181 jobs found

This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets

This job is with Avaloq, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Company Description Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 10 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues. We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world's leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential. Job Description Avaloq's R&D Lab is building a SaaS, API-first, composable banking platform. As a Senior Site Reliability Engineer you will help build the reliability practice behind it. This is amongst the first technical roles we are hiring for our Fort Lauderdale site. You will partner with our Senior SRE in Zurich and work alongside our platform engineers and product teams. The first three to six months: Some of what you can expect early on: Learning our AWS environment, our serverless platform, and how our product teams build and release Contributing to the direction on observability tooling, together with the platform engineers, the SRE team, and our developers Working with the Zurich team on the incident and on-call operating model Taking on increasing responsibility as you build context, always in alignment with the Zurich team What you will do: Define and evolve SLIs, SLOs, and error budgets with product teams, and use them to drive reliability decisions Collaborate on the design of our observability approach for a distributed serverless system, covering metrics, logs, and traces Build the incident response practice with us: on-call model, escalation, blameless post-mortems, and the loop that turns findings into hardening work Build reliability automation that detects and remediates issues before they reach clients Improve CI/CD pipelines and deployment automation on GitHub Actions to reduce operational toil and release risk Work with product teams on resilient design, capacity planning, and progressive delivery approaches such as canary and blue-green Contribute to disaster recovery design and testing for client-facing environments Partner with Security and Compliance so that operational practice holds up to regulatory and audit expectations Help us define and implement operational readiness for client go-live Mentor colleagues and support a culture of shared operational ownership Our stack: Serverless-first on AWS: Lambda, DynamoDB, SQS, S3, and Bedrock. Terraform and OpenTofu for infrastructure, GitHub Actions for CI/CD. Product teams work in Rust, TypeScript, Python, Vue, and Angular. We do not run containers. Qualifications 5+ years in Site Reliability Engineering, DevOps, or production operations for distributed cloud systems, with substantial hands-on AWS experience Practical experience defining and working with SLIs, SLOs, and error budgets Strong incident response background, including on-call, triage under pressure, and post-mortem practice A clear point of view on observability for distributed systems, and the reasoning behind it Solid automation and scripting ability. We are language-agnostic; Rust, TypeScript, or Python all work here Excellent collaboration and communication skills, with a pragmatic approach to balancing speed and stability It would be a real bonus if you have: Experience with AWS serverless and event-driven architecture, including idempotency, retries, dead-letter queues, and failure handling. Strong AWS generalists who want to go deep here are welcome Experience taking a platform from pre-launch to production, including defining operational readiness criteria Experience building AI agents to monitor platform health Strong CI/CD background, ideally with GitHub Actions, including secrets management, least-privilege permissions, and deployment controls Infrastructure as Code experience with Terraform or OpenTofu Experience with progressive deployment approaches such as canary, blue-green, or rollback automation Disaster recovery design and testing for production SaaS Experience operating across more than one cloud provider, or designing for portability Experience operating a B2B SaaS platform in a regulated environment, including audit-sensitive release processes Familiarity with SOC 2, PCI DSS, or GDPR as they apply to operational practice Experience with AI-assisted engineering tools AWS certification, particularly DevOps Engineer - Professional, Solutions Architect - Professional, or Security - Specialty Additional Information This role will require regular travel to Switzerland We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices. In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self. We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way. Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.