{"@context":"https://schema.org","@type":"ItemList","name":"Software Engineer Job Openings - Apply Now!","description":"Looking for a challenging role in software development? Check out our latest Software Engineer job opportunities! Apply online and start your career as a Software Engineer today.","itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-07-15","description":"

Serious Medicine is what we do. Being extraordinary is who we are. Every colleague plays a key role in upholding this promise to our patients and their families.

Shift:

First Shift (United States of America)

Information Security Engineer

Are you ready to launch your cybersecurity career at one of Nebraska’s most respected healthcare institutions? At Nebraska Medicine, we’re looking for a passionate, curious, and driven individual to join our Information Security team as an IT Security Engineer. This is your opportunity to protect critical systems, learn from seasoned professionals, and make a real impact in a mission-driven environment that values innovation, collaboration, and continuous learning. If you're eager to grow your skills in a dynamic, real-world setting where your work truly matters—this is the place to start.

Details:  Information Security Engineer

Candidates must reside in NE or IA
This is not a 100% remote position - MUST BE ABLE TO WORK ON CAMPUS
Resume REQUIRED for consideration

Why Work at Nebraska Medicine?

Together. Extraordinary. Join a team that values your skills, delivering exceptional care through collaboration.
Leading Health Network Work with the region’s top academic health network, partnering with UNMC to transform lives through education, research, and patient care.
Dignity and Respect: We value all backgrounds and experiences, reflecting the communities we serve.
Educational Support Enjoy up to $5,000/year in tuition assistance, a 35% discount at Clarkson College, and career advancement opportunities with covered educational costs. Enjoy support for your personal growth within the organization, from those just starting their healthcare careers to those who are years down the path.

Be part of something extraordinary at Nebraska Medicine!

The Information Security Engineer is a key member of the information security program and has sufficient technical knowledge to work under general guidance to analyze and recommend network security systems, processes and solutions; participate in policy and procedure development and implementation, as well as participate in campus awareness and education programs. This role involves designing, implementing, and managing security controls, conducting risk assessments, investigating security incidents, and providing expertise in security best practices.

Required Qualifications: Information Security Engineer

• Minimum of two years of information security management required with exposure to infrastructure and system security, security scanning and vulnerability management and remediation, server management or end user deuce security required.
• Bachelor's degree in Information Assurance, Computer Science, or related field or equivalent combination of education/experience combined (one year of experience equals one year of education) required.

• Experience with security technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection (EDR), SIEM, etc. required.

• Experience with cloud security principles and technologies (e.g., AWS, Azure, GCP) required.

• Experience with Advanced Threat Detections, Threat Hunting and digital forensics required.

• Understanding of networking protocols, encryption techniques, and secure coding practices required.

• Microsoft Office Suite knowledge is required.

Preferred Qualifications: Information Security Engineer

• Information security management in a large academic healthcare center preferred.
• HIPAA compliance management, GLBA compliance management or PCI compliance management preferred.
• Master's degree or equivalent preferred.

• GIAC or CISSP preferred.

Nebraska Medicine is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, marital status, sex, age, national origin, disability, genetic information, sexual orientation, gender identity and protected veterans’ status.

","hiringOrganization":{"@type":"Organization","name":"Nebraska Medicine","sameAs":"https://www.nebraskamed.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Business Service Center, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":2,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-04","description":"

Are you passionate about safeguarding systems and data with cutting-edge cybersecurity strategies? Join our Talent Community and stay on our radar for future opportunities with top-tier global clients.

⚠️ This is not an active opening. By applying, you'll be considered when a suitable role becomes available.

\n\n

🔍 Are you skilled in…?

• Assessing and addressing information security risks
• Designing and implementing security infrastructure and protocols
• Monitoring and responding to security alerts and incidents
• Conducting vulnerability assessments and security audits
• Developing incident response plans and policies
• Written and verbal English communication
• Problem-solving and teamwork

💡 Do you have experience with…?

• Firewalls, IDS/IPS, and SIEM tools
• Encryption protocols, PKI, and secure communications
• Penetration testing and vulnerability scanning
• Security policy design and compliance frameworks (e.g., ISO 27001, GDPR)
• Collaborating with IT and DevOps teams to secure system configurations

➕ Bonus points for:

• Certifications such as CISSP, CISM, or CompTIA Security+
• Experience with cloud security (AWS, Azure, Google Cloud)
• Network security and endpoint protection
• Security in DevOps and CI/CD environments
• Mobile device management and protection

\n\n

✅ Does our work culture resonate with you?

• 100% remote
• People-first culture
• Excellent compensation in US Dollars
• Hardware setup for working from home
• Work with global teams and prominent brands in North America, Europe, and Asia
• Training allowances
• Personal time off (PTO) for vacation, study leave, personal time, etc.
• ...and more!

\n\n

Then apply now!

We’ll contact you when a matching role opens up!

","hiringOrganization":{"@type":"Organization","name":"Launchpad Technologies","sameAs":"https://www.golaunchpad.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Latam"}}}},{"@type":"ListItem","position":3,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-08","description":"About the Role:
We are seeking a motivated Information Security Specialist with a strong foundation in compliance frameworks and offensive security. The ideal candidate will have hands-on experience with ISO 27001, HIPAA, SOC 2, as well as practical skills in penetration testing and security risk assessments. This role requires both a compliance mindset and an attacker’s perspective to ensure a well-rounded approach to organizational security.

Key Responsibilities:
● Governance, Risk & Compliance
○ Maintain and improve the organization’s Information Security Management System (ISMS) in alignment with ISO 27001.
○ Support compliance efforts for HIPAA and SOC 2 frameworks.
○ Conduct risk assessments, document findings, and recommend remediation strategies.
○ Assist in preparing for internal and external audits.

● Offensive Security & Technical Security Testing
○ Perform internal and external penetration testing, including web, network, and cloud environments.
○ Conduct vulnerability assessments and report exploitable weaknesses.
○ Simulate real-world attack scenarios to test security controls and incident response readiness.

● Security Awareness & Incident Support
○ Work with cross-functional teams to improve security posture.
○ Contribute to security awareness training programs.
○ Assist in security incident investigations and root cause analysis.

Requirements

Required Qualifications

● Education: Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).

● Certifications:
○ Mandatory: ISO 27001 Lead Implementer (LI)
○ Offensive Security Certifications: CPPT, CWPTX or similar

● Experience:
○ 2–3 years in information security roles covering both compliance and offensive security.
○ Hands-on involvement in ISO 27001 implementation/maintenance, HIPAA, and SOC 2 compliance projects.
○ Experience performing penetration tests and vulnerability assessments.

Desired Skills:
● Knowledge of security standards such as NIST, CIS Controls, and GDPR.
● Strong report writing and communication skills for both technical and non-technical audiences.
● Understanding of incident response processes.

","hiringOrganization":{"@type":"Organization","name":"Tkxel","sameAs":"https://tkxel.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Lahore, Pakistan","addressCountry":"Pakistan","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":4,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-08","description":"

🌎 About Us

Launched in 2022, Vertice is reshaping how businesses manage SaaS and cloud costs — making it fair, transparent, and built for the modern enterprise. In just three years, we've scaled fast:

Managing $10+ billion in spend
Supporting hundreds of customers in 30+ countries
Growing 13x in revenue
Backed by $100M+ in funding from leading VCs like Bessemer Venture Partners, 83North, and Lakestar

With headquarters in London and offices in New York, Brno, Sydney, Johannesburg, Singapore, and Austria, we’re just getting started.

👉 Your Role at Vertice

Play a key role in protecting our cloud infrastructure on AWS, GitHub, and Google Workspace.
Handle the day-to-day security of our internal and customer-facing services, from troubleshooting and root cause analysis to identifying and mitigating risks
Help us improve and manage our audit processes, incident detection and response, secure development lifecycle, and data loss prevention strategies
Be crucial in making sure our systems and data are secure, compliant, and certified.
Wear many hats in our fast-paced, early-stage environment. This means you'll be involved in everything from creating essential documentation to diving deep into complex technical issues

🚀 What We Expect From You

You're experienced and can work independently
You have a strong grasp of security systems like firewalls, antivirus, and intrusion detection, as well as networking technologies and web security.
You have a solid understanding of security protocols, principles, and best practices and can help us maintain a robust security posture.
You love a good challenge and can apply your critical thinking skills to solve complex problems and build innovative solutions.
You are based in Brno.

✨ Benefits

Share Options
25 days of vacation
5 sick & career days
Group life insurance
Enhanced Maternity and Paternity Leave
Pension / Insurance Plan Contribution
GastroPass
FlexiPass contribution or Multisport card
Quality referral bonus program
English language courses with a professional teacher

","hiringOrganization":{"@type":"Organization","name":"Vertice","sameAs":"https://vertice.one"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brno, Czechia","addressCountry":"Czechia","addressRegion":"Europe"}}}},{"@type":"ListItem","position":5,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-07","description":"

This position assists with maintaining Bell’s enterprise information security program to ensure information is protected. This includes monitoring Bell’s environment for security issues to protect the organization from threats while enforcing organization-wide best practices in a manner that meets compliance and regulatory requirements. This position may lead security related projects involving members of IT and other internal business units and external customers/partners. This position assists and supports Bell’s incident response and security operations efforts as required.

Primary Duties:

Strategy and Planning:\n
- Assist with providing security guidance for projects, including the evaluation and recommendation of security controls.
- Assist with implementation, maintenance, and overseeing the enforcement of policies, procedures, and associated plans based on regulatory requirements and industry-standard best practices.
- Perform security assessments of new technologies, business acquisitions, or third-parties and advise on recommended remediation strategy and plans.
- Assess need for any security reconfigurations (minor or significant).
- Keep current with emerging security alerts and issues.
- Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.
\n
Acquisition and Deployment:\n
- Work with Bell’s new and existing third-parties to assist with completing risk-based technical architecture reviews
- Recommend and advise on countermeasures and scheduling of security improvements, upgrades, and/or purchases.
\n
Operational Management:\n
- Perform monitoring and reporting activities on security system and end user activity audits.
- Monitor cloud systems, server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution.
- Perform incident response activities and forensics in response to security incidents.
- Perform vulnerability and penetration testing of all systems in order to identify system vulnerabilities.
- May monitor Bell systems for compliance with security baseline standards.
- May monitor and ensure connection security for local area networks, the company web site, the company intranet, and e-mail communications.
- May monitor and ensure the security of databases and data transferred both internally and externally.
- Evaluate new security software and/or technologies.
- Provide on-call security support to end-users and managers as related to assigned responsibilities.
\n
Work flexible hours to ensure the security of computer hardware and software within the Bell Bank infrastructure, to include after hours and weekends, as needed.
Demonstrate both knowledge and application of Bell Bank policies, procedures, and guidelines.
Demonstrate good planning skills by ensuring the appropriate scheduling of resources including staffing, equipment, and supplies.
Demonstrate the ability to take charge, take unpopular stands, if necessary, and face difficult situations.
Facilitate and support change within the Bell Bank system.
Demonstrate commitment to continuous learning.
Demonstrate and apply continuous quality improvement knowledge and skills.
Travel overnight occasionally for training or for site visits.
Know by name and face as many customers and employees as possible, calling them by name as often as possible.
Know and practice LOCBUTN, our Golden Rules, and Bell Bank Customer Service Standards.
Know, understand, and live the company values and bottom line.
Conduct activities consistent with established Bell Bank policies, procedures and systems, the Bell Bank Employee Conduct policies, the Bank Secrecy Act and all applicable State and Federal laws and regulations.
All employees are responsible for information security including compliance with policies and standards which protect sensitive information.
Prompt and reliable attendance.
Perform other duties as assigned.

