125 jobs found

This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Cyber Security Incident Response IR Manager will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity. As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The Role The Cyber Security Cloud Incident Response IR Manager will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Seasoned Cloud Security Incident Response leader with deep expertise in Azure, AWS, and GCP, driving rapid containment and remediation of complex threats across hybrid environments. Proven track record in orchestrating cross-cloud IR workflows and forensic investigations, ensuring resilient security posture and regulatory compliance. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness. Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense. Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements. Qualifications The Requirements Minimum 7 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred. Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The base salary compensation range being offered for this role is $120,000.00-$180,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus. Company Benefits WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles) Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans' eligibility requirements. Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records. This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets

Job Title: Senior Business Management Analyst - Sector Risk Management Engagement - TS/SCI Location: Onsite/Hybrid - DHS CISA, Arlington, VA. Classified work at 1110 N. Glebe Road or 1310 N. Courthouse; unclassified work may occur at 4200 Wilson Boulevard or an approved remote worksite. Work Schedule: Monday through Friday, generally 8:00 a.m. to 4:30 p.m. Eastern Time, excluding federal holidays; schedule flexibility may be required for emergent events. Security Requirements: TS/SCI - Top Secret clearance required, with the ability to obtain and maintain SCI eligibility/access and favorable DHS fitness and required access determinations. Classified work is performed at approved Government facilities. Work Authorization: U.S. citizenship required for classified access. Must be authorized to work in the United States. AttainX is seeking a Senior Business Management Analyst to provide senior program analysis, policy research, and decision support for CISA's Sector Management leadership and Sector Risk Management Agency responsibilities for sector-specific and cross-sector engagement. This position supports the Stakeholder Engagement Division through critical infrastructure engagement and advisory services. Qualifications and Education Requirements: At least five (5) years of related business management, program analysis, policy research, or stakeholder engagement experience, including work with senior Government leaders. A bachelor's degree in business, public administration, public policy, management, or a related field, or an equivalent combination of education and relevant experience. Experience conducting qualitative and quantitative analyses, identifying operational risks, and developing actionable recommendations. Ability to develop executive briefings, research papers, process maps, project schedules, and performance dashboards. Experience independently coordinating complex projects and reviewing analytical products for quality, accuracy, and timeliness. Knowledge of critical infrastructure sectors, SRMA responsibilities, sector interdependencies, and cyber and physical risk considerations. A current IIBA Certified Business Analysis Professional (CBAP) certification is preferred. Must possess a Top Secret clearance and be able to obtain and maintain SCI eligibility/access; classified work must be performed at approved Government facilities. Job Duties: Lead complex sector risk management analyses and coordinate analytical work, review findings, and provide evidence-based recommendations to senior leaders. Support sector-specific and cross-sector engagement planning and coordination aligned with SRMA responsibilities and leadership priorities. Maintain sector charters, bylaws, membership criteria, participation records, and procedural documents using approved templates. Research sector challenges, cyber and physical risks, interdependencies, and information-sharing needs; develop decision-support products. Collect and analyze attendance, stakeholder feedback, participation trends, and cross-sector observations; prepare monthly reports and recommendations. Maintain weekly dashboards, decision logs, action trackers, schedules, and risk and milestone records to support integrated coordination. Prepare engagement packages and support post-engagement summaries and action updates within three business days unless directed otherwise. Support classified meetings at approved Government facilities, including registration, onsite logistics, attendance records, and accurate meeting notes; prepare and handle records using required classified protocols. Support rapid-response products during urgent events and contribute to the consolidated after-action summary within ten business days after deactivation. Non-Essential Functions: Other related duties as assigned. About Us AttainX, Inc. delivers technology solutions, software products, and professional services to Federal Government customers. Our people are central to achieving our customers' missions. We support quality, collaboration, and employee growth through teamwork and professional development. Benefits We are proud to offer competitive compensation and benefits packages, including paid vacation, medical, dental, and vision insurance, a matching 401(k) plan, tuition/training reimbursement, and long- and short-term disability coverage, subject to plan terms and eligibility. EEO Commitment: AttainX is an equal employment opportunity employer committed to a workplace free from discrimination. We provide equal opportunity to applicants and employees without