This job is with Gilead Sciences Inc., an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Gilead, we're creating a healthier world for all people. For more than 35 years, we've tackled diseases such as HIV, viral hepatitis, COVID-19 and cancer - working relentlessly to develop therapies that help improve lives and to ensure access to these therapies across the globe. We continue to fight against the world's biggest health challenges, and our mission requires collaboration, determination and a relentless drive to make a difference. Every member of Gilead's team plays a critical role in the discovery and development of life-changing scientific innovations. Our employees are our greatest asset as we work to achieve our bold ambitions, and we're looking for the next wave of passionate and ambitious people ready to make a direct impact. We believe every employee deserves a great leader. People Leaders are the cornerstone to the employee experience at Gilead and Kite. As a people leader now or in the future, you are the key driver in evolving our culture and creating an environment where every employee feels included, developed and empowered to fulfill their aspirations. Join Gilead and help create possible, together. Job Description Key Responsibilities Validation and assurance strategy Develop risk-based validation or assurance plans based on intended use, GxP impact, process risk, system complexity, novelty, and supplier capability. Define lifecycle deliverables, acceptance criteria, evidence expectations, roles, and approval requirements. Apply critical thinking to focus effort on functions that could affect patient safety, product quality, record reliability, or regulatory compliance. Use supplier documentation and automated evidence when suitable, complete, reliable, and approved for use. Lifecycle execution and oversight Lead or approve GxP assessments, validation plans, user requirements, specifications, risk assessments, traceability, test strategies, test evidence, summary reports, and release decisions. Ensure requirements are clear, testable, risk-based, and traceable to objective evidence. Oversee scripted, unscripted, exploratory, scenario-based, automated, and regression testing as appropriate. Assess deviations, defects, residual risks, and corrective actions and confirm readiness before production use. Ensure configuration, interfaces, data migration, reports, calculations, workflows, security roles, electronic signatures, and audit trails are adequately verified. Validated-state maintenance Provide assurance oversight for changes, upgrades, patches, releases, incidents, periodic reviews, access reviews, backup and restore, business continuity, and system retirement. Evaluate change impact and regression needs using documented process and technical risk. Monitor validation health, overdue actions, recurring defects, supplier performance, and inspection-readiness indicators. Ensure archived data and records remain accessible, readable, complete, and protected throughout required retention periods. Data integrity and electronic records Assess controls for data creation, modification, review, approval, transfer, storage, reporting, retention, and deletion. Verify appropriate controls for attribution, contemporaneous recording, original records, accuracy, completeness, consistency, enduring retention, and availability. Ensure audit-trail requirements, review procedures, record ownership, metadata, and exception handling are defined and tested. Supplier and technology assurance Lead supplier assessments and determine how supplier quality systems, development practices, testing, certifications, and service controls may be leveraged. Evaluate SaaS, cloud, infrastructure, platform, low-code, automation, analytics, and AI solutions for applicable GxP and data-integrity risks. Define assurance expectations in quality agreements, service agreements, contracts, and support models. Confirm responsibilities for releases, incidents, security, backup, continuity, data return, and service termination. Governance, standards, and inspection readiness Maintain validation standards, templates, procedures, decision trees, risk models, and training materials. Provide independent Quality review and approval while preserving clear accountability for process owners, system owners, IT, and suppliers. Support internal audits, regulatory inspections, due diligence, and responses to observations. Track and communicate validation metrics, risks, resource needs, and remediation progress to governance bodies. Leadership and capability development Lead validation workstreams and coach validation specialists, business analysts, testers, process owners, and technical teams. Estimate effort, assign work, monitor deliverables, and resolve quality, schedule, and resource issues. Promote standardized, efficient, and evidence-based assurance practices across functions and sites. Monitor regulatory and industry developments and translate them into practical lifecycle controls. Required Qualifications Bachelor's degree in life sciences, engineering, computer science, information systems, Quality, or a related discipline. At least 8 years of experience in computer system validation, computer software assurance, Quality systems, information technology, or a related regulated function. Experience in a pharmaceutical, biotechnology, medical device, clinical, laboratory, manufacturing, or other regulated life-sciences environment. Demonstrated experience leading validation for enterprise or site-based GxP computerized systems. Practical knowledge of risk-based lifecycle assurance, data integrity, electronic records and signatures, and applicable validation regulations and guidance. Experience authoring or approving validation plans, requirements, risk assessments, traceability, test protocols or scripts, deviations, and summary reports. Experience with change control, incident management, periodic review, access controls, audit trails, data migration, interfaces, and system retirement. Ability to assess suppliers and determine appropriate use of supplier documentation and testing evidence. Strong technical writing, problem-solving, facilitation, project-management, and stakeholder-management skills. Ability to lead cross-functional teams and make documented, risk-based decisions. Ability to travel as needed. Preferred Qualifications Advanced degree in life sciences, engineering, information systems, Quality, or a related discipline. Professional certification related to Quality, auditing, project management, software testing, information security, or computer system validation. Experience with quality management, laboratory, manufacturing, enterprise resource planning, clinical, regulatory, document, learning, or data and analytics platforms. Experience validating SaaS, cloud, low-code, robotic process automation, advanced analytics, or AI-enabled solutions. Experience with agile or iterative delivery models and automated testing approaches. Experience supporting global deployments, regulatory inspections, remediation programs, data migrations, or complex system integrations. Knowledge of product management, enterprise architecture, cybersecurity, privacy, and data-governance practices. Experience developing validation procedures, templates, training, metrics, and communities of practice. Required Knowledge and Skills Ability to connect intended use, process knowledge, system functionality, and patient, product, and data risks. Ability to distinguish GxP impact, business criticality, software complexity, and process risk and avoid using software category alone to determine validation rigor. Knowledge of requirements management, risk assessment, testing techniques, traceability, defect management, and objective evidence. Knowledge of data-integrity principles, electronic records, electronic signatures, metadata, audit trails, security, and record retention. Understanding of configurable and custom software, integrations, infrastructure, cloud service models, automation, analytics, and emerging technologies. Ability to review technical and Quality documentation for adequacy, consistency, traceability, and approval readiness. Ability to explain validation expectations clearly to technical and nontechnical stakeholders. Sound judgment, attention to detail, independence, and the ability to manage competing priorities The salary range for this position is: Other US Locations: $191,250.00 - $247,500.00. Bay Area: $210,375.00 - $272,250.00. Gilead considers a variety of factors when determining base compensation, including experience, qualifications, and geographic location. These considerations mean actual compensation will vary. This position may also be eligible for a discretionary annual bonus, discretionary stock-based long-term incentives (eligibility may vary based on role), paid time off, and a benefits package. Benefits include company-sponsored medical, dental, vision, and life insurance plans . For additional benefits information, visit: . click apply for full job details
11/10/2026
Full time
This job is with Gilead Sciences Inc., an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. At Gilead, we're creating a healthier world for all people. For more than 35 years, we've tackled diseases such as HIV, viral hepatitis, COVID-19 and cancer - working relentlessly to develop therapies that help improve lives and to ensure access to these therapies across the globe. We continue to fight against the world's biggest health challenges, and our mission requires collaboration, determination and a relentless drive to make a difference. Every member of Gilead's team plays a critical role in the discovery and development of life-changing scientific innovations. Our employees are our greatest asset as we work to achieve our bold ambitions, and we're looking for the next wave of passionate and ambitious people ready to make a direct impact. We believe every employee deserves a great leader. People Leaders are the cornerstone to the employee experience at Gilead and Kite. As a people leader now or in the future, you are the key driver in evolving our culture and creating an environment where every employee feels included, developed and empowered to fulfill their aspirations. Join Gilead and help create possible, together. Job Description Key Responsibilities Validation and assurance strategy Develop risk-based validation or assurance plans based on intended use, GxP impact, process risk, system complexity, novelty, and supplier capability. Define lifecycle deliverables, acceptance criteria, evidence expectations, roles, and approval requirements. Apply critical thinking to focus effort on functions that could affect patient safety, product quality, record reliability, or regulatory compliance. Use supplier documentation and automated evidence when suitable, complete, reliable, and approved for use. Lifecycle execution and oversight Lead or approve GxP assessments, validation plans, user requirements, specifications, risk assessments, traceability, test strategies, test evidence, summary reports, and release decisions. Ensure requirements are clear, testable, risk-based, and traceable to objective evidence. Oversee scripted, unscripted, exploratory, scenario-based, automated, and regression testing as appropriate. Assess deviations, defects, residual risks, and corrective actions and confirm readiness before production use. Ensure configuration, interfaces, data migration, reports, calculations, workflows, security roles, electronic signatures, and audit trails are adequately verified. Validated-state maintenance Provide assurance oversight for changes, upgrades, patches, releases, incidents, periodic reviews, access reviews, backup and restore, business continuity, and system retirement. Evaluate change impact and regression needs using documented process and technical risk. Monitor validation health, overdue actions, recurring defects, supplier performance, and inspection-readiness indicators. Ensure archived data and records remain accessible, readable, complete, and protected throughout required retention periods. Data integrity and electronic records Assess controls for data creation, modification, review, approval, transfer, storage, reporting, retention, and deletion. Verify appropriate controls for attribution, contemporaneous recording, original records, accuracy, completeness, consistency, enduring retention, and availability. Ensure audit-trail requirements, review procedures, record ownership, metadata, and exception handling are defined and tested. Supplier and technology assurance Lead supplier assessments and determine how supplier quality systems, development practices, testing, certifications, and service controls may be leveraged. Evaluate SaaS, cloud, infrastructure, platform, low-code, automation, analytics, and AI solutions for applicable GxP and data-integrity risks. Define assurance expectations in quality agreements, service agreements, contracts, and support models. Confirm responsibilities for releases, incidents, security, backup, continuity, data return, and service termination. Governance, standards, and inspection readiness Maintain validation standards, templates, procedures, decision trees, risk models, and training materials. Provide independent Quality review and approval while preserving clear accountability for process owners, system owners, IT, and suppliers. Support internal audits, regulatory inspections, due diligence, and responses to observations. Track and communicate validation metrics, risks, resource needs, and remediation progress to governance bodies. Leadership and capability development Lead validation workstreams and coach validation specialists, business analysts, testers, process owners, and technical teams. Estimate effort, assign work, monitor deliverables, and resolve quality, schedule, and resource issues. Promote standardized, efficient, and evidence-based assurance practices across functions and sites. Monitor regulatory and industry developments and translate them into practical lifecycle controls. Required Qualifications Bachelor's degree in life sciences, engineering, computer science, information systems, Quality, or a related discipline. At least 8 years of experience in computer system validation, computer software assurance, Quality systems, information technology, or a related regulated function. Experience in a pharmaceutical, biotechnology, medical device, clinical, laboratory, manufacturing, or other regulated life-sciences environment. Demonstrated experience leading validation for enterprise or site-based GxP computerized systems. Practical knowledge of risk-based lifecycle assurance, data integrity, electronic records and signatures, and applicable validation regulations and guidance. Experience authoring or approving validation plans, requirements, risk assessments, traceability, test protocols or scripts, deviations, and summary reports. Experience with change control, incident management, periodic review, access controls, audit trails, data migration, interfaces, and system retirement. Ability to assess suppliers and determine appropriate use of supplier documentation and testing evidence. Strong technical writing, problem-solving, facilitation, project-management, and stakeholder-management skills. Ability to lead cross-functional teams and make documented, risk-based decisions. Ability to travel as needed. Preferred Qualifications Advanced degree in life sciences, engineering, information systems, Quality, or a related discipline. Professional certification related to Quality, auditing, project management, software testing, information security, or computer system validation. Experience with quality management, laboratory, manufacturing, enterprise resource planning, clinical, regulatory, document, learning, or data and analytics platforms. Experience validating SaaS, cloud, low-code, robotic process automation, advanced analytics, or AI-enabled solutions. Experience with agile or iterative delivery models and automated testing approaches. Experience supporting global deployments, regulatory inspections, remediation programs, data migrations, or complex system integrations. Knowledge of product management, enterprise architecture, cybersecurity, privacy, and data-governance practices. Experience developing validation procedures, templates, training, metrics, and communities of practice. Required Knowledge and Skills Ability to connect intended use, process knowledge, system functionality, and patient, product, and data risks. Ability to distinguish GxP impact, business criticality, software complexity, and process risk and avoid using software category alone to determine validation rigor. Knowledge of requirements management, risk assessment, testing techniques, traceability, defect management, and objective evidence. Knowledge of data-integrity principles, electronic records, electronic signatures, metadata, audit trails, security, and record retention. Understanding of configurable and custom software, integrations, infrastructure, cloud service models, automation, analytics, and emerging technologies. Ability to review technical and Quality documentation for adequacy, consistency, traceability, and approval readiness. Ability to explain validation expectations clearly to technical and nontechnical stakeholders. Sound judgment, attention to detail, independence, and the ability to manage competing priorities The salary range for this position is: Other US Locations: $191,250.00 - $247,500.00. Bay Area: $210,375.00 - $272,250.00. Gilead considers a variety of factors when determining base compensation, including experience, qualifications, and geographic location. These considerations mean actual compensation will vary. This position may also be eligible for a discretionary annual bonus, discretionary stock-based long-term incentives (eligibility may vary based on role), paid time off, and a benefits package. Benefits include company-sponsored medical, dental, vision, and life insurance plans . For additional benefits information, visit: . click apply for full job details
