9 jobs found

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI961c8e15715a-5088

Description: Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure. The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them. As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective. Key responsibilities: Security engineering and tool development Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID. Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected. Build detection logic, automation and response playbooks. Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations. Develop and improve security baselines and hardening standards. Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing. Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data. Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools. Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment. Cybersecurity operations Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts. Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners. Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned. Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage. Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks. Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves. Security awareness and phishing simulations Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution. Analyze campaign results and identify departments or individuals who need additional training or follow-up. Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction. Maintain records of simulation results and awareness training completion to support reporting and continuous improvement. Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting. Compliance and risk management Support day-to-day efforts to achieve and maintain compliance with applicable security controls. Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps. Draft and maintain security policies, standards, procedures, risk assessments and control inventories. Map security controls to applicable frameworks and recommend control improvements. Conduct risk assessments and recommend remediation priorities. Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries. Identify emerging risks and recommend policy or control improvements. Technology operations and service support Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration. Assist with service desk escalations that require elevated access or advanced troubleshooting. Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management. Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience. 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level. Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management. Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment. Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations. Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK. Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk. Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture. Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams. Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes. Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences. Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership. Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment. Experience mentoring and providing technical guidance to technology staff. Preferred qualifications: Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500. Experience with security architecture reviews, risk assessments, or third-party and vendor risk management. Experience with infrastructure as code or DevSecOps practices. Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA. Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law. PI11172d4500bc-5088

This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

This job posting is anticipated to remain open for 30 days, from 30-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: The Technical Architect will be responsible for working across all areas of Information Systems (IS), providing leadership on technology selection and operational processes for running Threat and Vulnerability Management services and solutions in a mixed on-prem and cloud environment. What You'll Do: Development of Information Security solutions in cloud to meet the needs of the firm. Lead the adoption of cloud infrastructure platforms and the integration of a hybrid architecture Creating and managing relationships with teams across the department Work with distributed teams to ensure that application services are properly instrumented to be reliably monitored and debugged Automate manual, repeatable system processes to reduce Tier 1 efforts Collaborate with project teams to deploy new solutions for proof-of-concept efforts What Experience You'll Need: Minimum 8 years' experience in cybersecurity as a practitioner Experience architecting secure solutions, including network, compute, storage, and security services within a cloud provider Must be experienced in creating a strategic cyber security technology direction, aligning it with tactical activities, and communicating plans broadly across the organization Experience working across multiple large scale cloud providers, such as deployment of compute/storage/network resources Experience with SIEM data ingestion, SOAR and SOC response Must be able to communicate effectively across multiple audiences, including firm-wide business units, senior leaders, associates, external vendors Working knowledge in network, network storage, application development, Operating Systems, IAM (Authentication/authorization), PAM, SSO, and encryption standards Proficiency with Infrastructure as Code (Iac) with Ansible or Terraform Experience coding with Python Familiarity with tools such as Git, Jenkins, Chef, and CI/CD pipelines Knowledge and use of security architecture frameworks such as SABSA or NIST Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experience in one or more of the following: ISO 27001/2, ITIL or NIST is preferred Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