Job Skills Required:

B.A. in computer science, information systems, engineering, business administration, or a related field and/or three to five years’ equivalent work experience.
Experience and knowledge of information security and IT best practices.
Consideration given to those with certifications in the following areas:\n
- CompTIA Security+; GIAC Information Security Fundamentals;
- M365 Security, Compliance, and Identity Fundamentals, M365 Security Administrator Associate, M365 Information Protection Administrator Associate
- CISSP: CISA
\n
Broad knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices.
Strong knowledge of infrastructure network administration/protocols.
Experience with infrastructure devices such as switches, routers, and firewalls.
Knowledge of applicable practices and laws relating to data privacy and protection.
Intuition and keen instincts to pre-empt attacks.
High level of analytical and problem-solving abilities.
Ability to conduct research into security issues and products as required.
Strong understanding of the organization’s goals and objectives.
Strong written and verbal communication skills and be highly self-motivated and self-directed.
Strong organizational skills with excellent attention to detail.
Ability to effectively prioritize and execute tasks in a high-pressure environment and be able to work effectively in a team-oriented, collaborative environment.

","hiringOrganization":{"@type":"Organization","name":"Bell Bank","sameAs":"https://bell.bank/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Fargo, ND, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":6,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-07","description":"

Recruitment Fraud Alert

We’ve learned that scammers are impersonating Commvault team members—including HR and leadership—via email or text. These bad actors may conduct fake interviews and ask for personal information, such as your social security number.

What to know:

Commvault does not conduct interviews by email or text.
We will never ask you to submit sensitive documents (including banking information, SSN, etc) before your first day.

If you suspect a recruiting scam, please contact us at wwrecruitingteam@commvault.com

About Commvault

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. The company’s unique AI-powered platform combines best-in-class data protection, exceptional data security, advanced data intelligence, and lightning-fast recovery across any workload or cloud at the lowest TCO. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.

Information Security Engineer:

The Opportunity:

We have an outstanding career opportunity for an Information Security Engineer. This individual will be part of the people, processes and technologies involved in aiding the Global Security program’s efforts to further the company’s strategic positioning with regards to Information Security. This role is responsible for planning, managing, monitoring, and upgrading a broad spectrum of security technical tools. This individual will be responsible to work with cross functional teams and subject matter experts to ensure the successful delivery of projects and security services.

What you’ll do…

Planning, implementing, managing, monitoring the Commvault security infrastructure including but not limited to endpoint detect/response (EDR), vulnerability scanners, email protection, WAF, proxy, network, firewall, and cloud centric solutions.
Collaborating with security and compliance teams to facilitate their objectives and deliverables.
Collaborating with business, development, and information technology teams.
Participate in vendor management and delivery of their services.
Ensure transparency and visibility of security technical stack effectiveness through metrics, reporting, and communication with management and stakeholders.
Continuous learning of security threat landscape and processes to protect the enterprise.

Who you are?

3+ years in an Information Technology or Security discipline
3+ years Researching, implementing, and maintaining enterprise level on-prem / cloud-based security solutions.
Track record of resolving impediments that exist outside of the team environment.
Excellent communication skills with the ability to concisely express highly technical concepts to non-technical business partners.
Strong influencing skills to achieve alignment up, down and across the organization.
CISM, CISA, CISSP, GIAC or equivalent certifications a plus

You’ll love working here because...

Continuous professional development, product training, and career pathing
Annual health check-ups, Tuition Reimbursement
An inclusive company culture, an opportunity to join our Community Guilds
Personal accident cover and Term life cover

Ready to #makeyourmark at Commvault? Apply now!

Commvault is an equal opportunity workplace and is an affirmative action employer. We are always committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status and we will not discriminate against on the basis of such characteristics or any other status protected by the laws or regulations in the locations where we work.

Commvault’s goal is to make interviewing inclusive and accessible to all candidates and employees. If you have a disability or special need that requires accommodation to participate in the interview process or apply for a position at Commvault, please email accommodations@commvault.com For any inquiries not related to an accommodation please reach out to wwrecruitingteam@commvault.com.

Commvault's Privacy Policy

\n\n

","hiringOrganization":{"@type":"Organization","name":"Commvault","sameAs":"https://www.commvault.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bangalore, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":7,"item":{"@type":"JobPosting","title":"Engineer, Information Security","datePosted":"2025-08-11","description":"

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner. We define solutions that balance information security requirements against business needs. We are a remote-first team and are excited to offer full-time remote opportunities.

We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empower talented team members who mentor and uplift others, be led by leaders with a critical focus on employee development and well-being, provide dedicated training programs with a fun and collaborative atmosphere.

Team overview:

The Information Security Project Engagement team is established within the Information Security and Risk organization and is organized alongside the Business Information Security Officer (BISO) team. Despite being organized into one team, the Project Engagement members are expected to create strong working relationships across the Information Security Department, Project Management teams, and the Global Technology Business Support (GTBS) Department.

Job Overview:

We currently have a full-time career opening within the Information Security team to provide Information Security assessments and support to the project teams. This Engineer will help support the project intake process and be part of the project engagement lifecycle for the Information Security Department. They will track security requirements, project demands, and ensure collaboration with key information security resources. Key responsibilities include:

· Build and manage task trackers associated with Information Security projects and initiatives

· Gather resource updates and be a point of contact for Project teams requiring Information Security support.

· Incorporate a continuous feedback loop to continue to revise and improve Information Security Project Engagement.

· Partner with Information Security teams, the project management office, and the Global Technology Business Support Organization to ensure proper ongoing project support.

· Ensure that security controls are implemented in accordance with the project plan.

· Serve as a security advisor for all projects. This requires knowledge in Security Architecture, Privacy, Data Security, Regulatory Requirements, Resiliency, Application Security, Contract & Policy Considerations, Access Requirements, and other security considerations that must be addressed during project onboarding and planning.

· Effectively communicate status updates and metrics to Senior Leaders for all upcoming and ongoing projects.

· Assist in prioritizing information security initiatives.

Qualifications:

· Proven strong communication and partnership skills

· Must be able to track and manage multiple initiatives simultaneously

· Highly organized and task oriented

· Strong, comprehensive understanding of information security concepts

· Knowledge of IT security e.g., systems, methodologies, technologies, architectures, practices, policies, working knowledge of security frameworks (NIST Cyber Security Framework preferred).

· Basic understanding of a project lifecycle and project management styles

· Comfortable working with cross-functional teams to accomplish common goals

· Must be a team player and partner

Anticipated salary range: $93,500 - $140,280

Bonus eligible: No

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

Medical, dental and vision coverage
Paid time off plan
Health savings account (HSA)
401k savings plan
Access to wages before pay day with myFlexPay
Flexible spending accounts (FSAs)
Short- and long-term disability coverage
Work-Life resources
Paid parental leave
Healthy lifestyle programs

Application window anticipated to close: 9/15/2025 *if interested in opportunity, please submit application as soon as possible.

The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

","hiringOrganization":{"@type":"Organization","name":"Cardinal Health","sameAs":"https://cardinalhealth.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"US-Nationwide-FIELD, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":8,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-08","description":"

About this role:

Wells Fargo is seeking an Information Security Engineer.

In this role, you will:

Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards
Track or remediate vulnerabilities and security issues
Review and correlate security logs
Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Provide technical support for security related issues
Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
Interface with more experienced technologists

Required Qualifications:

2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Must have 2+ years of Cyber Security experience specifically working in Security Operations
Must have 2+ years of experience with enterprise SIEM solutions (Arcsight/SPLUNK/RSA-SA/Qradar)
Must have basic understanding on cyber kill chain, MITRE framework and NIST framework.
Demonstrated experience in Security Incident Response, Mitigation and Remediation methodologies
Basic knowledge of networks, protocols, standards, Linux/Unix/Window OS internals, and system configuration
Experience with least one scripting language, such as: PowerShell, Python, Bash, PHP, etc.
Bachelor’s and/or Master’s degree in computer science or information systems
CompTIA Security+, CHFI and CEH or other relevant certifications highly preferred
Knowledge and understanding of banking or financial services industry

Experience working in a large enterprise environment
Strong analytical skills with high attention to detail and accuracy
Knowledge and understanding of system/application architecture and design concepts
Ability to work effectively, as well as independently, in a team environment
Excellent verbal, written, and interpersonal communication skills

Job Expectations:

The person selected will be responsible for rapidly assessing security information, identify security sensor and tool issues (e.g., case floods, false positives, sensor anomalies, etc.), and coordinate the resolution of security infrastructure issues impacting the Cyber Threat Fusion Center’s ability to execute its mission.
Additionally, this person will effectively conduct correlation analysis across numerous internal and external data sources, identify information security incidents, and support computer security incident response team (CSIRT) activities.
Security engineers will also participate in network vulnerability scans, security audits or risk assessments and provide feedback to ensure compliance with corporate security policies and adherence to industry best practices.
This position interacts with management, lines-of-business representatives, and senior technical engineers across internal and external organizations.
This role participates in 24x7 global information security operations and will require shift watch standing at a Wells Fargo Information Security Operations Center site.

Posting End Date:

13 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.

Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":9,"item":{"@type":"JobPosting","title":"INFORMATION SECURITY ENGINEER","datePosted":"2025-08-08","description":"

About this role:

Wells Fargo is seeking an Information Security Engineer

In this role, you will:

Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards
Track or remediate vulnerabilities and security issues
Review and correlate security logs
Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Provide technical support for security related issues
Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
Interface with more experienced technologists

Required Qualifications:

2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

A bachelor’s degree in information systems, Computer Science, Engineering and/or other related discipline or equivalent experience
2+ years of information security experience or experience in working with information security products/platforms
Hands-on experience with identity synchronization, virtual directory services, and federation.
Platform familiarization with Microsoft Windows Servers, IIS, Critical services etc.
SQL experience (Basic administration and SQL query) , Familiarization with any of the following database platforms: MS SQL, Oracle, MySQL.
Knowledge and work experience with the Change Management process and tools
Experience supporting and troubleshooting of production and Ops Infra support.
Incident and Change Management Experience is a Must (Service Now Preferred) .
Handling Major Incidents and informing the stakeholders about the periodic updates with full ownership of incidents till closure.
Desired Qualifications:
Any security certification is a plus.
Fluent in scripting or querying languages utilizing SQL/ Powershell.
Strong understanding of LDAP protocols, schema, and directory services, Radiant logic , Oracle Unified directory.
Familiarity with identity federation and single sign-on (SSO) solutions.
Experience with scripting and automation tools (e.g., PowerShell, Python) is a plus.
Platform familiarization with Windows Servers (Must), Linux/Unix (good to have)
Experience in IAM tools, process, Privileged accounts, Monitoring etc.