Job Description Job Description Hardware Engineer - Test Development Onsite in Foster City, CA 5 days in office Travel within Bay Area will be required As our hardware engineer you will be responsible for developing, documenting and executing component and system-level hardware testing. You will collaborate with suppliers, design and system engineers to characterize the functional performance of Zoox sense and compute hardware. You will be responsible for development testing on early prototypes and qualification testing on modules intended for vehicle use. Projects range from interface compliance testing to developing purpose built tools. We are looking for someone who s enthusiastic, innovative, a self-starter, and willing to take on the challenges to work with us as an exceptional hardware engineer. Responsibilities: Test Execution Use oscilloscopes, network analyzers, and other electrical/environmental test equipment Develop test setups via block diagrams, BoMs and test plans Test Infrastructure Development Develop custom test assets such as load simulators, test harnessing and python scripts Facilitate test infrastructure projects by working with procurement and suppliers Documentation Draft and present Test Plans, Design Reviews, Test Readiness Reviews and Data Reviews Review and consult on documentation release for standards, design, and risk assessments Qualifications: B.S. in Computer Engineering, Electrical Engineering, Mechanical Engineering or similar discipline 4 years of professional work experience 2 years in electronics development Experience with testing electronic, automotive, aerospace, or vehicle components Experience with Design tools PCBA: Altium preferred 3D Modeling: 3DExperience or Catia preferred Experience in using lab equipment (Environmental Chambers, Oscilloscopes, E-loads, VNA, TDR, and spectrum analyzer) Experience with Ubuntu and Python Bonus Qualifications: M.S. or Ph.D. in Engineering or similar discipline Team/club competitions (e.g. SAE, FIRST, DARPA) Systems and networking foundational knowledge (systems architecture, memory hierarchy, storage subsystems, LANs, routing) Experience with: Ethernet switching chipsets (i.e. Broadcom, Marvell), PCIe, CAN Compliance Simulation Tools (Ansys preferred) Common bus protocols (SPI, I2C, MDIO) Process/Tool Familiarity with: Data Acquisition systems (UEI and/or Keysight preferred) Requirement-Test Case management tools (Polarion preferred) Atlassian software products (Jira/Confluence)
11/10/2026
Full time
Job Description Job Description Hardware Engineer - Test Development Onsite in Foster City, CA 5 days in office Travel within Bay Area will be required As our hardware engineer you will be responsible for developing, documenting and executing component and system-level hardware testing. You will collaborate with suppliers, design and system engineers to characterize the functional performance of Zoox sense and compute hardware. You will be responsible for development testing on early prototypes and qualification testing on modules intended for vehicle use. Projects range from interface compliance testing to developing purpose built tools. We are looking for someone who s enthusiastic, innovative, a self-starter, and willing to take on the challenges to work with us as an exceptional hardware engineer. Responsibilities: Test Execution Use oscilloscopes, network analyzers, and other electrical/environmental test equipment Develop test setups via block diagrams, BoMs and test plans Test Infrastructure Development Develop custom test assets such as load simulators, test harnessing and python scripts Facilitate test infrastructure projects by working with procurement and suppliers Documentation Draft and present Test Plans, Design Reviews, Test Readiness Reviews and Data Reviews Review and consult on documentation release for standards, design, and risk assessments Qualifications: B.S. in Computer Engineering, Electrical Engineering, Mechanical Engineering or similar discipline 4 years of professional work experience 2 years in electronics development Experience with testing electronic, automotive, aerospace, or vehicle components Experience with Design tools PCBA: Altium preferred 3D Modeling: 3DExperience or Catia preferred Experience in using lab equipment (Environmental Chambers, Oscilloscopes, E-loads, VNA, TDR, and spectrum analyzer) Experience with Ubuntu and Python Bonus Qualifications: M.S. or Ph.D. in Engineering or similar discipline Team/club competitions (e.g. SAE, FIRST, DARPA) Systems and networking foundational knowledge (systems architecture, memory hierarchy, storage subsystems, LANs, routing) Experience with: Ethernet switching chipsets (i.e. Broadcom, Marvell), PCIe, CAN Compliance Simulation Tools (Ansys preferred) Common bus protocols (SPI, I2C, MDIO) Process/Tool Familiarity with: Data Acquisition systems (UEI and/or Keysight preferred) Requirement-Test Case management tools (Polarion preferred) Atlassian software products (Jira/Confluence)
Job Description Job Description What are the top 3 skills required for this role? Oracle DBA Delphix Snowflakes MongoDB Job Description/ Responsibilities " Manage enterprise geospatial data platforms that rely on Delphix and Oracle Database to deliver consistent and reliable mapping services to internal and external stakeholders, ensuring optimal performance and scalability across hybrid environments. " Oversee geospatial data integration pipelines that ingest, transform, and organize spatial datasets from various business systems, enabling accurate location analytics that support strategic planning and operational efficiency. " Drive continuous optimization of Oracle Database configurations for geospatial workloads, tuning queries, indexes, and storage strategies to reduce latency and improve responsiveness for map based applications. " Coordinate with product and engineering teams to define geospatial data models, standards, and governance practices that ensure data quality, consistency, and regulatory compliance across all mapping solutions. " Implement robust Delphix data virtualization and masking strategies for geospatial datasets, safeguarding sensitive attributes while allowing agile development and testing of spatial solutions. " Collaborate with analytics and data science teams to provide well curated and documented spatial data layers that support advanced modeling, routing, and geographic risk assessments for business and social impact initiatives. " Monitor day to day operations of geospatial services, proactively identifying performance bottlenecks, data integrity issues, and access problems, and resolving them to maintain high availability and reliability. " Guide the design and rollout of map centric dashboards and reporting assets that transform complex geospatial information into clear visual narratives for business partners and community focused programs. " Align geospatial data platform enhancements with company sustainability and social responsibility goals by enabling precise analysis of environmental factors, infrastructure accessibility, and community impact zones. " Coordinate hybrid work collaboration routines that leverage secure remote access to Oracle and Delphix environments, ensuring that distributed team members can efficiently contribute to geospatial solution delivery. " Maintain comprehensive documentation of geospatial architectures, database schemas, data lineage, and operational procedures to support audit readiness, knowledge sharing, and onboarding of new team members. " Engage with business stakeholders to prioritize geospatial initiatives, translate functional requirements into technical specifications, and ensure that delivered map solutions create measurable value for the organization and society. -
11/10/2026
Full time
Job Description Job Description What are the top 3 skills required for this role? Oracle DBA Delphix Snowflakes MongoDB Job Description/ Responsibilities " Manage enterprise geospatial data platforms that rely on Delphix and Oracle Database to deliver consistent and reliable mapping services to internal and external stakeholders, ensuring optimal performance and scalability across hybrid environments. " Oversee geospatial data integration pipelines that ingest, transform, and organize spatial datasets from various business systems, enabling accurate location analytics that support strategic planning and operational efficiency. " Drive continuous optimization of Oracle Database configurations for geospatial workloads, tuning queries, indexes, and storage strategies to reduce latency and improve responsiveness for map based applications. " Coordinate with product and engineering teams to define geospatial data models, standards, and governance practices that ensure data quality, consistency, and regulatory compliance across all mapping solutions. " Implement robust Delphix data virtualization and masking strategies for geospatial datasets, safeguarding sensitive attributes while allowing agile development and testing of spatial solutions. " Collaborate with analytics and data science teams to provide well curated and documented spatial data layers that support advanced modeling, routing, and geographic risk assessments for business and social impact initiatives. " Monitor day to day operations of geospatial services, proactively identifying performance bottlenecks, data integrity issues, and access problems, and resolving them to maintain high availability and reliability. " Guide the design and rollout of map centric dashboards and reporting assets that transform complex geospatial information into clear visual narratives for business partners and community focused programs. " Align geospatial data platform enhancements with company sustainability and social responsibility goals by enabling precise analysis of environmental factors, infrastructure accessibility, and community impact zones. " Coordinate hybrid work collaboration routines that leverage secure remote access to Oracle and Delphix environments, ensuring that distributed team members can efficiently contribute to geospatial solution delivery. " Maintain comprehensive documentation of geospatial architectures, database schemas, data lineage, and operational procedures to support audit readiness, knowledge sharing, and onboarding of new team members. " Engage with business stakeholders to prioritize geospatial initiatives, translate functional requirements into technical specifications, and ensure that delivered map solutions create measurable value for the organization and society. -
This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 13 Role Summary We are seeking a Technical Team Lead - AI, AWS, Java Full-Stack, Financial Platforms to lead the design, development, and delivery of index calculation and back testing platform. This role combines hands-on Java full-stack engineering, AWS cloud development, AI-assisted software delivery, and technical leadership across a financial technology platform. The Technical Team Lead will guide a team of engineers in building scalable backend services, modern user interfaces, financial calculation workflows, back testing capabilities, data integrations, automated testing frameworks, and AI-assisted QA/evaluation routines. The role requires strong technical judgment, practical leadership, and the ability to translate financial methodology requirements into reliable, auditable, and production-ready software. This is a hands-on leadership role. The successful candidate will be expected to define technical direction, mentor developers, review architecture and code, collaborate with business and quantitative stakeholders, and contribute directly to critical platform components. Key Responsibilities Technical Leadership Lead the engineering delivery of an AI-enabled financial platform for index calculation, options analytics, back testing, and workflow execution. Define technical architecture, implementation standards, coding practices, testing expectations, and delivery patterns for the engineering team. Guide developers through complex design decisions involving Java services, frontend architecture, AWS workflows, data integration, AI-assisted development, and calculation accuracy. Partner with product owners, quantitative analysts, QA teams, infrastructure teams, data teams, and business stakeholders to convert requirements into clear technical plans. Lead design reviews, code reviews, sprint technical planning, production readiness reviews, and technical risk assessments. Mentor engineers in Java full-stack development, cloud-native design, financial calculation systems, automated testing, and responsible use of AI-assisted engineering tools. Ensure the platform is scalable, secure, maintainable, observable, auditable, and aligned with financial methodology and operational requirements. Hands-On Java Full-Stack Development Design and develop backend services using Java, Spring Boot, REST APIs, and enterprise application patterns. Build platform components for index calculation, backtesting, data processing, workflow orchestration, exception handling, validation, and reporting. Implement financial calculation logic based on methodology specifications, including options-based strategies, rebalancing rules, pricing inputs, market calendars, and historical backtesting assumptions. Develop modern frontend applications using React, Angular, Vue, TypeScript, JavaScript, HTML, and CSS. Build user interfaces for index setup, backtest configuration, workflow monitoring, calculation review, validation results, exception management, dashboards, and reporting. Ensure strong integration between frontend applications, backend APIs, authentication flows, data services, and cloud workflows. AI-Assisted Engineering and Spec-Driven Development Apply Spec-Driven Development practices to convert financial methodology documents, business requirements, and technical specifications into testable software components. Use AI-assisted engineering workflows to support planning, code generation, refactoring, test creation, documentation, and quality review. Review AI-generated or AI-assisted code for correctness, maintainability, security, performance, test coverage, and alignment with platform standards. Help establish team practices for responsible AI-assisted development, including review checklists, validation gates, test coverage expectations, and documentation standards. Support AI-assisted QA and evaluation routines for generated code, calculation outputs, regression testing, and backtest validation. AWS, Data, and Platform Engineering Design and implement AWS-based platform components using services such as AWS Step Functions, Lambda, ECS/EKS, API Gateway, S3, CloudWatch, IAM, EventBridge, SQS/SNS, and AWS RDS. Build workflow orchestration for index calculations, backtest execution, data validation, exception handling, approvals, and operational monitoring. Integrate with data platforms including AWS RDS, cloud data platforms (such as Databricks, Snowflake, or Azure Synapse), data lakes, market data sources, reference data platforms, and analytical data pipelines. Ensure data lineage, audit trails, input/output traceability, logging, alerting, and operational controls are built into the platform. Support CI/CD, infrastructure automation, deployment validation, monitoring, and production support practices. Required Experience 12+ years of software engineering experience, with significant experience in Java full-stack development and enterprise platform delivery. 