19 jobs found

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

Job Description Cybersecurity Operations Manager / Technical Account Manager (TAM) Location: San Diego, California Duration: 12 months Position Summary We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination. The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations. Primary Objectives During the First Year Lead the successful implementation and onboarding of CrowdStrike services. Establish governance, operational reviews, escalation paths, and service-management processes. Manage CTEM operations and remediation coordination. Manage Falcon Guardian / AIDR administration and operating processes. Assist ICW in maturing security operations and incident-response processes. Complete knowledge transfer and operational-readiness documentation before the end of the assignment. Key Responsibilities CrowdStrike Service Management Act as the primary operational liaison for Falcon Complete service matters. Coordinate critical-incident communications, follow-up actions, and closure. Ensure recommendations are assigned, tracked, and resolved by the appropriate team. Security Operations and GSI Coordination Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI. Maintain accountability through documented owners, due dates, actions, and escalations. Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams. CTEM and Falcon Guardian / AIDR Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR. Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement. Integrate findings into ICW workflows and partner with asset owners to reduce risk. Governance, Reporting, and Transition Lead weekly operational and monthly service reviews. Maintain a RAID log covering risks, assumptions, issues, and dependencies. Create executive dashboards and concise status reporting. Maintain the roadmap, RACI, escalation model, and transition plan. Deliverables During the Engagement Implementation oversight, deployment coordination, and operational transition plan. Security-operations governance framework, cadence, RACI, and escalation model. Executive dashboards, monthly service reviews, and action tracking. Incident-escalation and stakeholder-communication process. CTEM remediation tracking and Falcon Guardian / AIDR operating procedures. RAID log and remediation-status reporting. Knowledge-transfer and operational-readiness documentation. Required Experience and Qualifications 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services. 5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs. 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR. Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager. Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations. Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation. Strong communication skills and the ability to translate technical issues into business impact and clear actions. Preferred Technical Experience CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch. Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations. ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools. Identity platforms such as Microsoft Entra ID, Active Directory, and Okta. Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud. Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices. Cybersecurity and Leadership CISSP - Certified Information Systems Security Professional. CISM - Certified Information Security Manager. CCSP - Certified Cloud Security Professional. GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification. CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability. CrowdStrike CrowdStrike Certified Falcon Administrator (CCFA). CrowdStrike Certified Falcon Responder (CCFR). CrowdStrike Certified Falcon Hunter (CCFH). Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM. Program and Service Management PMP - Project Management Professional. ITIL 4 Foundation or advanced ITIL certification. Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.

Job Description Job Title: Software Test Analyst Location: Lansing, MI 48933 (Hybrid) Hire Type: Contract (13 months+) Job Summary: The Client is seeking a Software Test Analyst 3 to provide exceptional customer service and testing support primarily for project needs within the Quality of Life (QoL) agencies. This role focuses on ensuring the quality, accuracy, and reliability of enhancements and technology updates for a public-facing applications that provide services to the residence of Michigan. Required Education: Bachelor's degree Required Skills: Minimum of 5 years conducting comprehensive software testing activities including test planning test case design execution defect documentation and process analysis to improve quality and reliability Minimum of 5 years creating refining and managing test cases and acceptance criteria within Agile development projects including supporting user story validation and participating in sprint ceremonies Minimum of 2 years working directly with senior management to communicate testing impacts facilitate discussions on quality strategy contribute to risk assessments and gain alignment on testing approaches and defect resolution Minimum of 2 years testing IT solutions designed for public use including validating functionality accessibility performance and security considerations for customer-facing applications. Preferred Skills: Recommended to have 2 years' experience with ADA/WCAG accessibility and compliance testing Recommended to have 2 years' experience with reviewing and triaging vulnerability scan results Recommended to have 1-year experience working with systems or programs governed by state and/or federal regulations ensuring quality practices support compliance requirements. Job Responsibilities: Develop execute and maintain test plans test cases and test scripts Perform functional regression integration and user acceptance testing Identify document and track defects ensuring clear communication and timely resolution Validate system changes and enhancements to support agency goals and compliance with Client standards Participate in project meetings provide input on requirements from a testing perspective and support continuous improvement efforts Additionally this role serves as a key member of the Client Agency Services QA/BA team contributing to various QoL support requests and operational team activities Demonstrate strong customer service and communication skills Help guide agency partners through client processes policies and quality standards Quickly learn new applications workflows and project contexts Be self-directed well organized and confident in building strong working relationships Adapt easily to shifting priorities changing project needs and evolving agency requirements.

