Writing.io Jobs

Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.

1 What roles are you open to?

2 Experience level

3 Work style

Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.

Security Coinbase: Regional Threat Assessment Manager

Lead threat assessment and case management for a region, conducting behavioral threat evaluations and coordinating security response across organizational stakeholders.

Senior Remote Posted about 12 hours ago We Work Remotely — Programming
What this role involves

Headquarters: Remote - Australia

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

We're hiring a Regional Threat Assessment Manager to join the Protective Intelligence program within Coinbase's Security organization. This team protects Coinbase employees, executives, facilities, and operations by identifying, assessing, and mitigating threats through intelligence-led case management and structured behavioral assessment. You'll serve as the regional lead and subject matter expert for Threat Assessment and Management, owning complex and sensitive threat cases end-to-end while partnering with GSOC, Executive Protection, Legal, HR/ER, Insider Threat, and other stakeholders to drive coordinated response and help mature the program's regional capabilities.

What you'll do:

  • Own end-to-end threat case management for your region, from intake, triage, and behavioral assessment through mitigation planning, documentation, and closure for threats impacting employees, executives, facilities, and other Coinbase assets.
  • Lead structured behavioral threat assessments using Coinbase methodologies and accepted frameworks (e.g., JACA, WAVR-21, CTAP-25) to evaluate motivation, capability, escalation indicators, and stabilizers, then translate findings into clear operational recommendations.
  • Drive intelligence-led incident response by serving as the intelligence lead during active incidents, coordinating with GSOC, ensuring timely escalation, and delivering decision support through resolution.
  • Partner cross-functionally with Executive Protection, GSOC, Legal, HR/ER, Insider Threat, and Communications to coordinate response actions, align mitigations, and manage reporting obligations.
  • Produce decision-ready briefings, written assessments, and executive updates that communicate threat posture, risk rationale, and recommended next steps to security leadership and cross-functional partners.
  • Strengthen regional program maturity by improving intake standards, QA/QC, playbooks, metrics, training, and handoff processes, and by mentoring peers through expertise and influence.

Required Skills and Experience:

  • 7+ years of progressively responsible experience in threat assessment and management, protective intelligence, workplace violence prevention, behavioral threat assessment, or closely related security functions.
  • Demonstrated track record operating as a senior individual contributor and regional SME, independently owning ambiguous, high-consequence casework with limited oversight while influencing outcomes across teams without direct authority.
  • Proven ability to conduct threat investigations and translate fragmented information into clear assessments, prioritized risks, and practical mitigation plans using structured professional judgment frameworks.
  • Proficiency with case management and intelligence tools (e.g., Ontic, OSINT platforms, public records research, social media monitoring) with a track record of improving processes and tooling to increase signal quality.
  • Experience coordinating with law enforcement, managing investigative referrals, and navigating workplace violence reporting obligations across jurisdictions.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):$200,900—$200,900 AUD
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

To apply: https://weworkremotely.com/remote-jobs/coinbase-regional-threat-assessment-manager

Read the full description
Security Coinbase: Regional Threat Assessment Manager

Manages threat assessment cases for employees and facilities, conducts behavioral threat analysis, and coordinates security incident response across regional operations.

Senior Remote Posted about 12 hours ago We Work Remotely — Programming
What this role involves

Headquarters: Remote - EMEA

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

We're hiring a Regional Threat Assessment Manager to join the Protective Intelligence program within Coinbase's Security organization. This team protects Coinbase employees, executives, facilities, and operations by identifying, assessing, and mitigating threats through intelligence-led case management and structured behavioral assessment. You'll serve as the regional lead and subject matter expert for Threat Assessment and Management, owning complex and sensitive threat cases end-to-end while partnering with GSOC, Executive Protection, Legal, HR/ER, Insider Threat, and other stakeholders to drive coordinated response and help mature the program's regional capabilities.

What you'll do:

  • Own end-to-end threat case management for your region, from intake, triage, and behavioral assessment through mitigation planning, documentation, and closure for threats impacting employees, executives, facilities, and other Coinbase assets.
  • Lead structured behavioral threat assessments using Coinbase methodologies and accepted frameworks (e.g., JACA, WAVR-21, CTAP-25) to evaluate motivation, capability, escalation indicators, and stabilizers, then translate findings into clear operational recommendations.
  • Drive intelligence-led incident response by serving as the intelligence lead during active incidents, coordinating with GSOC, ensuring timely escalation, and delivering decision support through resolution.
  • Partner cross-functionally with Executive Protection, GSOC, Legal, HR/ER, Insider Threat, and Communications to coordinate response actions, align mitigations, and manage reporting obligations.
  • Produce decision-ready briefings, written assessments, and executive updates that communicate threat posture, risk rationale, and recommended next steps to security leadership and cross-functional partners.
  • Strengthen regional program maturity by improving intake standards, QA/QC, playbooks, metrics, training, and handoff processes, and by mentoring peers through expertise and influence.

Required Skills and Experience:

  • 7+ years of progressively responsible experience in threat assessment and management, protective intelligence, workplace violence prevention, behavioral threat assessment, or closely related security functions.
  • Demonstrated track record operating as a senior individual contributor and regional SME, independently owning ambiguous, high-consequence casework with limited oversight while influencing outcomes across teams without direct authority.
  • Proven ability to conduct threat investigations and translate fragmented information into clear assessments, prioritized risks, and practical mitigation plans using structured professional judgment frameworks.
  • Proficiency with case management and intelligence tools (e.g., Ontic, OSINT platforms, public records research, social media monitoring) with a track record of improving processes and tooling to increase signal quality.
  • Experience coordinating with law enforcement, managing investigative referrals, and navigating workplace violence reporting obligations across jurisdictions.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):£95,490—£106,100 GBP
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

To apply: https://weworkremotely.com/remote-jobs/coinbase-regional-threat-assessment-manager-1

Read the full description
Security Coinbase: Regional Threat Assessment Manager

Manages threat assessment cases end-to-end, conducts behavioral threat assessments, coordinates incident response, and partners cross-functionally to mitigate security risks to employees, executives, and facilities.

Senior Remote Posted about 12 hours ago We Work Remotely — Programming
What this role involves

Headquarters: Remote - Singapore

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

We're hiring a Regional Threat Assessment Manager to join the Protective Intelligence program within Coinbase's Security organization. This team protects Coinbase employees, executives, facilities, and operations by identifying, assessing, and mitigating threats through intelligence-led case management and structured behavioral assessment. You'll serve as the regional lead and subject matter expert for Threat Assessment and Management, owning complex and sensitive threat cases end-to-end while partnering with GSOC, Executive Protection, Legal, HR/ER, Insider Threat, and other stakeholders to drive coordinated response and help mature the program's regional capabilities.

What you'll do:

  • Own end-to-end threat case management for your region, from intake, triage, and behavioral assessment through mitigation planning, documentation, and closure for threats impacting employees, executives, facilities, and other Coinbase assets.
  • Lead structured behavioral threat assessments using Coinbase methodologies and accepted frameworks (e.g., JACA, WAVR-21, CTAP-25) to evaluate motivation, capability, escalation indicators, and stabilizers, then translate findings into clear operational recommendations.
  • Drive intelligence-led incident response by serving as the intelligence lead during active incidents, coordinating with GSOC, ensuring timely escalation, and delivering decision support through resolution.
  • Partner cross-functionally with Executive Protection, GSOC, Legal, HR/ER, Insider Threat, and Communications to coordinate response actions, align mitigations, and manage reporting obligations.
  • Produce decision-ready briefings, written assessments, and executive updates that communicate threat posture, risk rationale, and recommended next steps to security leadership and cross-functional partners.
  • Strengthen regional program maturity by improving intake standards, QA/QC, playbooks, metrics, training, and handoff processes, and by mentoring peers through expertise and influence.