5+ years of technical leadership experience, including mentoring engineers, leading design discussions, reviewing code, and guiding delivery teams. Strong hands-on experience with Java, Spring Boot, REST APIs, microservices, relational databases, and backend service design. Hands-on frontend development experience using React, Angular, Vue, TypeScript, JavaScript, HTML, and CSS. Experience designing and delivering large-scale systems involving distributed services, workflow orchestration, data processing, APIs, and production operations. Experience with AWS cloud-native development, including compute, storage, orchestration, security, monitoring, logging, and managed databases. Strong understanding of automated testing, CI/CD, code quality, observability, secure development, and production readiness. Experience or strong interest in financial platforms, especially index calculation, options analytics, derivatives, equities, portfolio analytics, backtesting, risk systems, or capital markets technology. Ability to interpret detailed financial methodology specifications and translate them into reliable, testable, and auditable software designs. Exposure to GenAI engineering, AI-assisted coding, agentic development workflows, Claude Code, Claude Code CLI, Spec Kit, or Spec-Driven Development is highly desirable. Preferred Technical Stack Backend: Java, Spring Boot, REST APIs, microservices, JPA/Hibernate, Maven/Gradle, concurrency, batch processing, and enterprise integration patterns. Frontend: React, Angular, or Vue; TypeScript; JavaScript; HTML; CSS; reusable components; dashboards; forms; data grids; charts; and responsive UI design. Cloud: AWS Step Functions, Lambda, ECS/EKS, API Gateway, S3, CloudWatch, IAM, EventBridge, SQS/SNS, RDS, and cloud-native security patterns. Data Platforms: AWS RDS, cloud data platforms (such as Databricks, Snowflake, or Azure Synapse), relational databases, data pipelines, market data integration, reference data, and analytical data processing. AI Engineering: AI-assisted development, Spec-Driven Development, Claude Code, Claude Code CLI, Spec Kit, automated QA/evaluation routines, and human-reviewed generated code. DevOps and Quality: CI/CD, automated testing, integration testing, regression testing, performance testing, logging, monitoring, alerting, and production support. Financial Domain Knowledge The ideal candidate should have experience or strong working interest in financial systems involving calculation-heavy workflows. Relevant areas include: Index calculation methodologies, index levels, divisor logic, rebalancing, weighting, corporate actions, calendars, and daily calculation cycles. Options-based strategies such as covered call, put write, collar, volatility-based, delta-based, or rules-based options strategies. Backtesting concepts such as historical simulation, look-ahead bias prevention, survivorship bias, transaction assumptions, rebalance simulation, and reproducibility. Market data concepts including prices, option chains, strikes, expiries, implied volatility, rates, dividends, corporate actions, and reference data. Validation practices including golden datasets, tolerance checks, independent calculation verification, reconciliation, audit trails, and exception handling. Success Measures Leads the team in delivering a scalable, secure, and reliable index calculation and backtesting platform. Produces and guides high-quality Java full-stack implementation across backend services, frontend applications, APIs, workflows, and data integrations. Converts financial methodology specifications into tested, reproducible, and auditable platform logic. Establishes strong engineering practices for code quality, automated testing, observability, documentation, and production readiness. Uses AI-assisted development responsibly to improve delivery speed while maintaining human review, financial accuracy, and software quality. Builds strong collaboration across engineering, quantitative analysis, QA, infrastructure, product . click apply for full job details
11/08/2026
Full time
This job is with S&P Global, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. About the Role: Grade Level (for internal use): 13 Role Summary We are seeking a Technical Team Lead - AI, AWS, Java Full-Stack, Financial Platforms to lead the design, development, and delivery of index calculation and back testing platform. This role combines hands-on Java full-stack engineering, AWS cloud development, AI-assisted software delivery, and technical leadership across a financial technology platform. The Technical Team Lead will guide a team of engineers in building scalable backend services, modern user interfaces, financial calculation workflows, back testing capabilities, data integrations, automated testing frameworks, and AI-assisted QA/evaluation routines. The role requires strong technical judgment, practical leadership, and the ability to translate financial methodology requirements into reliable, auditable, and production-ready software. This is a hands-on leadership role. The successful candidate will be expected to define technical direction, mentor developers, review architecture and code, collaborate with business and quantitative stakeholders, and contribute directly to critical platform components. Key Responsibilities Technical Leadership Lead the engineering delivery of an AI-enabled financial platform for index calculation, options analytics, back testing, and workflow execution. Define technical architecture, implementation standards, coding practices, testing expectations, and delivery patterns for the engineering team. Guide developers through complex design decisions involving Java services, frontend architecture, AWS workflows, data integration, AI-assisted development, and calculation accuracy. Partner with product owners, quantitative analysts, QA teams, infrastructure teams, data teams, and business stakeholders to convert requirements into clear technical plans. Lead design reviews, code reviews, sprint technical planning, production readiness reviews, and technical risk assessments. Mentor engineers in Java full-stack development, cloud-native design, financial calculation systems, automated testing, and responsible use of AI-assisted engineering tools. Ensure the platform is scalable, secure, maintainable, observable, auditable, and aligned with financial methodology and operational requirements. Hands-On Java Full-Stack Development Design and develop backend services using Java, Spring Boot, REST APIs, and enterprise application patterns. Build platform components for index calculation, backtesting, data processing, workflow orchestration, exception handling, validation, and reporting. Implement financial calculation logic based on methodology specifications, including options-based strategies, rebalancing rules, pricing inputs, market calendars, and historical backtesting assumptions. Develop modern frontend applications using React, Angular, Vue, TypeScript, JavaScript, HTML, and CSS. Build user interfaces for index setup, backtest configuration, workflow monitoring, calculation review, validation results, exception management, dashboards, and reporting. Ensure strong integration between frontend applications, backend APIs, authentication flows, data services, and cloud workflows. AI-Assisted Engineering and Spec-Driven Development Apply Spec-Driven Development practices to convert financial methodology documents, business requirements, and technical specifications into testable software components. Use AI-assisted engineering workflows to support planning, code generation, refactoring, test creation, documentation, and quality review. Review AI-generated or AI-assisted code for correctness, maintainability, security, performance, test coverage, and alignment with platform standards. Help establish team practices for responsible AI-assisted development, including review checklists, validation gates, test coverage expectations, and documentation standards. Support AI-assisted QA and evaluation routines for generated code, calculation outputs, regression testing, and backtest validation. AWS, Data, and Platform Engineering Design and implement AWS-based platform components using services such as AWS Step Functions, Lambda, ECS/EKS, API Gateway, S3, CloudWatch, IAM, EventBridge, SQS/SNS, and AWS RDS. Build workflow orchestration for index calculations, backtest execution, data validation, exception handling, approvals, and operational monitoring. Integrate with data platforms including AWS RDS, cloud data platforms (such as Databricks, Snowflake, or Azure Synapse), data lakes, market data sources, reference data platforms, and analytical data pipelines. Ensure data lineage, audit trails, input/output traceability, logging, alerting, and operational controls are built into the platform. Support CI/CD, infrastructure automation, deployment validation, monitoring, and production support practices. Required Experience 12+ years of software engineering experience, with significant experience in Java full-stack development and enterprise platform delivery. 5+ years of technical leadership experience, including mentoring engineers, leading design discussions, reviewing code, and guiding delivery teams. Strong hands-on experience with Java, Spring Boot, REST APIs, microservices, relational databases, and backend service design. Hands-on frontend development experience using React, Angular, Vue, TypeScript, JavaScript, HTML, and CSS. Experience designing and delivering large-scale systems involving distributed services, workflow orchestration, data processing, APIs, and production operations. Experience with AWS cloud-native development, including compute, storage, orchestration, security, monitoring, logging, and managed databases. Strong understanding of automated testing, CI/CD, code quality, observability, secure development, and production readiness. Experience or strong interest in financial platforms, especially index calculation, options analytics, derivatives, equities, portfolio analytics, backtesting, risk systems, or capital markets technology. Ability to interpret detailed financial methodology specifications and translate them into reliable, testable, and auditable software designs. Exposure to GenAI engineering, AI-assisted coding, agentic development workflows, Claude Code, Claude Code CLI, Spec Kit, or Spec-Driven Development is highly desirable. Preferred Technical Stack Backend: Java, Spring Boot, REST APIs, microservices, JPA/Hibernate, Maven/Gradle, concurrency, batch processing, and enterprise integration patterns. Frontend: React, Angular, or Vue; TypeScript; JavaScript; HTML; CSS; reusable components; dashboards; forms; data grids; charts; and responsive UI design. Cloud: AWS Step Functions, Lambda, ECS/EKS, API Gateway, S3, CloudWatch, IAM, EventBridge, SQS/SNS, RDS, and cloud-native security patterns. Data Platforms: AWS RDS, cloud data platforms (such as Databricks, Snowflake, or Azure Synapse), relational databases, data pipelines, market data integration, reference data, and analytical data processing. AI Engineering: AI-assisted development, Spec-Driven Development, Claude Code, Claude Code CLI, Spec Kit, automated QA/evaluation routines, and human-reviewed generated code. DevOps and Quality: CI/CD, automated testing, integration testing, regression testing, performance testing, logging, monitoring, alerting, and production support. Financial Domain Knowledge The ideal candidate should have experience or strong working interest in financial systems involving calculation-heavy workflows. Relevant areas include: Index calculation methodologies, index levels, divisor logic, rebalancing, weighting, corporate actions, calendars, and daily calculation cycles. Options-based strategies such as covered call, put write, collar, volatility-based, delta-based, or rules-based options strategies. Backtesting concepts such as historical simulation, look-ahead bias prevention, survivorship bias, transaction assumptions, rebalance simulation, and reproducibility. Market data concepts including prices, option chains, strikes, expiries, implied volatility, rates, dividends, corporate actions, and reference data. Validation practices including golden datasets, tolerance checks, independent calculation verification, reconciliation, audit trails, and exception handling. Success Measures Leads the team in delivering a scalable, secure, and reliable index calculation and backtesting platform. Produces and guides high-quality Java full-stack implementation across backend services, frontend applications, APIs, workflows, and data integrations. Converts financial methodology specifications into tested, reproducible, and auditable platform logic. Establishes strong engineering practices for code quality, automated testing, observability, documentation, and production readiness. Uses AI-assisted development responsibly to improve delivery speed while maintaining human review, financial accuracy, and software quality. Builds strong collaboration across engineering, quantitative analysis, QA, infrastructure, product . click apply for full job details
Job Description Job Description Basis & Support AMS SAP Basis team is seeking enthusiastic System Administrators who will play key role in implementation, optimization, migration and maintenance of SAP Product Suites running on ABAP, Java, BO, Cloud stacks amongst others. You will be part of Basis Engineering Team and will have complete ownership of one or multiple SAP landscapes like ECC, S/4 HANA, Business Objects, Information Steward, Data Services, SLT, BI, IBP Cloud, SCM etc and will ensure an efficient planning, provisioning, installation/configuration, maintenance, and/or operations of the owned system (applications and databases). You will Efficiently plan, provision, install, configure, maintain, and operate applications and databases in the owned system. You will have to ensure that your systems remains healthy and stable 24x7 while also working proactively to identify and avoid potential performance bottlenecks. You will partner with several Agile Persistent Teams (APTs) and ARTs, in a global setting and gather, assess, and clarify their technical requirements from SAP Platform and map them with systems capabilities, convert requirements into technical specs and recommend optimal Platform solutions for SAP Projects. You will also have responsibility to perform proof-of-concepts and pilots on several upcoming cutting edge design projects and subsequently document the findings and assessment. You will also establish process for new capabilities and create troubleshooting guides. You will be providing Level 3 On-call support for SAP Basis and SQL Server databases during India hours. As part of ownership, you will be responsible for taking periodic planned maintenance downtimes on your systems and ensure a smooth execution of such activities through proactive planning and preparations. Independently perform major Software (EHP, Support Pack), Hardware (OS/DB) and Kernel upgrades on a complex landscape comprising of Clusters and High Availability for servers and storage. Job Qualifications Bachelor's degree in computer science, Engineering, or a related discipline. SAP Basis Administration experience of minimum 5 years (Implementation & support) Knowledge of architecture of an SAP System, Application Server (AS) ABAP and Application Server (AS) Java Experience with SAP ERP, SCM, CRM, SRM, SAP Solution Manager, MDG, PO/PI/XI, BO/BI, IS/DS,SLT, Fiori and S/4 HANA solutions Infrastructure Security (enabling SNC, SSL), implementation of Single Sign-On (SSO) Knowledge of SAP Solution Manager Knowledge of communication techniques: RFC, OData via SAP Gateway Windows Server 2016/2019 Administration. MS SQL Server database administration. Knowledge of MS Cluster and High Availability concepts. Database administration, optimization and migration (HANA, MSSQL) Software maintenance, monitoring, configuring log/trace files Installing Enhancement packs and support packages. Knowledge of Data Center network and storage fundamentals. Fast learner, self-motivated and ability to influence across organizations, proven collaboration skills, comfortable working with a very high degree of ambiguity, ability to make quick & informed decisions to handle crisis situations. Ability to work well in cross-geo teams and working with global customers. Understanding of running SAP on Azure and AWS will be an added advantage. Knowledge on ITIL Service Management and DevOps tools (Service Now, JIRA) will be considered a plus. Automation skills on PowerShell, Python, RPA tools etc. will be a significant plus. Should be self-driven and should have passion for attention to details.