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. WHAT YOU'LL DO As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their devices, and our work locations. You'll investigate malware and advanced threats, secure our SaaS applications, harden internal configurations, propose security architecture improvements, and build the alerts and reports that keep the team ahead of risk. You'll own core security infrastructure that sits at the center of Enterprise Security operations and works closely with Cloud Security, App Security, and Information Technology. That means developing and enforcing policies, expanding our SIEM capabilities with partners across the business, and evaluating vendor and partner technologies for security gaps. Your day-to-day spans threat and malware investigations, SaaS security, AI security, architecture review, MDM, communications management, and vulnerability remediation. You'll secure communications, support compliance efforts, and automate wherever it reduces toil. You'll work both independently and cross-functionally, and you'll mentor junior engineers on security fundamentals. You'll have the opportunity to implement DLP where needed as well as secure AI as it develops and is used to drive business function. As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents. Responsibilities: Design, implement, and operate security solutions that protect Braze's employees, devices, and infrastructure, scaling them as the organization grows Expand SIEM and automation capabilities: build and tune detections, improve alerting, and automate detection and reporting pipelines, including prioritizing data ingestion and keeping systems healthy Review and govern MCP and AI agent integrations, set controls for AI-assisted coding environments, and define policy for autonomous AI tooling across the company Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening Lead security activities across the enterprise stack, including vulnerability testing and analysis, security event investigation, and evaluation of new tools and technologies to reduce business risk Serve as a key decision maker on internal product and system deployments, and ensure teams build in line with security policy and best practice Act as a secondary resource for adjacent domains, (AppSec, compliance, cloud security, system security) in a fast-moving environment Participate in an on-call rotation and partner with IT, Devops, Escalations, and other members of security to respond to critical incidents and escalations Experience maintaining corporate MDM on macbooks, and mobile devices Experience in scripting and light coding Investigate and respond to malware, social engineering, and phishing independently This role is a key decision maker regarding internal product and system deployments Mature our Zero Trust environment and serve as the subject-matter expert on proxy, network, and VPN considerations WHO YOU ARE Qualifications: 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security 4+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation Prior experience working as a technical authority in a team environment, deep hands-on technical expertise, not just admin-level familiarity. You understand how the technology works internally and what goes on behind the scenes Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands on experience with securing Email, Mac endpoints, IAM ( okta and Gsuite ), Crowdstrike EDR, SOAR, Enterprise networking security ( both endpoint and infra ), and Forensics Past experience conducting end-to-end security reviews of SaaS applications, Data access and movement, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards Past experience leading the design, implementation, and continuous tuning of security programs across laptop endpoint and networks; leading policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data A self-starter with great communication and organizational skills Bonus: Forensics experience Cloud security experience Technical Security Certifications that delve deeper than high level concepts Experience with being a foundational security engineer and/or building a new security team ground up For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $128,900 and $180,000/year with an expected On Target Earnings (OTE) between $143,200 and $200,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades. Braze is also proudly certified as a Great Place to Work in the U.S., the UK, Australia, and Singapore. The company is headquartered in New York with offices in Austin, Berlin, Bucharest, Chicago, Dubai, Jakarta, London, Paris, San Francisco, São Paulo, Singapore, Seoul, Sydney and Tokyo. BRAZE IS AN EQUAL OPPORTUNITY EMPLOYER At Braze . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. WHAT YOU'LL DO As a Senior Security Engineer on the Enterprise Security team, you'll protect Braze employees, their devices, and our work locations. You'll investigate malware and advanced threats, secure our SaaS applications, harden internal configurations, propose security architecture improvements, and build the alerts and reports that keep the team ahead of risk. You'll own core security infrastructure that sits at the center of Enterprise Security operations and works closely with Cloud Security, App Security, and Information Technology. That means developing and enforcing policies, expanding our SIEM capabilities with partners across the business, and evaluating vendor and partner technologies for security gaps. Your day-to-day spans threat and malware investigations, SaaS security, AI security, architecture review, MDM, communications management, and vulnerability remediation. You'll secure communications, support compliance efforts, and automate wherever it reduces toil. You'll work both independently and cross-functionally, and you'll mentor junior engineers on security fundamentals. You'll have the opportunity to implement DLP where needed as well as secure AI as it develops and is used to drive business function. As a senior team member, you'll help build functionality for a high-scale, growing customer base, collaborate with diverse security professionals, address unique security challenges, participate in on-call rotations, and respond to critical incidents. Responsibilities: Design, implement, and operate security solutions that protect Braze's employees, devices, and infrastructure, scaling them as the organization grows Expand SIEM and automation capabilities: build and tune detections, improve alerting, and automate detection and reporting pipelines, including prioritizing data ingestion and keeping systems healthy Review and govern MCP and AI agent integrations, set controls for AI-assisted coding environments, and define policy for autonomous AI tooling across the company Secure SaaS applications and internal systems through policy design, control enforcement, and configuration hardening Lead security activities across the enterprise stack, including vulnerability testing and analysis, security event investigation, and evaluation of new tools and technologies to reduce business risk Serve as a key decision maker on internal product and system deployments, and ensure teams build in line with security policy and best practice Act as a secondary resource for adjacent domains, (AppSec, compliance, cloud security, system security) in a fast-moving environment Participate in an on-call rotation and partner with IT, Devops, Escalations, and other members of security to respond to critical incidents and escalations Experience maintaining corporate MDM on macbooks, and mobile devices Experience in scripting and light coding Investigate and respond to malware, social engineering, and phishing independently This role is a key decision maker regarding internal product and system deployments Mature our Zero Trust environment and serve as the subject-matter expert on proxy, network, and VPN considerations WHO YOU ARE Qualifications: 5+ years of Security Engineering experience with a strong focus on enterprise security, network security, endpoint security 4+ years of experience working in a corporate security organization/environment with hands on, technical, user facing implementation Prior experience working as a technical authority in a team environment, deep hands-on technical expertise, not just admin-level familiarity. You understand how the technology works internally and what goes on behind the scenes Professional experience with the modern tech stack and protecting SaaS applications. Direct technical and hands on experience with securing Email, Mac endpoints, IAM ( okta and Gsuite ), Crowdstrike EDR, SOAR, Enterprise networking security ( both endpoint and infra ), and Forensics Past experience conducting end-to-end security reviews of SaaS applications, Data access and movement, Technical architecture, authentication and authorization controls, and contractual security requirements, to ensure third-party tools meet organizational security standards Past experience leading the design, implementation, and continuous tuning of security programs across laptop endpoint and networks; leading policy development, incident triage, data classification alignment, and cross-functional collaboration to prevent unauthorized exfiltration of sensitive data A self-starter with great communication and organizational skills Bonus: Forensics experience Cloud security experience Technical Security Certifications that delve deeper than high level concepts Experience with being a foundational security engineer and/or building a new security team ground up For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $128,900 and $180,000/year with an expected On Target Earnings (OTE) between $143,200 and $200,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades. Braze is also proudly certified as a Great Place to Work in the U.S., the UK, Australia, and Singapore. The company is headquartered in New York with offices in Austin, Berlin, Bucharest, Chicago, Dubai, Jakarta, London, Paris, San Francisco, São Paulo, Singapore, Seoul, Sydney and Tokyo. BRAZE IS AN EQUAL OPPORTUNITY EMPLOYER At Braze . click apply for full job details

Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver on a scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for an Information Technology Specialist at the journeyman level supporting Headquarters Air Force Materiel Command (HQ AFMC) A4/10 in Wright Patterson AFB, OH. The HQ AFMC Directorate of Logistics, Civil Engineering, Force Protection, and Nuclear Integration (A4/10) is responsible for shaping the workforce and infrastructure needed to deliver logistics, sustainment, installation support, and force protection capabilities across the command. This includes providing oversight for acquisition logistics, supply chain management, depot maintenance, base-level logistics operations, and enterprise security programs. Additionally, the directorate delivers strategic facility and infrastructure oversight while providing command-wide direction for Major Command (MAJCOM) security operations, ensuring the readiness and responsiveness required to support war-winning expeditionary capabilities. Responsibilities include, but are not limited to the duties listed below: Provide day-to-day Information Technology Specialist support within Sensitive Compartmented Information Facilities (SCIFs) supporting DoD agencies, the Office of the Secretary of Defense (OSD), and HQ AFMC, including classified enclave activities. Provide Information Assurance (IA) and technical security administrative assistance, IT endpoint administration and support, network engineering assistance, and Site Information Systems Security Manager (ISSM)/Information Systems Security Officer (ISSO) support. Install, maintain, audit, refresh, and support a secure Microsoft Windows endpoint environment. Maintain DoD and Air Force internet applications and protocols, including Internet Protocol (IP), Transmission Control Protocol (TCP), Hypertext Transfer Protocol (HTTP), Secure Hypertext Transfer Protocol (HTTPS), File Transfer Protocol (FTP), and Secure Sockets Layer (SSL). Interface with AFMC HQ customers and provide IT-related support to quickly resolve technical issues. Analyze and troubleshoot system anomalies to ensure optimum equipment performance. Perform periodic maintenance, hardware upgrades and replacement, firmware updates, and system configuration changes. Attend planning and requirements meetings with IT staff, program managers, analysts, and customers as required. Prepare systems for operational use and support operational tests and inspections. Provide technical guidance and Information Assurance support for AFMC technologies. Apply working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies to maintain system operations. Aid with the acquisition and sustainment of IT systems for weapon systems, subsystems, components, and equipment. Assist with security accreditation and information technology certification processes. Assist in the operation of necessary IT systems to ensure standardized file structures and seamless file sharing to support daily interactions with the SIO, SSO, staff, and directorate senior staff. Advise and assist in the development of system security management plans, computer Certification and Accreditation documentation, security vulnerability analyses, and other system security documents identified in MIL-HDBK 1785, DoDI 5000.02, and AF Supplement 1. Attend meetings and prepare/present briefings, graphics, and visuals for/to leadership. Prepare security paperwork, including but not limited to DD Form 2875 and Communications Security (COMSEC) inspection criteria. Assist in access control and perform escort duties for Video Teleconferencing (VTC) visitors. Answer telephones and other modes of administrative communication in the performance of duties. Perform self-inspections; identify security discrepancies; and report security incidents. Support security inspections; identify security discrepancies; and assist in report preparation. Perform courier responsibilities within the local area. Control program media and information within Air Force Materiel Command (AFMC) security guidelines. Populate and update databases, including but not limited to suspense tracking, personnel access, facility, JWICS system, and SharePoint databases, in the performance of assigned duties. Perform daily opening and closing of the SCIF and respond to SCIF after-duty-hour alarm activations when notified. Support AFMC/A2 Directorate JWICS communications to ensure cognizant parties are informed and appropriate responses are prepared, coordinated, and communicated while maintaining required security disciplines. Support the proper handling, preparation, and tracking of physical classified products entering or leaving the facility. Support planning, formulation, editing, development, publication, and storage of Special Access Program (SAP) and Top Secret/Sensitive Compartmented Information (TS/SCI) products. Support meetings and events attended or hosted by the Senior Intelligence Officer (SIO) on an as-required basis. Develop, maintain, and modify schedules and calendars as required on multi-level security systems. Use updated Security Classification Guides (SCGs) or other source documents to perform classification reviews on JWICS IT documentation and ensure proper derivative classification on all documents encountered during performance of duties. Support administrative tasks as necessary to support management, acquisition, and operations functions. Requirements Must have an active or current Top Secret security clearance with Sensitive Compartmented Information eligibility, verifiable in the Defense Information System for Security (DISS). BA/BS and at least three (3) years of experience in the respective technical/professional discipline being performed with proper certifications required in the labor category performance requirements OR six (6) years of directly related experience with proper certifications as described in the labor category performance requirements. Must be able to work successfully in a dynamic environment and effectively interact with numerous DoD, Agency, military/civilian personnel, and industry partners. Must be able to lift up to 50 pounds. Must meet position and certification requirements outlined in DoD Directive 814 for IA Technician Level II within six months of the date of hire. Must have working knowledge of various DODIIS Cryptologic SCI Information Systems Security Standards, Common Criteria, and System Security Policy as they relate to Certification and Accreditation (C&A). Must be familiar with security policy manuals, appropriate Intelligence Community Directives (ICDs), and other guiding policy documents. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national security and public well-being. Growth-Oriented Environment - Learn from technical leaders, innovate within Agentic AI, and mentor those around you in AI best practices. Culture of Empowerment - You'll be part of a team that values innovation, trust, collaboration, and mission success Please join us, as together we build a better world one mission at a time powered by Technology Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development

