The Company will not pay any placement fee(s) without a written agreement to do so ( i.e. , payment must be required pursuant to the terms of a written agreement). Any unsolicited resumes or candidate information submitted to this Company or any of its employee-owners becomes the property of the Company. Accessibility Note If you are a job seeker with a disability and require a reasonable accommodation to apply for one of our jobs or have accessibility concerns, please contact the People Services Team at (877) 831-1217.
C1 is the first AI-native identity security platform that protects every identity: human, non-human, and AI. With powerful automation, platform-level AI, and out-of-the-box connectors, it centralizes access visibility, enforces fine-grained controls, enables just-in-time access, and automates user access reviews across all apps. It's easy to use, quick to deploy, and trusted by enterprises like DigitalOcean, Instacart, Ramp, and Zscaler. The Role We're hiring a Senior Security Engineer to join a small, early-stage security team with a broad remit - spanning security engineering, application and cloud security, and compliance. This is a generalist role: you'll have the opportunity to go deep in one domain over time while staying hands-on and supportive across others. Our stack is primarily Go and AWS. Little of this job is manual. Instead of hand-reviewing every ticket, spec, or deploy, you'll spend your time building the purpose-built agents and skills that do that work continuously, and using them to orchestrate security into the development lifecycle through a risk-based approach. Our goal is to bake security into design specs up front, not catch it in post-deploy review. You don't just want to hand engineering teams a list of findings - you want to roll up your sleeves and help implement the fix. You care about solving problems systemically, not just patching individual instances, and you want your work to make it easier for everyone at the company to build securely by default. What You'll Do Define and drive security standards and secure-by-default solutions, serving as a subject matter expert for application and/or cloud security. Build purpose-built agents and skills that orchestrate security into the development lifecycle through a risk-based approach, automating the manual, repetitive work (triage, enrichment, review) so the team can focus on judgment calls, not queues. Shift security left by baking risk-based review into design specs and architecture decisions, rather than relying on post-deploy audits to catch issues. Build security tooling and automation that scales security practices across engineering, and help implement meaningful, actionable security observability and detection signals. Lead threat modeling and risk assessment for high-risk features and platform changes. Assess and help mitigate security risks introduced by agentic development practices and AI-powered product features running in production. Partner with engineering teams to prioritize and remediate critical threats, help define API security standards, and conduct security code reviews. Continuously explore and adopt open-source tools to assess the security of and test our services, rather than defaulting to manual review. Identify systemic security risks and lead multi-team remediation efforts end-to-end, not just the initial recommendation. Partner across security, compliance, and engineering on cross-domain problems — be a go-to point of contact when a hard security question needs clarity. Contribute to compliance and trust initiatives (e.g., SOC 2, ISO 27001/42001) as they intersect with your area of focus. Invest in the growth of teammates and in raising the security bar across the broader engineering org. What We're Looking For Proven experience securing enterprise SaaS applications, including authentication flows, authorization patterns, and input validation at API boundaries. Demonstrated experience securing deployment and change-management mechanisms for software and infrastructure. Background in Software Engineering, Platform Engineering, Systems Engineering, Network Engineering, Cloud Security, or Application Security. Hands-on code review experience, ideally in Go, Python, or Rust. Experience with AWS (or another major cloud provider) and comfort working across cloud infrastructure. Comfortable working both independently and collaboratively in a fast-paced, high-growth environment. Curious and current on modern security practices, tooling, and emerging threats, including how AI is changing the threat landscape. Someone to participate quarterly in-person in one of our primary offices San Francisco, or Portland Oregon. Show Us Your Agent Work This role expects real, hands-on experience building agents and automation for security, so we ask candidates to show it rather than just claim it. As part of the process, be ready to share one or more of the following: A project, demo, or repo where you built an agent, skill, or automation that replaced manual security work (triage, review, detection, etc.). Examples