regard to race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. Accommodations: Applicants and employees who need a reasonable accommodation for the application process or to perform essential job functions may contact Human Resources. Physical Demands: This position primarily involves computer-based work, reviewing technical materials, and communicating with team members and stakeholders. Essential functions may be performed with or without reasonable accommodation. Work Environment: Work is performed at DHS CISA facilities in Arlington, VA, with telework permitted only when approved by the COR. Classified work is performed at approved Government facilities; remote work is limited to authorized unclassified information. General work hours are 8:00 a.m. to 4:30 p.m. Eastern Time, Monday through Friday, excluding federal holidays. Office noise is generally moderate. Hours may be adjusted for emergent events, and Government-directed travel may be required. Compensation details: 00 Yearly Salary PI01384a97804a-7473

Job Description Job Description Summary : DXC's Global Cyber Security team is building AI-enabled security capabilities that make our risk management faster, more consistent, and more scalable. AI Security Engineers design, build, and operate the solutions that power vulnerability management, cloud security posture management, DevSecOps, risk management, and security metrics across DXC's global environment. You will combine security domain knowledge with software engineering and AI to turn manual security processes into automated, reliable, and measurable systems. You will work closely with the Vulnerability Management Lead, Data Protection Manager, security architects, risk analysts, cloud and platform engineers, and application development teams. The role suits a builder who is comfortable working in code, prototyping quickly with AI-assisted development tools, and taking solutions from proof of concept to production. Roles and Responsibilities Design, build, and maintain AI-enabled security solutions that automate vulnerability triage, enrichment, prioritization, and ticket routing. Use AI-assisted development ("vibe coding") and modern engineering practices to rapidly prototype security tools, then harden them for production use. Build automation workflows and integrations across scanners, cloud control planes, CI/CD pipelines, ticketing systems such as Azure DevOps, and SIEM and SOAR platforms. Develop cloud security posture management capabilities, including automated misconfiguration detection, policy-as-code, drift remediation, and guardrails for multi-cloud environments. Embed security into DevSecOps pipelines through automated SAST, DAST, SCA, secrets detection, container and infrastructure-as-code scanning, and AI-assisted code review and fix suggestions. Engineer AI solutions for risk management, such as evidence collection, control testing, risk register enrichment, and automated assessment support. Build security dashboards and metrics pipelines that give leadership and practitioners accurate, timely views of posture, backlog, remediation performance, and risk trends. Design human-in-the-loop controls, approval gates, and audit logging for automated and AI-driven actions, so that automation is safe, governed, and explainable. Evaluate and validate AI models, agents, and tools for accuracy, false-positive rates, cost, and security, and document their limitations. Apply secure coding and engineering practices to security tooling itself, including secrets management, least-privilege access, dependency hygiene, and testing. Produce clear technical documentation, runbooks, and knowledge articles so that solutions can be operated and handed off reliably. Partner with the security operations, governance, and IT teams to identify manual processes that are good candidates for automation and deliver them iteratively. Skills and Attributes for Success Strong programming skills in Python and PowerShell, with working knowledge of JavaScript or TypeScript and familiarity with infrastructure-as-code tools such as Terraform or Bicep. Practical experience using AI-assisted coding tools and LLM APIs, with an understanding of prompt design, evaluation, and the limits of model output. Experience building API integrations and event-driven automation, including REST APIs, webhooks, and message queues. Working knowledge of cloud security posture management and cloud platforms, particularly Azure and Microsoft 365, with exposure to AWS or GCP. Familiarity with DevSecOps tooling and CI/CD platforms such as Azure DevOps, GitHub Actions, or GitLab. Understanding of vulnerability management, threat intelligence, and risk frameworks such as NIST CSF, NIST AI RMF, and CIS Benchmarks. Ability to design dashboards and metrics using tools such as Power BI, Kusto (KQL), or similar platforms. Strong problem-solving skills, a bias toward action, and comfort turning ambiguous security problems into working solutions. Clear communication skills, with the ability to explain technical designs to both engineers and non-technical stakeholders. Requirements Bachelor's degree in computer science, Information Systems, Engineering, or a similar discipline, or equivalent experience. Minimum of 3 years of experience in security engineering, security automation, DevSecOps, or software engineering with a security focus. Demonstrated experience building automation or tooling that is in production use, ideally in a security context. Hands-on experience with at least one of: vulnerability management platforms, cloud security posture management tools, SAST/DAST/SCA tooling, or SIEM/SOAR platforms. Experience with Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Defender for Endpoint, or equivalent platforms. Familiarity with Azure DevOps and Git-based version control workflows. Experience with AI or LLM application development, including retrieval-augmented generation, agent frameworks, or evaluation of model outputs, is strongly preferred.