This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 11 Job Description The Role As a Cyber Incident Response Analyst, you will be part of the Cyber Defence team that develops and oversees the company's security program, ensuring S&P Global is protected from existing and emerging threats. In close partnership with Security Operations and Threat Intelligence, you will detect, analyze, and decisively respond to security incidents, enrich investigations with timely intelligence, and help drive proactive defences. While based in the UK, you will support response and intelligence needs globally. Candidates should have a genuine interest in cyber security and a strong grasp of attacker tactics, techniques, and procedures (TTPs). This role requires a detail-oriented, critical thinker who understands how adversaries exploit systems, networks, and people-and how to respond. Experience applying threat intelligence to investigations and to improve detections is highly desirable. Primary Responsibilities Coordinate and triage response to cybersecurity events and conduct forensic analysis across endpoints, networks, cloud, and SaaS. Integrate threat intelligence into investigations (e.g., enrich IOCs, map activity to MITRE ATT&CK, identify likely threat actors/TTPs, and assess potential impact). Understand the threat landscape through collaboration with industry peers, FS-ISAC, trust groups, and commercial/open-source intelligence, translating insights into actionable recommendations. Develop, maintain, and operationalize Incident Response playbooks and SOPs; include PIRs (Priority Intelligence Requirements), collection plans, and feedback loops to refine detections. Work closely with the SOC to investigate incidents and deliver containment, remediation, and root cause analysis; produce high-quality intel-informed incident reports. Create and tune detections (e.g., SIEM/SOAR, EDR) using intelligence signals (TTPs, behaviors, YARA/Sigma where applicable). Produce and present consumable intelligence outputs (e.g., flash alerts, threat overviews, executive briefs) tailored to technical and non-technical stakeholders. Contribute to vulnerability/threat surfacing (e.g., emerging CVEs, exploit trends) and advise on risk-based prioritization. Deliver actionable incident and hunting metrics to management; assess detection coverage and recommend improvements. Follow the end-to-end incident response lifecycle and support post-incident lessons learned with intelligence-driven enhancements. Build an understanding of key S&P technology, systems, and business practices to contextualize threats and drive pragmatic defenses. Participate in information-sharing activities (e.g., FS-ISAC submissions) in line with TLP and legal/compliance requirements. Required Qualifications Working knowledge of common cyber attacks, tools, and attacker tradecraft; ability to map activity to MITRE ATT&CK and articulate likely TTPs. Demonstrated experience handling security events in critical environments and applying intelligence to accelerate triage and response. Experience analyzing system, application, and cloud/SaaS logs to investigate security and operational issues; comfort enriching with IOCs and behaviours. Hands-on experience with a SIEM (Splunk preferred) for investigations, alert creation, reporting, and threat hunting. Ability to produce clear, actionable intel and incident reports, including executive-ready summaries and visuals. Familiarity with threat intel workflows: collection planning, source evaluation, indicator lifecycle, PIRs, TLP, and feedback loops to detections. Experience with one or more TIPs or intel data sources (e.g., MISP, OpenCTI, Recorded Future) and STIX/TAXII concepts. 3+ years of information security experience with a focus on incident response, threat hunting, or threat intelligence. Excellent communication skills for varied business and technical audiences; strong presentation skills. Comfortable working in a fast-paced environment; passion for cyber security. Advanced knowledge of network protocols (TCP/IP, HTTP) and operating systems. Preferred Qualifications Experience in the financial services industry. Familiarity with threat hunting techniques (hypothesis-driven, ATT&CK-aligned, behavior-based). Windows and Linux administration tools and concepts. Understanding of threat actors and the cybercrime ecosystem, including initial access vectors, monetization paths, and supply-chain/SaaS attack patterns. Exposure to malware/TTP analysis at a functional level (family identification, persistence/discovery behaviors) and creation of detections (e.g., Sigma/YARA) is a plus. Experience producing finished intelligence products (tactical through executive) and briefing senior stakeholders. Relevant certifications (e.g., GCTI, GCFA/GCFR, GCIH, FOR578) or equivalent experience. Familiarity with information-sharing standards and practices (FS-ISAC, TLP) and legal/compliance considerations. Knowledge of cloud provider threat models and telemetry (AWS, Azure, GCP, M365/SaaS). Second language and/or geopolitical awareness for actor context is a plus. Compensation/Benefits Information: (This section is only applicable to US candidates) S&P Global states that the anticipated base salary range for this position is $100,000 to $170,000. Final base salary for this role will be based on the individual's geographic location, as well as experience level, skill set, training, licenses and certifications. In addition to base compensation, this role is eligible for an annual incentive plan. This role is not eligible for additional compensation such as an annual incentive bonus or sales commission plan. This role is eligible to receive additional S&P Global benefits. For more information on the benefits we provide to our employees, please click here . What's In It For You? Our Mission: Advancing Essential Intelligence. Our People: We're more than 35,000 strong worldwide-so we're able to understand nuances while having a broad perspective. Our team is driven by curiosity and a shared belief that Essential Intelligence can help build a more prosperous future for us all.From finding new ways to measure sustainability to analyzing energy transition across the supply chain to building workflow solutions that make it easy to tap into insight and apply it. We are changing the way people see things and empowering them to make an impact on the world we live in. We're committed to a more equitable future and to helping our customers find new, sustainable ways of doing business. Join us and help create the critical insights that truly make a difference. Our Values: Integrity, Discovery, Partnership Throughout our history, the world's leading organizations have relied on us for the Essential Intelligence they need to make confident decisions about the road ahead. We start with a foundation of integrity in all we do, bring a spirit of discovery to our work, and collaborate in close partnership with each other and our customers to achieve shared goals. Benefits: We take care of you, so you can take care of business. We care about our people. That's why we provide everything you-and your career-need to thrive at S&P Global. Our benefits include: Health & Wellness: Health care coverage designed for the mind and body. Flexible Downtime: Generous time off helps keep you energized for your time on. Continuous Learning: Access a wealth of resources to grow your career and learn valuable new skills. Invest in Your Future: Secure your financial future through competitive pay, retirement planning, a continuing education program with a company-matched student loan contribution, and financial wellness programs. Family Friendly Perks: It's not just about you. S&P Global has perks for your partners and little ones, too, with some best-in class benefits for families. Beyond the Basics: From retail discounts to referral incentive awards-small perks can make a big difference. For more information on benefits by country visit: Global Hiring and Opportunity at S&P Global: At S&P Global, we are committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent. By valuing different perspectives and promoting a culture of respect and collaboration, we drive innovation and power global markets. Recruitment Fraud Alert: If you receive an email from a domain or any other regionally based domains, it is a scam and should be reported to . S&P Global never requires any candidate to pay money for job applications, interviews, offer letters, "pre-employment training" or for equipment/delivery of equipment. Stay informed and protect yourself from recruitment fraud by reviewing our guidelines, fraudulent domains, and how to report suspicious activity here . . click apply for full job details