Job Expectations:

The ideal candidate will have understanding of identity management systems, with a focus on Radiant Logic (Must have), Oracle Unified directory, Active Directory (AD) and LDAP technologies (Good to have))
This role requires hands-on experience in managing and troubleshooting identity environments, and the ability to work on complex integration projects. (Radiant Logic (Must have), Oracle Unified directory)
Review and correlate security logs
Identity Management Solutions: implement and manage identity management solutions using Radiant Logic’s platform.
Radiant Logic /Oracle Unified directory (must know), Active Directory & LDAP Integration: Integrate and synchronize data from AD and LDAP directories into Radiant Logic’s virtual directory.
Troubleshooting: Diagnose and resolve issues related to identity synchronization, data flow, and directory services.
System Configuration: Configure and optimize the Radiant Logic platform to meet customer-specific requirements.
Collaboration: Work closely with cross-functional teams, including IT, security, and business units, to deliver identity solutions that align with organizational goals
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Create and maintain F5 UI in AppViewX /Or any other Load balancer management experience for individual applications and maintain access

Posting End Date:

13 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":10,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-12","description":"

About this role:

Wells Fargo is seeking an Information Security Engineer. We believe in the power of working together because great ideas can come from anyone. Through collaboration, any employee can have an impact and make a difference for the entire company. Explore opportunities with us for a career in a supportive environment where you can learn and grow.

In this role, you will:

Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards
Track or remediate vulnerabilities and security issues
Review and correlate security logs
Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Provide technical support for security related issues
Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals
Interface with more experienced technologists

Required Qualifications:

2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Primary Skill: PlainID, Any IAM tool, Shell Script, Linux/Unix, Oracle/SQL, AppDynamics/Splunk, SaaS, Rest API.
Secondary Skill:, Java, PL/SQL, WebLogic/Tomcat/Apache/JBoss, Middleware tool, Automation.
Provides support to PlainID – Authorization tool, Product Version Upgrade and Server maintenance.
Provides 24x5 Application/Production support in areas of incident management through Service Now, monitoring and request fulfilment.
Provide support in handling problem tickets, submitting CHANGE requests in Service Now, Server maintenance, BCP exercise, administration and deployments.
Performing Health Check, Maintenance & Post-Release activities.
Monitoring logs via SPLUNK.
Full time Graduate from reputed university.
2+ years of experience in Application support and troubleshooting, Application maintenance, monitoring and Build/Deployment.
Experience in PlainID.
Experience in Oracle Identity Manager (OIM) or any IAM tool.
Experience in Oracle/SQL Server queries/reporting.
Experience in Production/Application Support of Java/J2EE based applications on Unix Platform.
Exposure to any of the Middleware/Application Servers WebLogic, Tomcat, Apache, Jboss etc.
Willing to work in on call & rotational shifts.
Experience in Monitoring Tools Splunk, AppDynamics etc.
Should have Excellent analytical, problem solving and multitasking skills.
Experience working in an Agile/Scrum development process.
Works well with partner teams and peers toward established goals and timelines.
Works well under self-direction on assigned tasks.
Provides active participation and leadership in team duties and responsibilities.
Initiates and promotes changes to team processes to enhance automation.
Experience working in Remedy/ServiceNOW/Pac2000 or any ticketing tool and should have ITIL exposure.
Excellent verbal, written, and interpersonal communication skills.
Strong vendor management skills.
Knowledge/Skills/Ability Strong organizational, multi-tasking, and prioritizing skills

Job Expectations:

Proven ability to complete tasks; including the planning of work from initiation through implementation while demonstrating the ability to meet project completion dates with acceptable levels of supporting documentation and quality
History of past projects which demonstrate the ability to complete tasks; including the planning of work from initiation through implementation while demonstrating the ability to meet project completion dates with acceptable levels of supporting documentation and quality.
Experience with systems monitoring tools such as HP OpenView, Nagios, Zabbix and Splunk
Advanced Information Security technical skills.
Industry certification like Security +/ ISACA CSX Fundamentals, Red Hat Certified Specialist in Server Security and Hardening exam (EX413), Red Hat Certified Engineer (RHCE).

Posting End Date:

19 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"111443-IND-HYDERABAD-INTL HYD WF CENTRE BLK B8 Twr-4, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":11,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-12","description":"

The Information Security Engineer role is critical to protecting the organization's data, systems, and infrastructure from evolving security threats. The Information Security Engineer ensures proactive defense through system management, vulnerability assessment, and incident response. By implementing and managing robust security solutions, this position helps safeguard business continuity and maintain regulatory compliance.

The compensation for this role will be commensurate based on education and/or experience.

What You Will Be Doing

Deploys, manages, and optimizes enterprise-wide security tools and platforms (ISPM, IAM, IGA, PAM, EDR/XDR, SIEM, DLP, vulnerability management, etc.).
Conducts vulnerability assessments and leads remediation efforts across systems, networks, and cloud services.
Monitors for threats, investigate incidents, and performs forensic analysis using tools such as Rapid7 and Microsoft Defender XDR.
Supports compliance with regulatory and internal frameworks, including SOX, NIST CSF, and PCI-DSS.
Leads evidence collection and documentation for internal investigations or audits in coordination with HR and Legal.
Provides security guidance for IT projects and application development to ensure best practices are followed.
Creates and delivers security awareness training and phishing simulations using platforms such as KnowBe4.
Stays informed on emerging threats and recommends new security technologies or process improvements.
Champions a security-first culture and act as a mentor to others in the organization.
Performs other duties as assigned to support team and organizational objectives.

What We Are Looking For

A degree in Information Technology, Cybersecurity, Computer Science, or a related field is not required, but may be considered in combination with professional experience to meet the overall qualifications.
Certification(s) preferred. Microsoft (SC-100/200/300/400, AZ-500), (ISC)2, ISACA, SANS/GIAC,
5+ years in an Information Technology role, including 2+ years in an Information Security role.
Preferred technical qualifications: M365 Administration, M365 Defender, Microsoft Purview, Microsoft Azure, Microsoft Orchestrator, Rapid 7 IDR, Rapid 7 VM, Sophos EDR/XDR, KnowBe4 Training Platform, Abnormal AI, PowerShell.
Familiarity with regulatory/compliance standards (SOX, NIST CSF, PCI-DSS).
Demonstrated ability to write scripts (e.g., PowerShell) for automation and response.
Strong troubleshooting, analytical, and problem-solving skills.
Demonstrated ability to take initiative, be action-oriented, and drive results independently.
A self-motivated approach with strong ownership and accountability for work.
Technical proficiency coupled with a growth mindset and eagerness to continuously learn.
On-site presence required during normal business hours for collaboration and secure access.

What You Will Get In Return

Generous salary and bonus program(s)
Low-cost Medical, Dental, and Vision insurance
Retirement plan with employer matching contributions
Attractive vacation programs
Inclusive Group Life Insurance
Supportive Employee Assistance Program (EAP) that allows for covered behavioral health visits
Rewarding employee referral program
Valuable employee training program(s)

","hiringOrganization":{"@type":"Organization","name":"Badger Infrastructure Solutions","sameAs":"https://www.badgerinc.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Brownsburg, IN, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":12,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-18","description":"

We are looking to hire an Information Security Engineer who will work closely with developers, DevOps, and infrastructure teams to enhance the security of our products and platforms. This role is ideal for individuals who are passionate about security and eager to grow in a collaborative and fast-paced environment.

Responsibilities:

Perform application security reviews, including Java code review, threat modeling, and vulnerability assessments.
Identify and remediate security vulnerabilities in web, API, and mobile applications, with a focus on OWASP Top 10 risks.
Collaborate with developers to integrate security best practices into the SDLC and CI/CD pipelines.
Conduct penetration tests and manage third-party security assessments.
Develop and enforce secure coding standards for Java and related frameworks.
Support automation of security testing tools (SAST, DAST, SCA).
Implement and maintain security controls across servers, cloud environments, and networks.
Support vulnerability management, patching, and configuration hardening.
Monitor for security threats, investigate incidents, and support incident response.

Requirements

Minimum 1 year of professional experience in security (application or infrastructure).
OR relevant certification such as OSCP, OSWE, or equivalent.
Strong understanding of application security principles (OWASP Top 10, secure coding, threat modeling).
Familiarity with tools like Burp Suite, OWASP ZAP, SAST/DAST scanners, etc.
Excellent problem-solving skills and ability to communicate technical findings clearly.

Nice-to-Have

Familiarity with Java-based applications and common frameworks (e.g., Spring).
Experience with DevSecOps and CI/CD pipeline security.
Familiarity with infrastructure/cloud security.

","hiringOrganization":{"@type":"Organization","name":"ProgressSoft","sameAs":"https://www.progressoft.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Amman, Amman Governorate, Jordan","addressCountry":"Jordan","addressRegion":"Middle East"}}}},{"@type":"ListItem","position":13,"item":{"@type":"JobPosting","title":"Information Security Engineer","datePosted":"2025-08-18","description":"

Information Security Engineer

Hybrid: Remote/Bristol

Reporting to: Joe Mathews - VP of Technology

Salary: £45,000 - £50,000

About Us

Duel is a SaaS company on a mission to make Brand Advocacy the industry standard philosophy for building brilliant retail brands. It was founded by world record-breaking adventurer and former brand ambassador Paul Archer, alongside viral games developer Naio Tsarouchis.

We exist to show that companies built for advocacy can change the world. We believe there’s a better way to build businesses, and we seek to prove that caring for people over short-term sales builds Brand, which in turn yields long-term and exponential profit returns thanks to the advocacy it drives.

The Duel Brand Advocacy Solution allows enterprise brands to do just that, scaling how they manage their relationships with thousands of advocates, customers, creators and brand ambassadors. We’re proud today that 60 brands such as Abercrombie & Fitch, Charlotte Tilbury, Spanx, Victoria’s Secret, LUSH and Elemis (to name a few, but not to name some household names that we can’t talk about… yet) are doing just that. The Duel team comprises psychologists, brand experts and community builders, combining cutting-edge brand expertise with seasoned SaaS experience.

The Role

We’re hiring an Information Security Engineer to join our growing engineering team.