This job is with WTW, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity. We will only consider candidates who are currently authorized to work in the United States and who will not require sponsorship now or in the future. Please note: student visas, CPT, OPT, H-1B, TN, and other temporary work authorizations are considered restricted forms of employment eligibility. Once these expire, the candidate must be able to present another valid form of work authorization. Start Date: August 2 nd , 2027 Hybrid Locations: New York Graduate Program Overview The CRB Graduate Development Program (GDP) is a non-rotational 17-month program that provides the opportunity to develop a broad knowledge base, varied skills, and diverse network. This program is designed to set you up with a holistic view of CRB with hands-on experience, insight, and opportunities to make an impact and shape your own career. GDP participants will be immersed in a 1-week orientation followed by a robust onboarding training learning about various functions within CRB. Our program is designed to provide graduates with a well-rounded understanding of the industry while having the opportunity to deep dive within their respective business area. R&A Enterprise Risk Consulting Overview Colleagues working in Risk & Analytics' Enterprise Risk Consulting (ERC) team provide our clients with a smarter way to analyze risk, using quantification, structured approaches, risk analytics tools and subject matter expertise to improve client outcomes. With our expertise and tailored solutions, we improve complex enterprise risk management by identifying, quantifying and mitigating unpredictable, interconnected risks. We currently work with some of the world's largest and complex organizations to assess and manage their strategic risks. We also work with smaller organizations early in their ERM journeys. We work across many industries including Food & Beverage, Professional Services, Transportation / Logistics, Energy, Construction, Manufacturing and others. Work within ERC is predominantly project-based, and you will often be involved in multiple projects simultaneously. Our work is often collaborative, providing exposure to a range of teams within the division. Responsibilities: As an Analyst within Risk & Analytics' Enterprise Risk Consulting (ERC) team, you will support the delivery of client projects that help organizations identify, assess, quantify, and manage enterprise risks while strengthening organizational resilience. You will work alongside consultants, data scientists, actuaries, catastrophe modelers, business continuity specialists, and industry experts to deliver solutions for some of the world's largest organizations. Project work may include: Enterprise Risk Management (ERM) assessments and maturity reviews Enterprise-wide risk identification, prioritization, and risk register development Risk appetite, tolerance, and governance framework design Strategic risk quantification and decision-support modeling Business Continuity Planning (BCP) and operational resilience programs Development of risk monitoring, reporting, and key risk indicators Benchmarking, research, and analysis to support client recommendations In this role, you will frequently collaborate with colleagues across WTW, including risk consulting, catastrophe modeling, climate, actuarial, insurance, and analytics teams to address complex client challenges. You will also contribute to the development of new consulting methodologies, tools, and thought leadership. As part of our innovation agenda, you will help explore and apply emerging AI-enabled approaches that enhance analytical insights, improve delivery efficiency, and create better outcomes for our clients. What You'll Gain Exposure to a wide variety of industries and risk challenges Experience working directly with senior client stakeholders Opportunities to develop analytical, consulting, and project management skills Collaboration with multidisciplinary teams across WTW Hands-on experience with innovative risk analytics and AI-enabled solutions A strong foundation for a career in enterprise risk management, business continuity, resilience, and risk consulting Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that base salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Qualifications Education and Qualifications: Bachelor's degree with a minimum of 3.0 GPA Date of Graduation between May 2026 - May 2027 Preferred Majors: Risk Management, Business, Finance, Economics, Accounting, Liberal Arts Intermediate to advance Excel skills Proficient in Microsoft Office Suite Competencies: Strong analytical, problem-solving, and critical thinking skills Excellent written and verbal communication skills, including the ability to translate complex concepts into clear, actionable insights Strong interpersonal and relationship-building skills, with the ability to collaborate effectively with colleagues, clients, and subject matter experts across functions Intellectual curiosity and a willingness to learn new methodologies, technologies, and AI-enabled approaches to consulting Strong organizational and project management skills with the ability to manage multiple priorities and deadlines Self-starter mindset with the ability to work independently while contributing to team success Proficiency in Microsoft Excel, PowerPoint, and Word Interest in enterprise risk management, business continuity, resilience, analytics, and organizational decision-making Compensation and Benefits Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only). Compensation The hourly rate being offered for this role is $36.00hr - $39.00hr USD. This role is also eligible for overtime. Company Benefits: WTW provides a competitive benefit package which includes the following (eligibility requirements apply): Health and Welfare Benefits: Medical (including prescription coverage), Dental, Vision, Health Savings Account, Commuter Account, Health Care and Dependent Care Flexible Spending Accounts, Group Accident, Group Critical Illness, Life Insurance, AD&D, Group Legal, Identify Theft Protection, Wellbeing Program and Work/Life Resources (including Employee Assistance Program) Leave Benefits: Paid Holidays, Annual Paid Time Off (includes paid state/local paid leave where required), Short-Term Disability, Long-Term Disability, Other Leaves (e.g., Bereavement, FMLA, ADA, Jury Duty, Military Leave, and Parental and Adoption Leave), Paid Time Off Retirement Benefits: Contributory Pension Plan and Savings Plan (401k) Future Career Opportunities: Our internship program serves as a key talent pipeline for future full-time Graduate opportunities. As a result, candidates must meet the graduation date requirements specified in the posting. If a candidate's expected graduation date changes after applying, they are expected to promptly inform their recruiter or manager, as this may impact eligibility for current or future opportunities. Recruiting tips: WTW specializes in preparing for the unknown. Here's how to get ready for the big day: Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified. EOE, including disability/vets