Job Description Job Description Experienced assessor sought to lead rigorous, evidence-based security assessments of cloud and hybrid systems supporting federal missions. Who we are looking for: Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will bring extensive hands-on experience conducting independent security control assessments of cloud and hybrid systems, with particular depth in federal cloud environments. This role requires sound professional judgment, strong analytical skills, and a practical, common-sense approach to applying security requirements to system data, technical evidence, mission context, and actual risk. Key Responsibilities: • Lead full-cycle Security Assessment and Authorization (SA&A) activities for cloud, hybrid, and enterprise systems as an independent assessor. • Assess Microsoft Azure and Amazon Web Services (AWS) environments, including the implementation and operating effectiveness of administrative, operational, and technical security controls. • Retrieve and review FedRAMP authorization packages and supporting documentation, then analyze the package for applicability, control inheritance, residual risk, gaps, and customer responsibilities. • Conduct detailed analysis of assessment artifacts, including system security plans, policies, procedures, architecture and data-flow diagrams, inventories, configurations, logs, scan results, test outputs, and other supporting evidence. • Develop Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Required Evidence Lists, and Plans of Action and Milestones (POA&Ms). • Perform network, system, application, and NIST security control testing from administrative, operational, and technical perspectives. • Analyze vulnerability scan results, interpret risk, and use manual validation and corroborating evidence to distinguish actionable findings from false positives or unsupported conclusions. • Apply security requirements using practical judgment and data context rather than relying solely on checklist compliance. Evaluate whether evidence is relevant, reliable, sufficient, and representative of the assessed environment. • Clearly communicate findings, risk, root cause, and feasible mitigation options to technical teams, system owners, executives, and other assessment stakeholders. • Coordinate evidence requests, interviews, test activities, and assessment schedules with customer personnel and Information Systems Security Analysts. • Support security assessment program operations and contribute to consistent assessment methods, quality reviews, and defensible reporting. Minimum Qualifications • Active Certified Information Systems Security Professional (CISSP) certification is required. • At least eight years of demonstrated, hands-on experience conducting security control assessments, including substantial experience serving as an independent assessor for cloud and hybrid systems. • Extensive experience conducting independent security assessments of federal systems hosted in Microsoft Azure and AWS environments, including evaluation of security controls, architecture, inherited controls, customer-configured controls, and cloud-specific risks. • Demonstrated experience retrieving, navigating, and analyzing FedRAMP authorization packages and associated security artifacts. • Strong knowledge of federal Risk Management Framework (RMF) processes and NIST security control assessment practices. • Ability to analyze large volumes of technical and governance evidence, connect information across artifacts, identify inconsistencies, and reach clear, supportable conclusions. • Strong understanding of IT security requirements, technical countermeasures, vulnerability management, risk management, contingency planning, secure data communications, and system security architecture. • Excellent technical writing and stakeholder communication skills, with the ability to explain risk and recommended mitigation in clear, decision-oriented language. • Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or eight additional years of relevant specialized experience. • Experience using CSAM or a comparable governance, risk, and compliance platform. Preferred Qualifications • Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Security Professional (CCSP), Certified Governance, Risk and Compliance (CGRC), or comparable cloud or assessment certification. • Experience supporting federal cybersecurity programs and conducting assessments, audits, or control implementation reviews in accordance with NIST Special Publications. • Experience assessing cloud service offerings that rely on FedRAMP-authorized services and documenting control inheritance and customer responsibility requirements. • DoD 8570/8140 IAM Level II eligibility or an equivalent qualification, when required by the customer environment. • Experience evaluating privacy and data protection considerations as part of security assessments. Success in this role: The successful assessor is technically credible, independent, and evidence-driven. They know when the data supports a finding, when additional validation is needed, and when a requirement must be interpreted in light of architecture, mission use, and actual exposure. They produce assessment results that are clear, consistent, defensible, and actionable. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

This job is with Braze, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Braze, we have found our people. We're a genuinely approachable, exceptionally kind, and intensely passionate crew. We seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization. To flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success. Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture. If you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can't wait to meet you. Braze is a modern, cloud-first SaaS company running entirely on cloud-native infrastructure - large-scale, distributed systems spanning AWS, GCP, and self-managed Kubernetes, backed by self-managed data stores such as MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering function as a senior individual contributor and technical leader for cloud security. This is a step up from our Senior Cloud Security Engineer role. Where a Senior engineer executes and improves our cloud security controls, a Senior Cloud Security Engineer II sets the technical direction: you define the standards and reference patterns other engineers build on, lead cross-team security initiatives end to end, take on the ambiguous problems that don't yet have a playbook (and write the playbook), and raise the bar for the whole team through mentorship and review. You'll go especially deep across three areas - secure architecture and threat modeling, detection engineering and incident response, and Kubernetes and platform security - and you'll shape how Braze does cloud security across Engineering. This is a pure IC role; you lead through technical depth and influence rather than direct people management. WHAT YOU'LL DO Set the technical direction (leadership & standards): Define the cloud security standards, guardrails, and reference architectures that Infrastructure, SRE, and Product Engineering build on - turning point-in-time fixes into durable, org-wide patterns Set your own objectives and roadmap for high-impact cloud security work, in partnership with Security Engineering leadership, and drive it to measurable outcomes Lead cross-functional security initiatives end to end - scope, timeline, stakeholders, and delivery - guiding technical debates to a decision and owning the result Mentor and uplevel other security and platform engineers through pairing, design review, and feedback; act as a force multiplier and the go-to technical resource for cloud security Represent cloud security in architecture and design forums, translating complex attack paths and risk into clear, actionable guidance engineers will actually adopt Secure architecture & threat modeling: Own threat modeling as a discipline for new cloud technologies, services, and patterns adopted across Engineering - making it a repeatable, scalable practice rather than a one-off exercise Partner with Infrastructure, SRE, and Product Engineering to design secure-by-default cloud architectures and build practical, scalable controls across AWS, GCP, and self-managed systems Drive control-plane and IAM security strategy across AWS and GCP, including relationships with external identity providers, RBAC models, and least privilege at scale Continually assess posture, surface systemic and emerging risk, and set the priorities that reduce it Detection engineering, incident response & automation: Advance our detection strategy: design high-signal detections and SIEM rules (with our SIEM Management function) and own detection coverage for cloud threats end to end Serve as a senior incident responder and cloud-forensics lead for cloud and run-time security investigations across AWS and GCP - and codify what you learn into standard IR playbooks and preventative controls Own and optimize security tooling such as CrowdStrike (EDR/CSPM/IR), Tenable, and native cloud security services, and lead our vulnerability management workflow - scanning, triage, prioritization, and remediation - for cloud assets Kubernetes & platform security: Own the security of our self-managed Kubernetes environments - control plane, nodes, workload isolation, admission control, run-time security, and the CI/CD supply chain feeding them Set the standards for Infrastructure-as-Code and pipeline security (Terraform preferred): design and harden IaC and CI/CD automation so security is built into how we ship Establish best practices for patch management, base-image hardening, and version management across containerized and VM-based environments Lead the security of large-scale, distributed systems and self-managed data stores (e.g., MongoDB), accounting for their real-world operational and security implications WHO YOU ARE You are a senior individual contributor who leads through technical depth and influence rather than authority. You can take an ambiguous, open-ended cloud security problem, define the objective yourself, and deliver a solution that becomes the way Braze does it going forward. You translate complex cloud attack paths, IAM misconfigurations, and multi-step threat scenarios into guidance engineers adopt, and you balance strong controls with operational reality. You raise the people around you - through mentorship, review, and the standards you set - and you stay current with the cloud security landscape, tools, and threats. Above all, you can walk someone through the messy middle - what you tried, what broke, and what you'd do differently. THE FEW HARD PREREQUISITES: These are the genuinely pass/fail requirements: Several years owning cloud security in production - on-call for it, not adjacent to it Hands-on, not theoretical: AWS as primary cloud, working GCP, self-managed Kubernetes You read and write code (Python, TF) For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $149,000 and $235,000/year with an expected On Target Earnings (OTE) between $166,000 and $261,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company. WHAT WE OFFER Braze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here . More details on benefits plans will be provided if you receive an offer of employment. From offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as: Competitive compensation that may include equity Retirement and Employee Stock Purchase Plans Flexible paid time off Comprehensive benefit plans covering medical, dental, vision, life, and disability Family services that include fertility benefits and equal paid parental leave Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend A curated in-office employee experience, designed to foster community, team connections, and innovation Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching Employee Resource Groups that provide supportive communities within Braze Collaborative, transparent, and fun culture recognized as a Great Place to Work ABOUT BRAZE Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences. The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 "Best of Marketing and Digital Advertising Software Product" in 2025. Braze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America's Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology by Great Place To Work , among other accolades . click apply for full job details