As a company, we are ISO 27001-certified and need to maintain this certification while preparing for SOC 2 compliance. Security responsibilities currently sit across different teams, but as compliance requirements increase, a dedicated security engineer is needed to support ongoing security initiatives, manage compliance tasks, and improve Duels overall security posture.

The focus of this role is to help maintain our compliance responsibilities through Secureframe, support ISO 27001 and SOC 2 audits, manage security vulnerabilities, and work within engineering to introduce security best practices into development, infrastructure, and operations.

We’re Looking for Someone Who Will…

Assist in managing ISO 27001 renewals by maintaining compliance documentation and ensuring key security practices are followed.
Help support the company’s transition towards SOC 2 certification by tracking requirements and implementing necessary security measures.
Work within Secureframe to maintain compliance records, ensuring a structured and organised approach to security audits.
Ownership of the external security audits and penetration testing cycles, addressing findings and assisting in remediation.
Assist in identifying and tracking security vulnerabilities across the platform, working with engineering teams to ensure proper mitigation.
Support the handling of Common Vulnerabilities and Exposures (CVEs), ensuring patches and fixes are applied in a timely manner.
Learn and implement security monitoring and automation solutions to detect and respond to threats.
Help manage security tooling, including SIEM, IDS/IPS, and vulnerability scanning solutions.
Work closely with engineers to support secure coding practices and help embed security considerations early in the development process.
Assist in securing infrastructure and cloud environments, ensuring security best practices are followed.
Help analyse penetration testing reports and support the implementation of fixes and improvements.
Learn and apply security principles in IAM, least privilege access controls, and role-based access management.
Maintain up-to-date documentation of security policies, controls, and best practices.
Clearly communicate security requirements and improvements to engineering teams.
Help build awareness around security risks and compliance needs across the company.

We’d love to hear from you if you..

3 years of experience in a security-related role, such as security engineering, security operations, or compliance-focused security work
Exposure to security compliance frameworks such as ISO 27001 or SOC 2, even if not previously responsible for certification processes
Experience working within security risk management, vulnerability tracking, or operational security efforts
Prior experience working with engineering teams on security topics is beneficial, particularly around secure development practices
Ability to clearly communicate security requirements and risks to internal teams
A proactive mindset, eager to learn and improve security processes
Ability to work across teams, collaborating with engineering and compliance efforts
CISSP, CISM certifications are desirable

Technical Skills

Experience with ISO 27001, SOC 2, or other security compliance frameworks
Familiarity with compliance automation tools such as Secureframe, Drata, or Vanta
Experience working with pen testing and bug bounties a plus
Basic understanding of security tools such as SIEM, IDS/IPS, and vulnerability management solutions
Experience or knowledge of cloud security (AWS, GCP, or Azure)
Awareness of security best practices in application and infrastructure security
Some exposure to IAM, role-based access control, and identity management principles
Some experience working with penetration testing findings and basic security audits

In-person and remote working balance ...

We have small HQ’s in Bristol & London (Holborn) with a growing team of people on the ground in our NYC office also.

Although our approach to hybrid working is flexible (we don’t mandate specific days in office), priority for this role will be given to candidates who are available to travel to the Bristol office and keen to spend some days each month in a shared space partnering with the VP of Technology and wider engineering team on shared projects.

Why Duel

We want to build a remarkable company with remarkable people and a remarkable culture that you will want to shout from the rooftops about. In a relaxed, flexible, and fun environment, the team is driven to making the business a success while enjoying what we do and who we do it with.

We have a growing benefits package, including;

Flexible working hours - if you need to fit around childcare or need to work around your life, we understand.
Around 32 days of Annual Leave (28 excluding bank holidays and an extended break between Christmas and New Year, when we close the office). On-going training where required.
Options scheme for all full-time employees - it’s important to us that everybody owns a part of the company and shares in the benefits of what we build.

Company MacBook to work from
£350 WFH Set-Up
Headspace Contributions
Personal Development budget and support
2 additional days leave for volunteering

","hiringOrganization":{"@type":"Organization","name":"Duel","sameAs":"https://www.duel.tech/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bristol, United Kingdom","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":14,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-07-15","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:

Monitor, triage and resolve production issues related to cybersecurity systems, particularly SaaS platforms/Applications
The ideal candidate will be responsible for managing day-to-day security alerts, resolving incidents, maintaining system performance, and collaborating with cross-functional teams to ensure our SaaS cybersecurity tools and services are secure and reliable.
Act as the first and second level of support for incidents, outages, and service disruptions related to cybersecurity infrastructure.
Work closely with vendors and internal engineering teams to investigate root causes and implement permanent fixes.
Manage operational processes such as access provisioning/deprovisioning, Certificate management and platform health monitoring.
Co-ordinate patching and upgrades for cybersecurity tools and platforms, ensuring minimal disruption to business functions.
Maintain documentation related to standard operating procedures (SOPs), runbooks, and knowledge bases.
Develop and improve alert handling and response workflows to reduce false positives and improve detection quality.
Drive remediation of security vulnerabilities across endpoints, cloud infrastructure, applications, and networks.
Develop and enforce security best practices, policies, and procedures in collaboration with IT, DevOps and business units.
Stay current with emerging threats, vulnerabilities, and security technologies.

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

4+ years of progressive experience in cybersecurity operations or production support roles.
Hands-on experience managing and supporting SaaS cybersecurity Applications/tools
Strong scripting or automation knowledge (python, PowerShell, Bash) is a plus
Familiarity with security incident management, troubleshooting, and root cause analysis
Experience with ITSM tools (ServiceNow) for managing tickets, incidents and change requests.
Deep understanding of network protocols, encryption, authentication methods, and cloud security models (AWS & GCP)
Strong hands-on experience with enterprise-grade security tools and platforms
Excellent communication skills and ability to work in a fast-paced, team oriented environment.
Good understanding of network and cloud security concepts (e.g., firewall rules, proxies, endpoint security, identity governance)
Relevant cybersecurity certification like CISA/CompTIA Security+/CCSP is an added advantage.
Knowledge of DevSecOps or CI/CD pipeline security integration is a plus.

Posting End Date:

25 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"111443-IND-HYDERABAD-INTL HYD WF CENTRE BLK B8 Twr-4, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":15,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-07-16","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Technology Infrastructure, Secure Access Technologies team supporting Wells Fargo's Remote Access VPN and Secure Connectivity solutions. Learn more about the career areas and lines of business at wellsfargojobs.com.

In this role, you will:

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, remote access, and endpoint security
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of secure remote access technology support experience

Desired Qualifications:

5+ years of information technology experience
5+ years of experience in cryptography
5+ years of digital certificate management experience
3+ years of experience with all or some of the following practices: security requirements, threat modeling, statistical analysis and technology design
2+ years of identity and access management (IAM) experience
Experience working with various identity providers (IDP) and technologies
Experience with endpoint security including posture awareness
Knowledge and experience in working with various information security tools and systems
Knowledge and understanding of secure SDLC (System Development Life Cycle) methodologies
Knowledge and understanding of Zero Trust Network Access concepts, systems, methodologies
Ability to manage multiple priorities in a fast-paced dynamic environment
Outstanding problem solving and analytical skills with ability to turn findings into strategic imperatives
Highly refined and professional verbal and written communications
Excellent interpersonal skills, including those related to conflict resolution

Act as a team lead and oversee major team projects and initiatives
Oversee the development and implementation of new process and procedures supporting secure connectivity solutions
Contribute to defining and implementing secure remote access guidelines and procedures
Apply knowledge of information security and remote access technologies to drive organizational change
Contribute to governance, oversight, and design guidelines
Coach junior team members to understand and deliver based on the requirements of the program

Job Expectations:

Ability to work in office 3 days a week
Participate in the Engineering on-call rotation
Ability to work off hours and occasional weekends to support change activities

Posting End Date:

22 Jul 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"142019-NC-300 South Brevard, Charlotte, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":16,"item":{"@type":"JobPosting","title":"Sr. Information Security Engineer","datePosted":"2025-07-15","description":"

About Us:

At apexanalytix, we’re lifelong innovators! Since the date of our founding nearly four decades ago we’ve been consistently growing, profitable, and delivering the best procure-to-pay solutions to the world. We’re the perfect balance of established company and start-up. You will find a unique home here.

And you’ll recognize the names of our clients. Most of them are on The Global 2000. They trust us to give them the latest in controls, audit and analytics software every day. Industry analysts consistently rank us as a top supplier management solution, and you’ll be helping build that reputation.

Read more about apexanalytix - https://www.apexanalytix.com/about/

Job Details

The Role

Design and Implement Cloud Security Architecture: Plan, execute, and manage cloud security architecture using Azure Sentinel, M365 Defender Suite, and Azure Security to ensure the organization's cloud infrastructure is secure and compliant.

· Penetration Testing and Vulnerability Management: Conduct regular penetration testing and vulnerability assessments to identify weaknesses in the organization's cloud infrastructure, applications, and networks, and implement remediation measures to address identified vulnerabilities.

· Cloud Security Incident Response: Serve as the primary point of contact for cloud security incident response, ensuring timely and effective processing, containment, and remediation of security incidents in the cloud environment.

· Azure Sentinel and M365 Defender Suite Management: Manage and configure Azure Sentinel and M365 Defender Suite to monitor and respond to security threats in the cloud environment, including threat hunting, incident response, and security analytics.

· DevOps Security Integration: Collaborate with DevOps teams to integrate security into the CI/CD pipeline, ensuring that security is a key consideration throughout the software development lifecycle.

· Cloud Security Compliance and Governance: Ensure cloud security compliance with relevant regulations and standards, such as HIPAA, PCI-DSS, and GDPR, and maintain up-to-date knowledge of cloud security governance best practices.

· Cloud Security Monitoring and Reporting: Generate daily, weekly, and monthly reports on cloud security monitoring activities, providing insights and recommendations to stakeholders on cloud security posture and risk mitigation.

· Cloud Security Risk Assessment and Mitigation: Conduct regular cloud security risk assessments to identify potential security risks and implement corrective actions to mitigate them.

· Cloud Security Awareness and Training: Educate and train staff on cloud security awareness and best practices, ensuring that all employees understand their roles and responsibilities in maintaining cloud security.

· Stay Up-to-Date with Cloud Security Trends and Technologies: Stay current with the latest cloud security trends, tools, and technologies, including Azure Sentinel, M365 Defender Suite, and Azure Security, to ensure the organization's cloud security posture is current and effective.

The Must Haves -

· Bachelor's degree in Computer Science, Information Security, or related field.

· Minimum of 5 years of experience in cloud security or related roles, with a focus on Azure Sentinel, M365 Defender Suite, Azure Security, penetration testing, and DevOps security.

· Strong knowledge of cloud security architecture, cloud security compliance, and cloud security governance.

· Experience with Azure Sentinel, M365 Defender Suite, and Azure Security, including configuration, management, and troubleshooting.

· Strong understanding of DevOps security principles and practices, including integration of security into the CI/CD pipeline.