This job posting is anticipated to remain open for 30 days, from 19-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Overview: Edward Jones is seeking a Senior Security Architect to lead strategic alignment of infrastructure security tools, processes, and capabilities across all security domains. This role is pivotal in ensuring that security architecture supports the firm's broader technology and business strategy, including cloud transformation, operational resilience, enterprise encryption standards, and risk reduction. The ideal candidate will be a seasoned security leader with deep expertise in cryptography, governance, and architecture. They will own and maintain key security templates and artifacts, provide expert guidance during reviews, and drive alignment with enterprise architecture and other technical organizations. What You'll Do: Own and maintain templates for security artifacts (e.g., Patterns, Baseline Control Documents, Procedures, Architecture Decision Records, and Standards) and manage a repository of completed, approved versions. Provide expert infrastructure security guidance and oversight during security reviews and the development of security artifacts. Define and govern infrastructure security standards, including cryptographic controls for data in transit and at rest across hybrid environments. Provide architectural guidance on encryption, key management, and certificate usage as part of security reviews and standards development. Lead strategic alignment of infrastructure security capabilities and processes with enterprise architecture and other technical domains. Serve as a senior technical leader across the Information Security Division, influencing infrastructure security strategy and execution. Collaborate with cross functional teams to ensure infrastructure security solutions are scalable, resilient, and aligned with cloud native and hybrid environments. Monitor industry trends and emerging threats to inform infrastructure security strategy and tooling. Engage with vendors and external partners to evaluate solutions, negotiate contracts, and represent the firm in technical forums. Drive maturity of infrastructure security practices across cloud platforms (Azure, OCI, AWS, GCP) and on premises environments. What Experience You'll Need: Bachelor's degree in Computer Science, Engineering, or related field; or equivalent work experience. 10+ years of experience in infrastructure security architecture within a complex, matrixed organization. Deep understanding of infrastructure security domains including network security, endpoint protection, identity and access management, servers and containerization, applications, and cloud security, including encryption, key management, and certificate-based controls. Experience designing and implementing secure infrastructure architectures across hybrid cloud environments. Experience defining or applying enterprise encryption standards, including data-at-rest, data-in-transit, and key lifecycle management requirements. Extensive experience in securing endpoint devices (e.g., laptops, mobile devices, servers) through technologies such as EDR/XDR, antivirus, device hardening, and policy enforcement. Familiarity with security frameworks and standards (e.g., NIST, CIS, ISO 27001). Strong knowledge of security tooling such as SIEM, vulnerability management, configuration management, and cloud-native security services. Proven ability to lead cross-functional initiatives and influence technical direction at the enterprise level. Excellent communication and interpersonal skills; able to build trust and credibility across technical and business teams. Ability to assess and integrate proposed standards and technologies across interdependent systems. Demonstrated experience in risk management and incident response within infrastructure environments. What Could Set You Apart: Relevant security certifications such as CISSP, CISM, CCSP, advanced network vendor certifications, ISC2 certifications, or SANS certifications Experience supporting advanced encryption solutions, certificate management, and post-quantum readiness Experience securing AI/ML systems, including model governance, data pipeline protection, and secure deployment strategies Technology background in the financial sector Understanding of various regulatory requirements and laws, including but not limited to NYDFS Cybersecurity Regulations and FINRA Regulations Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

Job Description Job Description The Elevator Pitch Are you ready to own the network and cybersecurity backbone of a company that's redefining security technology? Do you thrive at the intersection of network engineering, cybersecurity operations, and compliance-where your work directly reduces risk and keeps the business resilient against an ever-changing threat landscape? Evolv is seeking a Network & Cybersecurity Engineer to design, implement, and defend our network infrastructure and security tooling. You'll be the technical owner of Evolv's network and security posture-from firewalls and access control to identity governance and threat detection-reporting to the Senior Director of Cybersecurity & Technology. This is a pivotal role in maturing Evolv's security program to meet the evolving demands of the business and our growing compliance obligations. You'll partner closely with the Systems Engineer and the rest of the IT team, and serve as the subject matter expert on networking, enterprise cybersecurity, and compliance tooling. If you're energized by staying ahead of emerging threats and building durable, well-governed security controls, this role is for you. Success in the Role: What are performance outcomes over the first 6-12 months you will work toward completing? In the first 30 days, you will: Get to know the IT and security team and the tools/platforms currently in use Start building relationships with key stakeholders across the company, especially R&D and Legal/Compliance Learn Evolv's compliance commitments and ongoing authorization efforts, and how best to support them Gain familiarity with the current network/security toolstack: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, VPN/ZTNA, identity platforms (Okta, Entra ID), SIEM/EDR/DLP