Job Description Job Description Description: OCH Technologies is seeking a Security Assessment Lead to act as the technical authority for all independent risk assessments, vulnerability assessments, and analyses of alternatives conducted under this contract. The candidate will lead assessment planning, assign and mentor assessment teams, ensures assessment execution follows NIST 800-53A methodology, and is accountable for the quality and completeness of all System Security Assessment Reports (SARs) delivered. This position supports a proposal effort and is contingent upon award, customer approval, and successful onboarding requirements. Location Hybrid - FAA Hubs Air Traffic Control System Command Center (ATCSCC) Washington, DC OR Mike Monroney Aeronautical Center (MMAC) Oklahoma City. OK. This position may require up to 50% travel to FAA facilities. Core Responsibilities & Duties Serve as primary technical POC for all security assessments, vulnerability assessments, and analyses of alternatives under the contract. Lead assessment planning and coordination at FAA facilities nationwide, including developing System Security Assessment Test Plans and managing pre- and post-assessment activities. Personally lead complex or high-visibility assessment events. Ensure all assessments use the three NIST 800-53A methods (Examine, Interview, Test) and produce compliant SARs. Develop and maintain vulnerability scanning strategies including Tactics, Techniques, and Procedures (TTPs). Evaluate and recommend scanning tools and configurations for NAS and Mission Support environments. Conduct risk translation from assessment findings and develop draft Plans of Action and Milestones (POAMs) with actionable remediation guidance. Lead regression assessment activities to validate that patches, fixes, and configuration changes mitigate previously identified vulnerabilities. Attend all Program Management Reviews and report on assessment status, deliverable timelines, and technical issues. Mentor and develop junior assessment staff. Build a team culture where analysts take ownership of their assigned systems and drive assessments to completion independently. Coordinate with NAS system owners, FAA facility staff, AIT/AIS, and ACG to schedule assessments and resolve access and logistical issues. Ensure assessment work in NAS operational environments follows safety protocols. Test methods for NAS systems may need to be conducted in lab environments due to air traffic safety constraints. Responsibilities may evolve over time to support team and organizational goals but will remain consistent with the overall scope of the role. Requirements: Minimum Qualifications Education Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics from an accredited institution. Master's degree in a related field preferred Experience At least fifteen (15)+ years of cybersecurity experience. Minimum of five (5) years of management and supervisory responsibility leading risk and vulnerability assessment teams. At least two (2) years of relevant experience performed within the last 3 years. Demonstrated track record of successful completion of multiple independent risk assessments and vulnerability assessments on complex, multi-system environments. Deep working knowledge of NIST SP 800-53 (Rev. 4/5), NIST SP 800-53A, NIST SP 800-37 (RMF), and FIPS-199 security categorization. Hands-on experience with vulnerability assessment tools including Nessus, WebInspect, AppDetective Pro, nMap, and Tcpdump. Experience developing System Security Assessment Reports (SARs), Plans of Action and Milestones (POAMs), and assessment test plans. Experience working in Operational Technology (OT), Industrial Control Systems (ICS), or other safety-critical infrastructure environments. Security Clearance Requirement Candidate must have the ability to obtain and maintain a Public Trust Active Secret level clearance preferred Certifications Current cybersecurity certification aligned with security assessment and risk management disciplines, including CISSP, GCED, CompTIA CASP+, CISA, or an equivalent. CAP (Certified Authorization Professional) or equivalent RMF certification preferred Preferred Qualifications Prior experience assessing National Airspace System (NAS) systems or other FAA Air Traffic Organization (ATO) systems. Familiarity with FAA Order 1370.82, FAA Order 1370.121, and the ATO ISCM Plan. Experience supporting FAA Assessment & Authorization (A&A) processes. Experience conducting assessments of cloud-based services and web-facing applications in federal environments. Experience supporting international assessments or telecommunications infrastructure assessments. Other Required Skills and Abilities Strong written and verbal communication skills with the ability to produce clear, defensible, and actionable technical documentation. Proven leadership and team development capabilities. Ability to manage multiple assessment efforts simultaneously while maintaining quality standards. Strong analytical and problem-solving skills. Ability to work effectively with government stakeholders, technical teams, and senior leadership. About Us : At OCH, we are more than just a government contracting firm; we are innovators and leaders in providing cutting-edge IT services and cybersecurity solutions. Driven by a set of fundamental values, we excel in creating secure, efficient, and forward-thinking solutions that empower the government agencies we work with. Our commitment to maintaining the highest standards of integrity, adapting swiftly to new challenges, and focusing on the people we serve ensures that we consistently exceed expectations and lead the industry in innovation and reliability. What Defines Us: Integrity - We act with unwavering honesty, ensuring every decision is rooted ethically. Adaptable - We swiftly adapt to changes, seizing opportunities to innovate and lead. People-Focused - We prioritize relationships, championing growth and mutual success. Accountable - We own our outcomes, striving for excellence through continuous improvement. Collaborative - We cultivate teamwork, harnessing diverse talents to forge groundbreaking solutions. Why Join Us? Step into a role at OCH where your contributions make a tangible impact. Join a team that values creativity and initiative, offering a platform to transform the landscape of government IT services. Here, your work is not just a career-it's a mission. Embrace the opportunity to grow, innovate, and excel alongside industry leaders who are as passionate about technology as they are about making a difference. Plus, we offer a comprehensive benefits package designed to support your wellbeing and work-life balance, including: Paid time off and Holidays Medical, Dental, and Vision Insurance Paid Parental Leave Short-term disability, long-term disability, and life insurance - Employer Paid! 401(k) Additional Voluntary Life Insurance Tuition Reimbursement & More! E-Verify Participation: OCH Technologies, LLC is a participant of E-Verify to verify the identity and employment eligibility of newly hired employees. Veteran's Preference and Accessibility Statement : At OCH Technologies, we deeply respect and appreciate the unique skills and experiences that veterans bring to our team. As a federal contractor, we encourage qualified veterans to apply and provide preference where permitted by law. Your service and dedication are valued here. We are committed to creating a workplace that is open, welcoming, and accessible to everyone. In accordance with the Americans with Disabilities Act (ADA) and Section 503 of the Rehabilitation Act, we provide reasonable accommodations throughout the hiring process to ensure individuals with disabilities can apply without barriers. If you need assistance or an accommodation, please contact us at . OCH Technologies, LLC is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, disability, gender identity, or any other protected characteristic as outlined by federal, state, or local laws.