Required Skills and Experience:

  • 7+ years of progressively responsible experience in threat assessment and management, protective intelligence, workplace violence prevention, behavioral threat assessment, or closely related security functions.
  • Demonstrated track record operating as a senior individual contributor and regional SME, independently owning ambiguous, high-consequence casework with limited oversight while influencing outcomes across teams without direct authority.
  • Proven ability to conduct threat investigations and translate fragmented information into clear assessments, prioritized risks, and practical mitigation plans using structured professional judgment frameworks.
  • Proficiency with case management and intelligence tools (e.g., Ontic, OSINT platforms, public records research, social media monitoring) with a track record of improving processes and tooling to increase signal quality.
  • Experience coordinating with law enforcement, managing investigative referrals, and navigating workplace violence reporting obligations across jurisdictions.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):$212,200—$212,200 SGD
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

To apply: https://weworkremotely.com/remote-jobs/coinbase-regional-threat-assessment-manager-2

Read the full description
Security Stripe: Risk Strategist - Screening (Financial Crimes)

Develops and manages global financial crimes screening programs, setting standards for AML/sanctions controls and driving risk management strategy across Stripe's payment infrastructure.

Senior Remote Posted about 12 hours ago We Work Remotely — Programming
What this role involves

Headquarters: US-Chicago; US-Atlanta; US-Remote; Canada-Toronto; Canada-Remote

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

The Financial Crimes Risk Strategy team owns our first-line AML and sanctions programs globally. We own the end-to-end lifecycle of financial crime controls. We set the global standards that govern how risk is managed across our programs, design and drive the development of controls, infrastructure, and tooling with Engineering, Product, and Data Science, and maintain their effectiveness as our products and the regulatory landscape evolve. We build fast, with data, and with AI integrated into how financial crime risk is detected, managed, and monitored across everything Stripe builds.

What you'll do

As a Risk Strategist on the Financial Crimes Risk Strategy team, you'll own our global screening programs — spanning sanctions, PEP, and negative news — setting the standards that govern how screening risk is managed, designing and driving the controls that operationalize those standards, and ensuring they remain effective as our products and the regulatory landscape evolve. Being effective in this role means going deep on both the domain and the data — we don't separate the two.

You'll partner closely with Product, Engineering, Data Science, Compliance, Legal, other Risk Strategy functions, and Operations to ensure screening considerations are embedded in every product and market decision. Beyond protecting against risk, you'll drive innovation in how Stripe approaches screening — staying ahead of regulatory change and pushing the boundaries of what effective, scalable financial crime risk management looks like at a global payments company.

Responsibilities

  • Lead our global sanctions and AML screening strategy — setting the standards that drive screening control design and infrastructure development, and translating requirements across OFAC, EU, UN, OFSI, and other applicable regimes, PEP screening, and negative news screening into actionable first-line programs and controls
  • Own the design and ongoing improvement of financial crime controls — including sanctions screening, PEP screening, negative news screening, and digital asset-related safeguards — while continuously improving detection coverage and control performance as our products and the threat landscape evolve
  • Embed screening risk requirements into product and infrastructure roadmaps — ensuring financial crime considerations drive product launches, market expansions, and platform decisions across Product, Engineering, Data Science, Compliance, Legal, and Operations
  • Drive screening infrastructure and tooling forward by owning requirements, leading execution, and maintaining effectiveness metrics for screening systems and controls — building with observability by design and ensuring key performance indicators, key risk indicators, and monitoring thresholds are defined from inception
  • Continuously assess and improve screening controls and systems — identifying gaps, recommending enhancements that strengthen detection effectiveness and anticipate regulatory or ecosystem changes, and leading delivery of those enhancements end-to-end
  • Champion a technology-forward approach to financial crime risk management — leveraging AI tools, self-serve data analytics, and model governance best practices to improve how risk is detected, monitored, and managed at Stripe
  • Stay informed on industry practices and regulatory developments and represent our sanctions and AML programs to regulators, bank and network partners, and external auditors

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

  • 7+ years of professional experience in financial services, payments, or fintech, with at least 5 years in a related role (risk, compliance, or product enablement)
  • Deep subject matter expertise in global sanctions compliance, including hands-on experience with OFAC, EU sanctions regimes, UN Security Council designations, OFSI, and other major global frameworks
  • Demonstrated strong understanding of screening program design and control execution
  • Strong AML screening expertise — proven ability to design, implement, and operationalize PEP screening and negative news screening programs in complex, multi-jurisdiction environments
  • Proven ability to design, implement, and operationalize financial crime standards and controls in complex, global organizations
  • Familiarity with model governance concepts — including model documentation, performance monitoring, and validation — and experience leading or contributing to model governance activities

Preferred qualifications

  • Experience leading transformative AML, Sanctions, or Transaction Monitoring initiatives, including global screening program design or transformations (e.g., vendor selection, watchlist management, false positive tuning)
  • Proficiency with SQL and ability to independently mine and analyze data to develop risk insights and inform strategy
  • Experience with crypto or digital asset products and their associated financial crime risk and regulatory considerations
  • Advanced degree or professional certifications (e.g., CAMS, CGSS, CFCS)

To apply: https://weworkremotely.com/remote-jobs/stripe-risk-strategist-screening-financial-crimes

Read the full description
Security Coinbase: Senior Manager, Internal Audit IT

Lead Coinbase's global IT and security audit program, managing audits across cloud infrastructure, security operations, and risk management while overseeing a distributed team of auditors.

Lead Remote Posted about 12 hours ago We Work Remotely — Programming
What this role involves

Headquarters: Remote - USA

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

As the Senior Manager, Internal IT & Security Audit, you'll lead Coinbase's global IT and security audit program. Reporting to the Head of Internal Audit, you will operate within an independent third line of defense that maintains functional accountability to the Audit Committee. You'll own the multi-year IT and security audit roadmap, ensuring coordinated coverage across all regions (US, EMEA, UK, APAC) and alignment with Coinbase's enterprise risk profile and regulatory expectations. Your leadership will directly strengthen how Coinbase identifies, evaluates, and mitigates technology and security risks across the organization.

What you'll do:

  • Own the end-to-end delivery of complex, cross-functional IT and security audits covering cloud infrastructure, security operations, identity and access management, data protection, vendor/third-party risk, and key products and services.
  • Lead and develop a high-performing global team of internal auditors and co-sourced resources, setting goals, coaching talent, managing performance, and building succession pipelines across regions.
  • Drive integrated assurance across the three lines of defense by partnering with first and second line risk, compliance, security, and technology teams to rationalize testing and maximize control coverage.
  • Shape executive-level reporting on technology and security control effectiveness, distilling key themes, emerging risks, and root causes into clear materials for senior management, the Head of Internal Audit, and the Audit Committee.
  • Partner with technology and security leadership across Engineering, Security, Infrastructure, and Product to provide independent challenge on major initiatives (e.g., cloud migrations, new product launches, architecture changes) without compromising third-line independence.
  • Build continuous improvement into the audit function by driving adoption of data analytics, automation, and generative AI to modernize IT and security audit execution, including continuous monitoring and automated evidence retrieval.

Required Skills and Experience:

  • 12+ years of experience in internal audit with deep focus on IT and information security, or in first-line / second-line technology/security roles with significant controls and audit exposure.
  • Demonstrated success leading global, cross-functional IT audit portfolios spanning cloud, infrastructure, cybersecurity, and third-party risk across multiple regulatory jurisdictions (US, EMEA, APAC).
  • Deep technical knowledge of cloud-based technology stacks, software development lifecycles, cloud security configurations, and enterprise IT operations risks and controls.
  • Relevant professional certifications (e.g., CISA, CISSP, CIA, CPA) and working fluency with frameworks such as NIST, COBIT, and ITIL.
  • Proven leadership experience building, mentoring, and managing global audit teams, including co-sourced resources and indirect reports across time zones.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Req ID: #P76564

#LI-Remote

 

 

Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)). 

 

Annual base salary range (excluding equity and bonus):$201,365—$236,900 USD
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

To apply: https://weworkremotely.com/remote-jobs/coinbase-senior-manager-internal-audit-it

Read the full description
Security Security Operations Engineer at DeepHealth

Builds and operates enterprise security controls, tooling, and automation across cloud and corporate environments while developing detection content and security automation.

Mid Posted about 20 hours ago RemoteFirstJobs Product
What this role involves

Description

The Security Operations Engineer builds and operates security controls, tooling, and automation across DeepHealth’s cloud and corporate environments. This role is responsible for configuring, integrating, and maintaining the enterprise security tooling stack, developing detection content, and automating security operations tasks so that controls are repeatable, version-controlled, and auditable.

Working within DeepHealth’s established security frameworks and under the direction of the Director, Security Operations, this position operates and tunes security controls, detection content, and guardrails. Independent validation of those controls sits with the security operations watch function — a deliberate separation that keeps the control environment defensible under audit. Remediation follows system ownership across Cloud Operations, Platform, and Application Development; this role supplies technical guidance and implements fixes directly where the control is security-owned.