· Certifications in cloud security, such as Azure Security Engineer Associate or Microsoft Certified: Azure Security Engineer, are highly desirable.

Preferred skills:

Experience with cloud security automation tools, such as Azure Functions, Azure Logic Apps, or PowerShell.

Knowledge of cloud security frameworks and standards, such as NIST Cybersecurity Framework or ISO 27001.

Experience with containerization and serverless computing, including Docker, Kubernetes, or Azure Functions.

Strong understanding of threat intelligence and threat hunting, including experience with threat intelligence platforms and tools.

Over the years, we’ve discovered that the most effective and successful associates at apexanalytix are people who have a specific combination of values, skills, and behaviors that we call “The apex Way”. Read more about The apex Way - https://www.apexanalytix.com/careers/

Benefits

At apexanalytix we know that our associates are the reason behind our successes. We truly value you as an associate and part of our professional family. Our goal is to offer the very best benefits possible to you and your loved ones. When it comes to benefits, whether for yourself or your family the most important aspect is choice. And we get that. apexanalytix offers competitive benefits for the countries that we serve, in addition to our BeWell@apex initiative that encourages employees’ growth in six key wellness areas: Emotional, Physical, Community, Financial, Social, and Intelligence.

With resources such as a strong Mentor Program, Internal Training Portal, plus Education, Tuition, and Certification Assistance, we provide tools for our associates to grow and develop.

","hiringOrganization":{"@type":"Organization","name":"apexanalytix","sameAs":"https://www.apexanalytix.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gurugram, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":17,"item":{"@type":"JobPosting","title":"Information Security Compliance Engineer","datePosted":"2025-06-30","description":"

Description de l'entreprise

Are you ready to develop the future of retail? 

VusionGroup est une entreprise de retail tech en forte croissance. Implanté dans 19 pays sur 3 continents, nous sommes leader mondial des solutions de digitalisation du commerce physique.

Nous inventons des technologies qui créent un impact positif sur la société en permettant un commerce durable et centré sur l’humain.

Ensemble, nous développons des solutions avant-gardistes, formons des partenariats durables avec nos clients et réinventons les magasins de demain grâce à nos solutions IoT et data.

Nous croyons que l’entrepreneuriat est une vocation, et que notre esprit de start-up nourrira votre ambition.

Plus d'informations sur notre entreprise et nos solutions ici.

Description du poste

We build. We create impact.

En tant qu'Information Security Compliance Engineer, vous serez responsable de la gestion et de la mise en œuvre des politiques de sécurité de l'information et de conformité au sein de notre entreprise. Vous travaillerez en étroite collaboration avec les équipes IT, R&D et les départements opérationnels pour garantir la protection des données sensibles et la conformité aux réglementations en vigueur.

Responsabilités :

Développer et maintenir les politiques de sécurité de l'information.
Assurer la conformité aux normes et réglementations (ISO 27001, GDPR, NIS2, CRA, etc.).
Réaliser des audits de sécurité et des évaluations de risques.
Mettre en place des mesures de protection des données et des systèmes.
Former et sensibiliser les employés aux bonnes pratiques de sécurité.
Répondre aux incidents de sécurité et coordonner les actions correctives.
Collaborer avec les équipes IT et R&D pour intégrer les exigences de sécurité dans les projets.
Animer le Système de Management de la Sécurité de l'Information (SMSI).
Identifier les risques de sécurité et construire un plan d'actions en collaboration avec la DSI.

Qualifications

Qualifications we’re looking for.

Titulaire d'un diplôme en informatique, sécurité de l'information ou domaine connexe, vous justifiez de 5-7 ans d'expérience en sécurité de l'information et de la conformité
Connaissance des normes et réglementations de sécurité (ISO 27001, GDPR, etc.).
Maîtrise des outils de sécurité (firewalls, antivirus, SIEM, etc.).
Capacité à réaliser des audits et des évaluations de risques.
Excellentes compétences en communication et en formation.
Capacité à travailler en équipe et à gérer des projets.
Certifications en sécurité (CISSP, CISM, ISO 27001 Lead Auditor, etc.) souhaitées.

Langues : Français et anglais maitrisé

Informations supplémentaires

We innovate. We help communities thrive. 

Notre mission consiste à faire du magasin physique un véritable atout digital.

Nous sommes des entrepreneurs en quête d’innovation, Nos équipes sont internationales et curieuses du monde qui nous entoure.
\nLa diversité culturelle est inscrite dans notre ADN. C’est une force unique qui nous permet de travailler ensemble pour servir nos clients partout dans le monde.

La croissance de notre Groupe est un véritable catalyseur pour votre développement de carrière. Votre évolution sera rapide et vous aurez toute latitude pour façonner votre propre avenir, en France comme à l’international.

Vous êtes la clé de notre succès : des talents agiles, innovants, passionnés, et qui n’ont pas peur de prendre des risques, d’échouer et d’apprendre de leurs erreurs. Quel que soit votre rôle chez VusionGroup, vous contribuerez à réinventer et réimaginer le commerce de demain.

Not the right opportunity for you?
\nPartagez cette offre ou recherchez toutes les offres d’emploi chez vusiongroup.com/careers

","hiringOrganization":{"@type":"Organization","name":"VusionGroup SA","sameAs":"https://www.ses-imagotag.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Nanterre, IDF, France","addressCountry":"France","addressRegion":"Europe"}}}},{"@type":"ListItem","position":18,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-07-02","description":"

What is Flagstone?

Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business – where smart people do their best work.

Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.

A feel for our culture:

To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth.

That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.

We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three.

But enough about us. Let’s talk about you.

Does this sound like you?

You're a forward-thinking Security Engineer with a passion for building secure, scalable systems who’s excited to forge a new way to save! You enjoy shaping the security posture of modern digital environments and bring deep hands-on expertise in cloud and Saas security within the Microsoft ecosystem. You enjoy working collaboratively across teams, influencing secure-by-design thinking, and embedding security into everyday ways of working.

What you’ll do:

Lead the design, implementation, and ongoing improvement of our security controls and practices, aligned to ISO/IEC 27001:2022 and ISO/IEC 42001.
Proactively identify and mitigate risks across SaaS, cloud, and on-prem environments.
Act as a key subject matter expert for security engineering and governance across Microsoft Azure, Microsoft 365, and other third-party platforms.
Partner with compliance, legal, IT, and operational teams to embed secure-by-design principles throughout product and service delivery.
Strengthen detection and response capabilities through Microsoft Sentinel and related threat intelligence tools.
Support audit readiness, compliance automation, and third-party risk management through tools like Vanta, Risk Ledger, and Microsoft Compliance Manager.
Contribute to a strong security culture by driving awareness initiatives and influencing behaviour at scale.

What you’ll bring:

Deep experience with Microsoft Azure security tooling, including Azure Security Center, Azure Policy, and Microsoft Secure Score.
Expertise in identity and cloud-native security using Microsoft Defender for Cloud, Defender XDR, and Entra ID Protection.
Hands-on knowledge of security controls in Microsoft 365, AAD, and Purview for data protection and insider risk management.
Strong background in threat detection and response using SIEM/SOAR platforms (Microsoft Sentinel desirable), and familiarity with frameworks like MITRE ATT&CK.
Solid grasp of ISO/IEC 27001:2022 controls, with exposure to AI security frameworks (e.g., ISO/IEC 42001) a plus.
Experience supporting or leading audits and compliance workflows using platforms like Vanta, Ivanti, or Microsoft Compliance Manager.
Knowledge of secure endpoint and network management for hybrid/remote environments.
Understanding of physical security principles aligned to ISO Annex A.7 and A.11.
Ability to influence culture and behaviour, with experience in using tools like CultureAI or equivalent to embed awareness at scale.
Proven expertise in applying threat modelling frameworks (e.g. STRIDE, PASTA), and tools (e.g. OpenCTI), identifying attack surfaces and trust boundaries, and integrating threat modelling into secure system design and development processes.

Bonus points for:

Familiarity with Microsoft Purview’s DLP, eDiscovery, and Data Lifecycle Management features.
Experience conducting internal audits or ISO/NIST gap assessments.
Understanding of privacy regulations such as UK GDPR, DPA 2018, or international equivalents.

How we reward you:

At Flagstone, the benefits extend beyond false gifts like “fruit and snacks”. Instead, we invest in your health, wealth, and professional development. Here’s a selection of our benefits:

Competitive bonus scheme - designed to reward and recognise high performance
Flexible benefits budget - a pot to fund meaningful benefits for you, whether it's hormone or fertility testing, cancer screening, neuro-diversity coaching or something that matters for you.
A range of salary sacrifice options to help you make tax efficient savings on electric cars, nursery schemes, home and tech goods.
Around the World scheme - 3 months work from anywhere scheme
Mental wellbeing support – Access therapy and mental health sessions through Spill
Learning and development – £1,000 personal development budget to help you grow in your role.
Private health care - Enjoy all the benefits AXA has to offer, including reduced gym memberships and medical history disregarded
Medical cash plan - To help you with the costs of dental and optical expenses
Life insurance and Income Protection- four times your annual salary for peace of mind
Matched pension contributions up to 5%
25 days holiday - plus bank holidays, well-being days and volunteering days
Enhanced Parental Leave – enhanced maternity, paternity and adoption pay

All are welcome.

At Flagstone, we’re assembling a diverse team that defies our industry’s norms. Think this role could suit you? We encourage you to apply, no matter your background.

#LI-Hybrid

","hiringOrganization":{"@type":"Organization","name":"Flagstone","sameAs":"https://www.flagstoneim.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"London","addressCountry":"United Kingdom","addressRegion":"Europe"}}}},{"@type":"ListItem","position":19,"item":{"@type":"JobPosting","title":"Principal Information Security Engineer","datePosted":"2025-08-05","description":"

A Moving Experience.

As a Principal Information Security Engineer, you will play a critical role in safeguarding our systems and software platforms across the development lifecycle. You will leverage your security engineering expertise and hands-on experience with tools like CrowdStrike, Zscaler, and Microsoft Security technologies to detect, respond to, and prevent threats. Your understanding of information security technologies, governance, and risk management will ensure we meet security and compliance expectations in a highly regulated, global automotive environment.

Key Responsibilities:

Design and maintain robust security technologies, controls, and policies across our global enterprise.
Support the implementation and management of endpoint detection and response (EDR), end point protection (EPP), zero trust network access (ZTNA), vulnerability management, identity and threat protection using platforms such as CrowdStrike Falcon, Zscaler, Tenable, and Microsoft Security PIM, conditional access, and Windows Hello.
Own the information security controls that contribute to the company’s governance, risk, and compliance (GRC) efforts, particularly ISO 27001, TISAX, CIS, and customer security assessments.
Monitor, analyze, and respond to security events, collaborating with vendors, global engineering, DevOps, and IT teams to resolve threats efficiently.
Run corporate phishing campaign, security training, and security awareness programs
Document security processes and contribute to internal policies that support information and application security programs.
Support vulnerability scanning, secure coding, and threat modeling activities in partnership with IT, product, and software teams.
Participate in vendor security assessments and global OEM customer security reviews.