tooling, and the MDR relationship Within 3 months, you will: Begin implementing or improving network and security controls that measurably reduce risk Build trust-based relationships with peers in IT and stakeholders across business units Become the established subject matter expert on network security and compliance tooling at Evolv Take ownership of the MDR relationship and escalated detection response By the end of the first year, you will: Be recognized as the trusted subject matter expert across network infrastructure, and security operations Have driven measurable improvements to Evolv's security posture and compliance readiness Successfully supported compliance requirements and audit readiness, partnering closely with Legal/Compliance and R&D Documented network and security architecture, processes, and runbooks that reduce single points of failure Be seen as the go-to resource for network security questions, escalations, and best-practice guidance The Work: What type of work will you be doing? What assignments, requirements, or skills will you be performing on a regular basis? Infrastructure, Security & Compliance: Design, implement, and maintain network infrastructure: firewalls (Palo Alto), switching (Cisco/Meraki), NAC, and VPN/ZTNA solutions Administer identity and access: Okta/Entra ID, Conditional Access policies, MFA enforcement, identity lifecycle management, and IGA Own security tooling and controls: SIEM, EDR, DLP, and vulnerability management, aligned to CIS Controls, NIST CSF, and other relevant compliance frameworks Manage the MDR relationship and respond to escalated detections Drive the IT process and policy redesign required to meet current compliance requirements, and to support additional frameworks as those efforts come online, in partnership with Legal/Compliance Harden AWS/Azure environments from a security perspective: IAM least-privilege, VPC/network security, Azure Policy Provide front-line escalation support and mentoring to IT teammates; maintain runbooks and documentation Assess technology and network risk across the company and recommend remediations Leadership, Team Structure & Culture You will join the IT organization as a direct report to the Senior Director of Cybersecurity & Technology, working alongside a Systems Engineer peer who owns day-to-day systems and endpoint operations. This is a hands-on, collaborative team that takes security and operational excellence seriously. This is a senior individual contributor role focused on deep technical impact-your job is to own and mature Evolv's network security and cybersecurity posture through the systems, controls, and automation you build. You'll have meaningful autonomy over how you approach problems and are actively encouraged to bring creative solutions, identify improvement opportunities, and advocate for better ways of working. You'll work alongside teammates who share your drive for continuous improvement, and you'll have a manager who values initiative, trusts the team to execute, and wants to hear your ideas. Where is the role located? This role is based out of Evolv HQ in Waltham, Massachusetts. This is a hybrid role with an expectation of 3 days per week on-site. Fully remote candidates will not be considered. Compensation and Transparency Statement The base salary range for this full-time position is $102,000-$166,000. In addition to base salary, this role offers a competitive target bonus, equity, and a comprehensive benefits package. This range reflects our commitment to pay transparency and equity, in alignment with applicable state laws. Our compensation ranges are determined based on factors such as role, level, location, market benchmarks, and internal equity. The posted range represents the good-faith estimate of what we expect to pay for this role across U.S. locations. Actual compensation within the range will be based on the candidate's skills, experience, education, and geographic location. In accordance with state and local pay transparency laws-including those in California, Colorado, Massachusetts, New York, New Jersey, and others-we disclose salary ranges in all job postings and provide additional information upon request. During the hiring process, your recruiter will share: •The specific salary range for your preferred location •A general overview of our benefits and equity offerings •Insights into how compensation decisions are made, including factors that influence starting pay We are committed to fair pay practices, and we regularly review our compensation programs to ensure they are competitive, equitable, and aligned with our values. Benefits At Evolv, we're on a mission to help make public spaces safer through innovative security technology. So, we're looking for future teammates who embody our values, people who: Do the right thing, always; Put people first' Own it; Win together; and continue to Be bold, stay curious. Our Benefits Include : Equity as part of your total compensation package Medical, dental, and vision insurance Health Savings Account (HSA) A 401(k) plan (and 2% company match) Flexible Paid Time Off (PTO)- take the time you need to recharge, with manager approval and business needs in mind Quarterly stipend for perks and benefits that matter most to you Tuition reimbursement to support your ongoing learning and development Subscription to Calm Evolv Technology ("Evolv") is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind. We welcome and encourage diversity in the workplace, and all employment decisions are made without regard to race, color, religion, national, social or ethnic origin, sex (including pregnancy), age, disability, HIV Status, sexual orientation, gender identity and/or expression, veteran status, or any other status protected by law in the locations where we operate. Evolv will not tolerate discrimination or harassment based on any of these characteristics. Evolv is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. If you need a reasonable accommodation as part of the job application process, please connect with us at . Evolv participates in E-verify for all employees after the completion of Form I-9.