11/07/2026
Full time
Job Description Job Description Basis & Support AMS SAP Basis team is seeking enthusiastic System Administrators who will play key role in implementation, optimization, migration and maintenance of SAP Product Suites running on ABAP, Java, BO, Cloud stacks amongst others. You will be part of Basis Engineering Team and will have complete ownership of one or multiple SAP landscapes like ECC, S/4 HANA, Business Objects, Information Steward, Data Services, SLT, BI, IBP Cloud, SCM etc and will ensure an efficient planning, provisioning, installation/configuration, maintenance, and/or operations of the owned system (applications and databases). You will Efficiently plan, provision, install, configure, maintain, and operate applications and databases in the owned system. You will have to ensure that your systems remains healthy and stable 24x7 while also working proactively to identify and avoid potential performance bottlenecks. You will partner with several Agile Persistent Teams (APTs) and ARTs, in a global setting and gather, assess, and clarify their technical requirements from SAP Platform and map them with systems capabilities, convert requirements into technical specs and recommend optimal Platform solutions for SAP Projects. You will also have responsibility to perform proof-of-concepts and pilots on several upcoming cutting edge design projects and subsequently document the findings and assessment. You will also establish process for new capabilities and create troubleshooting guides. You will be providing Level 3 On-call support for SAP Basis and SQL Server databases during India hours. As part of ownership, you will be responsible for taking periodic planned maintenance downtimes on your systems and ensure a smooth execution of such activities through proactive planning and preparations. Independently perform major Software (EHP, Support Pack), Hardware (OS/DB) and Kernel upgrades on a complex landscape comprising of Clusters and High Availability for servers and storage. Job Qualifications Bachelor's degree in computer science, Engineering, or a related discipline. SAP Basis Administration experience of minimum 5 years (Implementation & support) Knowledge of architecture of an SAP System, Application Server (AS) ABAP and Application Server (AS) Java Experience with SAP ERP, SCM, CRM, SRM, SAP Solution Manager, MDG, PO/PI/XI, BO/BI, IS/DS,SLT, Fiori and S/4 HANA solutions Infrastructure Security (enabling SNC, SSL), implementation of Single Sign-On (SSO) Knowledge of SAP Solution Manager Knowledge of communication techniques: RFC, OData via SAP Gateway Windows Server 2016/2019 Administration. MS SQL Server database administration. Knowledge of MS Cluster and High Availability concepts. Database administration, optimization and migration (HANA, MSSQL) Software maintenance, monitoring, configuring log/trace files Installing Enhancement packs and support packages. Knowledge of Data Center network and storage fundamentals. Fast learner, self-motivated and ability to influence across organizations, proven collaboration skills, comfortable working with a very high degree of ambiguity, ability to make quick & informed decisions to handle crisis situations. Ability to work well in cross-geo teams and working with global customers. Understanding of running SAP on Azure and AWS will be an added advantage. Knowledge on ITIL Service Management and DevOps tools (Service Now, JIRA) will be considered a plus. Automation skills on PowerShell, Python, RPA tools etc. will be a significant plus. Should be self-driven and should have passion for attention to details.
Job Description Job Description Senior Oracle Database / Applications Engineer Location: Suitland, MD (Office of Naval Intelligence) Position Overview TENAX Technologies is seeking a highly skilled Senior Oracle Database / Applications Engineer to support mission-critical systems and enterprise applications for the Office of Naval Intelligence (ONI). This position is responsible for the design, administration, optimization, and sustainment of complex Oracle database environments and associated applications operating within secure Linux and Solaris infrastructures. The ideal candidate will have extensive experience supporting Oracle databases, enterprise applications, and operating systems in high-availability environments, with a focus on system reliability, performance, security, operational continuity, and modernization. Key Responsibilities Database and Application Administration Install, configure, upgrade, patch, and maintain Oracle Database environments (Oracle 19c and newer). Manage and support Oracle applications and associated middleware services. Perform database migrations, cloning, refreshes, backups, and recovery operations. Monitor database health, ASM and storage capacity utilization, and performance to ensure reliable operation. Database synchronization in support of major system migrations and production cutover Develop, troubleshoot, and optimize Oracle SQL and PL/SQL, including complex queries, stored procedures, functions, packages, and database application code. Operating System and Platform Management Understand and troubleshoot interactions across multi-tier architectures, including containerized applications, Oracle WebLogic middleware, virtual machines, Linux/Solaris operating systems, Oracle databases, and supporting infrastructure. Administer Red Hat Enterprise Linux (RHEL) and Sun Solaris operating systems. Perform system hardening, patch management, and lifecycle maintenance. High Availability and Disaster Recovery Develop and execute backup, restoration, failover, and disaster recovery procedures. Support continuity of operations (COOP), system resiliency, and disaster recovery testing and validation. Performance Optimization and Troubleshooting Troubleshoot Oracle database and storage-layer dependencies, including ASM disk groups, ASM disks, database datafiles, file systems, LUNs, multipathing, and NetApp-backed storage, addressing I/O failures, inaccessible disks, storage path issues, capacity constraints, and storage-related impacts to database and RMAN backup and recovery operations. Analyze and resolve database and application performance issues. Utilize Oracle performance tools, including AWR, ADDM, and SQL tuning utilities. Leverage operating system diagnostic tools, including iostat, vmstat, sar, truss, and top, to identify and resolve performance bottlenecks. Implement proactive monitoring and tuning strategies to maximize system availability and responsiveness. Troubleshoot application-to-database connectivity and integration issues across containerized applications, Oracle WebLogic, virtual machines, Linux/Solaris operating systems, and Oracle database environments. Automation and Scripting Develop and maintain automation solutions using Bash, Korn Shell (KSH), Python, Perl, and similar scripting languages. Automate routine administrative tasks, monitoring, health checks, backups, and reporting. Create and maintain technical documentation, runbooks, standard operating procedures, and recovery procedures. Security and Compliance Implement database security controls, auditing, encryption, and access management in accordance with DoD and organizational security requirements. Apply operating system, database, and application security patches and updates. Support vulnerability assessments, security audits, compliance inspections, and Risk Management Framework (RMF) requirements. Collaboration and Technical Leadership Provide Tier III engineering support for database and application-related incidents. Coordinate with system administrators, storage teams, software developers, cybersecurity personnel, and government stakeholders to resolve complex technical issues. Support system modernization efforts, architecture reviews, and emerging technology evaluations. Mentor junior administrators and engineers while promoting operational excellence and technical best practices. Required Qualifications Experience Minimum of 7 years of progressively responsible experience supporting Oracle database environments as an Oracle Database Administrator, Database Engineer, Database Developer, or related technical professional in a large enterprise environment. Demonstrated experience supporting mission-critical production systems with high-availability requirements. Experience supporting Department of Defense (DoD), Intelligence Community (IC), or Federal Government environments. Experience with VMware, enterprise backup and recovery solutions, SAN technologies, NetApp storage, and cloud-hosted Oracle environments. Security Requirements U.S. Citizen (no dual citizenships) Active Top Secret (TS) clearance with the ability to obtain and maintain Sensitive Compartmented Information (SCI) eligibility. Possess and maintain a current DoD 8570/8140 IAT Level II certification or higher. Technical Expertise Advanced knowledge of Oracle Database architecture, administration, and performance tuning. Experience with: Oracle 19c and newer database platforms • Oracle ASM and RMAN • SQL and PL/SQL development • Oracle WebLogic middleware • Containerized applications Operating Systems Advanced proficiency in Red Hat Enterprise Linux (RHEL) and Sun Solaris 10/11 Scripting and Automation Strong proficiency in Bash, Korn Shell (KSH), Python, Perl, or similar scripting languages. Experience developing automated administration, monitoring, and reporting solutions. Familiarity with DevSecOps practices, configuration management, and infrastructure automation tools. Education Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline. Additional years of directly related experience may be substituted for formal education. Why TENAX? At TENAX Technologies, you'll support mission-critical national security programs while working with modern technologies across cloud, cybersecurity, and enterprise infrastructure environments. You'll collaborate with experienced professionals in a dynamic team focused on innovation, operational excellence, and mission success. We are committed to investing in our employees through professional development, technical training, and opportunities for career growth and advancement. TENAX Technologies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.