Required Qualifications:

Minimum of 3 years of experience in information security, with a focus on corporate / enterprise security in a global, software-driven business.
Proven experience with CrowdStrike Falcon, Zscaler, Microsoft Security tools, Tenable or similar.
Solid understanding of governance and risk frameworks, particularly those relevant to enterprise information security management systems.
Familiarity with secure software development practices and security in cloud environments (Azure preferred).
Demonstrable ability as self-driven and to work independently
Strong analytical, problem-solving, and communication skills.

Preferred Qualifications:

Bachelor’s degree or higher
Industry certifications such as CISSP, CISM, Microsoft SC Series
Experience with Atlassian Jira and Confluence
Experience with ISO 27001, TISAX, NIST, or CIS.
Understanding of automotive cybersecurity standards (e.g., ISO 21434, UNECE WP.29).
Knowledge of CI/CD pipelines and security integration in software development workflows.

Cerence Inc. (Nasdaq: CRNC and www.cerence.com) is the global industry leader in creating unique, moving experiences for the automotive world. Spun out from Nuance in October 2019, Cerence is a new, independent company that has quickly gained traction as a leader in the automotive voice assistant space, working with all of the world’s leading automakers – from Ford and Fiat Chrysler to Daimler, Audi and BMW to Geely and SAIC – to transform how a car feels, responds and learns. Its track record is built on more than 20 years of industry experience and leadership and more than 500 million cars on the road today across more than 70 languages.

As Cerence looks to the future and continues an ambitious growth agenda, we need someone to join the team and help build the future of voice and AI in cars. This is an exciting opportunity to join Cerence’s passionate, dedicated, global team and be a part of meaningful innovation in a rapidly growing industry.

EQUAL OPPORTUNITY EMPLOYER

Cerence is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination on the basis of age, race, color, gender, gender identity, gender expression, sex, sex stereotyping, pregnancy, national origin, ancestry, religion, physical or mental disability, medical condition, marital status, citizenship status, sexual orientation, protected military or veteran status, genetic information and other protected classifications. Cerence Equal Employment Opportunity Policy Statement.

All prospective and current Employees need to remain vigilant when it comes to executing security policies in the workplace. This includes:

- Following workplace security protocols and training programs to familiarize with the ways to maintain a safe workplace.
- Following security procedures to report any suspicious activity.
- Having respect for corporate security procedures to allow those procedures to be effective.
- Adhering to company's compliance and regulations.
- Encouraging to follow a zero tolerance for workplace violence.

- Basic knowledge of information security and data privacy requirements (e.g., how to protect data & how to be handling this data).

- Demonstrative knowledge of information security through internal training programs.

","hiringOrganization":{"@type":"Organization","name":"Cerence","sameAs":"https://www.cerence.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote - India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":20,"item":{"@type":"JobPosting","title":"Information Security Engineer II","datePosted":"2025-08-04","description":"

Make banking a Fifth Third better®

We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.

Please note that this position is not available for immigration sponsorship

OUR ORGANIZATION'S OBJECTIVE: We get shift done by simplifying the protection of application, data, cloud assets, and containers for application teams allowing them to Advance the Bank.

OUR ORGANIZATION'S STRATEGY: Strengthen API security by enabling effective and scalable protection through standardized patterns, automation, and modern security tooling - ensuring secure-by-design APIs across the development lifecycle

WHAT OUR ORGANIZATION VALUES:

Adaptability
Collaboration
Deep Technical Curiosity

LOCATION: Remote (flexible EST hours). Team primarily located in Cincinnati, OH. Travel (if remote) expected 1 week per quarter.

JOB OVERVIEW:

As an Information Security Engineer II, you will play a key role in securing APIs across cloud and hybrid environments. You’ll work hands-on with engineering teams to implement, integrate, and maintain API security controls, contributing to the protection of critical services and data. This role is ideal for someone with a strong technical foundation in security engineering, a passion for automation, and experience with modern DevSecOps practices.

GENERAL FUNCTION:

The Information Security Engineer (ISE) II will be responsible for defining, delivering and supporting the enterprise security tools and architecture developed in collaboration with the IT Engineering team. The ISE will also participate in a diverse variety of IS projects and support the ongoing operations of the Information Security department. The ISE is focused on securing the network through the operations of intrusion detection system/intrusion prevention system (IDS/IPS), data loss prevention (DLP), Proxy, enterprise anti-virus and anti-malware solutions, log management, and vulnerability scanning and remediation.

Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank's risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

What You Will Do

API Security Engineering & Implementation

Support API security controls including API gateways, authentication/authorization mechanisms, and runtime protection tools.
Integrate API security scanning tools (e.g., 42Crunch, Noname, Traceable) into CI/CD pipelines to detect and remediate vulnerabilities early in the SDLC.
Support runtime defense mechanisms to monitor and block malicious API traffic in real time.

Vulnerability Management & Remediation

Conduct API vulnerability assessments using automated tools and manual techniques.
Collaborate with development teams to remediate findings related to the OWASP API Security Top 10.
Track and verify remediation efforts, ensuring timely closure of security gaps.

Threat Detection & Risk Analysis

Analyze API traffic patterns and telemetry to identify anomalies, abuse, and potential threats.
Support threat modeling and risk assessments for new and existing APIs.
Contribute to the development of detection rules and alerting logic for API-related threats.

Automation

Develop scripts and integrations to streamline security operations and improve response times.
Support infrastructure-as-code (IaC) security practices for API deployments.

Agile Collaboration & Continuous Improvement

Stay current on API security trends, threat landscapes, and emerging technologies.

ESSENTIAL DUTIES & RESPONSIBILITIES:

Mentor more junior members of the team.
Contribute to and enhance the bank's network vulnerability management program.
Define security requirements for the implementation of new applications and projects.
Serve as a security engineer/consultant on projects.
Participate in conducting security research on threats and remediation techniques/ technology, make recommendations to the IS/IT teams and oversee their implementation.
Support the Bank's operational information security responsibilities, including the development maintenance of standards, procedures, and guidelines necessary to satisfy the Information Security department's network operations.
Proactively monitor and investigate network security alerts from managed security service provider and in-house security tools.
Assist in conducting risk assessments to evaluate the effectiveness of existing controls and determine the impact of proposed changes to business processes, applications and systems.
Provide technical support to regulatory agencies, external auditors, and internal auditors, as required, to respond to audits and examinations of the Bank's control environment.
Threat analysis / Incident Response: interpreting events and analyzing network traffic.
Mitigating and addressing threat vectors including APT, DDoS, Phishing, Malicious Payload, Cloud, Mobile Devices.
Vulnerability/penetration testing/remediation.
Seeking and maintaining knowledge (cross/up skill) of current and upcoming IT security technologies.
Awareness of latest and common security threats.
Knowledge of virtualization technologies.

SUPERVISORY RESPONSIBILITIES: None.

MINIMUM KNOWLEDGE, SKILLS, & ABILITIES REQUIRED:

Bachelor's degree in Computer Science/Information Systems or equivalent combination of education and experience. Master's degree a plus.
Industry Standard Certifications such as, but not limited to: CompTIA A+, CompTIA Network +, CompTIA Security +, ISC2 CISSP, and EWS are preferred.
Must be able to communicate ideas both verbally and in writing to management, business and IT sponsors, and technical resources in language that is appropriate for each group.
At least 2 years of related experience; 1+ years experience in a hands-on information security development role preferred.
Experience working with and supporting Unix/Linux and Windows systems.
Solid conceptual understanding of distributed computing principles.
Working knowledge of application and data security concepts, best practices, and common vulnerabilities.
Previous experience working with offshore teams desired.
Financial industry experience is a plus.
Excellent ability to diagnose and troubleshoot accessibility issues.

ADDITIONAL KEY KNOWLEDGE, SKILLS, & ABILITIES REQUIRED:

Experience with automated testing frameworks and practices
Familiarity with serverless architectures (e.g., AWS Lambda)
Knowledge of containerization technologies such as Docker or Kubernetes
Exposure to API gateways (e.g., Amazon API Gateway, Kong)
Hands-on experience with Amazon Web Services (AWS)
Experience in Terraform for infrastructure as code
Strong programming skills in Python
Experience in API development and integration

Information Security Engineer II

Total Base Pay Range 60,100.00 - 123,200.00 USD Annual

LOCATION -- Virtual, Ohio 00000

Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.

","hiringOrganization":{"@type":"Organization","name":"Fifth Third Bank","sameAs":"https://www.53.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Virtual - Ohio, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":21,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-08-04","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Engineer.

In this role, you will:

Provide deep technical guidance on secure coding, vulnerability remediation, threat modeling, and security tools
Serve as the escalation point for Satellite ASCs, ensuring QA/QC of findings, especially in high-risk and regulatory environments
Lead and continuously enhance the Satellite ASC enablement journey, including onboarding, advanced training, and mentorship
Participate in and lead secure design reviews, code analysis, and architecture consultations across multiple development teams
Drive and maintain automated security tooling integrations in CI/CD (e.g., SAST, SCA, secrets scanning, IaC reviews)
Support the creation and tracking of security KPIs and metrics dashboards, helping measure risk reduction and program impact
Help shape policy and control frameworks that balance developer velocity with security assurance
Contribute to the governance and continuous improvement of the Satellite ASC Program
Act as a senior advisor and technical lead for the Satellite ASC Program, helping define governance, oversight, and continuous improvement
Partner with Product, Engineering, and Risk leaders to define secure design patterns and control objectives for cloud and enterprise systems
Lead the review and escalation process for critical findings, ensuring alignment with enterprise risk tolerance
Coach and guide other Core ASCs to raise overall capability and impact of the Core ASC Center of Excellence

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

5+ years in application security, secure development, or DevSecOps roles, Strong experience with modern application architectures (e.g., cloud-native, microservices, APIs)
5+ years of experience as application security champion
1+ year of Fortify Code Analyzer experience
1+ year of CheckMarx experience
1+ year of Black Duck SCA experience
1+ year of SAST (Static Analysis Software Testing) experience
Experience scaling security programs in federated or decentralized models
Certifications such as CSSLP, GWAPT, OSWE, or SANS/GIAC (GSSP, GWEB, etc.)
Experience working in Agile/DevOps environments using tools like GitHub, Jira, Azure DevOps
Familiarity with compliance frameworks (e.g., NIST, ISO 27001, CRI Profile)
Proficiency with static/dynamic analysis tools (e.g., SAST, DAST, SCA, GHAS) and manual code reviews
Familiarity with secure SDLC principles, threat modeling methodologies (STRIDE, PASTA), and OWASP standards
Excellent communication skills with experience mentoring developers or leading training efforts
Ability to manage competing priorities and influence teams without direct authority

Excellent verbal, written, and interpersonal communication skills
Ability to manage highly complex issues and negotiate solutions
Ability to interact and communicate effectively with all levels of an organization; including at the executive level.