Job Description Job Description We are seeking a Senior Network Security Engineer for an operations-first role supporting enterprise network security infrastructure across on-premises, remote-access, hybrid-cloud, and cloud-connected environments. This is not primarily an architecture/design role. The priority is a hands-on engineer who can administer, configure, maintain, troubleshoot, patch, upgrade, back up, validate, document, and operate production security platforms with minimal ramp-up. Firewall operations: hands-on Cisco and Palo Alto firewall administration, rule changes, NAT, troubleshooting, policy cleanup, upgrades, backups, logging, and production support. VPN / remote access: support for remote-access VPN, site-to-site VPN, user connectivity issues, certificates, authentication flows, and after-hours troubleshooting. RSA / MFA administration: RSA SecurID or equivalent MFA operations, token support, server administration, user troubleshooting, VPN integration, certificates, patching, backups, logs, and monitoring. Day-to-day operations: ticket resolution, monitoring alerts, health checks, change requests, incident support, maintenance windows, operational reporting, and customer support. Configuration and administration: installing, configuring, maintaining, patching, upgrading, backing up, validating, and troubleshooting assigned security platforms. Production troubleshooting: strong TCP/IP, DNS, routing, firewall logs, packet captures, VPN authentication, certificate, and connectivity troubleshooting. Documentation and process discipline: SOPs, runbooks, diagrams, change records, rollback plans, evidence collection, knowledge transfer, and formal change management. Federal/customer environment maturity: Public Trust eligibility, regulated-environment documentation, customer support, cross-team coordination, and comfort working with government stakeholders. The best candidate can credibly say: "I have operated enterprise Cisco and Palo Alto firewalls in production, handled firewall rule changes and troubleshooting, supported VPN users and site-to-site tunnels, administered or supported RSA/MFA tied to VPN access, followed formal change-management processes, maintained documentation and backups, and can step into daily operational support with minimal ramp-up." Scope and Role Boundaries Primary platforms include Cisco ASA/Firepower/FTD/FMC, Palo Alto NGFW/Panorama/GlobalProtect, remote-access and site-to-site VPN, RSA SecurID Authentication Manager or comparable MFA, monitoring/logging/SIEM integrations, and related network security controls. Coordinate with SOC/NOC, cloud, identity/directory, wireless/LAN, server, endpoint, system owner, application, governance, and vendor teams during changes, incidents, troubleshooting, compliance, and audit support. Cloudflare, Cisco ISE/NAC, secure web/email gateways, packet visibility tools, SD-WAN/SASE/ZTNA, AWS/Azure security, and F5/application-delivery awareness are useful where they intersect with assigned operational support, but the core need is firewall, VPN, RSA/MFA, and production operations. Key Responsibilities Provide daily, weekly, monthly, and annual operational support for assigned security systems, including tickets, alerts, health checks, email/phone support, metrics, status reporting, and operational validation. Administer and troubleshoot enterprise firewalls, including rule bases, NAT, segmentation, high availability, threat prevention, VPN integration, logging, secure baselines, rule reviews, recertification, cleanup, and decommissioning. Install, configure, maintain, patch, upgrade, back up, and validate firewall, VPN, MFA, and related network security systems in production environments. Support remote-access VPN, site-to-site VPN, partner connectivity, cloud connectivity, mobile/remote users, certificates, authentication policies, availability, utilization, and user access issues. Maintain and troubleshoot RSA SecurID Authentication Manager or equivalent MFA services, including servers/appliances, agents, certificates, HA, backups, logs, monitoring, directory integration, VPN authentication, and token lifecycle support. Respond to incidents, vulnerability notices, urgent requests, vendor advisories, PSIRT notices, system alerts, and emergency troubleshooting while minimizing service disruption. Use firewall logs, VPN logs, packet captures, SIEM data, monitoring tools, DNS/routing checks, and standard diagnostics to resolve complex connectivity, authentication, TLS/certificate, and application-flow issues. Create and maintain topology diagrams, equipment inventories, configurations, SOPs, runbooks, implementation plans, rollback plans, build/upgrade procedures, troubleshooting notes, and knowledge articles. Follow approved change, release, incident, problem, and configuration-management processes; prepare change records, peer-review materials, validation evidence, root-cause analysis, metrics, and audit artifacts. Support vulnerability remediation, POA&M tracking, continuous monitoring, compliance reviews, audit evidence collection, and