of how you use AI coding tools or agentic workflows in your day-to-day work. A short walkthrough - live or recorded - of a security automation you shipped, including the problem, your approach, and the impact. We care about practical results and good judgment in where (and where not) to apply automation, not just familiarity with the latest tools. Nice to Have Experience with Kubernetes, service mesh, or PKI/network technologies (Consul, Envoy, Cilium, Vault, Istio, etc.). Experience building or extending internal security tooling, automations, or agents. Prior experience at a high-growth SaaS or identity/access management company. Why This Role This is a high-leverage role on a small, early-stage security team: your scope will be broad, your ownership will be real, and the systems you build will shape how a security-first company secures its own products and development lifecycle. You'll have the chance to specialize in the domain you care most about while still touching the full breadth of the security program. Compensation & Benefits C1 offers a competitive salary, meaningful equity, and comprehensive health benefits. Specific compensation will be commensurate with experience. ConductorOne, Inc. is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law. Compensation Range: $100K - $200K
Description Job Title: Cyber Security Analyst Place of Performance: Fort Belvoir, VA Mandatory Requirements: TS/SCI Clearance Experience Level: Mid-Sr Level (5+ years) About JFL Consulting: With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community's most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer's unique requirements. Visit www.jflconsulting.com What We Offer Salary: $145k- $165k 100% employer-paid medical, dental, and vision premiums for employees and dependents Flexible Spending Accounts (healthcare, dependent care, and commuter) Life insurance, short-term disability and long-term disability 401(k) with immediate vesting of company contribution Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays) We support your growth through certification reimbursement, dedicated professional development funding, and company-provided access to online learning platforms Job Overview: JFL Consulting is currently seeking a talented and motivated Cyber Security Analyst (Operator) to join our team. The successful candidate will be part of a team of network, system, and security engineers tasked with analyzing operational network traffic for vulnerabilities, coordinating and remediating found anomalies, and developing new dashboard views to support operations. If you are passionate about cybersecurity and interpreting and analyzing network traffic, have the requisite skills and qualifications, and are looking for an opportunity to grow within a dynamic organization, this position may be for you. Required Skills And Qualifications Strong experience with security monitoring, threat hunting, packet analysis, malware analysis, and signature development. Experience conducting Info Operations, Computer Network Defense/Exploitation operations. Experience with Linux environments (Red Hat, CentOS, Ubuntu). Experience with installing, configuring, and administering software applications. Working knowledge of network sensors and analytics tools (Zeek, Suricata, SecurityOnion, etc.) Working knowledge of network SIEM technology (Elastic, Splunk, etc.) Working knowledge of computer network vulnerability scanning and compliance analysis. Some experience with scripting and programming languages (Perl, Python, C, etc.). Some experience with firewalls and network TAP technologies. Familiarity with configuring, managing, and maintaining networking equipment. Familiarity with DoD's IT system and network certification and accreditation processes to include system security authorization agreements. Possess strong troubleshooting skills in problems with software and hardware. Strong communication and analytical skills. Self-starter and problem solver with respect to IT and cyber related issues. Possess the knowledge, skills, and ability to perform the advanced cyber analytical analysis. Strong understanding of computer networking. Duties To Include But Not Limited To Conduct advanced cyber analysis and formal reporting. Liaise between customers, external stakeholders, assessment site POCs, and technical SMEs. Provide technical insights and recommendations to the customer. Collaborate with DoD leadership, customers, and authoritative subject matter expert. Provide recommendations on appropriate find and fix actions Requirements Required Education and Experience: Preferred to have a Bachelor's or Master's degree in a technical field such as computer science or engineering. In lieu of a degree, direct related operational experience may be substituted. Cyber Defense Analysts must hold an IAT Level II and CSSP Auditor certification as defined and described in DoDD 8570.01, 8570.01-M, 8140.01-03 and as amended. JFL Consulting, LLC is an Equal Opportunity Employer. We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.
Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. About The Team The Security Incident Response team works to analyze, investigate, and respond to threats before they impact Stripe's business or users. From external attacks to insider threats, our goal is to respond with speed and precision, remediate, and support the incident postmortem process. The team is distributed, working across North America, Europe, and Asia, and will regularly coordinate with stakeholders in different time zones. What you'll do You will be leveraging your security incident response experience to analyze and respond to security notifications, events, and inquiries. You will be performing initial triage of potential security incidents through log and data analysis to determine whether or not activity is a substantiated or valid threat, assessing severity and potential impact, taking pre-approved remediation measures to contain a threat, and escalating findings to investigators for further review and analysis. You will use your knowledge of cyber threats and the results of your analysis to coordinate with partner teams to improve threat detection through tuning and creation of new use cases, to improve capabilities through enriching existing data and creation of new data feeds, and to improve triage accuracy, consistency and timeliness through automation. This role plays a critical part in threat detection and response, ultimately reducing the likelihood of security breaches and protecting sensitive company information. Responsibilities Analyze and investigate activity on company devices and cloud infrastructure that could represent a security threat Work cross-functionally with the Security teams to develop solutions for analyzing security events at scale and protecting Stripe networks, systems, and data Interpret disparate data sources to report on trends and support investigative requests Collect requirements for enhancements to detection models and response systems Leverage existing systems and data to perform analyses and promote process improvements Provide actionable insights to help identify, prevent, detect, and respond to anomalous or potentially malicious user activity Collaborate effectively with teammates, lead projects, mentor others, and develop and champion quality operational standards across the team Who you are We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. Minimum Requirements 5+ years experience in information technology or cyber security roles including incident response 2+ years experience analyzing large data sets to solve problems and/or manage projects related to security event triage and/or workplace investigations Prior experience investigating and triaging security threats on endpoint devices including Mac, Linux, and Windows, as well as cloud infrastructure across AWS, Azure, and GCP. B.S. or M.S. in Cyber Security and Information Assurance, Data Analytics, Computer Science or related field, or equivalent experience Working knowledge of SQL Basic knowledge of scripting or programming in Python, Go, or other programming languages Proven experience with log querying and analysis (e.g. first or third party applications, system / data access, event logs), digital forensics, or incident response using one or more industry standard SIEM Platforms (Splunk, Sentinel, Chronicle, Elastic, etc.) Proficiency using analytical methods to inform detection systems or guide strategic response Strong cross-functional collaboration and written/verbal communication skills Ability to think creatively and holistically about identifying and reducing risk in a complex environment High level of judgment, objectivity, and discretion Preferred Qualifications Prior experience working with high volume data in a security incident response environment Experience with data processing and analysis tools (e.g. Jupyter Notebooks, Databricks) An adversarial mindset, understanding the goals, behaviors, and TTPs of threat actors Ability to leverage threat intelligence and/or hunting concepts in an enterprise environment Experience in one or more of the following areas: user and entity behavior analytics (UEBA), SOAR/security automation, security information event management (SIEM), data loss prevention (DLP), Information Security, or Data Privacy One or more security certifications through a recognized industry provider: GIAC, ISACA, ISC2, OffSec, CompTIA, etc. Hybrid work at Stripe This role is available either in an office or a remote location (35+ miles or 56+ km from a Stripe office). In-office expectations Office-assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams. Working remotely at Stripe A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live. Pay and benefits The annual US base salary range for this role is $121,000 - $181,600. For sales roles, the range provided is the role's On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate's experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process. Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends. We look forward to hearing from you. At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us. Apply now Please find our California applicant personal information notice here. The application window will remain open for 100 days after the Job Post is published. However, this opportunity will remain open based on the needs of the business, which may cause the application window to close before or after the 100-day mark.