11/07/2026
Full time
Job Description Job Description Senior Oracle Database / Applications Engineer Location: Suitland, MD (Office of Naval Intelligence) Position Overview TENAX Technologies is seeking a highly skilled Senior Oracle Database / Applications Engineer to support mission-critical systems and enterprise applications for the Office of Naval Intelligence (ONI). This position is responsible for the design, administration, optimization, and sustainment of complex Oracle database environments and associated applications operating within secure Linux and Solaris infrastructures. The ideal candidate will have extensive experience supporting Oracle databases, enterprise applications, and operating systems in high-availability environments, with a focus on system reliability, performance, security, operational continuity, and modernization. Key Responsibilities Database and Application Administration Install, configure, upgrade, patch, and maintain Oracle Database environments (Oracle 19c and newer). Manage and support Oracle applications and associated middleware services. Perform database migrations, cloning, refreshes, backups, and recovery operations. Monitor database health, ASM and storage capacity utilization, and performance to ensure reliable operation. Database synchronization in support of major system migrations and production cutover Develop, troubleshoot, and optimize Oracle SQL and PL/SQL, including complex queries, stored procedures, functions, packages, and database application code. Operating System and Platform Management Understand and troubleshoot interactions across multi-tier architectures, including containerized applications, Oracle WebLogic middleware, virtual machines, Linux/Solaris operating systems, Oracle databases, and supporting infrastructure. Administer Red Hat Enterprise Linux (RHEL) and Sun Solaris operating systems. Perform system hardening, patch management, and lifecycle maintenance. High Availability and Disaster Recovery Develop and execute backup, restoration, failover, and disaster recovery procedures. Support continuity of operations (COOP), system resiliency, and disaster recovery testing and validation. Performance Optimization and Troubleshooting Troubleshoot Oracle database and storage-layer dependencies, including ASM disk groups, ASM disks, database datafiles, file systems, LUNs, multipathing, and NetApp-backed storage, addressing I/O failures, inaccessible disks, storage path issues, capacity constraints, and storage-related impacts to database and RMAN backup and recovery operations. Analyze and resolve database and application performance issues. Utilize Oracle performance tools, including AWR, ADDM, and SQL tuning utilities. Leverage operating system diagnostic tools, including iostat, vmstat, sar, truss, and top, to identify and resolve performance bottlenecks. Implement proactive monitoring and tuning strategies to maximize system availability and responsiveness. Troubleshoot application-to-database connectivity and integration issues across containerized applications, Oracle WebLogic, virtual machines, Linux/Solaris operating systems, and Oracle database environments. Automation and Scripting Develop and maintain automation solutions using Bash, Korn Shell (KSH), Python, Perl, and similar scripting languages. Automate routine administrative tasks, monitoring, health checks, backups, and reporting. Create and maintain technical documentation, runbooks, standard operating procedures, and recovery procedures. Security and Compliance Implement database security controls, auditing, encryption, and access management in accordance with DoD and organizational security requirements. Apply operating system, database, and application security patches and updates. Support vulnerability assessments, security audits, compliance inspections, and Risk Management Framework (RMF) requirements. Collaboration and Technical Leadership Provide Tier III engineering support for database and application-related incidents. Coordinate with system administrators, storage teams, software developers, cybersecurity personnel, and government stakeholders to resolve complex technical issues. Support system modernization efforts, architecture reviews, and emerging technology evaluations. Mentor junior administrators and engineers while promoting operational excellence and technical best practices. Required Qualifications Experience Minimum of 7 years of progressively responsible experience supporting Oracle database environments as an Oracle Database Administrator, Database Engineer, Database Developer, or related technical professional in a large enterprise environment. Demonstrated experience supporting mission-critical production systems with high-availability requirements. Experience supporting Department of Defense (DoD), Intelligence Community (IC), or Federal Government environments. Experience with VMware, enterprise backup and recovery solutions, SAN technologies, NetApp storage, and cloud-hosted Oracle environments. Security Requirements U.S. Citizen (no dual citizenships) Active Top Secret (TS) clearance with the ability to obtain and maintain Sensitive Compartmented Information (SCI) eligibility. Possess and maintain a current DoD 8570/8140 IAT Level II certification or higher. Technical Expertise Advanced knowledge of Oracle Database architecture, administration, and performance tuning. Experience with: Oracle 19c and newer database platforms • Oracle ASM and RMAN • SQL and PL/SQL development • Oracle WebLogic middleware • Containerized applications Operating Systems Advanced proficiency in Red Hat Enterprise Linux (RHEL) and Sun Solaris 10/11 Scripting and Automation Strong proficiency in Bash, Korn Shell (KSH), Python, Perl, or similar scripting languages. Experience developing automated administration, monitoring, and reporting solutions. Familiarity with DevSecOps practices, configuration management, and infrastructure automation tools. Education Bachelor's degree in Computer Science, Information Technology, Information Systems, Engineering, or a related technical discipline. Additional years of directly related experience may be substituted for formal education. Why TENAX? At TENAX Technologies, you'll support mission-critical national security programs while working with modern technologies across cloud, cybersecurity, and enterprise infrastructure environments. You'll collaborate with experienced professionals in a dynamic team focused on innovation, operational excellence, and mission success. We are committed to investing in our employees through professional development, technical training, and opportunities for career growth and advancement. TENAX Technologies is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.
Job Description Job Description CLEARANCE: TS/SCI with Polygraphs are required POSITION: Oracle Database Administrator (DBA) REQUISITION: ORAVA-DBA-2.111924 LOCATION: Reston, Virginia JOB DESCRIPTION: We are seeking an experienced Oracle Database Administrator (DBA) to join our team. The Oracle DBA will be responsible for the performance, integrity, and security of our Oracle databases. The ideal candidate will have a strong background in database management and be able to manage the database lifecycle, including the installation, configuration, upgrade, and monitoring of Oracle databases. RESPONSIBILITIES: • Install, configure, and upgrade Oracle database software. • Perform database tuning, performance monitoring, and troubleshooting to ensure optimal database performance. • Manage database security by implementing and maintaining database roles, privileges, and user accounts. • Perform regular database backups and recovery operations to ensure data integrity and availability. • Implement and maintain database disaster recovery plans and procedures. • Collaborate with development and operations teams to ensure database changes align with business requirements. • Monitor and manage database storage, ensuring efficient utilization and forecasting future capacity needs. • Ensure compliance with database-related policies, procedures, and best practices. • Perform database patching and apply updates as needed to maintain database security and functionality. • Provide support for database-related issues, including after-hours support as needed. QUALIFICATIONS: • Proven experience as an Oracle DBA, with a deep understanding of Oracle database architecture, processes, and performance tuning. • Experience with Oracle 19c and related tools and technologies. • Strong knowledge of database security, backup/recovery techniques, and disaster recovery planning. • Proficiency in SQL and PL/SQL scripting. • Experience with Linux and Unix operating systems. • Excellent problem-solving skills and the ability to work independently or as part of a team. • Strong communication skills to interact with various stakeholders and document processes. LABOR CATEGORY QUALIFICATIONS TABLE : CERTIFICATION: N/A EDUCATION + EXPERIENCE: • Bachelor's Degree + 8 years of database experience, OR • No Degree + 12 years of database experience. NOTE: Degree in computer science or IT computer engineering from an accredited college or university. CSG, Inc. is an Equal Opportunity / Affirmative Action employer that values the strength of diversity in the workplace. All qualified applicants will receive consideration for employment without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, veteran status, or any other characteristic protected by law. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/07/2026
Full time
Job Description Job Description CLEARANCE: TS/SCI with Polygraphs are required POSITION: Oracle Database Administrator (DBA) REQUISITION: ORAVA-DBA-2.111924 LOCATION: Reston, Virginia JOB DESCRIPTION: We are seeking an experienced Oracle Database Administrator (DBA) to join our team. The Oracle DBA will be responsible for the performance, integrity, and security of our Oracle databases. The ideal candidate will have a strong background in database management and be able to manage the database lifecycle, including the installation, configuration, upgrade, and monitoring of Oracle databases. RESPONSIBILITIES: • Install, configure, and upgrade Oracle database software. • Perform database tuning, performance monitoring, and troubleshooting to ensure optimal database performance. • Manage database security by implementing and maintaining database roles, privileges, and user accounts. • Perform regular database backups and recovery operations to ensure data integrity and availability. • Implement and maintain database disaster recovery plans and procedures. • Collaborate with development and operations teams to ensure database changes align with business requirements. • Monitor and manage database storage, ensuring efficient utilization and forecasting future capacity needs. • Ensure compliance with database-related policies, procedures, and best practices. • Perform database patching and apply updates as needed to maintain database security and functionality. • Provide support for database-related issues, including after-hours support as needed. QUALIFICATIONS: • Proven experience as an Oracle DBA, with a deep understanding of Oracle database architecture, processes, and performance tuning. • Experience with Oracle 19c and related tools and technologies. • Strong knowledge of database security, backup/recovery techniques, and disaster recovery planning. • Proficiency in SQL and PL/SQL scripting. • Experience with Linux and Unix operating systems. • Excellent problem-solving skills and the ability to work independently or as part of a team. • Strong communication skills to interact with various stakeholders and document processes. LABOR CATEGORY QUALIFICATIONS TABLE : CERTIFICATION: N/A EDUCATION + EXPERIENCE: • Bachelor's Degree + 8 years of database experience, OR • No Degree + 12 years of database experience. NOTE: Degree in computer science or IT computer engineering from an accredited college or university. CSG, Inc. is an Equal Opportunity / Affirmative Action employer that values the strength of diversity in the workplace. All qualified applicants will receive consideration for employment without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, veteran status, or any other characteristic protected by law. We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for a Staff Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, strengthening application security practices across the software development lifecycle, and owning the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk early, design practical mitigations, and make secure-by-default development easier. The ideal candidate combines strong hands-on application security skills with deep knowledge of modern authentication and authorization protocols. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Establish and evolve secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Own or contribute to the security architecture of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Design, review, and assess OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, token lifetimes, and key rotation. Help define and enforce authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Lead or participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Build security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Improve security testing and detection through SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and contribute to playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities Professional experience in application security, product security, software engineering, or a closely related discipline. Strong experience securing Node.js and TypeScript applications; hands-on experience with NestJS is required or highly preferred. Deep understanding of OAuth 2.0 and OpenID Connect, including common implementation pitfalls and secure deployment patterns. Practical experience with both IdP and RP implementations, integrations, or security assessments. Strong understanding of authentication and authorization concepts, including RBAC, least privilege, separation of duties, claims, scopes, permissions, sessions, tokens, and service-to-service access. Ability to review code and architecture across APIs, web applications, background jobs, and distributed services. Experience with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, request forgery, misconfiguration, and supply-chain risk. Familiarity with secure token handling, JWT validation, key management, JWKS, signing algorithms, rotation, revocation, and token storage considerations. Experience integrating security into CI/CD and developer workflows without creating unnecessary friction. Strong communication skills and the ability to explain security risks and tradeoffs to both technical and non-technical audiences. A pragmatic, collaborative approach: you can identify meaningful risk, propose proportional controls, and help teams implement them. The Extras Experience with OAuth 2.1 guidance, FAPI, PAR, JAR, DPoP, sender-constrained tokens, or other advanced OAuth security patterns. Experience with identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Experience with SAML integrations for single sign-on solutions. Experience with API gateways, service meshes, microservices, event-driven systems, and cloud-native deployments. Familiarity containers, infrastructure as code, secrets management, and cloud IAM. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards and guidance such as OWASP ASVS, OWASP SAMM, NIST SSDF, NIST 800-63, and relevant OAuth/OIDC specifications. Experience conducting penetration tests, adversarial reviews, or purple-team exercises. Relevant security certifications or equivalent demonstrated experience. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $190K - $200K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
11/06/2026
Full time
Job Description Job Description Vestwell is the financial technology company powering the new savings economy. The New York City-based fintech platform redefines how people save for the critical aspects of life across retirement, education, and healthcare savings needs. Today, Vestwell enables over 790,000 businesses and more than 2.75 million active savers, with over $57 billion in assets saved across all 50 United States. Vestwell offers a range of products, including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities. Vestwell's platform serves a diverse clientele, including financial advisers, employers, third-party administrators, financial institutions, payroll providers, government agencies, and individual savers. To learn more, visit Who Are We Looking For? We are looking for an Application Security Engineer to help secure the applications and identity integrations that power our products. This role will focus on analyzing and protecting our NestJS applications, applying strong application security practices across the software development lifecycle, and supporting the security of our identity capabilities as both an identity provider (IdP) and a relying party (RP) in OIDC integrations and internal application usage. You will work closely with software engineering, platform, infrastructure, and product teams to identify risk, implement practical mitigations, and make secure-by-default development easier. The ideal candidate combines solid hands-on application security skills with a working knowledge of modern authentication and authorization protocols, and is eager to grow deeper expertise in identity security. What Will You Be Doing? Analyze NestJS and TypeScript applications for authentication, authorization, input validation, injection, session, API, business-logic, and data-protection vulnerabilities. Apply and help refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management. Contribute to the security of our OIDC integrations and identity platform capabilities when we operate as: An identity provider, including authorization, token, user-info, discovery, key-set, and logout endpoints. A relying party, including client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout. Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes, under guidance from senior team members for more complex cases. Help apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control. Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions. Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews. Contribute to security requirements, reusable libraries, reference implementations, and developer guidance that reduce recurring risk. Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing. Partner with engineering teams to remediate vulnerabilities, help prioritize findings by exploitability and business impact, and verify fixes. Monitor relevant application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events. Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance. Stay current on application security, identity, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques. Requirements The Necessities 2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline. Experience securing Node.js and TypeScript applications; familiarity with NestJS is a strong plus. Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls. Exposure to IdP and/or RP implementations, integrations, or security assessments. Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens. Ability to review code across APIs, web applications, and background jobs, with support from senior engineers on more complex architectural or distributed-systems questions. Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration. Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations. Some experience working with CI/CD and developer workflows, or a willingness to learn how to integrate security into them with minimal friction. Good communication skills and the ability to explain security findings and risk to technical teammates. A pragmatic, collaborative approach: eager to learn, ask good questions, and work with more senior engineers to propose and implement proportional controls. The Extras Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems. Familiarity with SAML integrations for single sign-on solutions. Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments. Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics. Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools. Familiarity with security standards such as OWASP ASVS or NIST SSDF. Interest in pursuing relevant security certifications. This role will be based in either the New York City, Austin, King of Prussia, or Scottsdale office, and will be part of Vestwell's hybrid in-office operation. The expected base salary range for this position is $140K - $150K base. This position is eligible to participate in the Company Bonus Pool and is eligible to receive new hire equity in the Company. Please note that salary bands are based on NY and other similar metro areas and may differ based on where the role is ultimately hired. Full-Time Employee Benefits We're an innovative, high-growth company with an exciting future ahead. At Vestwell, we prioritize employee wellbeing through comprehensive health benefits, generous time off, and a dedicated Employee Wellbeing Committee. Our hybrid work model offers flexibility while providing access to our collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale. And, of course, as a company focused on helping people save for the future, we offer a competitive 401(k) plan. Interview Process Our interview process starts the same for every candidate with 1-2 introductory conversations to learn more about your background, interests, and what you're looking for, while also giving you the opportunity to learn more about Vestwell and the team. From there, the process varies by role but typically includes a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of your relevant experience. Successful candidates then move on to a virtual or in-person interview panel. Before extending an offer, we complete a reference check with a current or former manager and a peer. Throughout the process, we prioritize transparency, clear communication, and minimizing surprises. For your awareness you will only receive correspondence from any other domain not ending in is not our Recruitment team. Vestwell's Privacy Policy. Attention California residents: In the course of conducting our business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., we must collect Personal Information from you. Should you accept employment with Vestwell you may view our California Privacy Rights Act here: Vestwell's California Privacy Rights Policy.