coordination with ISSO, system owner, and security governance teams. Requirements 7+ years of experience in network security engineering, network infrastructure, cybersecurity infrastructure, or a closely related role. 5+ years of hands-on experience administering, maintaining, and troubleshooting enterprise firewall platforms in production environments. Hands-on experience with Cisco security technologies such as Cisco ASA, Firepower, FTD, FMC, AnyConnect/Secure Client, or equivalent Cisco firewall/VPN platforms. Hands-on experience with Palo Alto Networks technologies such as NGFW, Panorama, GlobalProtect, security profiles, App-ID/User-ID, logging, and policy optimization. Experience administering or supporting RSA SecurID Authentication Manager or comparable enterprise MFA/two-factor authentication platforms, including token support, server operations, patching/upgrades, backups, certificates, monitoring, and directory/VPN integration. Strong knowledge of firewall policy, NAT, VPNs, routing, DNS, DHCP, BGP, TLS/certificates, packet captures, log analysis, segmentation, high availability, and common network diagnostic tools. Experience with enterprise monitoring, logging, SIEM, alerting, vulnerability management, incident response, formal change management, and regulated-environment documentation. Ability to create clear technical documentation, support customers and stakeholders, prioritize operational work, communicate clearly, and coordinate across technical teams. Ability to obtain and maintain a Public Trust background investigation. Desired Certifications Relevant certifications are helpful but should not replace demonstrated hands-on experience. Examples include CCNP Security, CCIE Security, PCNSE, PCCSE, CISSP, CCSP, AWS Certified Security - Specialty, AWS Advanced Networking - Specialty, Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Azure Network Engineer Associate, CompTIA Security+, CompTIA CySA+, GIAC certifications, or equivalent vendor/cloud certifications. Core Competencies Enterprise firewall engineering and policy lifecycle management VPN, remote access, RSA/MFA, and token lifecycle operations Cloudflare, edge security, secure access, and Zero Trust support Content filtering, secure web/email gateway, and NAC operations Hybrid-cloud network security and secure connectivity Monitoring, logging, SIEM integration, and incident response support Security visibility, packet analysis, and advanced troubleshooting Vulnerability remediation, compliance evidence, and POA&M support Change management, documentation, reporting, and operational metrics Technical leadership, customer support, and cross-team collaboration Benefits 401(k) 401(k) matching Dental insurance Flexible schedule Flexible spending account Health insurance Health savings account Life insurance Paid time off Professional development assistance Referral program Retirement plan Tuition reimbursement Vision insurance

Job Description Job Description ABOUT FTAI AVIATION LTD. (NASDAQ: FTAI) FTAI owns and maintains commercial jet engines with a focus on the Maintenance, Repair and Exchange (MRE) of CFM56 and V2500 engines. FTAI's propriety portfolio of products, including The Module Factory and a joint venture to distribute engine PMA helps make CFM56 and V2500 engine maintenance simpler, more cost-effective, significantly faster, and more environmentally friendly. Additionally, FTAI owns and leases jet aircraft which often facilitates the acquisition of engines at attractive prices. FTAI invests in aviation assets and aerospace products that generate strong and stable cash flows with the potential for earnings growth and asset appreciation. FTAI operates globally and has offices in New York, Miami, Montreal, California, Singapore, Dubai, United Kingdom and Ireland. JOB OVERVIEW We are seeking a Principal Security Engineer to lead the security program for a public, multi-site organization in a regulated environment. This is a hands-on individual-contributor role that both implements technical controls and drives the policies behind them. Partnering with the MSP, vCISO, IT, and Legal, you will set technical direction and execute it-tuning controls, maturing policy, and aligning the program to recognized frameworks and regulatory requirements Responsibilities: Drive the technical cybersecurity strategy and roadmap; report security posture and material risk to senior leadership Design, configure, and maintain hands-on controls across network, endpoint, identity, and cloud (firewall rules, segmentation, VPNs, IDS/IPS, EDR, MFA) Develop and maintain security policies aligned to NIST CSF, ISO 27001, and CIS and to regulatory requirements, ensuring controls actually enforce them Manage and tune the security stack (SIEM, EDR, email security); build detection rules, alerts, and dashboards Lead incident response end to end and drive risk-based vulnerability and patch management to closure across infrastructure, endpoints, and cloud Own the controls framework and third-party/vendor risk program, coordinating with internal audit/GRC and the