This position operates within a regulated healthcare environment across a global operating footprint, with obligations under HIPAA, ISO/IEC 27001, and SOC 2. The role reports to the Director, Security Operations, with future reporting to the Manager, Security Operations as that position is established.

Requirements

·       Build, configure, integrate, and tune the enterprise security tooling stack across cloud and corporate environments.

·       Develop and maintain detection content, correlation rules, and response automation within the SIEM and SOAR platform.

·       Onboard new log sources and telemetry feeds, validating ingestion completeness, parsing accuracy, and field normalization.

·       Administer and tune endpoint detection and response tooling, including policy configuration, exclusion governance, and coverage validation.

·       Integrate security tooling with adjacent platforms through APIs to reduce manual handling and improve data quality.

·       Implement and maintain security configurations, guardrails, and baselines across Google Cloud Platform, Amazon Web Services, and Microsoft Azure.

·       Build and maintain security automation and infrastructure-as-code using Terraform or an equivalent framework, so that controls are version-controlled, repeatable, and auditable.

·       Implement policy-as-code and preventive guardrails using native cloud policy engines or an equivalent open policy framework.

·       Support cloud security posture management across all cloud environments, including finding deduplication, theme mapping, and routing to owning teams.

·       Harden cloud resources including compute, storage, database, container, and serverless services against established benchmarks.

·       Configure and maintain Microsoft 365 and Entra ID security controls, including conditional access, identity protection, and Defender workloads in a hybrid directory environment.

·       Implement and maintain least-privilege access models, roles, and policies across multiple cloud identity systems.

·       Implement container and Kubernetes security controls, including role-based access control, workload security standards, image scanning, and runtime protection.

·       Implement and maintain secrets management practices and tooling, and support the elimination of hard-coded credentials across environments.

·       Operate vulnerability management tooling, validate scan coverage, and translate raw scanner output into prioritized, owner-routed findings.

·       Provide technical remediation guidance to cloud, platform, identity, application, and endpoint owners, who retain accountability for closure of findings in their systems.

·       Implement engineering fixes for findings that fall to security-owned tooling and configuration.

·       Support remediation tracking for penetration test and vulnerability assessment findings by supplying technical detail and validating that fixes are technically sound.

·       Support incident detection and response through hands-on technical investigation, including log analysis, endpoint examination, identity and authentication tracing, and cloud audit log review.

·       Support escalations raised by the external managed security partner by supplying technical analysis and environment context.

·       Provide feedback into detection quality and alert tuning to reduce noise and improve signal for the monitoring function.

·       Contribute technical findings to post-incident review, and implement the resulting control and detection improvements.

·       Participate in tabletop exercises and resilience testing, and act on the technical gaps those exercises surface.

·       Document all engineering changes to security controls through the change management process, including validation criteria and rollback plans.

·       Produce and maintain runbooks, playbooks, and technical operating procedures for repeatable security operations tasks.

·       Write clear, documented, and reviewable code and configuration so that work can be inspected, maintained, and handed over without dependence on any one individual.

·       Support audit, certification, and customer assurance activities by producing technical evidence on request.

·       Maintain accurate inventory of security tooling, control coverage, licensing position, and control operating status.

·       Maintain strict confidentiality of security testing results, control configuration detail, and investigative material, and follow established standards for external disclosure.

PLEASE NOTE: This is not an exhaustive list of all duties, responsibilities and requirements of the position described above.  Other functions may be assigned and management retains the right to add or change duties at any time.

Minimum Qualifications, Education and Experience

·       4+ years of hands-on experience in security operations, security engineering, or a comparable technical security role. (Required)

·       Bachelor’s degree in information technology, computer science, cybersecurity, or a related field, or equivalent professional experience. (Required)

·       2+ years of hands-on cloud security experience across at least one major cloud provider; Google Cloud Platform and Amazon Web Services preferred. (Required)

·       2+ years operating and tuning a SIEM platform, including working with detection content and log sources. (Required)

·       1+ year administering Microsoft 365 and Entra ID security controls in a hybrid directory environment. (Required)

·       Working knowledge of security automation; experience with scripting and infrastructure-as-code is required, with Terraform experience preferred. (Required)

·       Working knowledge of cloud security posture management and preventive controls. (Required)

·       Working knowledge of container and Kubernetes security, including role-based access control and image scanning. (Required)

·       Working knowledge of secrets management tooling and practices. (Required)

·       Practical experience with endpoint detection and response tooling. (Required)

·       Working knowledge of vulnerability management and the finding remediation lifecycle, including risk-based prioritization. (Required)

·       Scripting capability in at least one of: Python, PowerShell, or Bash. (Required)

·       Familiarity with recognized security frameworks including NIST Cybersecurity Framework, ISO/IEC 27001, and SOC 2. (Required)

·       Able to communicate technical findings clearly in writing and verbally to both technical and non-technical audiences. (Required)

·       Able to manage assigned work independently and escalate appropriately. (Required)

·       Available to support incident response activity outside standard business hours as required. (Required)

·       Microsoft Office experience. (Required)

·       Industry certification such as Security+, CompTIA CySA+, or a cloud provider security certification. (Preferred)

·       Experience in healthcare, medical device, or another regulated industry, and working familiarity with HIPAA obligations. (Preferred)

·       Experience working alongside or integrating with a managed security service provider. (Preferred)

Quality Standards

·       Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors, and vendors.

·       Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance.

·       Follows all local, regional and country laws concerning employment.

·       Follows all DeepHealth policies and procedures.

·       Follows data privacy, compliance, safety and confidentiality standards at all times.

·       Practices universal safety precautions.

·       Promotes good public relations on the phone and in person.

·       Adapts and is willing to learn new tasks, methods, and systems.

·       Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines.

·       Completes job responsibilities in a quality and timely manner.

Travel

This position requires domestic / international travel up to 10%.

Working Environment

Remote

Physical Demands

This position often requires sitting, standing, walking, bending, twisting, reaching with hands and arms, using hands and fingers, handling, or feeling, speaking, listening, and high-level cognitive thinking. Also, must be able to lift up to 10 pounds occasionally.

Work Authorization / Visa Sponsorship: DeepHealth does not provide immigration sponsorship for this position, including sponsorship for employment-based visas or other work authorization requiring employer sponsorship. Candidates must be legally authorized to work in the United States without current or future sponsorship from DeepHealth for the duration of employment.

Read the full description
Security Consultant (Technology) (m/w/d)

Conducts cybersecurity assessments, develops security strategies and ISMS frameworks, and identifies organizational risks.

Mid Posted about 20 hours ago Himalayas
What this role involves
Die Aufgaben eines Consultant (Technology) (m/w/d) sind vielfältig und können unter anderem folgende Tätigkeiten umfassen: • Durchführung von Cyber-Security-Assessments, Schwachstellenanalysen und Risikoidentifikation • Entwicklung und Implementierung von Sicherheitsstrategien, Referenzarchitekturen, Richtlinien und Standards • Aufbau und Betreuung von ISMS (z.
Read the full description
Security Oracle Cloud Security Engineer

Implements and maintains security infrastructure on Oracle Cloud Platform, managing access controls, compliance, and threat detection.

Mid Remote Posted about 20 hours ago Himalayas
What this role involves
Oracle Cloud Security Engineer – Remote Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.
Read the full description
Security Security Engineer at Corbalt

Integrates security into the software development lifecycle, identifies vulnerabilities, and builds automation tools to improve security practices across engineering teams.

Mid Remote Posted 2 days ago RemoteFirstJobs Product
What this role involves

About Corbalt

Corbalt is a technology company that partners with federal agencies to modernize and operate complex technology ecosystems. We build shared platforms, engineering foundations, and reusable services that enable mission teams to deliver software faster, operate more efficiently, and scale with confidence.

Our roots trace back to the Healthcare.gov recovery effort, where we saw firsthand what talented, mission-driven teams could accomplish together. That experience shaped how we work today: solving complex technical challenges through collaboration, pragmatic engineering, and a relentless focus on delivering value.

Today, we support critical healthcare modernization efforts at the Centers for Medicare & Medicaid Services (CMS), helping build and operate the platforms, tools, and services that enable teams across Medicare and Medicaid to deliver secure, resilient digital experiences.