Job Expectations:

Ability to work additional hours as needed
Meet in-office expectations (currently 3 days in-office per week average)

Posting End Date:

30 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":22,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-08-12","description":"

About this role:

As a Lead Information Security Engineer, you will spearhead efforts to secure sensitive data with a primary focus on implementing and managing encryption for data at rest and in transit. You will collaborate with vendors to integrate state-of-the-art cryptographic tools and establish self-healing security systems that minimize disruptions and improve resiliency. Additionally, you will design and monitor synthetic transactions to ensure the health and availability of critical systems. This role demands a strong background in encryption, vendor management, automation, and advanced security engineering practices.

In this role, you will:

Lead and execute complex computer security incident response activities, including post-incident forensics, to identify root causes and recommend mitigation strategies.
Design, implement, and manage encryption solutions for data at rest and in transit, ensuring compliance with organizational policies and regulatory standards.
Collaborate with vendors to evaluate, procure, and deploy advanced encryption tools, including self-healing systems that automate recovery and reduce downtime.
Develop and implement synthetic transaction monitoring to simulate user interactions, ensuring continuous performance and availability of critical applications.
Provide security consulting on large-scale projects, emphasizing cryptographic protocols, key management practices, and vendor-driven encryption solutions.
Architect and maintain highly secure solutions across networking, cryptography, cloud environments, authentication, directory services, and endpoint security.
Monitor and correlate security logs to detect vulnerabilities and ensure encryption solutions remain robust against evolving threats.
Integrate self-healing technologies into the security architecture, automating responses to incidents and reducing manual intervention.
Conduct risk assessments to identify vulnerabilities, particularly in encryption and data protection, and recommend actionable remediation strategies.
Collaborate with internal teams and vendors to align encryption strategies with compliance, performance, and operational requirements.
Lead a team of security professionals, fostering innovation in self-healing systems, encryption, and synthetic monitoring practices.

Required Qualifications:

5+ years of Information Security Engineering experience, demonstrated through work experience, military service, education, or training.
5+ years of experience on Thales CipherTrust Manager, CipherTrust Transparent Encryption (CTE) or any other equivalent experience any of the Unstructured/Structured Data at Rest Cryptographic services.
5+ years of coding and development experience in Python, Ruby, or Ansible Automation, with expertise in automating encryption and self-healing systems.
5+ years of experience in CI/CD processes with tools like Jenkins, Gradle, SonarQube, and Artifactory.
3+ years of experience developing applications on Kubernetes/K8 platforms and deploying solutions to Microsoft Azure and Google Cloud Platform.

Desired Qualifications:

Advanced expertise in encryption technologies, including symmetric and asymmetric cryptography, and implementing data-at-rest encryption solutions.
Experience in designing and implementing self-healing systems, including automated recovery and fault-tolerant solutions.
Knowledge of synthetic transaction monitoring tools to ensure the reliability and availability of critical systems.
Strong vendor management skills, including evaluating, onboarding, and collaborating with vendors for encryption tools and automated recovery solutions.
Knowledge of Directory Servers, such as Ping Directory or Oracle Unified Directory.
Proficiency with monitoring and data analysis tools like Splunk and Elasticsearch for encryption-related security event detection and performance tracking.
Advanced knowledge of Linux and network troubleshooting commands, with a focus on securing encrypted data flows and automated recovery.
Deep knowledge of information security frameworks, standards, and best practices, including NIST and ISO guidelines for encryption and automated resilience.
Exceptional ability to communicate complex technical concepts to a wide range of audiences, including executives.

Job Expectations:

Availability to support production issues during evenings and weekends as needed.
Onsite presence required, with a hybrid work schedule.

Posting End Date:

13 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":23,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-08","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:

Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

4+ years of demonstrated experience leveraging security technologies such as SIEM for security incident analysis
2+ years of demonstrated experience with at least one scripting language (preferably JavaScript and its frameworks / Python) working on automation and engineering projects
Proficiency in detection engineering — developing and maintaining effective detection rules and correlation logic.
Correlation searches, rules, alerts.
Behavioral detections (e.g., brute-force, privilege escalation).
Anomaly detections (e.g., unusual logon patterns, entropy-based detections).
Hands-on experience with parsing configurations (props, transforms, regex, normalization techniques).
Expertise in log source onboarding, source categorization, and enrichment.
Strong understanding of security event types (firewall, endpoint, identity, cloud, SaaS logs).
Familiarity with common attack vectors (credential abuse, privilege escalation, lateral movement).
Knowledge of threat detection frameworks like MITRE ATT&CK, NIST, CIS.
Ability to work with threat intelligence feeds to build contextual detections.
Experience with log analysis, anomaly detection, and statistical detection methods.
Proficient in developing content for SIEMs such as Splunk, Sentinel, QRadar, ArcSight, Elastic, etc.
Optimize search performance and false positive tuning of existing detection rules.
Maintain deployment workflows for apps, configurations, and detection packages across the SIEM infrastructure.
Work with security analytics teams to develop data models or normalized schemas (CIM or equivalent).
Knowledge and understanding of banking or financial services industry
Should possess understanding of security and threat landscape relevant to cloud technologies
Excellent verbal, written, and interpersonal communication skills
Strong ability to identify anomalous behavior on endpoint devices and/or network communications
Advanced problem solving skills, ability to develop effective long-term solutions to complex problems
Relevant certifications such as Splunk Certified Admin, Splunk Enterprise Security Certified Admin.

Job Expectations:

The candidate will play a major role in our Secure content development team, including the vetting of new models and procedures to identify and react to anomalous network and/or endpoint behaviors. This position is designed to assure success in our next-generation ability to discover and react to advanced security threats.
The engineer will be responsible to develop rules and usecases on SIEM platform.
Responsible for finetuning of the rules/creating exceptions.
Develop and manage Technology Add-ons (TAs) / Data connectors for custom and third-party applications

Posting End Date:

13 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":24,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-08-08","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

We are seeking a Lead Information Security Engineer to provide technical leadership within the Cyber Threat Fusion Center. This role will guide and mentor junior analysts and engineers, lead complex investigations, and drive the development of our detection and response capabilities. The ideal candidate will have a strong background in security operations, incident response, and threat detection, along with the ability to collaborate across teams to improve security posture and response effectiveness.

In this role, you will:

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of Information Security reporting and analysis experience
3+ years of cyber security incidents and events investigation experience
2+ years of experience with Cloud platforms
2+ years of Splunk experience

Desired Qualifications:

3+ years of information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
Knowledge and understanding of security analytics including: incident response and a digital forensics discipline
3+ years of SIEM experience
Experience with CrowdStrike
Ability to provide leadership by coaching, training, and mentoring to junior members

Job Expectations:

Ability to work four, ten hour days Tuesday through Friday 10am - 8pm.
Ability to work on-site in a listed location at least three days per week in a hybrid model.
Ability to work holidays
Ability to work in an on-call rotation

Posting End Date:

14 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"102462-AZ-B Building, Chandler Campus, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":25,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-15","description":"

At CVS Health, we’re building a world of health around every consumer and surrounding ourselves with dedicated colleagues who are passionate about transforming health care.

As the nation’s leading health solutions company, we reach millions of Americans through our local presence, digital channels and more than 300,000 purpose-driven colleagues – caring for people where, when and how they choose in a way that is uniquely more connected, more convenient and more compassionate. And we do it all with heart, each and every day.

Position Summary
Manages the creation and/or implementation of information security policies, programs, and procedures to cost-effectively and efficiently protect information and information systems assets from Intentional or inadvertent modification; disclosure or destruction; unauthorized access; reduced, interrupted or terminated, processing capability; malicious logic or virus activity; or loss, theft, damage or destruction of any IT resources.

Required Qualifications

5+ years experience designing and implementing capabilities in a Hadoop-based, Spark big data environment

5+ years experience in design and implementing real-time data pipelines using NiFi, Kafka and Spark Streaming

5+ years experience processing large volumes of data with Hive, Pig, Spark, NiFi, Kafka and Python

Preferred Qualifications

· Familiarity with streaming big data applications like, Kafka, NiFi, Spark streaming/ Strom

· Strong background in Information System Security

· Excellent written and verbal communication skills

· Familiarity with statistical computing techniques, and statistics software (e.g. R and Tableau)

· Experience using source code management systems (e.g. Git)

· Interest and passion for learning about new technologies

· Experience in processing TB’s worth of data

Education

Bachelor degree from accredited university or equivalent work experience (HS diploma + 4 years relevant experience)

BUSINESS OVERVIEW

Bring your heart to CVS Health Every one of us at CVS Health shares a single, clear purpose: Bringing our heart to every moment of your health. This purpose guides our commitment to deliver enhanced human-centric health care for a rapidly changing world. Anchored in our brand — with heart at its center — our purpose sends a personal message that how we deliver our services is just as important as what we deliver. Our Heart At Work Behaviors™ support this purpose. We want everyone who works at CVS Health to feel empowered by the role they play in transforming our culture and accelerating our ability to innovate and deliver solutions to make health care more personal, convenient and affordable. We strive to promote and sustain a culture of diversity, inclusion and belonging every day. CVS Health is an affirmative action employer, and is an equal opportunity employer, as are the physician-owned businesses for which CVS Health provides management services. We do not discriminate in recruiting, hiring, promotion, or any other personnel action based on race, ethnicity, color, national origin, sex/gender, sexual orientation, gender identity or expression, religion, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. We proudly support and encourage people with military experience (active, veterans, reservists and National Guard) as well as military spouses to apply for CVS Health job opportunities

Anticipated Weekly Hours

Time Type

Full time

Pay Range

The typical pay range for this role is:

$101,970.00 - $203,940.00

This pay range represents the base hourly rate or base annual full-time salary for all positions in the job grade within which this position falls. The actual base salary offer will depend on a variety of factors including experience, education, geography and other relevant factors. This position is eligible for a CVS Health bonus, commission or short-term incentive program in addition to the base pay range listed above.

Our people fuel our future. Our teams reflect the customers, patients, members and communities we serve and we are committed to fostering a workplace where every colleague feels valued and that they belong.

Great benefits for great people

We take pride in our comprehensive and competitive mix of pay and benefits – investing in the physical, emotional and financial wellness of our colleagues and their families to help them be the healthiest they can be. In addition to our competitive wages, our great benefits include:

Affordable medical plan options, a 401(k) plan (including matching company contributions), and an employee stock purchase plan.
No-cost programs for all colleagues including wellness screenings, tobacco cessation and weight management programs, confidential counseling and financial coaching.
Benefit solutions that address the different needs and preferences of our colleagues including paid time off, flexible work schedules, family leave, dependent care resources, colleague assistance programs, tuition assistance, retiree medical access and many other benefits depending on eligibility.