Job Description Job Description The Information Management Specialist is responsible for the development, implementation, administration, and continuous improvement of the organization's Information Management System (IMS). This position is tasked to establish an effective information management framework that ensures organizational information is managed securely, efficiently, and in compliance with applicable legal, regulatory, and business requirements. The support staff will design, implement, and maintain the organization's Information Management Plan (IMP), integrating governance, records management, information security, data quality, compliance, and technology into a comprehensive management system that supports organizational objectives. The Information Management Specialist is responsible for implementing and maintaining the following core components of the Information Management Plan under the guidance of the SSC lead and the Federal sponsor within the Standards and Records work center: Information Management Strategy Develop and maintain the organization's Information Management Plan. Define the scope, objectives, and strategic direction for information management. Ensure the Information Management Plan aligns with organizational goals and operational requirements. Information Governance Establish and maintain an Information Governance Framework. Develop policies, standards, procedures, and governance structures. Define roles, responsibilities, and accountability for information management across the organization. Information Lifecycle Management Design and implement processes governing the creation, storage, access, maintenance, archiving, retention, and disposal of information. Ensure lifecycle management practices comply with legal, regulatory, and operational requirements. Data Classification and Information Architecture Develop and maintain information classification standards. Establish metadata, categorization, and tagging methodologies. Ensure information is organized according to sensitivity, business value, and legal obligations. Information Security and Privacy Collaborate with security and privacy stakeholders to ensure appropriate safeguards protect organizational information. Implement controls that support confidentiality, integrity, availability, and privacy compliance. Support compliance with applicable privacy legislation and organizational security policies. Data Quality Management Develop processes to improve and maintain data accuracy, completeness, consistency, reliability, and timeliness. Monitor data quality metrics and recommend corrective actions where required. Information Systems Management Identify and support the implementation of systems, applications, and technologies that facilitate effective information management. Ensure information systems support governance, security, records management, and operational requirements. Recommend system enhancements and process improvements. Records Management Develop and administer the organization's records management program. Establish retention schedules and disposition procedures. Ensure records are maintained, preserved, and disposed of in accordance with legal and business requirements. Compliance and Regulatory Management Monitor applicable legislation, regulations, standards, and industry best practices. Ensure organizational information management practices remain compliant. Coordinate audits and support compliance reporting activities. Training and Organizational Awareness Develop and deliver education and awareness programs relating to information management. Promote organizational understanding of policies, procedures, and employee responsibilities. Provide guidance and support to business units implementing information management practices. Monitoring, Reporting, and Continuous Improvement Monitor the effectiveness of the Information Management System. Conduct regular reviews and assessments of policies, procedures, and controls. Develop performance measures and recommend improvements to strengthen the Information Management Program. Documentation and Standards Develop and maintain documentation supporting the Information Management System, including standards, procedures, templates, and a comprehensive glossary of information management terminology. MINIMUM QUALIFICATIONS Clearance Required: Have or ability to obtain and maintain U.S. Department of Energy Q-level security clearance Bachelor's degree in Information Science, Library Science, Records Management, Archival Studies, Business Administration, or a related field. 5+ Years related experience in records and information management. Knowledge of records management principles, practices, and technologies. Experience with electronic document management systems. Strong organizational, analytical, and problem-solving skills. Excellent collaboration, influencing and interpersonal skills. Ability to work independently and as part of a growing team in an ambiguous and evolving work environment. PREFFERED QUALIFICATION Active TS/Q Clearance Master's degree in Library and Information Science (MLIS), Information Management, or related field. Certified Records Manager (CRM) or Information Governance Professional (IGP). A strong understanding of information management technologies such as database management systems, content management systems, search engines, and data analytics tools. Prior experience in supporting the assessment and development of government records programs in the areas of national security, homeland security, nuclear/radiological security, or related field. Knowledge of U.S. Department of Energy records guidelines and best practices. LOCATION: This position is full-time on site Buena Vista NM SALARY: Salaries are determined based on several factors including external market data, internal equity, and the candidate's related knowledge, skills, and abilities for the position. BENEFITS Employer-paid employee Medical, Dental and Vision Care. Low-Cost Family Health Care offered. Federal Holidays and three (3) weeks' vacation 401(k) with Employer Match Cross-training opportunities Company Description With over 300 employees and offices in Rockville, MD, Washington, DC, and Albuquerque, NM, MELE is a veteran-owned government contractor empowering its customers with innovative solutions for more than three decades. MELE has team members located across the U.S. and has served more than a hundred countries across hundreds of project locations. The company offers technical, engineering, and programmatic support expertise to a host of U.S. federal and international agencies, including, but not limited to, the Department of Energy, the Department of Defense, the Department of Homeland Security, the Department of Justice, INTERPOL, and the International Atomic Energy Agency. MELE's services include national security, intelligence, IT/cybersecurity, facility management and engineering, CBRNE defense and nuclear security, emergency response training/management, and mission and program support. MELE Associates, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment. MELE Associates, Inc. is an E-Verify employer. Company Description With over 300 employees and offices in Rockville, MD, Washington, DC, and Albuquerque, NM, MELE is a veteran-owned government contractor empowering its customers with innovative solutions for more than three decades. MELE has team members located across the U.S. and has served more than a hundred countries across hundreds of project locations. The company offers technical, engineering, and programmatic support expertise to a host of U.S. federal and international agencies, including, but not limited to, the Department of Energy, the Department of Defense, the Department of Homeland Security, the Department of Justice, INTERPOL, and the International Atomic Energy Agency. MELE's services include national security, intelligence, IT/cybersecurity, facility management and engineering, CBRNE defense and nuclear security, emergency response training/management, and mission and program support. MELE Associates, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment. MELE Associates, Inc. is an E-Verify employer.
11/06/2026
Full time
Job Description Job Description The Information Management Specialist is responsible for the development, implementation, administration, and continuous improvement of the organization's Information Management System (IMS). This position is tasked to establish an effective information management framework that ensures organizational information is managed securely, efficiently, and in compliance with applicable legal, regulatory, and business requirements. The support staff will design, implement, and maintain the organization's Information Management Plan (IMP), integrating governance, records management, information security, data quality, compliance, and technology into a comprehensive management system that supports organizational objectives. The Information Management Specialist is responsible for implementing and maintaining the following core components of the Information Management Plan under the guidance of the SSC lead and the Federal sponsor within the Standards and Records work center: Information Management Strategy Develop and maintain the organization's Information Management Plan. Define the scope, objectives, and strategic direction for information management. Ensure the Information Management Plan aligns with organizational goals and operational requirements. Information Governance Establish and maintain an Information Governance Framework. Develop policies, standards, procedures, and governance structures. Define roles, responsibilities, and accountability for information management across the organization. Information Lifecycle Management Design and implement processes governing the creation, storage, access, maintenance, archiving, retention, and disposal of information. Ensure lifecycle management practices comply with legal, regulatory, and operational requirements. Data Classification and Information Architecture Develop and maintain information classification standards. Establish metadata, categorization, and tagging methodologies. Ensure information is organized according to sensitivity, business value, and legal obligations. Information Security and Privacy Collaborate with security and privacy stakeholders to ensure appropriate safeguards protect organizational information. Implement controls that support confidentiality, integrity, availability, and privacy compliance. Support compliance with applicable privacy legislation and organizational security policies. Data Quality Management Develop processes to improve and maintain data accuracy, completeness, consistency, reliability, and timeliness. Monitor data quality metrics and recommend corrective actions where required. Information Systems Management Identify and support the implementation of systems, applications, and technologies that facilitate effective information management. Ensure information systems support governance, security, records management, and operational requirements. Recommend system enhancements and process improvements. Records Management Develop and administer the organization's records management program. Establish retention schedules and disposition procedures. Ensure records are maintained, preserved, and disposed of in accordance with legal and business requirements. Compliance and Regulatory Management Monitor applicable legislation, regulations, standards, and industry best practices. Ensure organizational information management practices remain compliant. Coordinate audits and support compliance reporting activities. Training and Organizational Awareness Develop and deliver education and awareness programs relating to information management. Promote organizational understanding of policies, procedures, and employee responsibilities. Provide guidance and support to business units implementing information management practices. Monitoring, Reporting, and Continuous Improvement Monitor the effectiveness of the Information Management System. Conduct regular reviews and assessments of policies, procedures, and controls. Develop performance measures and recommend improvements to strengthen the Information Management Program. Documentation and Standards Develop and maintain documentation supporting the Information Management System, including standards, procedures, templates, and a comprehensive glossary of information management terminology. MINIMUM QUALIFICATIONS Clearance Required: Have or ability to obtain and maintain U.S. Department of Energy Q-level security clearance Bachelor's degree in Information Science, Library Science, Records Management, Archival Studies, Business Administration, or a related field. 5+ Years related experience in records and information management. Knowledge of records management principles, practices, and technologies. Experience with electronic document management systems. Strong organizational, analytical, and problem-solving skills. Excellent collaboration, influencing and interpersonal skills. Ability to work independently and as part of a growing team in an ambiguous and evolving work environment. PREFFERED QUALIFICATION Active TS/Q Clearance Master's degree in Library and Information Science (MLIS), Information Management, or related field. Certified Records Manager (CRM) or Information Governance Professional (IGP). A strong understanding of information management technologies such as database management systems, content management systems, search engines, and data analytics tools. Prior experience in supporting the assessment and development of government records programs in the areas of national security, homeland security, nuclear/radiological security, or related field. Knowledge of U.S. Department of Energy records guidelines and best practices. LOCATION: This position is full-time on site Buena Vista NM SALARY: Salaries are determined based on several factors including external market data, internal equity, and the candidate's related knowledge, skills, and abilities for the position. BENEFITS Employer-paid employee Medical, Dental and Vision Care. Low-Cost Family Health Care offered. Federal Holidays and three (3) weeks' vacation 401(k) with Employer Match Cross-training opportunities Company Description With over 300 employees and offices in Rockville, MD, Washington, DC, and Albuquerque, NM, MELE is a veteran-owned government contractor empowering its customers with innovative solutions for more than three decades. MELE has team members located across the U.S. and has served more than a hundred countries across hundreds of project locations. The company offers technical, engineering, and programmatic support expertise to a host of U.S. federal and international agencies, including, but not limited to, the Department of Energy, the Department of Defense, the Department of Homeland Security, the Department of Justice, INTERPOL, and the International Atomic Energy Agency. MELE's services include national security, intelligence, IT/cybersecurity, facility management and engineering, CBRNE defense and nuclear security, emergency response training/management, and mission and program support. MELE Associates, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment. MELE Associates, Inc. is an E-Verify employer. Company Description With over 300 employees and offices in Rockville, MD, Washington, DC, and Albuquerque, NM, MELE is a veteran-owned government contractor empowering its customers with innovative solutions for more than three decades. MELE has team members located across the U.S. and has served more than a hundred countries across hundreds of project locations. The company offers technical, engineering, and programmatic support expertise to a host of U.S. federal and international agencies, including, but not limited to, the Department of Energy, the Department of Defense, the Department of Homeland Security, the Department of Justice, INTERPOL, and the International Atomic Energy Agency. MELE's services include national security, intelligence, IT/cybersecurity, facility management and engineering, CBRNE defense and nuclear security, emergency response training/management, and mission and program support. MELE Associates, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment. MELE Associates, Inc. is an E-Verify employer.