We’re a remote-first team that values curiosity, kindness, ownership, and continuous learning. We enjoy solving hard technical problems, partnering closely with our clients, and building technology that makes government work better for the people who rely on it.

Contingent Position: This position is contingent upon Corbalt’s successful contract award. Employment offers and start dates are dependent on the award of the associated government contract.

Security Engineer

We’re looking for a Security Engineer who enjoys building secure software, improving engineering platforms, and helping teams deliver with confidence. You’ll work closely with software engineers to integrate security into the development lifecycle, automate security practices, and build resilient cloud-native systems that support critical government services.

Responsibilities

  • Integrate security into the software development lifecycle through automation, testing, and continuous improvement.
  • Identify, investigate, and remediate application and infrastructure vulnerabilities.
  • Develop tools and automation in Python, Go, or Terraform that improve security, developer productivity, and operational visibility (it’s not important that you know these languages).
  • Support security assessments, compliance activities, and continuous monitoring.
  • Contribute to security best practices across engineering teams.

Skills

  • Strong software engineering fundamentals and experience writing production code.
  • Experience with application security, DevSecOps, or cloud security.
  • Understanding of secure software design, authentication/authorization, and common application vulnerabilities.
  • Familiarity with at least one commonly used programming language and one infrastructure-as-code language.
  • Strong communication and collaboration skills with engineering and technical stakeholders.

Experience

  • 3+ years of engineering experience
  • Demonstrated ability to operate independently and ramp quickly in complex environments
  • Experience supporting security assessments, compliance, or continuous monitoring in regulated environments
  • Familiarity with federal cloud and security requirements (e.g., FISMA)
  • Demonstrated experience operating and analyzing systems in AWS, Azure, or Google Cloud.

Values

  • Growth-oriented mindset
  • Intrinsic motivation to learn, grow, and do great work
  • Kindness
  • Grit / perseverance / resilience

Compensation & Benefits

The base salary range for this position is: $138,677 - $182,296 per year.

In addition to the base salary, Corbalt offers:

  • Medical, dental, vision benefits
  • Profit sharing and discretionary bonuses
  • A company 401(k) contribution equal to 3% of your salary
  • Paid vacation, sick time, and company holidays
  • Reimbursement for reasonable expenses that are helpful for work
  • In-person company retreats

Hiring Process

  • The first stage is an informal conversation to learn more about each other, answer questions, and discuss the role.
  • The second stage is a mini-project based on something we’ve actually worked on. The goal of this is to get an idea of what working together is like.
  • The last stage is: a 10-20 minute presentation to the team describing what you did on a previous project and two 30 minute conversations with other people on the team to get an additional perspective on what our work is like.

Other Requirements

  • Due to contractual requirements applicants must:
    • Be authorized to work in the United States
    • Currently reside in the United States or its territories
    • Have resided in the United States or its territories for three of the last five years
    • Have at least three years of professional experience
  • Due to contractual and security requirements, all work must be performed while physically present within the United States or its territories. Work performed while outside the U.S. or its territories is strictly forbidden.
  • Corbalt participates in E-Verify. Upon hire, your Form I-9 information will be provided to the federal government to confirm you are authorized to work in the United States.

Corbalt is an Equal Opportunity Employer, including disability and protected veteran status.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Read the full description
Security Security Engineer, Application Security at GameChanger

Embeds security practices throughout the software development lifecycle, conducts code reviews, maintains secure coding standards, and integrates security tooling into CI/CD pipelines.

Mid Remote Posted 2 days ago RemoteFirstJobs Product
What this role involves

About GameChanger:

We believe in the life changing impact youth sports have on and off the field. Sports encourage leadership, teamwork, responsibility, and confidence – important life lessons that have the power to propel our youth toward meaningful futures. We recognize that without coaches, parents, and volunteers, organized youth sports could not exist. By building the first and best place to experience the youth sports moments important to our community, we are helping families elevate the next generation through youth sports.

So if you love sports and their community building potential, or building cool products is your sport, GameChanger is the team for you. We are a remote first, dynamic tech company based in New York City, and we are solving some of the biggest challenges in youth sports today.

The Position:

We’re looking for a Security Engineer to join our InfoSec team and become the primary security partner for our software engineering organization. Reporting to the Security Engineering Manager, you’ll operate application security across the SDLC, champion secure design and development practices, and bring DevSecOps discipline to how we build and ship software. This is a high-impact, highly collaborative role. You’ll work closely with platform and product engineers to make security a part of how we build and deliver. You will also be a member of our weekly on-call rotation.

What You’ll Do:

Application security

  • Embed security into every phase of the SDLC

  • Champion security requirements for the responsible and secure integration of Gen AI and agentic AI tools within our product stack

  • Conduct security-by-design engagements for new features, APIs, platform initiatives, and infrastructure changes

  • Perform secure code reviews providing engineers with clear, actionable findings and remediation guidance

  • Partner with architecture and platform teams to establish secure API patterns (REST and GraphQL)

  • Contribute to and maintain secure coding guidelines, API security standards, and security architectural patterns that serve as the “paved roads” for all engineering teams

  • Give useful code review feedback, write documentation that outlasts the ticket, and run the occasional workshop or lunch-and-learn for engineers

DevSecOps

  • Integrate and maintain security tooling across CI/CD pipelines

  • Enforce security quality gates in delivery pipelines

  • Harden the CI/CD platform components, including configuration and hardening of GitHub Actions and runner environments

  • Identify opportunities to leverage AI for increasing engineering productivity and agentic security workflows

  • Work alongside DevOps engineers to ensure cloud infrastructure is defined and deployed securely via IaC (terraform, k8s)

  • Implement and validate security controls for containerized workloads

  • Support the implementation of application-layer network security controls, such as Web Application Firewalls (WAFs) and CDN security, to protect application endpoints

Vulnerability & Risk Management

  • Operate the application vulnerability management lifecycle

  • Triage and prioritize findings from our sources (including; GHAS, NowSecure, Wiz, BugCrowd, penetration tests) by business impact and exploitability

  • Proactively identify systemic risks and facilitate cross-functional initiatives to address root causes

  • Track security-specific KPIs (e.g., MTTR, vulnerability density, and security coverage of CI/CD pipelines) and translate them into actionable insights for engineering and business leadership

  • Effectively communicate security risk clearly to both engineering and business leaders

What You’ll Bring:

  • 3+ years in application security engineering

  • Proven experience building and operating internal security developer platforms or tooling that reduces developer friction

  • Demonstrated ability to use AI/ML-driven tools to enhance security effectiveness and scalability

  • Hands-on experience leading threat modeling engagements and designing paved roads

  • Proven track record integrating security tooling into CI/CD pipelines

  • Working knowledge of OWASP Top 10s (web, mobile, API, LLM)

  • Hands-on experience securing deployments in AWS with container and Kubernetes security, IaC scanning, and policy-as-code approaches

  • Demonstrated expertise in security-by-design in TypeScript, Swift, and/or Kotlin

  • Track record of implementing secure primitives in mobile ecosystems (iOS/Android)

  • Beneficial certifications: AWS Certified Security Specialty, CKS, GWEB, GMOB, or equivalent.

Who You Are:

  • Pragmatic defender. You understand that security must enable the business, not block it. You look for “secure by default” solutions and know how to make the right path the easy path for engineers.

  • Force multiplier. You don’t solve every security problem yourself. You coach, document, and build systems that make the engineers around you more secure by default.

  • Clear communicator. You can trace a BOLA vulnerability chain to a frontend engineer and translate the same risk into business terms for a VP; and you know which conversation you’re in.

  • Automation-first. If you have to do it twice, you’d rather write the script.

  • Long-view oriented. You think about medium-to-long-term system health, not just the current sprint, and you proactively address root causes rather than patching symptoms repeatedly.

  • Collaborative and cross-functional. You bring product, business, and operational context into your security decisions, not just security best practices in isolation.

  • Approachable. You foster open dialogue, encourage diverse perspectives, and make it easy for engineers to surface security concerns without fear of judgment or friction.

Perks:

  • Work remotely throughout the US* or from our well-furnished, modern office in Manhattan, NY.

  • Unlimited vacation policy.

  • Paid volunteer opportunities.

  • Technology stipend - $4,000 every 2 years after your start to make sure you have the latest and greatest technology.

  • WFH stipend - $500 annually to make your WFH situation comfortable.