At Motiva, our employees' energy, passion, and dedication to excellence are what make us who we are and what allows us to generate energy that makes a house a home, gets us from point A to point B, and enables our health and wellbeing. We invest in every aspect of our employees' lives because, at Motiva, our people matter. Headquartered in Houston, Texas, Motiva refines, distributes and markets petroleum products throughout the Americas. The company's Port Arthur Manufacturing Complex in Port Arthur, TX, is comprised of North America's largest refinery with a total throughput of 720,000 barrels per day, the world's second largest base oil plant, and an integrated chemical plant. Under exclusive long-term brand licenses with Shell and Phillips 66 (for the 76® brand), Motiva's commercial operations supply more than 12 billion gallons of fuel to customers annually. Motiva is wholly owned by Aramco, one of the world's largest integrated energy and chemicals companies. Position Overview: We are seeking a highly skilled and motivated Sr. Cybersecurity Analyst - Detection & Response to join our Cybersecurity Operations team. Reporting directly to the Cybersecurity Operations Manager, this role is responsible for helping safeguard the organization's information assets and supporting the continued advancement of our Cybersecurity Framework. In this role, you will contribute to the enhancement of the cybersecurity program through security monitoring, incident detection and response, vulnerability management, threat intelligence, and the deployment and optimization of security technologies. The Sr. Cybersecurity Analyst will play a key role in identifying, analyzing, and responding to cyber threats while helping strengthen the organization's overall security posture. Success in this role requires the ability to thrive in a fast-paced, evolving environment and effectively align cybersecurity practices with business objectives. The ideal candidate brings strong technical expertise, analytical thinking, and communication skills, along with the ability to collaborate across teams, influence stakeholders, and drive meaningful security improvements throughout the organization. The successful candidate will work closely with cross-functional teams and business stakeholders to support enterprise cybersecurity initiatives and help advance the organization's security capabilities . This position is based at Motiva's corporate headquarters in Downtown Houston, Texas, and is an in-office role . Responsibilities: Assist in development of strategy, goals, and objectives for the cyber security program. Drive program towards maturity. (Repeatable processes, metrics etc.) Respond and investigate cybersecurity events and incidents. Analyzes log information to correlate security events. Detect, analyze, and track the remediation of security vulnerabilities. Research emerging threats and implement or lead the implementation of preventive controls. Support, maintain and enhance protection and detection security technologies. Assist in development of security metrics and provides technical analysis that gives insight into performance and trends Is On-Call as needed Resolves problems that are of a clearly defined nature and easily identifiable as to the best method of resolution Tasks to be performed are at the most basic level of professional individual contribution May provide basic advice and guidance to lower level business support workers within the scope of a project they are also assigned to Other duties as assigned Reads and abides by the company's code of conduct, ethics statements, employee handbook(s), policies and procedures and other corporate mandates, including participation in mandatory training programs Reports any real or suspected violation of the corporate compliance program, company policies and procedures, harassment, or other prohibited activities in accordance with the reporting policies of the company Obtains clarification of policy whenever necessary and may use the resources available through the Compliance, Human Resources or Legal Department to do so Support and abide by the values of the company Experience and Qualifications: Required Education and Experience: Associate's degree, bachelor's degree, or an equivalent combination of education, and relevant work experience. Relevant professional experience may be substituted for the education requirement on a year-for-year basis. Minimum of 5 years of experience in cybersecurity operations, threat detection, incident response, security monitoring, or a related cybersecurity discipline. Experience monitoring enterprise IT environments and investigating security events, alerts, and incidents. Knowledge of security operations, incident response processes, threat intelligence, and security monitoring technologies. Familiarity with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and CIS Controls. Understanding of applicable cybersecurity, privacy, and regulatory requirements, including GDPR, HIPAA, and other relevant industry standards. Strong analytical and critical thinking skills with the ability to identify, investigate, and respond to suspicious or anomalous activity. Ability to interpret complex