Job Description Job Description Job Description: Information Systems Tech Information Systems Tech Job Summary: Maintains overall health of computer network infrastructure. Monitors and maintains server/network traffic, network administration, firewalls, routers, switches, VPN, encryption, remote access, authentication, DNS, FTP, anti-virus, voice and data telecommunications, storage area networks, etc. Information Systems Tech Shift Availability: Full Time Day Shift Information Systems Tech Benefits: Medical/ Dental/ Vision MASA- Medical Transportation Solutions Health Reimbursement & Savings Account Flex Spending Account/Dependent Care Spending Account Identity Protection-Free Hospital Indemnity Life Insurance-Free LTD/STD-Free Voluntary Life & AD&D 403 (b) Retirement Plan- 4% employer contribution Earned Time Off (ETO) Information Systems Tech Essential Accountabilities: Responsible for setup, patching, and deployment of PCs, applications, printers, scanners, and miscellaneous personal devices such as smartphones. Connect networkable devices to wired and wireless networks and troubleshoot basic networking problems. Responsible for new employee user accounts in Active Directory & Domain architecture, badging software, and software-specific user accounts. Manages and triages help desk database and user support requests. Provides Tier I problem resolution and support to staff. Performs complex software/hardware troubleshooting, patches, and re-installations in accordance with established SLAs. Provides frequent communication and follow-through during the issue resolution process. Responsible for on-call rotation for after-hours system support. Requires tech to wear a notification device such as a cellphone. Works closely with Nurse analysts to identify Electronic Health Record issues and assist with the escalation of tickets. Identifies system modifications to reduce user problems. Analyze situations, evaluate alternatives, and implement solutions within standards (where applicable). Interpret guidelines and analyze information to adapt or modify processes in response to changing circumstances. Duties may require non-routine analysis, research, and follow-through. May act as a resource to others to solve problems. Other duties as assigned. Information Systems Tech Knowledge/Skills: High school Diploma/GED Professional certifications as appropriate. Practical understanding of scripting to include PowerShell, VB, and/or batch. Knowledge of current trends in the specific field. Demonstrated experience with standard software applications, including MS Office, Windows. Must have a strong dedication to customer service. Information Systems Tech Working Conditions: Work requires ability to lift 30 to 50 pounds on a regular basis. Work may require moderate physical exertion and/or physical strain. Willingness to work flexible hours. Ability to work under stress during peak workload periods. Work environment involves only infrequent exposure to disagreeable elements. OSHA Category 3 - Tasks that involve no exposure to blood, body fluids, tissues or other potentially infectious materials We are an equal opportunity employer and prohibit discrimination/harassment without regard to race, color, religion, age, sex, national origin, disability, status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
11/06/2026
Full time
Job Description Job Description Job Description: Information Systems Tech Information Systems Tech Job Summary: Maintains overall health of computer network infrastructure. Monitors and maintains server/network traffic, network administration, firewalls, routers, switches, VPN, encryption, remote access, authentication, DNS, FTP, anti-virus, voice and data telecommunications, storage area networks, etc. Information Systems Tech Shift Availability: Full Time Day Shift Information Systems Tech Benefits: Medical/ Dental/ Vision MASA- Medical Transportation Solutions Health Reimbursement & Savings Account Flex Spending Account/Dependent Care Spending Account Identity Protection-Free Hospital Indemnity Life Insurance-Free LTD/STD-Free Voluntary Life & AD&D 403 (b) Retirement Plan- 4% employer contribution Earned Time Off (ETO) Information Systems Tech Essential Accountabilities: Responsible for setup, patching, and deployment of PCs, applications, printers, scanners, and miscellaneous personal devices such as smartphones. Connect networkable devices to wired and wireless networks and troubleshoot basic networking problems. Responsible for new employee user accounts in Active Directory & Domain architecture, badging software, and software-specific user accounts. Manages and triages help desk database and user support requests. Provides Tier I problem resolution and support to staff. Performs complex software/hardware troubleshooting, patches, and re-installations in accordance with established SLAs. Provides frequent communication and follow-through during the issue resolution process. Responsible for on-call rotation for after-hours system support. Requires tech to wear a notification device such as a cellphone. Works closely with Nurse analysts to identify Electronic Health Record issues and assist with the escalation of tickets. Identifies system modifications to reduce user problems. Analyze situations, evaluate alternatives, and implement solutions within standards (where applicable). Interpret guidelines and analyze information to adapt or modify processes in response to changing circumstances. Duties may require non-routine analysis, research, and follow-through. May act as a resource to others to solve problems. Other duties as assigned. Information Systems Tech Knowledge/Skills: High school Diploma/GED Professional certifications as appropriate. Practical understanding of scripting to include PowerShell, VB, and/or batch. Knowledge of current trends in the specific field. Demonstrated experience with standard software applications, including MS Office, Windows. Must have a strong dedication to customer service. Information Systems Tech Working Conditions: Work requires ability to lift 30 to 50 pounds on a regular basis. Work may require moderate physical exertion and/or physical strain. Willingness to work flexible hours. Ability to work under stress during peak workload periods. Work environment involves only infrequent exposure to disagreeable elements. OSHA Category 3 - Tasks that involve no exposure to blood, body fluids, tissues or other potentially infectious materials We are an equal opportunity employer and prohibit discrimination/harassment without regard to race, color, religion, age, sex, national origin, disability, status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
VIRGINIA FARM BUREAU MUTUAL INSURANCE CO
Richmond, Virginia
Job Description Job Description POSITION SUMMARY The Cloud Security Specialist supports day-to-day execution of the organization's cloud security program across Microsoft Azure and Amazon Web Services. The role monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. This is a growth-oriented role for a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience. PRIMARY DUTIES Cloud Security Operations and Posture Management Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines. Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty. Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and escalate high-risk findings to senior staff. Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting. Identity and Access Management Support Azure and AWS identity controls, including Microsoft Entra ID, AWS IAM, role-based access control (RBAC), least privilege, multifactor authentication, conditional access, and privileged access management. Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO using OAuth 2.0, OpenID Connect, and SAML. Cloud Architecture and Network Security Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning using NSGs, AWS security groups, network ACLs, and private endpoints. Support secure configuration of load balancers and gateways (Azure Application Gateway, Azure Load Balancer, AWS ALB/NLB, API gateways), cloud WAF, CASB, and API security controls. Review proposed cloud architectures for sound security design and escalate design concerns to senior staff. Secure Cloud Engineering and DevSecOps Integrate security requirements into deployments; review infrastructure-as-code (Bicep, ARM, Terraform, CloudFormation) and configurations for security risks. Support security scanning, secrets detection, and policy checks in Azure DevOps (ADO) pipelines. Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules. Data Security in the Cloud Support secure configuration of storage, databases, encryption, secrets, and key management (Azure Key Vault, AWS KMS). Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk. Monitoring and Incident Response Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents. Cloud Risk, Compliance, and Reporting Support risk assessments, audit evidence collection, and assessment of cloud controls against NIST, CIS Benchmarks, NYDFS, Virginia BOI, PCI-DSS, and other requirements. Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions. ADDITIONAL DUTIES Participate in security awareness, tabletop exercises, and training; perform other duties as assigned. MINIMUM EDUCATIONAL / EXPERIENCE QUALIFICATIONS Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field. Equivalent work experience in lieu of degree is considered. Two or more years of experience in cybersecurity, network security, DevSecOps, or related work. Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services. MINIMUM SKILL QUALIFICATIONS Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration. Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications. Strong analytical, troubleshooting, documentation, communication, and teamwork skills. PREFERRED QUALIFICATIONS Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools. Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config). Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework. Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI). Container security (Docker, Kubernetes) and scripting in Python or PowerShell. Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security - Specialty, or equivalent certification. Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration. REPORTING RELATIONSHIP Reports To: Manager, Active Defense & Security Operations OTHER DUTIES This job description describes the general nature and level of work assigned and is not an exhaustive list of responsibilities, duties, or skills. Other job-related duties may be assigned. At VA Farm Bureau, we provide an exceptional benefits package, including ongoing job development and support in all roles, paid training and continuing education reimbursement, medical and dental insurance available on your first day, generous employee 401K contribution, excellent Paid Time off (PTO) plan and more!
11/06/2026
Full time
Job Description Job Description POSITION SUMMARY The Cloud Security Specialist supports day-to-day execution of the organization's cloud security program across Microsoft Azure and Amazon Web Services. The role monitors cloud security controls, secures identity and access, reviews cloud and network architecture, integrates security into deployment pipelines, protects cloud-hosted data, and coordinates remediation with Information Security, Infrastructure, and Application Development. This is a growth-oriented role for a candidate with foundational to intermediate cybersecurity, cloud, or DevOps experience. PRIMARY DUTIES Cloud Security Operations and Posture Management Monitor Azure and AWS environments for misconfigurations, vulnerabilities, policy violations, suspicious activity, and drift from CIS Benchmarks and approved baselines. Administer and tune cloud security posture management and cloud-native security services, including Microsoft Defender for Cloud, AWS Security Hub, and AWS GuardDuty. Investigate cloud security alerts, document findings, coordinate remediation with system and application owners, and escalate high-risk findings to senior staff. Maintain cloud security dashboards, asset inventories, and landing zone usage and reporting. Identity and Access Management Support Azure and AWS identity controls, including Microsoft Entra ID, AWS IAM, role-based access control (RBAC), least privilege, multifactor authentication, conditional access, and privileged access management. Review roles, service principals, managed identities, access keys, and excessive or inactive access; support identity federation and SSO using OAuth 2.0, OpenID Connect, and SAML. Cloud Architecture and Network Security Support secure landing zone design, hub-and-spoke topology, environment separation, and network zoning using NSGs, AWS security groups, network ACLs, and private endpoints. Support secure configuration of load balancers and gateways (Azure Application Gateway, Azure Load Balancer, AWS ALB/NLB, API gateways), cloud WAF, CASB, and API security controls. Review proposed cloud architectures for sound security design and escalate design concerns to senior staff. Secure Cloud Engineering and DevSecOps Integrate security requirements into deployments; review infrastructure-as-code (Bicep, ARM, Terraform, CloudFormation) and configurations for security risks. Support security scanning, secrets detection, and policy checks in Azure DevOps (ADO) pipelines. Implement and maintain security policy as code using Azure Policy, AWS Service Control Policies, and AWS Config rules. Data Security in the Cloud Support secure configuration of storage, databases, encryption, secrets, and key management (Azure Key Vault, AWS KMS). Support data classification, labeling, and DLP with Microsoft Purview, and governance controls for Microsoft Fabric and Copilot, including oversharing risk. Monitoring and Incident Response Ensure cloud audit, security, and data access logs reach security monitoring platforms; support investigations, triage, and documentation for cloud-related incidents. Cloud Risk, Compliance, and Reporting Support risk assessments, audit evidence collection, and assessment of cloud controls against NIST, CIS Benchmarks, NYDFS, Virginia BOI, PCI-DSS, and other requirements. Prepare cloud security metrics and reports for leadership; document standards, procedures, diagrams, and exceptions. ADDITIONAL DUTIES Participate in security awareness, tabletop exercises, and training; perform other duties as assigned. MINIMUM EDUCATIONAL / EXPERIENCE QUALIFICATIONS Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field. Equivalent work experience in lieu of degree is considered. Two or more years of experience in cybersecurity, network security, DevSecOps, or related work. Three to five years of hands-on experience administering Microsoft Azure and/or Amazon Web Services. MINIMUM SKILL QUALIFICATIONS Working knowledge of cloud security, identity and access management, RBAC, cloud networking, encryption, logging, and secure configuration. Experience reviewing infrastructure as code, deployment pipelines, containers, or cloud-hosted applications. Strong analytical, troubleshooting, documentation, communication, and teamwork skills. PREFERRED QUALIFICATIONS Experience with Microsoft Entra ID, Microsoft Defender for Cloud, AWS Security Hub, AWS GuardDuty, SIEM, or comparable cloud security tools. Experience with Azure DevOps pipelines, Git, and policy as code (Azure Policy, AWS SCPs, AWS Config). Experience with landing zones, hub-and-spoke design, cloud WAF, CASB, API security, and Azure CAF or AWS Well-Architected Framework. Experience with Microsoft Purview, Fabric, and Copilot governance; identity protocols (OAuth 2.0, OIDC, SAML, PKI). Container security (Docker, Kubernetes) and scripting in Python or PowerShell. Security+, Microsoft Azure Security Engineer Associate (AZ-500), AWS Certified Security - Specialty, or equivalent certification. Familiarity with NIST CSF, CIS Controls, ISO 27001/2, PCI-DSS, SOX, HIPAA, GDPR, GLBA, CNAPP/CWPP concepts, EDR/MDR, and Linux and Windows administration. REPORTING RELATIONSHIP Reports To: Manager, Active Defense & Security Operations OTHER DUTIES This job description describes the general nature and level of work assigned and is not an exhaustive list of responsibilities, duties, or skills. Other job-related duties may be assigned. At VA Farm Bureau, we provide an exceptional benefits package, including ongoing job development and support in all roles, paid training and continuing education reimbursement, medical and dental insurance available on your first day, generous employee 401K contribution, excellent Paid Time off (PTO) plan and more!