  • Monthly physical, mental, wellness & learning stipend offered through Holisticly.

  • Monthly lifestyle stipend offered through Fringe.

  • Full health benefits - medical, dental, vision, prescription, FSA, HRA, HSA, and coverage for family/dependents.

  • Retirement savings - Traditional and Roth 401K plans are offered through Vanguard, with an immediate company match.

  • Life insurance - basic life, supplemental life, and dependent life.

  • Disability leave - short-term disability and long-term disability.

  • Company paid parental leave - up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents.

  • Family building benefits offered through Progyny.

  • DICK’S Sporting Goods and their family of brands teammate discount.

The target salary range for this position is between $120,000 and $140,000. This is part of a total compensation package that includes incentive, equity, and benefits for eligible roles. Individual pay may vary from the target range and is determined by several factors including experience, internal pay equity, and other relevant business considerations. We constantly review all teammate pay to ensure a great compensation package that is fair and equal across the board.

\* DICK’S Sporting Goods has company-wide practices to monitor and protect the company from significant compliance and monetary implications as it pertains to employer state tax liabilities. Due to said guidelines put in place, we are unable to hire in AK, DE, HI, IA, LA, MS, MT, OK, and SC.

We are an equal opportunity employer and value diversity in our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

IMPORTANT NOTICE: All official recruitment communications from GameChanger will come from an email address ending in @gc.com or no-reply@ashby.hq.com. If you receive communication from any other domain, please be cautious, as it is likely fraudulent.

Read the full description
Security IT Auditor I at Pathward

Performs IT audits to ensure compliance with regulations and internal policies, testing controls and communicating findings to stakeholders.

Junior Hybrid Posted 2 days ago RemoteFirstJobs Product
What this role involves

We are a hybrid, remote-office company dedicated to growing our talent anywhere!

We have onsite locations in: Sioux Falls, SD,  Scottsdale, AZ,  Louisville, KY,  Troy, MI,  Franklin, TN,  Easton, PA.

At Pathward, we take tremendous pride in our purpose to create financial inclusion for all™. We are a financial empowerment company that works with innovators to increase financial availability, choice, and opportunity for all.  We strive to remove barriers that traditional institutions put in the way of financial access, and promote economic mobility by providing responsible, secure, high quality financial products.

We are a team of problem solvers and innovators who celebrate our differences and know that our unique perspectives make us stronger and well-positioned for success.  We celebrate, and embrace, our team members through our *HUMBLE*HUNGRY*SMART approach, and we believe that we are strongest when we embrace the voices of our employees, customers, partners, and the communities we serve.

About the Role:

The position is responsible for performing audits within Information Technology for the purpose of ensuring compliance with external regulations as well as internal policies.  It will also communicate audit findings to multiple stakeholder groups.

What You Will Do:

  • Collaborate with audit team members as well as members of IT to develop audit objectives, engagement scopes, and testing strategies aligned with departmental standards and risk priorities.
  • Assist in the planning, execution, and reporting of IT audit engagements, including SOX ITGC testing, risk-based technology reviews, and issue validation procedures. Assist in the department’s risk assessment processes, providing qualitative/quantitative analysis over the Company’s auditable entities, and ensuring alignment with audit stakeholders.
  • Analyze and summarize data to identify control deficiencies, process inefficiencies, or noncompliance with policies, procedures, or regulations. Communicate findings and recommendations to audit leadership and business stakeholders in a clear manner. Utilize data analytics to test large datasets, identify anomalies, and draw insights that enhance audit efficiency and coverage.
  • Monitor issued audit findings, perform validation testing over defined remediation plans, and present remediation statuses to stakeholders. Identify opportunities to strengthen controls, improve operational effectiveness, and reduce risk exposure across technology and business processes.
  • Other duties as assigned

What You Will Need:

  • Bachelor’s degree or equivalent education and work experience.

  • Up to 2+ years with bachelor’s or equivalent.

  • Communication skills (written and verbal)

  • Collaboration and building relationships

  • Attention to detail

  • Learning agility

The responsibilities listed above are not all inclusive and may be changed at any time.

Salary range:  $50,000 – $84,000

The salary range reflects the minimum and maximum target for a new hire in this role. Individual pay within the range will be determined by multiple factors which can include but are not limited to a candidate’s experience, qualifications, skills, and location. Your recruiter can share more about the specific salary for your location during the hiring process. Ranges may be modified in the future.

This role is also eligible for an annual performance-based incentive opportunity.  Pathward offers a comprehensive benefits package for eligible employees, including health insurance, 401(k) retirement benefits, life insurance, disability benefits, paid time off, and more.

#LI-Remote

Don’t have everything listed under qualifications? If you’re excited about this role but your experiences don’t match exactly to everything in the posting, we encourage you to apply anyway. You may be just the right candidate for this or other Pathward roles. Pathward is an equal employment opportunity employer and considers candidates for roles without regard to their race, sex, national origin, ethnicity, age, disability or any other category protected by law.

Who we are:

Our commitment to inclusion is woven into our DNA. We believe that we are strongest when we embrace the voices of our employees, customers, partners, and the communities we serve.

We provide equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity, transgender status, pregnancy, national origin, age (age 40 and over), disability, genetic information, marital status, hair texture or hairstyle, ancestry, service in the uniformed services, protected veteran status, status as a victim of domestic violence or any other class protected by federal, state and local laws.

Please click here to learn more about our benefits and review information about our Privacy Policy, Affirmative Action Plan and other notices. Applicants with disabilities may be entitled to reasonable accommodation under the terms of the Americans with Disabilities Act and certain state or local laws. For assistance completing an application, please contact a Pathward People & Culture Representative by emailing – careers@pathward.com

Please click here to view Pathward’s Applicant Privacy Notice.

Applications will be accepted for a minimum of 3 days after posting, and there is no predetermined date by which applications should be submitted.

Knowingly submitting false information will result in disqualification for consideration of future positions, termination of employment and forfeiture of other rights.

Candidate Scam Warning

We encourage you to be cautious of hiring scams that impersonate Pathward. Copy and paste the following URL into your browser to learn more: https://www.pathward.com/about-us/people-culture/careers/

Read the full description
Security WAF Services Expert

Administers and optimizes Web Application Firewall (WAF) infrastructure, manages rulesets, and coordinates with application teams on security configurations.

Mid Remote Posted 2 days ago Himalayas
What this role involves
This is a remote position. WAF Services ExpertLocation: RemotePeriod: 01/11/2026 to 31/12/2027Utilisation: Part-time (TBC - approx 36-45% utilisation depending on confirmed period)Contract type: Contract / freelanceKey Responsibilities• Administration of the WAF • WAF ruleset management • WAF platform optimisation according to vendor recommendations and best practice • Liaising with relevant application teams for WAF rule optimisation • Development of customised WAF rules • Documentation of all changes in WAF environments • Monthly activity reports RequirementsEligibility• You must already hold the right to work in the EU, EEA or Switzerland Requirements• Fluent English • Proven experience administering Azure WAF in a production environment • Strong communication skills for liaising with cross-functional application teams BenefitsAs a freelancer / contractor with us, you will enjoy flexible working hours and the freedom to choose your own projects.
Read the full description
Security Physical Security Architect at New Era Technology

Design and validate physical security systems including access control, video surveillance, and intrusion detection for enterprise customers like Walgreens.

Senior Posted 3 days ago RemoteFirstJobs Product
What this role involves

Join New Era Technology, where People First is at the heart of everything we do. With a global team of over 3,000 professionals, we’re committed to creating a workplace where everyone feels valued, empowered, and inspired to grow. Our mission is to securely connect people, places, and information with end-to-end technology solutions at scale.

At New Era, you’ll join a team-oriented culture that prioritizes your personal and professional development. Work alongside industry-certified experts, access continuous training, and enjoy competitive benefits. Guided by our core attributes — putting people first, embracing continuous learning, and thriving through collaboration and inclusion — we nurture our people to deliver exceptional customer service.

If you want to make an impact in a supportive, growth-oriented environment, New Era is the place for you. Apply today and help us shape the future of work—together

New Era Technology offers:

· Full Benefits

· Medical

· Dental

· Vision

· 401K match

· 28 PTO Days including company holidays

SUMMARY:

The Physical Security Architect is a hands-on subject matter expert on physical security design, covering access control, video surveillance, intrusion detection, and intercom systems. This role works directly with project teams, Solutions and Design engineers, Sales, manufacturer partners, and customer stakeholders to validate designs, review scope, and support projects through execution.