Job Description Job Description Mobile Application Architect Location: Alexandria, VA (On site) Position Type: Contract app architect working on both web and mobile application. Generally prior transportation experience does well here. 5+ years experience, End-to-end architecture, O365 Job Description Job Description We are looking for a Senior Application Architect to support the modernization of our clients websites. The architect will focus on application integration, configuration, testing, deployment, and ongoing support of SmarTrip Mobile App 2.0, while ensuring alignment with Enterprise Architecture framework, IT strategy, SDLC standards, and security requirements. What You'll Do Apply application architecture principles to support teams developing requirements across multiple functional areas Support the build, configuration, testing, and deployment of SmarTrip backend system components for SmarTrip Mobile App 2.0 Coordinate work efforts to prevent overlap and ensure alignment with Enterprise Architecture, IT strategy, SDLC standards, and architectural governance Prepare as-is and to-be architecture artifacts, including system connectivity diagrams, application reference models, interface documentation, data dictionaries, and staging plans Collaborate closely with data architects, infrastructure engineers, and software program managers to ensure enterprise-wide architectural integrity Guide and support business analysts, test analysts, and documentation specialists Review system hardening activities and assist with vulnerability remediation efforts Complete mandatory annual security awareness training What You'll Need Required Bachelor's degree in Computer Science, Information Technology, Management Information Systems, or a related discipline 5+ years of experience in application architecture for web and mobile applications Strong understanding of end-to-end application architecture, from conception through deployment Proven experience planning and deploying complex custom web application solutions and process improvements Experience coordinating software requirements and working directly with development teams Experience with administration and architecture of Business Process Management (BPM) solutions Proficiency using Microsoft 365 tools, including: Visio and Moqups for documenting application architectures and system relationships Excel for basic software requirements documentation Word and PowerPoint for technical documentation and presentations Strong analytical, verbal, and written communication skills Preferred Experience supporting third-party mobile applications (iOS and Android) integrated with enterprise backend systems Prior experience working within large, regulated, or public-sector enterprise environments Physical Demands Ability to safely and successfully perform the essential job functions consistent with the ADA and other federal, state, and local standards Sedentary work that involves sitting or remaining stationary most of the time, with occasional movement around the office for meetings Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

GovCIO LLC seeks a Senior CSOC Support Engineer to bolster cybersecurity operations for federal customers. In this role, you'll support a 24x7 Cyber Security Operations Center by managing and tuning SIEM and security tools, integrating new data sources, and improving alert fidelity. You'll troubleshoot complex issues, guide junior analysts, and collaborate with engineers to refine detection use cases and automation. You'll also document playbooks, liaise with government stakeholders, and help drive continuous improvements that strengthen mission-critical federal networks and systems against evolving cyber threats. Responsibilities Support and enhance tools and workflows for a 24x7 Cyber Security Operations Center (CSOC). Administer, tune, and integrate SIEM and other security platforms to improve alert quality. Troubleshoot complex security tooling and data ingestion issues. Develop and maintain detection content, runbooks, and standard operating procedures. Collaborate with analysts, engineers, and government stakeholders on incident handling and improvements. Mentor junior CSOC staff on tools, processes, and best practices. Monitor system health and performance of security infrastructure. Support automation initiatives to streamline triage and response activities. Required Skills Cybersecurity operations SIEM tools (Splunk/Elastic/etc.) IDS/IPS management Incident detection and triage Linux/Windows administration Network security and TCP/IPSecurity automation and scripting Vulnerability management Ticketing and ITSM tools Documentation and reporting

GovCIO LLC seeks a Senior Cyber Security Administrator to secure mission-critical federal IT systems. In this role, you will administer and harden security tools, monitor and investigate security events, and lead incident response to protect complex, multi-cloud and on-prem environments. You'll implement security baselines, support NIST/FISMA compliance, manage identity and access controls, and drive remediation of vulnerabilities. Working in a mission-driven, collaborative culture, you'll mentor others, influence security architecture, and help modernize government technology at scale. Responsibilities Administer and harden security tools, firewalls, IDS/IPS, and endpoint protection across federal environments. Monitor security events, investigate incidents, and coordinate response and remediation. Implement and maintain security baselines, configurations, and patch management processes. Support compliance with federal security standards (e.g., NIST, FISMA) and internal policies. Conduct vulnerability scans, analyze findings, and drive remediation with engineering teams. Manage identity and access controls, including privileged account management and MFA. Develop and update security documentation, runbooks, and standard operating procedures. Collaborate with Dev, Cloud, and Network teams to embed security into system designs. Support security audits, assessments, and ATO-related activities for federal systems. Mentor junior staff and contribute to continuous improvement of cybersecurity operations. Required Skills Network security administration (firewalls, IDS/IPS) Security Information and Event Management (SIEM) tools Endpoint protection and EDR platforms Vulnerability assessment and remediation Identity and Access Management (IAM) and MFANIST and FISMA compliance frameworks Incident detection, triage, and response Security hardening and configuration management Cloud security (AWS/Azure/GCP) fundamentals Scripting/automation (Power Shell, Python, or similar)

Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh

Job Description Job Description Job Title: Senior Vulnerability Management Analyst Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Type: Permanent Fulltime Overview Seeking a Senior Vulnerability Management Analyst to support vulnerability governance, risk management, compliance, and remediation oversight within a large-scale financial services technology environment. This role focuses on ensuring vulnerabilities are appropriately tracked, prioritized, escalated, and remediated in accordance with established security standards, risk frameworks, and service level requirements. The analyst will work across cybersecurity, infrastructure, cloud, application, and risk teams to analyze vulnerability data, monitor remediation progress, support risk exceptions, and provide clear reporting to technology leadership. This position is required in one of the following locations: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Responsibilities Manage vulnerability governance activities and support compliance with security policies, standards, controls, and risk frameworks. Analyze vulnerability data and remediation metrics across technology domains, including cloud and AWS based environments. Track remediation progress, aging, and SLA adherence and identify issues requiring escalation. Support vulnerability risk assessments, exception reviews, and risk acceptance processes. Monitor control effectiveness and identify recurring vulnerabilities, systemic risks, and remediation gaps. Prepare vulnerability metrics, trends, dashboards, and governance reporting for leadership and other stakeholders. Maintain vulnerability management standards, procedures, guidelines, and supporting documentation. Document process flows, remediation workflows, escalation paths, and governance processes. Maintain evidence and documentation supporting control validation, audits, regulatory reviews, and risk acceptance. Partner with technology and security teams to improve vulnerability management processes and data quality. Requirements 8+ years of experience in cybersecurity, technology risk, vulnerability management, or a closely related field. Strong experience with vulnerability management and vulnerability remediation governance in a large enterprise environment. Working knowledge of vulnerability management across AWS/cloud environments, infrastructure, applications, and related technology platforms. Experience tracking vulnerability remediation, aging, SLA compliance, risk exceptions, and escalations. Strong understanding of cybersecurity risk management, security controls, governance, and compliance requirements. Ability to analyze large vulnerability datasets and turn findings into actionable risk and remediation reporting. Advanced Microsoft Excel skills, including pivot tables, VLOOKUP/XLOOKUP, data cleansing, reconciliation, and trend analysis. Experience developing executive or leadership level reporting and presentations using PowerPoint. Strong technical writing skills with experience maintaining security standards, procedures, guidelines, and governance documentation. Experience documenting process flows and vulnerability remediation/governance workflows. Strong attention to data accuracy and the ability to identify trends, systemic risks, and control gaps. Ability to work effectively across cybersecurity, cloud, infrastructure, application, risk, and compliance teams. Sound judgment regarding risk escalation, remediation exceptions, and issues requiring leadership attention. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Technology, or a related technical field required. Ref: Pittsburgh

Job Description Job Description Experienced assessor sought to lead rigorous, evidence-based security assessments of cloud and hybrid systems supporting federal missions. Who we are looking for: Spry Methods is seeking an experienced Senior Cloud Security Assessor to join our team in the Washington, DC area. The successful candidate will bring extensive hands-on experience conducting independent security control assessments of cloud and hybrid systems, with particular depth in federal cloud environments. This role requires sound professional judgment, strong analytical skills, and a practical, common-sense approach to applying security requirements to system data, technical evidence, mission context, and actual risk. Key Responsibilities: • Lead full-cycle Security Assessment and Authorization (SA&A) activities for cloud, hybrid, and enterprise systems as an independent assessor. • Assess Microsoft Azure and Amazon Web Services (AWS) environments, including the implementation and operating effectiveness of administrative, operational, and technical security controls. • Retrieve and review FedRAMP authorization packages and supporting documentation, then analyze the package for applicability, control inheritance, residual risk, gaps, and customer responsibilities. • Conduct detailed analysis of assessment artifacts, including system security plans, policies, procedures, architecture and data-flow diagrams, inventories, configurations, logs, scan results, test outputs, and other supporting evidence. • Develop Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Required Evidence Lists, and Plans of Action and Milestones (POA&Ms). • Perform network, system, application, and NIST security control testing from administrative, operational, and technical perspectives. • Analyze vulnerability scan results, interpret risk, and use manual validation and corroborating evidence to distinguish actionable findings from false positives or unsupported conclusions. • Apply security requirements using practical judgment and data context rather than relying solely on checklist compliance. Evaluate whether evidence is relevant, reliable, sufficient, and representative of the assessed environment. • Clearly communicate findings, risk, root cause, and feasible mitigation options to technical teams, system owners, executives, and other assessment stakeholders. • Coordinate evidence requests, interviews, test activities, and assessment schedules with customer personnel and Information Systems Security Analysts. • Support security assessment program operations and contribute to consistent assessment methods, quality reviews, and defensible reporting. Minimum Qualifications • Active Certified Information Systems Security Professional (CISSP) certification is required. • At least eight years of demonstrated, hands-on experience conducting security control assessments, including substantial experience serving as an independent assessor for cloud and hybrid systems. • Extensive experience conducting independent security assessments of federal systems hosted in Microsoft Azure and AWS environments, including evaluation of security controls, architecture, inherited controls, customer-configured controls, and cloud-specific risks. • Demonstrated experience retrieving, navigating, and analyzing FedRAMP authorization packages and associated security artifacts. • Strong knowledge of federal Risk Management Framework (RMF) processes and NIST security control assessment practices. • Ability to analyze large volumes of technical and governance evidence, connect information across artifacts, identify inconsistencies, and reach clear, supportable conclusions. • Strong understanding of IT security requirements, technical countermeasures, vulnerability management, risk management, contingency planning, secure data communications, and system security architecture. • Excellent technical writing and stakeholder communication skills, with the ability to explain risk and recommended mitigation in clear, decision-oriented language. • Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or eight additional years of relevant specialized experience. • Experience using CSAM or a comparable governance, risk, and compliance platform. Preferred Qualifications • Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Security Professional (CCSP), Certified Governance, Risk and Compliance (CGRC), or comparable cloud or assessment certification. • Experience supporting federal cybersecurity programs and conducting assessments, audits, or control implementation reviews in accordance with NIST Special Publications. • Experience assessing cloud service offerings that rely on FedRAMP-authorized services and documenting control inheritance and customer responsibility requirements. • DoD 8570/8140 IAM Level II eligibility or an equivalent qualification, when required by the customer environment. • Experience evaluating privacy and data protection considerations as part of security assessments. Success in this role: The successful assessor is technically credible, independent, and evidence-driven. They know when the data supports a finding, when additional validation is needed, and when a requirement must be interpreted in light of architecture, mission use, and actual exposure. They produce assessment results that are clear, consistent, defensible, and actionable. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.