legal team Collaborate with MSP and vCISO (managing scope, SLAs, escalation) while keeping core decisions in-house Harden identity infrastructure (AD/Entra ID) and run the security awareness program across sites Qualifications: 7+ years across IT and cybersecurity, including a hands-on technical foundation and 3+ years driving a security program as a senior individual contributor Proven ability to both implement technical controls and author the policies and governance behind them Experience securing a public and/or regulated, multi-site environment (e.g., SOX, FINRA, FAA), including audit and control ownership Command of NIST CSF, ISO 27001, CIS, and SOX/ITGC, with experience owning control evidence through external audits Strong cloud (Azure and/or AWS) and enterprise network security-firewalls, VPNs, segmentation, and IDS/IPS Hands-on with SIEM (e.g., Microsoft Sentinel) and endpoint protection (e.g., SentinelOne), plus scripting (PowerShell and/or Python) and identity hardening (AD/Entra ID)

Job Description Job Description Information Systems Security Manager / Specialist Location: Arlington, VA Must have an active Top Secret Clearance Node provides HIRT remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities. Node is seeking an Information Systems Security Specialist to support this critical customer mission. Responsibilities: -Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems -Assisting technical/management leadership on major tasks or technology assignments -Establishing goals and plans that meet project objectives -Assisting in direction and control activities, having overall responsibility for security management, methods, and staffing to ensure that technical requirements are met -Participating in client negotiations and interfacing with senior management -Supporting decision making and domain knowledge that may have a critical impact on overall project implementation -Providing support to plan, coordinate, and implement a cybersecurity lab's information security -Providing support for facilitating and helping the lab identify its current security infrastructure and define future programs, design and implementation of security related to lab systems -Assisting the efforts of security staff to design, develop, engineer and implement solutions to security requirements -Implementing and development of the DHS IT security standards -Gathering and organizing technical information about the lab's mission goals and needs, existing security products, and ongoing programs -Performing risk analyses which also includes risk assessment -Planning and leading major technology assignments -Evaluating performance results and recommends major changes affecting short-term project growth and success -Functioning as a cyber technical expert across multiple project assignments -Working closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs Requirements Required Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 5+ years of directly relevant experience in information security management - Hands on experience with Linux operating systems or Amazon Web Services - Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management - Beginning to end Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Mgmt planning and execution - Experience working on multiple complex assignments which are broad in nature, requiring originality and innovation in determining how to accomplish tasks - Ability to apply a comprehensive knowledge across key tasks and high impact assignments - Knowledge of Computer Network Defense (CND) policies, procedures & regulations - Knowledge of defense-in-depth principles and network security architecture - Knowledge of ATO requirements and strong experience with POAMs. - Knowledge and experience with full range of Microsoft Office products (Word, Excel, Powerpoint, and Visio) - Knowledge of boundary protection and network segmentation - Knowledge of authentication and access management techniques - Experience with implementing and assessing security controls for hardware, software, and network deployments - Must be able to work collaboratively with internal and external stakeholders across physical locations Desired Skills: - Experience with Risk Management Framework software (CSAM, Xacta, Archer, RegScale) - Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz, burp) - Experience with Endpoint Protection tools like CrowdStrike or CarbonBlack - Working knowledge of SIEM tools like Splunk, SOAR, or ELK - Familiarity with role-based account processing operations - Familiarity with zero trust architectures - Familiarity with scripting languages (python, AWS CLI, Lambda, bash, powershell) Required Education: BS Information Management, Cybersecurity, Computer Science or related degree, or High School Diploma and 7+ years of information security management experience. Desired Certifications: - DoD 8140.01 IAT Level III, CISSP, AWS, Cisco, Microsoft Benefits Medical Dental Vision Basic Life Health Saving Account 401K Matching Three weeks of PTO/Sick 11 Paid Holidays Pre-Approved Online Training