Job Description Job Description What are the top 3 skills required for this role? o GCP IAM o VPC / Shared VPC o Cloud Run / GKE o BigQuery o Cloud Storage o Datastore / Firestore o Cloud KMS / Secret Manager Job Description/ Responsibilities Job Description: Data Security Architecture Assessment Focus: Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture. Responsibilities • Assess the end-to-end architecture from a data security and privacy standpoint. • Review data flows across: o GCP service projects o Virtual agents / conversational AI o Telephony platforms o API proxies o Datastore, BigQuery, Cloud Storage o On-prem / Client systems of record • Identify risks related to: o Customer data exposure o PII handling o Authentication and authorization o Encryption in transit and at rest o Secrets and key management o Logging, monitoring, and auditability o Data retention and deletion o Cross-boundary data movement • Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation. • Implement Sentinel policies for enforcing encryption standards. • Implement database activity monitoring and blocking rules in GCP. • Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access. • Produce findings report with risk ratings, gaps, and remediation recommendations. Required Skills • Strong experience in cloud security architecture, preferably Google Cloud Platform. • Hands-on knowledge of: o GCP IAM o VPC / Shared VPC o Cloud Run / GKE o BigQuery o Cloud Storage o Datastore / Firestore o Cloud KMS / Secret Manager • Experience assessing data protection controls for PII, PCI, or regulated customer data. • Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication. • Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects. • Understanding of logging, SIEM integration, audit trails, and security monitoring. • Experience with threat modeling and architecture risk reviews. Preferred Skills • Experience with conversational AI / virtual agent platforms. • Knowledge of telephony/SIP integrations and contact center platforms. • Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards. • Familiarity with AI data governance, model safety, and GenAI security risks. • Cloud Security Architecture (GCP Focus): Strong expertise in designing and assessing cloud security architectures, specifically within Google Cloud Platform. • GCP Security & Infrastructure Controls: Hands-on experience with core GCP security and data tools, including IAM, VPC / Shared VPC, Cloud Run/GKE, BigQuery, Cloud Storage, Datastore/Firestore, and Cloud KMS / Secret Manager. • Data Protection & Compliance: Demonstrated experience assessing data protection controls for sensitive and regulated customer data, including PII and PCI.
11/06/2026
Full time
Job Description Job Description What are the top 3 skills required for this role? o GCP IAM o VPC / Shared VPC o Cloud Run / GKE o BigQuery o Cloud Storage o Datastore / Firestore o Cloud KMS / Secret Manager Job Description/ Responsibilities Job Description: Data Security Architecture Assessment Focus: Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture. Responsibilities • Assess the end-to-end architecture from a data security and privacy standpoint. • Review data flows across: o GCP service projects o Virtual agents / conversational AI o Telephony platforms o API proxies o Datastore, BigQuery, Cloud Storage o On-prem / Client systems of record • Identify risks related to: o Customer data exposure o PII handling o Authentication and authorization o Encryption in transit and at rest o Secrets and key management o Logging, monitoring, and auditability o Data retention and deletion o Cross-boundary data movement • Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation. • Implement Sentinel policies for enforcing encryption standards. • Implement database activity monitoring and blocking rules in GCP. • Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access. • Produce findings report with risk ratings, gaps, and remediation recommendations. Required Skills • Strong experience in cloud security architecture, preferably Google Cloud Platform. • Hands-on knowledge of: o GCP IAM o VPC / Shared VPC o Cloud Run / GKE o BigQuery o Cloud Storage o Datastore / Firestore o Cloud KMS / Secret Manager • Experience assessing data protection controls for PII, PCI, or regulated customer data. • Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication. • Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects. • Understanding of logging, SIEM integration, audit trails, and security monitoring. • Experience with threat modeling and architecture risk reviews. Preferred Skills • Experience with conversational AI / virtual agent platforms. • Knowledge of telephony/SIP integrations and contact center platforms. • Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards. • Familiarity with AI data governance, model safety, and GenAI security risks. • Cloud Security Architecture (GCP Focus): Strong expertise in designing and assessing cloud security architectures, specifically within Google Cloud Platform. • GCP Security & Infrastructure Controls: Hands-on experience with core GCP security and data tools, including IAM, VPC / Shared VPC, Cloud Run/GKE, BigQuery, Cloud Storage, Datastore/Firestore, and Cloud KMS / Secret Manager. • Data Protection & Compliance: Demonstrated experience assessing data protection controls for sensitive and regulated customer data, including PII and PCI.
Job Description Job Description This is a remote position. We are looking for a Red Hat Linux Systems Administrator to join our team! Job Description This position performs as an VMWare Systems Administrator. This position is responsible for successfully providing VMWare System Administration tasks on Enterprise servers. This position performs as a Subject Matter Expert (SME) in the VMWare environment by successfully analyzing, implementing, developing, troubleshooting, negotiating, and making recommendations as to product selection, implementation, and development. Responsibilities include, but are not limited to: Utilizing Remedy, work customer reported server/desktop support issues Analyze and resolve issues related to the network, infrastructure, and tools Performing successful root cause analysis for complex problem resolution Performing some analysis and assessment of server performance and storage capacity and planning for future needs Performing routine server/workstation OS patching, upgrades, vulnerability/security management and file system maintenance, most of which will occur after-hours and on weekends to avoid customer outages User account management Maintain system documentation Successfully installing server systems and related hardware Successfully interfacing with hardware service controllers and configuring for lights out management Successfully installing and configuring operating systems, software applications and programs Ability to act independently in closed area environment and lead projects based on program requirements Provide input to architected solutions based on customer requirements and coordination with vendors on hardware and software implementation, problems, patches, and upgrades. Requirements Basic Qualifications Strong on-prem VMware development and operational support vSphere 7 and 8 ESXi hypervisor vSphere/Virtual Center VDS and networking vDRS Single Sign On Strong HP and Dell server hardware in support of the ESXi hypervisor Strong Terraform Good/Strong Ansible Strong Visual Studio Code Strong GitHub/Lab Strong CI/CD Some Cloud experience, specifically AWS Good on-prem Network routing, DNS, Firewall understanding in support of the VMware platforms Desired Qualifications VMWare certifications Ubuntu Cloud (AWS, Azure) Ansible Demonstrated analytical capabilities to include complex problem solving skills Proven and demonstrated proficiency in daily server operations (e.g. account administration, file service management, and print services administration) to include infrastructure security management Familiarity with virtualized environments such as VMware and KVM Operating system security concepts including SELinux and firewalls. Microsoft, Cisco, or UNIX professional certifications Network administration skills Active Directory skills Proven ability to create documentation and reports using MS Word, Excel and PowerPoint. Demonstrated strong verbal & written communication and organization skills. Experience with successfully delivering documented procedures based on industry standards and best practices. Benefits Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k,with matching) Life Insurance Plan PTO Short Term & Long-Term Disability Internet & Phone Allowance (for applicable roles) Wellness Resources (EAP) Pet Insurance Work-Life balance Flexible Hours Full-Time Permanent Positions JW Affinity IT is a full-service IT solutions provider supporting schools and private organizations with strategic, innovative technology projects. We take the time to understand our clients' needs to successfully develop, implement, and manage each initiative. JW is a certified small, woman- and minority-owned business through the National Minority Supplier Development Council. We are committed to fostering a diverse, inclusive, and innovative workplace where different perspectives lead to better IT solutions. As an Equal Opportunity Employer, we welcome applicants from all backgrounds and are dedicated to creating an inclusive environment.
11/06/2026
Full time
Job Description Job Description This is a remote position. We are looking for a Red Hat Linux Systems Administrator to join our team! Job Description This position performs as an VMWare Systems Administrator. This position is responsible for successfully providing VMWare System Administration tasks on Enterprise servers. This position performs as a Subject Matter Expert (SME) in the VMWare environment by successfully analyzing, implementing, developing, troubleshooting, negotiating, and making recommendations as to product selection, implementation, and development. Responsibilities include, but are not limited to: Utilizing Remedy, work customer reported server/desktop support issues Analyze and resolve issues related to the network, infrastructure, and tools Performing successful root cause analysis for complex problem resolution Performing some analysis and assessment of server performance and storage capacity and planning for future needs Performing routine server/workstation OS patching, upgrades, vulnerability/security management and file system maintenance, most of which will occur after-hours and on weekends to avoid customer outages User account management Maintain system documentation Successfully installing server systems and related hardware Successfully interfacing with hardware service controllers and configuring for lights out management Successfully installing and configuring operating systems, software applications and programs Ability to act independently in closed area environment and lead projects based on program requirements Provide input to architected solutions based on customer requirements and coordination with vendors on hardware and software implementation, problems, patches, and upgrades. Requirements Basic Qualifications Strong on-prem VMware development and operational support vSphere 7 and 8 ESXi hypervisor vSphere/Virtual Center VDS and networking vDRS Single Sign On Strong HP and Dell server hardware in support of the ESXi hypervisor Strong Terraform Good/Strong Ansible Strong Visual Studio Code Strong GitHub/Lab Strong CI/CD Some Cloud experience, specifically AWS Good on-prem Network routing, DNS, Firewall understanding in support of the VMware platforms Desired Qualifications VMWare certifications Ubuntu Cloud (AWS, Azure) Ansible Demonstrated analytical capabilities to include complex problem solving skills Proven and demonstrated proficiency in daily server operations (e.g. account administration, file service management, and print services administration) to include infrastructure security management Familiarity with virtualized environments such as VMware and KVM Operating system security concepts including SELinux and firewalls. Microsoft, Cisco, or UNIX professional certifications Network administration skills Active Directory skills Proven ability to create documentation and reports using MS Word, Excel and PowerPoint. Demonstrated strong verbal & written communication and organization skills. Experience with successfully delivering documented procedures based on industry standards and best practices. Benefits Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k,with matching) Life Insurance Plan PTO Short Term & Long-Term Disability Internet & Phone Allowance (for applicable roles) Wellness Resources (EAP) Pet Insurance Work-Life balance Flexible Hours Full-Time Permanent Positions JW Affinity IT is a full-service IT solutions provider supporting schools and private organizations with strategic, innovative technology projects. We take the time to understand our clients' needs to successfully develop, implement, and manage each initiative. JW is a certified small, woman- and minority-owned business through the National Minority Supplier Development Council. We are committed to fostering a diverse, inclusive, and innovative workplace where different perspectives lead to better IT solutions. As an Equal Opportunity Employer, we welcome applicants from all backgrounds and are dedicated to creating an inclusive environment.