Walgreens is the initial focus for this role, given the size of the account and its ongoing physical security needs. The Physical Security Architect will also support other strategic enterprise customers over time. This role helps build deeper bench strength on Walgreens physical security standards and design expectations so that account knowledge is documented and shared across the team rather than held by one person.

PRIMARY DUTIES:

Design Support and Validation

  • Conduct site assessments, construction reviews, and design coordination meetings for active physical security projects.
  • Review and validate project scope, system requirements, and bills of materials against customer
  • Provide technical guidance on access control, video surveillance, intrusion detection, intercom, and integrated security systems.
  • Support development of reference designs, configuration standards, and deployment

Walgreens Program Support

  • Serve as a technical resource for Walgreens’ physical security standards, design expectations, and site
  • Support knowledge transfer so Walgreens specific technical knowledge is documented and shared across the physical security team.
  • Review Walgreens project deliverables and support proactive communication on design questions, open issues, and escalations.
  • Coordinate with manufacturer partners on platform requirements used on the account, including

Project Support and Escalation

  • Support project managers, project coordinators, and implementation teams throughout the project
  • Review network architectures, device configurations, communication paths, and integration
  • Act as a liaison between project teams and manufacturer technical resources on hardware, firmware, or integration issues.
  • Support troubleshooting and escalation handling technical issues on active

Testing and Technical Evaluation

  • Use New Era’s physical security lab to test new products, validate designs, and troubleshoot field
  • Evaluate new products, platforms, and integrations for use in customer
  • Run test plans and document results to support design

Standards and Documentation

  • Support the development and maintenance of configuration standards, implementation guides, and design templates.
  • Capture deployment feedback and lessons learned and share them with the broader physical security
  • Maintain client specific technical documentation, including Walgreens design standards and site

Technical Writing and Customer Communication

  • Prepare assessment reports, technical findings, and design recommendations for internal and customer
  • Develop customer facing documentation that explains technical concepts clearly to non-technical
  • Present technical reviews, design updates, and project status to customers and internal stakeholders as

REQUIRED EDUCATION:

  • Bachelor’s degree in information technology, security management, engineering, computer science, or a related field, or equivalent work experience.
  • 5 or more years of experience in physical security technologies, systems integration, or security
  • Experience designing, implementing, or supporting enterprise access control, video surveillance, and intrusion detection systems.
  • Experience coordinating technical work across project teams, manufacturers, and customer
  • Experience conducting technical assessments, design validation, and
  • Experience preparing technical documentation, reports, and

Core Competencies:

  • Physical security technical expertise
  • Design validation and quality review
  • Troubleshooting and issue resolution
  • Manufacturer and partner coordination
  • Technical documentation and reporting
  • Communication with technical and non-technical audiences
  • Attention to detail
  • Ownership of assigned accounts and projects

QUALIFICATIONS:

  • Experience supporting large enterprise retail security programs, such as Walgreens or similar
  • Experience with platforms such as Genetec or comparable access control and video management
  • Industry certifications from major security
  • Experience developing technical standards or design documentation for enterprise

EXPERIENCE: 5 or more years of experience in physical security technologies, systems integration, or security consulting

LANGUAGE SKILLS: English

PHYSICAL DEMANDS :

  • Regular use of hands and fingers to operate a computer keyboard, mouse, and other office equipment.
  • Regular, repetitive movements such as typing, mouse movements, and scrolling. Ability to hear and understand spoken communications, both in person and via remote communication tools (e.g., phone, video conferencing).
  • Ability to see and read computer screens and printed documents, as well as adjust focus. This includes prolonged periods of looking at a computer screen.

WORK ENVIRONMENT:

This role works in a hybrid environment, including home offices, customer sites, New Era facilities, and the physical security lab. The role requires frequent coordination with Sales, Solutions, the Project Management Office (PMO), the Project Coordination Office (PCO), Operations, field teams, manufacturers, and customer stakeholders.

Availability to support active project issues and time sensitive customer requests is required

EXPECTED HOURS OF WORK: Monday – Friday 8am – 5pm. May vary due to project assignment.

TRAVEL: Travel is expected to run up to 25 percent, depending on active projects and customer needs.

QUALIFICATIONS: To perform the job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Other duties, responsibilities and activities may change or be assigned at any time with or without notice.

EEO/AA Statement

New Era Technology provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, national origin, religion, pregnancy, marital status, gender identity, age, physical or mental disability, or covered veteran status.

In addition to federal law requirements, New Era Technology complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Below is the pay range of this position for considered candidates based on qualifications and experience.

Pay Range

$105,000—$110,000 USD

New Era Technology, LLC., and its subsidiaries (“New Era” “we”, “us”, or “our”) in its operating regions worldwide are committed to respecting your privacy and recognize the need for appropriate protection and management of any Personal Data that you may provide us. In this, we are also committed to providing you with a positive experience on our websites and while using our products, services and solutions (“Solutions”).

View our Privacy Policy here https://www.neweratech.com/us/privacy-policy/

We never ask candidates to pay any fees at any point in our hiring process. If you are ever asked to provide payment for training, certification, equipment, or any other purpose, it is not from our company. Only communications from our official company channels should be trusted. Please note our official email domain is @neweratech.com. If you suspect fraudulent activity, please contact us immediately at privacy@neweratech.com .

Read the full description
Security Security Operations Analyst at Unqork

Monitors security alerts and threats across SIEM/EDR/XDR tools, triages incidents, implements automations, and partners cross-functionally to protect company assets.

Mid Posted 3 days ago RemoteFirstJobs Product
What this role involves

Unqork empowers enterprises to accelerate growth by rapidly building, testing, and running AI-powered applications that embody the future of enterprise development. Trusted by the world’s largest organizations in highly regulated industries, these applications become more secure over time while significantly reducing technical debt—allowing businesses to focus on innovation rather than maintenance. Unqork’s customers include Goldman Sachs, Marsh, BlackRock, and the U.S. Department of Health and Human Services.

At Unqork, we value inclusive and innovative thinkers who boldly challenge the status quo. We encourage you to apply!

The Impact U will make:

As a Security Operations Analyst, you will be an analytical and thorough individual contributor reporting to the Director of Security Operations. You will play a role in Threat Detection & Response, Threat Intelligence and Hunting, Technical Security Architecture, IT Operations, and SIEM and SOAR engineering. Your primary focus will be to proactively and reactively protect and defend our critical assets against an evolving threat landscape.

  • Security Monitoring & Alert Triage Actively monitor SIEM, EDR/XDR, and other security tools to detect, analyze, and triage security alerts. Follow established playbooks to ensure timely and accurate initial response to potential threats.
  • Process Efficiency & Automation Utilize existing Security Orchestration, Automation, and Response (SOAR) platforms to handle alerts efficiently. Identify repetitive manual tasks and implement automations.
  • SIEM & Detection Engineering Integrate and set up the ingestion of log sources to a SIEM tool, including the normalization of fields and data. Create timely monitoring solutions for relevant threats based on active threat intelligence. Share responsibility for detection and log lifecycle / maintenance.
  • Threat Intelligence Consume and review daily threat intelligence feeds, security advisories, and industry alerts to ensure the company is protected against known Indicators of Compromise (IoCs) and emerging threat trends.
  • IT Operations & Asset Security Work closely with IT Operations to maintain accurate hardware and software asset inventories. Assist in deploying and troubleshooting endpoint security agents to ensure a secure baseline for all employee devices.
  • Cross-Functional Technical Partnership: Collaborate extensively with resources in Engineering, Product, IT, and other departments to embed operational security requirements, influence architectural decisions for detectability, and foster a strong security culture. Serve as the primary security technical expert for these partnerships.
  • Compliance & Operational Reporting: Assist in generating routine security metrics and operational reports. Help gather technical evidence to support adherence to security policies and compliance audits (e.g., SOC 2, ISO 27001).