datasets and correlate information from multiple sources to support threat detection and incident investigations. Strong written and verbal communication skills, with the ability to effectively communicate technical concepts to both technical and non-technical audiences. Experience with data analysis, reporting, dashboard development, and security metrics. Strong technical documentation, reporting, and incident tracking capabilities. Ability to independently manage assigned security initiatives, priorities, and projects in a fast-paced environment. Proficiency with Microsoft Office applications, including Excel, Word, and PowerPoint. Strong collaborative instincts and experience working cross‑functionally with IT, risk, and business teams. Preferred Education and Experience: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field. Relevant cybersecurity certifications such as CompTIA Security+, CompTIA PenTest+, GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), Certified in Cyber (ISC2 CC), CySA+, GCIA, GCIH, or similar industry-recognized credentials. Experience reviewing, tuning, developing, and optimizing security detections to reduce false positives and improve threat visibility. Working knowledge of SOC operations, SIEM platforms, and security process automation. Ability to script using Python and/or PowerShell. Experience leveraging APIs and scripting for system integration and automation. Familiarity with incident response methodologies, cyber kill chain concepts, and the MITRE ATT&CK Framework. Desired Skills and Experience At least 5 years of experience in cybersecurity operations, incident response, threat detection, security monitoring, or a related discipline Experience monitoring enterprise IT environments Experience investigating security alerts, events, and incidents Ability to analyze logs and correlate data from multiple sources Experience identifying, analyzing, and tracking vulnerabilities through remediation Experience managing security initiatives in a fast-paced environment Availability to participate in an on-call rotation as needed Security Operations Center, or SOC, operations Security Information and Event Management, or SIEM Incident detection and response Security event and log analysis Threat intelligence and threat research Vulnerability management Security monitoring technologies Detection engineering and optimization Security metrics, dashboards, and reporting Incident tracking and technical documentation NIST Cybersecurity Framework CIS Controls Data analysis and event correlation Microsoft Excel, Word, and PowerPoint Analytical and critical thinking Clear technical and non-technical communication Cross-functional collaboration Stakeholder influence Independent project management Prioritization Technical writing and documentation Ability to connect cybersecurity practices with business objectives
Job Description We are Lennar Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States. Join a Company that Empowers You to Build Your Future We are seeking a highly skilled and experienced Senior SOC Analyst to join our cybersecurity team. This role is critical in leading advanced incident response efforts, managing escalations from cross functional teams and working closely with our MDR partner to ensure rapid detection, containment, and remediation of security threats. The ideal candidate will have deep technical expertise, strong analytical skills, and a proactive mindset toward incident response and continuous improvement. A career built on defending digital infrastructure. A career focused on proactive threat detection and response. A career that protects critical assets and enables secure business operations. Your Responsibilities On The Team Incident Response & Threat Management Lead investigations of complex, high severity security incidents from detection through containment, remediation, and recovery, coordinating across internal teams and the MDR partner. Act as the primary escalation point for Tier 3 alerts and incidents and perform root cause analysis with actionable remediation plans. Serve as the primary liaison to the MDR provider: validate and triage MDR alerts, ensure alignment on response protocols and escalation procedures, and provide tuning recommendations to improve detection fidelity. Develop and maintain incident response playbooks, runbooks, and workflows. Analyze threat actor tactics, techniques, and procedures (TTPs) and translate findings into improved defenses and detection content. Threat Hunting Conduct proactive, hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry, leveraging threat intelligence and the MITRE ATT&CK framework to surface threats that evade automated detection. Operationalize hunt findings into durable detection logic and response procedures. Automation & Process Improvement Identify recurring, manual, or manual heavy SOC processes and design automation to reduce analyst effort and accelerate response. Build, test, and maintain automated playbooks and response workflows in a SOAR platform (e.g., Torq, Microsoft Sentinel Automation Rules and Logic Apps) for enrichment, triage, containment, and case management. Develop, tune, and operationalize detection and