What U bring:

  • 3+ years of progressive experience in Security Operations, with at least 2  years in a role contributing to a Security Operations Center (SOC), Managed Detection Response Service, or Incident Response team.
  • Proven track record as an engineer, having designed, implemented, and managed mature SOC processes and automations.
  • Proven hands-on Python experience.
  • Proven hands-on technical expertise in threat detection, incident response, vulnerability management, and the use of SIEM, EDR/XDR, other security monitoring platforms, IAM solutions and processes.
  • Strong understanding of modern security threats, attack vectors, and defensive strategies.
  • Expertise in security frameworks (e.g., NIST, MITRE ATT&CK) and their practical application in threat detection, analysis, and incident response.
  • Exceptional communication and interpersonal skills, with the ability to influence and effectively collaborate with technical and non-technical stakeholders at all levels, including executive leadership.
  • Demonstrated ability to translate complex operational security incidents and risks into clear, actionable strategies and communicate effectively to diverse audiences.
  • Relevant industry certifications highly preferred (e.g., CISSP, CISM, GCIH, GCIA, or OSCP).
  • Bachelor’s degree in Computer Science, Information Security, or a related technical field; Master’s degree a plus.

Compensation, Benefits, & Perks

đź’» Work from home with a remote-first community

🏝 Unlimited PTO (and the encouragement to use it)

📝 Student loan payback program

🏥 100% employer-covered medical, dental, and vision options available to you and your dependents

đź’¸ Flexible Spending Account (FSA)

🏠 Monthly stipend toward your WFH setup, vacation, development and more

đź’° Employer-sponsored 401(k) with contribution match

🏋🏻‍♀️ Subsidized ClassPass Membership

🍼 Generous Paid Parental Leave

đź’˛ Hiring Ranges:

  • Tier 1: $80,000 - $100,000
  • Tier 2: $70,000 - $90,000

Unqork employs a market-driven approach to establish compensation ranges. In addition to a base salary, employees may also be eligible to receive a target incentive and company equity in the form of stock options.

An employee’s compensation within the range provided above depends on a variety of factors including, but not limited to, their location, role, skillset, level of experience, and similar peer salaries. As a remote-first company, Unqork incorporates a geographic differential into our compensation structure, depending on the candidate’s location. We utilize a tiered system—Tier 1 and Tier 2—to accurately reflect local market rates and ensure our compensation packages are both fair and competitive.

Our geographic tiers are defined as follows:

  • Tier 1: New York Metro, Seattle Metro, San Francisco Bay Area
  • Tier 2: All other US and US territory locations

Unqork embraces a culture of security and privacy awareness by consistently safeguarding sensitive information, adhering to company policies, and actively participating in training and initiatives to protect our data and the privacy of our stakeholders.

Unqork is an equal opportunity employer. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.

Read the full description
Security Security Risk Management Specialist II at Affirm

Evaluates third-party vendor security risks, builds automation workflows to scale GRC processes, and partners cross-functionally on security governance decisions.

Mid Posted 3 days ago RemoteFirstJobs Product
What this role involves

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.

About the Team

Affirm values security as being critical to the company’s continued success. The Security Risk Management team is evolving beyond traditional governance, risk, and compliance; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Affirm and our customers.

About the Role

The ideal candidate will evaluate, build, and refine solutions to third-party risk and security governance challenges across the Security Third Party Program and the broader Security Risk Management program. They are equally comfortable applying security policy to real-world vendor decisions and shipping automation using modern tooling (Python, Cursor, Claude, and other agentic coding platforms) to replace manual GRC work with scalable, code-defined workflows. They will develop deep expertise across the security risk domain, partner closely with business and engineering stakeholders, and play an active role in Affirm’s transformation of Security Risk Management from a compliance-oriented function into a security engineering discipline.

What You’ll Do

We are looking for a curious, collaborative Security Risk Management Specialist to help scale Affirm’s Third Party Risk Management program through process rigor, hands-on automation, and strong cross-functional partnership.

  • You will conduct third-party security assessments, reviewing vendor questionnaires, evaluating security controls, and documenting risk findings as a core contributor to Affirm’s TPRM program.
  • You will build and maintain automation to reduce manual GRC workflows, using Python, low-code platforms, and agentic coding tools to improve program efficiency and scale.
  • You will configure and maintain integrations across ticketing, GRC, and vendor management platforms to support consistent and repeatable workflow execution.
  • You will partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy on third-party risk reviews, follow-up actions, and risk-informed decisions.
  • You will help develop and maintain dashboards, metrics, and reporting that give stakeholders clear visibility into third-party risk posture.
  • You will contribute to process improvements and program documentation that mature Affirm’s security governance over time.

What We Look For

  • You have 3+ years of experience in Information Security, Risk Management, Compliance, or a related field.
  • You are comfortable using agentic coding tools (e.g., Cursor, Claude Code, Copilot) and have working knowledge of Python for scripting or automation.
  • You have familiarity with cloud environments (AWS, GCP, or Azure) and common cloud security concepts.
  • You have working knowledge of security frameworks and standards such as NIST, ISO 27001, SOC 2, and PCI DSS.
  • You communicate clearly in writing and verbally, and can translate security risk concepts for both technical and non-technical audiences.
  • You hold (or are working toward) a professional certification such as CISSP, CISM, CISA, or CRISC or bring equivalent practical experience. A BA/BS in a relevant field, or equivalent experience, is preferred.

Compensation & Benefits

Base Pay Grade - 3

Equity Grade - 4

Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills. Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)

USA Pacific base pay range (CA, WA, NY, NJ, CT) per year: $130,000 - 180,000

USA Sapphire base pay range (all other U.S. states) per year: $115,000 - 165,000

Please note that visa sponsorship is not available for this position.

#LI-Remote

Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.

We’re extremely proud to offer competitive benefits that are anchored to our core value of people come first. Some key highlights of our benefits package include:

  • Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
  • Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
  • Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
  • ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

We believe It’s On Us to provide an inclusive interview experience for all, including people with disabilities. We are happy to provide reasonable accommodations to candidates in need of individualized support during the hiring process.

[For U.S. positions that could be performed in Los Angeles or San Francisco] Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles Fair Chance Initiative for Hiring Ordinance, Affirm will consider for employment qualified applicants with arrest and conviction records.

By clicking “Submit Application,” you acknowledge that you have read Affirm’s Global Candidate Privacy Notice and hereby freely and unambiguously give informed consent to the collection, processing, use, and storage of your personal information as described therein.

Read the full description
Security Insider Risk Analyst (Remote, GBR)

Analyzes and monitors insider threats and suspicious user behavior to mitigate security risks within an organization.

Mid Remote Posted 3 days ago Himalayas
What this role involves
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations.
Read the full description
Security Product Security Engineer

Conducts comprehensive security assessments across mobile apps, IoT devices, firmware, compiled software, and browser extensions.

Mid Posted 3 days ago Himalayas
What this role involves
The Product Security Engineer is responsible for conducting comprehensive security assessments on various products, including mobile applications, IoT hardware/firmware, compiled software, and browser extensions.
Read the full description
Security Security Specialist – EMEA (location flexible)

Manages security operations, incident response, and compliance for a cloud infrastructure company serving enterprise customers across EMEA regions.

Mid Remote Posted 3 days ago Jobicy AI
What this role involves
About ClickHouse Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With more than 4,000 customers and ARR that...
Read the full description
Security Associate Offensive Security Consultant at SpecterOps

Conducts offensive security assessments, penetration tests, and red team operations for enterprise clients while developing tools and training materials.

Junior Remote Posted 3 days ago RemoteFirstJobs Product
What this role involves

SpecterOps is looking for an Associate Offensive Security Consultant to work on the Consulting Services team as operators, trainers, and program developers. The Adversary Simulation service line primarily works in large commercial enterprises conducting offensive security assessment services (red team assessments, penetration tests, offensive maturity assessments, web application tests, and specialty security assessments), supporting internal offensive programs, delivering training courses, and supporting research and development efforts. Our consultants work both onsite and offsite in diverse environments supporting our customers, anywhere from developing toolsets in support of operations to briefing executives.

A successful candidate will have excellent technical skills, impeccable soft skills, and be a well-organized, self-directed individual.

Salary Range: Base salary annually, commensurate with experience.

  • Associate Consultant - $100,000 - $125,000

Location: This position is remote, based in the U.S. with travel quarterly for in person company events and other ad hoc meetings.