correlation rules through automated validation and deployment. Measure the impact of automation against SOC performance metrics (MTTD, MTTR, alert volume, false-positive rate) and iterate based on results. Partner with Detection Engineering and Security Engineering to integrate tooling, close telemetry gaps, and standardize repeatable response. Security Monitoring & Analysis Monitor and analyze logs and alerts across SIEM, EDR, identity, and cloud platforms. Correlate data across multiple sources to identify patterns, anomalies, and emerging threats. Maintain situational awareness of the external threat landscape and internal security posture. Mentorship & Reporting Mentor Tier 1 and Tier 2 analysts, lead knowledge-sharing, and uplevel team investigative tradecraft and tooling proficiency. Document incident timelines, findings, and lessons learned. Track, analyze, and drive improvement of core SOC performance metrics (MTTD, MTTR, detection coverage, false-positive rate), and use them to prioritize tuning and automation efforts. Generate executive-level and technical reports on SOC performance and incidents, and support compliance and audit efforts through accurate record-keeping and evidence handling. Requirements Minimum 5-7 years of experience in a cybersecurity operations role, with at least 3 years in a Tier 2/Tier 3 SOC or escalation capacity. CompTIA Security+ or equivalent. Proven experience leading incident response triage, investigation, and remediation, including working directly with MDR partners. In-depth knowledge of security tools and technologies, including SIEM/SOAR platforms (e.g., Microsoft Sentinel), endpoint detection and response solutions (e.g., Microsoft Defender XDR, Palo Alto Cortex XDR), and ticketing systems (e.g., ServiceNow). Demonstrated ability to author and tune detection content (e.g., KQL in Sentinel/Defender) and operationalize it into production. Experience analyzing cloud security telemetry (e.g., Azure/Entra sign-in logs, AWS CloudTrail). Hands-on experience building or maintaining automated playbooks and response workflows in a SOAR platform. Strong understanding of network security concepts, operating systems, and malware analysis techniques. Familiarity with the MITRE ATT&CK framework and threat intelligence platforms. Excellent analytical, problem-solving, and communication skills, with the ability to work under pressure and manage multiple priorities. Preferred Certifications such as CISSP, GCIA, GCIH, GCFA, CySA+, eJPT/PJPT, CEH, SC-200. Scripting and automation skills (Python, PowerShell) for tooling, enrichment, and analysis. Experience supporting an EDR platform migration (e.g., Cortex XDR to Microsoft Defender XDR). Experience with or strong interest in AI-assisted triage and agentic SOC tooling to augment analyst workflows. Broader cloud security experience across AWS, Azure, and OCI. Experience with Microsoft Sentinel, Proofpoint, and Palo Alto Cortex XDR. Work Environment Mandatory 4-days onsite; 1-days remote. On-call rotation may be required for critical incident response. Collaborative team environment with opportunities for growth and specialization. This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Life at Lennar At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone's Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar's policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits. Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn for the latest job opportunities. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Apply
Since opening our first self-storage facility in 1972, Public Storage has grown to become the largest owner and operator of self-storage facilities in the world. With thousands of locations across the U.S. and Europe, and more than 170 million net rentable square feet of real estate, we're also one of the largest landlords. We've been recognized as A Great Place to Work by the Great Place to Work Institute. And, our employees have also voted us as having Best Career Growth , ranked us in the Top 5% for Work Culture , and in the Top 10% for Diversity and Inclusion . We're a member of the S&P 500 and FT Global 500 . Our common and preferred stocks trade on the New York Stock Exchange. Public Storage is the nation's leading self-storage provider, recognized for its iconic orange doors and commitment to delivering simple, reliable solutions to millions of customers across the country. We are expanding our creative team to enhance our consistent and engaging visual brand presence. Job Description Position Summary We are seeking a motivated Cybersecurity Analyst to support the organization's security operations, threat monitoring, incident response, and vulnerability management activities. The successful candidate will help protect systems, applications, and sensitive information by investigating alerts, identifying risks, documenting findings, and supporting practical security improvements across the environment. Key Responsibilities Monitor and investigate security alerts from SIEM, endpoint detection and response, email security, identity, network, and cloud security platforms. Perform initial triage of suspected security incidents, collect relevant