  • Candidate must be authorized to work and reside in the United States; we do not currently sponsor immigration visas

Responsibilities

  • Plan and conduct offensive security engagements ranging in size, scope, focus, and approach
  • Effectively communicate findings, attack paths, recommendations, and strategy to technical and executive client stakeholders through written reports and verbal presentations
  • Build scripts, tools, or methodologies to enhance offensive services
  • Serve as a subject matter expert (SME) in one of the following areas: initial access, open-source intelligence analysis, adversary tradecraft, offensive Windows/Linux/macOS operations, evasion operations, or technical capability development
  • Utilize common offensive security testing tools and tradecraft
  • Stay up to date with cutting-edge adversary tradecraft and vulnerabilities
  • Effectively communicate successes and obstacles with fellow team members and team lead(s)
  • Interface with client contact(s) and staff in a constructive and professional manner
  • Coordinate and prepare for internal and customer facing meetings
  • Assist with scoping prospective engagements, participating in technical testing from kickoff through remediation, and mentoring less experienced staff
  • Train team members in adversary Tactics, Techniques, and Procedures (TTPs) and tools
  • Contribute new or improve existing content for SpecterOps training courses and assist in the delivery of course offerings (instruction, lab support, etc.)

Requirements

  • Ability to travel domestically and internationally; up to an average of 25% annually
  • Must be able to pass a criminal background check
  • Desire to embody our core values of passionate curiosity, consistent improvement, empathy, sustainability, humility, and empowerment through transparency

Associate Consultant:

As an Associate Consultant, your primary responsibility will be to learn. You will engage in, participate in, and contribute to the execution of various services and projects. In doing so, you will develop a foundational understanding of the SpecterOps Adversary Simulation service line and enhance your skills in one or more technical areas.

Desired Qualifications:

  • Foundational knowledge of offensive security concepts and assessments
  • Foundational knowledge of security principles, policies, and industry best practices
  • Working knowledge of Windows and *NIX-based operating systems
  • Working knowledge of networking concepts
  • Working knowledge of Active Directory
  • Working knowledge of programming or scripting languages, such as C#/.NET, C++, Python, PowerShell, Bash, etc.
  • Aptitude for technical writing, including assessment reports, presentations and operating procedures
  • Proficient written/verbal communication and interpersonal skills
  • A strong determination to improve both personal skills and the overall information security community through research efforts, including blog posts, conference presentations, open-source tool releases, and white paper publications
  • Willingness to support the delivery of public and private training offerings (e.g. providing lab support, addressing student questions, etc.)

Nice to Haves

  • Bachelor’s degree in a technical field
  • Experience participating in and/or leading Fortune 1000 and/or large Federal Government security assessments
  • Public community contributions (e.g., conference presentations, blog posts, white papers, public tool development)
  • Experience in administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments
  • Experience in technical writing
  • Experience working for a service-based information security consultancy
  • Experience developing and/or providing technical training
  • Desire to teach and train students in offensive techniques
  • Desire to travel internationally and domestically on a more frequent basis

What We Offer

  • Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
  • Flexible time off policy
  • 13 paid holidays annually
  • 401(k) with up to 4% company match
  • Equity and quarterly bonuses based on company performance
  • Remote work: $1,500 first year allowance to set up home office
  • $500 annual home office allowance after first year
  • $150 monthly cell phone and internet reimbursement
  • $5,000 annual professional development allowance
  • $5,250 towards continuing education or student loan repayment
  • $1,200 annual budget for lifestyle, wellness, pet insurance and more
  • A one-time $10,000 benefit towards family planning
  • Open intellectual property policies; allow researchers to retain rights over open-sourced research & tools
  • In person and virtual employee events throughout the year
  • And of course, company swag!

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. To request reasonable accommodations, please contact us at careers@specterops.io

Unsolicited resumes are not accepted

#LI-REMOTE

Read the full description
Security Offensive Security Consultant at SpecterOps

Conducts offensive security assessments, penetration tests, and red team operations for enterprise clients while developing tools, training team members, and communicating findings to stakeholders.

Mid Remote Posted 3 days ago RemoteFirstJobs Product
What this role involves

SpecterOps is looking for an Offensive Security Consultant to work on the Consulting Services team as operators, trainers, and program developers. The Adversary Simulation service line primarily works in large commercial enterprises conducting offensive security assessment services (red team assessments, penetration tests, offensive maturity assessments, web application tests, and specialty security assessments), supporting internal offensive programs, delivering training courses, and supporting research and development efforts. Our consultants work both onsite and offsite in diverse environments supporting our customers, anywhere from developing toolsets in support of operations to briefing executives.

A successful candidate will have excellent technical skills, impeccable soft skills, and be a well-organized, self-directed individual.

Salary Range: Base salary annually, commensurate with experience.

  • Consultant - $120,000 - $150,000

Location: This position is remote, based in the U.S. with travel quarterly for in person company events and other ad hoc meetings.

  • Candidate must be authorized to work and reside in the United States; we do not currently sponsor immigration visas

Responsibilities

  • Plan and conduct offensive security engagements ranging in size, scope, focus, and approach
  • Effectively communicate findings, attack paths, recommendations, and strategy to technical and executive client stakeholders through written reports and verbal presentations
  • Build scripts, tools, or methodologies to enhance offensive services
  • Serve as a subject matter expert (SME) in one of the following areas: initial access, open-source intelligence analysis, adversary tradecraft, offensive Windows/Linux/macOS operations, evasion operations, or technical capability development
  • Utilize common offensive security testing tools and tradecraft
  • Stay up to date with cutting-edge adversary tradecraft and vulnerabilities
  • Effectively communicate successes and obstacles with fellow team members and team lead(s)
  • Interface with client contact(s) and staff in a constructive and professional manner
  • Coordinate and prepare for internal and customer facing meetings
  • Assist with scoping prospective engagements, participating in technical testing from kickoff through remediation, and mentoring less experienced staff
  • Train team members in adversary Tactics, Techniques, and Procedures (TTPs) and tools
  • Contribute new or improve existing content for SpecterOps training courses and assist in the delivery of course offerings (instruction, lab support, etc.)

Requirements

  • Ability to travel domestically and internationally; up to an average of 25% annually
  • Must be able to pass a criminal background check
  • Desire to embody our core values of passionate curiosity, consistent improvement, empathy, sustainability, humility, and empowerment through transparency

Desired Qualifications:

  • Working knowledge of offensive security concepts and assessments
  • Working knowledge of security principles, policies, and industry best practices
  • Working knowledge of Windows and *NIX-based operating systems
  • Working knowledge of networking concepts
  • Working knowledge of Active Directory
  • Working knowledge of programming or scripting languages, such as C#/.NET, C++, Python, PowerShell, Bash, etc.
  • Aptitude for technical writing, including assessment reports, presentations and operating procedures
  • Proficient written/verbal communication and interpersonal skills
  • Independently contribute to significant services and projects
  • Ability to lead small teams and engagements
  • Ability to manage multiple projects at once
  • Ability to effectively communicate with clients, team members, and management for project delivery
  • Ability to manage client projects with limited supervision
  • Willingness to lead and execute offensive security service offerings (e.g., red team, penetration test, web application security assessment, cloud security assessment, offensive maturity assessment, etc.)
  • Willingness to develop and deliver training content as a lead course instructor
  • Willingness to mentor and train fellow consultants

Nice to Haves

  • Bachelor’s degree in a technical field
  • Experience participating in and/or leading Fortune 1000 and/or large Federal Government security assessments
  • Public community contributions (e.g., conference presentations, blog posts, white papers, public tool development)
  • Experience in administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments
  • Experience in technical writing
  • Experience working for a service-based information security consultancy
  • Experience developing and/or providing technical training
  • Desire to teach and train students in offensive techniques
  • Desire to travel internationally and domestically on a more frequent basis

What We Offer

  • Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
  • Flexible time off policy
  • 13 paid holidays annually
  • 401(k) with up to 4% company match
  • Equity and quarterly bonuses based on company performance
  • Remote work: $1,500 first year allowance to set up home office
  • $500 annual home office allowance after first year
  • $150 monthly cell phone and internet reimbursement
  • $5,000 annual professional development allowance
  • $5,250 towards continuing education or student loan repayment
  • $1,200 annual budget for lifestyle, wellness, pet insurance and more
  • A one-time $10,000 benefit towards family planning
  • Open intellectual property policies; allow researchers to retain rights over open-sourced research & tools
  • In person and virtual employee events throughout the year
  • And of course, company swag!

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. To request reasonable accommodations, please contact us at careers@specterops.io

Unsolicited resumes are not accepted

#LI-REMOTE

Read the full description