evidence, document findings, and escalate events according to established procedures. Assist with incident response activities, including containment, eradication, recovery, and post-incident documentation. Review system, network, application, authentication, and security-tool logs to identify suspicious behavior or indicators of compromise. Support vulnerability scanning, risk validation, remediation tracking, and coordination with infrastructure and application teams. Investigate phishing messages, suspicious domains, URLs, attachments, and account activity. Assist with identity and access management activities, including access reviews, account validation, and policy compliance. Support security audits and compliance activities by collecting evidence and maintaining accurate records. Maintain security procedures, investigation notes, metrics, knowledge articles, and operational documentation. Participate in security awareness activities and stay informed about emerging threats, vulnerabilities, and defensive techniques. Required Qualifications Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience. 2+ years of experience in cybersecurity, IT support, system administration, network operations, or a related technical role. Foundational understanding of networking, Windows operating systems, authentication, access control, and common security principles. Familiarity with Microsoft 365, Active Directory or Entra ID, endpoint security, and cloud environments. Knowledge of common cybersecurity threats, attack techniques, vulnerabilities, and mitigation strategies. Ability to analyze technical information, document findings clearly, manage priorities, and escalate issues appropriately. Strong written and verbal communication skills with a customer-service mindset. Preferred Qualifications Experience with cybersecurity tools supporting endpoint protection, threat detection, security monitoring, identity management, vulnerability management, and incident response. Experience reviewing security logs, investigating phishing, or supporting vulnerability management and incident response workflows. Entry-level or associate cybersecurity certification, such as CompTIA Security+, CompTIA CySA+ Success Measures Timely and accurate triage, documentation, and escalation of security alerts and incidents. Consistent progress toward vulnerability remediation and closure of assigned security tasks. Complete and audit-ready investigation records, evidence, and operational documentation. Adherence to security policies, response procedures, service-level expectations, and escalation requirements. Positive collaboration with IT, business, compliance, and security stakeholders. Career Growth This position provides an opportunity to build hands-on experience across security operations, incident response, vulnerability management, cloud security, identity security, and compliance. Successful performance can support progression into senior analyst, security engineering, threat detection, incident response, or security operations roles. Qualifications Bachelor's degree in information security, Information Technology, Computer Science, or related field, or equivalent combination of education and experience. 2+ years of experience in cybersecurity, information security, vulnerability management, systems administration, or related IT roles. Hands-on experience with vulnerability scanning, vulnerability validation, remediation tracking, or patch management processes. Experience with vulnerability management tools similar. Working knowledge of CVSS, CISA KEV, vulnerability exploitation concepts, patch management, system hardening, and remediation prioritization. Working knowledge of Windows, Linux, Active Directory / Entra ID, TCP/IP, DNS, VPNs, endpoints, firewalls, and cloud security fundamentals. Preferred Qualifications Professional certifications such as Security+, CySA+, CISSP Associate, GIAC, CEH, Microsoft Security, cloud security, or vulnerability assessment certifications. Experience supporting PCI DSS, SOX, NIST Cybersecurity Framework, CIS Controls, ISO 27001, or similar compliance requirements. Experience using ticketing workflows, SIEM, endpoint protection, or reporting platforms. Experience with PowerShell, Python, Bash, REST APIs, or automation for reporting and security operations. Familiarity with cloud platforms such as Azure, GCP, or AWS. Additional Information Workplace One of our values pillars is to work as One Team and we believe that there is no replacement for in-person collaboration but understand the value of some flexibility. Public Storage teammates are expected to work in the office five days each week with the option to take up to three flexible remote days per month. Public Storage is an equal opportunity employer and embraces diversity. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other protected status. All qualified candidates are encouraged to apply. Sponsorship for Work Authorization is not available for this posting. Candidates must be authorized to work in the U.S. without restrictions or requiring sponsorship now or in the future. We do not provide training plans or support for F-1 OPT, STEM OPT extensions, or future visa sponsorship.