For more information, visit https://jobs.cvshealth.com/us/en/benefits

We anticipate the application window for this opening will close on: 08/22/2025

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state and local laws.

","hiringOrganization":{"@type":"Organization","name":"CVS Health","sameAs":"https://cvshealth.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Work At Home-Connecticut, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":26,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-08-15","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

As a Lead Information Security Engineer for the Internal Cyber Operations team, you will spearhead efforts to modernize and enhance our cyber insider threat capabilities. This pivotal role involves working with a skilled team of engineers to implement cutting-edge technologies, drive strategic advancements, and build a world-class insider threat program. We are seeking a highly motivated leader passionate about protecting the organization from internal cyber threats through innovative threat detection, incident response, and proactive defense strategies.

In this role, you will:

Work within a team of engineers to implement, maintain, and advance technologies focused on detecting and mitigating insider cyber threats, aligning with the organization's internal security mission.
Oversee daily operations in insider threat detection engineering, incident response, and threat hunting, emphasizing user behavior analytics (UBA) and endpoint monitoring.
Collaborate with cross-functional cyber teams to address gaps in insider threat detection capabilities, ensuring seamless integration with broader security strategies.
Direct long-term remediation efforts for insider threat incidents and internal cyber hygiene issues, conducting root cause analysis to prevent recurrence.
Mentor team members on leveraging UBA and related tools to uncover insider threats, incorporating machine learning or anomaly-based detection to enhance identification accuracy.
Investigate and respond to potential cyber incidents that could pose risk to the organization with a focus on insider cyber threats.

Required Qualifications:

5+ years of cybersecurity experience or equivalent demonstrated through a combination of work experience, formal training, military experience, or education.
3+ years of experience in cyber defense investigation and incident response.
1+ years of experience in cyber threat engineering, preferably via SIEM, EDR, or UBA.
Highly refined and professional communications, both verbal and written.

Desired Qualifications:

1+ years of experience leveraging machine learning or anomaly-based detection methodologies to uncover either internal or external cyber threats.
1+ years of experience performing digital investigations involving insider threats.
Certifications in one or more of the following: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Machine Learning Engineer (GMLE), or GIAC Certified Detection Analyst (GCDA).

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to achievements, skills, experience, or work location. The range listed is just one component of the compensation package offered to candidates.

$119,000.00 - $224,000.00

Benefits

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Posting End Date:

21 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"141278-NC-CIC Customer Information Ctr, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":27,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer","datePosted":"2025-08-15","description":"

About this role:

Wells Fargo is seeking a Lead Information Security Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

In this role, you will:

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
3+ years of Information Security reporting and analysis experience
3+ years of cyber security incidents and events investigation experience
2+ years of experience with Cloud platforms
2+ years of Splunk experience

Desired Qualifications:

3+ years of information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
Knowledge and understanding of security analytics including: incident response and a digital forensics discipline
3+ years of SIEM experience
Experience with CrowdStrike
Ability to provide leadership by coaching, training, and mentoring to junior members

Job Expectations:

Ability to work four, ten hour days Tuesday through Friday 10am - 8pm.
Ability to work on-site in a listed location at least three days per week in a hybrid model.
Ability to work holidays
Ability to work in an on-call rotation

Posting End Date:

21 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"102462-AZ-B Building, Chandler Campus, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":28,"item":{"@type":"JobPosting","title":"Associate Engineer, Information Security","datePosted":"2025-08-18","description":"

About Carvana

If you like disrupting the norm and are looking for a company revolutionizing an industry then you will LOVE what Carvana has done for the car buying experience. Buying a car the old fashioned way sucks and we are working hard to make it NOT suck. At Carvana, our customers can hop online to...

Search and browse our inventory of over 20,000 vehicles that we own and certify.
Narrow down search results using highly intelligent filtering tools/components.
View vehicle details, Carfax reports, and 360 rotating studio images for every vehicle.
Secure financing in minutes using Carvana’s in-house service or their own bank.
Interact with GUI components to easily customize loan length, down payment, and monthly payment.
Generate, upload, and eSign all documents online (no ink necessary).
Schedule front door delivery or pick up at one of our vending machines.
Trade-in their existing vehicle or just sell it to Carvana (no purchase necessary).

For more information on Carvana and our mission, learn more about what it’s like to work here from the people that already do.

This is a 100% on-site position, Monday through Friday, at our corporate HQ in Tempe, Arizona.

About the team and position

We are hiring an Associate Engineer, Information Security to join our Information Security Team. In this role, you will play a pivotal role in safeguarding our digital infrastructure by deploying, maintaining and managing various security technologies deployed within the organization to identify, protect, detect, respond and recover from cyber risks, threats, and exposures. A successful candidate will be able to effectively integrate and manage multiple enterprise security technologies across our technology stack, drive significant risk reduction and enhance our overall security risk posture.

What you’ll be doing

Maintain various security technologies across the enterprise to ensure that the technologies are operational and providing value to the organization.
Leverage the information from disparate security technologies to improve our security risk posture.
Engineer solutions that can drive automated response to known security risks, when appropriate.
Leverage artificial intelligence (AI) to build and optimize our security technologies, when appropriate.
Partner with cross-functional stakeholders to drive risk reduction using a risk-based approach.
Assist in triaging vulnerabilities and bug bounty findings and drive remediation efforts with appropriate cross-functional stakeholders to ensure timely remediation.
Identify and implement additional use cases to automate repetitive and/or operational tasks to our agentic AI solution.
Participate in the assessment of new security technologies and provide insight into the potential impact on our security program.

What you should have

2+ years of experience in information security, information technology, or related field.
Familiarity with securing cloud environments and understanding cloud specific threats and mitigation strategies.
Understanding of current attack vectors and mitigation approaches.
Exceptional analytical and problem solving skills.
Strong technical acumen, communication, and influence skills.
Self-starter with minimal guidance and supervision.
A curiosity-driven mindset eager to learn, grow and develop.

It would be great if you also had

Information Security Certification (e.g. Security+, etc.) and/or education.
Hands-on experience in managing security technologies.
Practical experience in automation through scripting languages and/or via AI coding agents.

What we’ll offer in return

Full-Time Salary Position with a competitive salary.
Medical, Dental, and Vision benefits.
401K with company match.
A multitude of perks including student loan payments, discounts on vehicles, benefits for your pets, and much more.
A great wellness program to keep you healthy and happy both physically and mentally.
Access to training and conference opportunities as well as great on-the-job training.
A company culture of promotions from within, with a start-up atmosphere allowing for varied and rapid career development.

Other requirements

To be able to do your job at Carvana, there are some basic requirements we want to share with you.

Must be able to read, write, speak, and understand English.
Requires excellent visual acuity and manual dexterity.

Of course, we’ll make any reasonable accommodations for those with disabilities to perform the essential functions of their jobs.

Legal Stuff

Hiring is contingent on passing a complete background check. This role is not eligible for visa sponsorship.

Carvana is an equal employment opportunity employer. All applicants receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, marital status, national origin, age, mental or physical disability, protected veteran status, or genetic information, or any other basis protected by applicable law. Carvana also prohibits harassment of applicants or employees based on any of these protected categories.

Please note this job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

","hiringOrganization":{"@type":"Organization","name":"Carvana","sameAs":"https://www.carvana.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Tempe, AZ","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":29,"item":{"@type":"JobPosting","title":"Information Security Operations Engineer","datePosted":"2025-08-15","description":"

We are seeking a proactive and technically skilled Security Operations Engineer to join our growing Security Operations team part of Essity’s global Information Security team. This is a hands-on technical role ideal for someone passionate about cybersecurity, incident response, and threat detection.

Job Description:

As a Security Operations Engineer, you will play a critical role in protecting our digital assets by developing, implementing, and maintaining robust cybersecurity controls that align with industry standards and best practices. You will work closely with our external SOC and internal cross-functional teams to identify vulnerabilities, implement security measures, and respond to security incidents.
The geographical scope of role responsibilities is global, but the position is in Gothenburg, Sweden with possible alternative locations in Lisbon, Portugal or Munich, Germany or in Dunstable, UK.

Main Responsibilities:

• Develop and maintain operational procedures for cybersecurity tools to ensure consistency and scalability.
• Configure, manage, and automate cybersecurity tools to support monitoring, detection, and incident response.
• Research emerging threats and analyze threat intelligence reports to produce actionable items that enhance the organization’s detection and prevention capabilities.
• Develop and continuously tune detection rules, use cases, and alerting logic in SIEM, EDR, and other security platforms to improve threat visibility.
• Collaborate with IT and infrastructure teams to implement preventive controls, support remediation efforts, and reduce overall cyber risk.
• Provide pragmatic, risk-based recommendations to address identified vulnerabilities, misconfigurations, and control gaps.
• Participate in cross-functional incident response efforts, contributing to containment, investigation, and resolution of security incidents.

Who you are

We are looking for someone who brings both technical excellence and the right mindset to our team. You are a self-motivated and proactive team player, known for your positive attitude and collaborative spirit. You thrive in complex environments, communicate effectively across teams, and take ownership of your work with enthusiasm and reliability.

Qualifications and Experience:

University degree in computer science (professional security certifications such as SANS or CompTIA are appreciated)
Minimum 5 years of experience in cybersecurity, with a focus on engineering and architecture
Proficiency in security tools and technologies, including EDR, XDR, and SIEM
Strong cross-functional collaboration skills with IT experts across the organization
Comfortable operating in large, complex environments
Fluent in spoken and written English

Application

As we will be making ongoing selections, interviews might start before the application deadline. Please send in your application to us in English via our website at your earliest convenience but not later than deadline. We may conduct background checks in the final stages of the recruitment process to verify your qualifications and fit for the role.

What We Can Offer You

Our purpose, Breaking Barriers to Well-being, provides meaning to everything we do. Working at Essity means a chance to improve well-being for people and opportunities to drive positive change for the society and the environment. As an employee at Essity, you will belong to an organization where you feel valued and supported to grow and challenged to generate business results in a collaborative and open atmosphere. Innovate for Good | Excel Together | Be You with Us

Application End Date:

31 aug. 2025

Job Requisition ID:

Essity253706","hiringOrganization":{"@type":"Organization","name":"Essity","sameAs":"https://www.essity.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Gothenburg, Sweden","addressCountry":"Sweden","addressRegion":"Europe"}}}},{"@type":"ListItem","position":30,"item":{"@type":"JobPosting","title":"Associate Information Security Engineer","datePosted":"2025-08-14","description":"The Associate Information Security Engineer assists and collaborates with the planning, design and implementation of security tools and architectures. Performs supervised technical duties in the areas of network security management, identity and access management, incident management, information security program and technology implementations.

Review and advise on network and computer security technologies to identify deviations from documented standards

Collaborate with team members to design, build, and implement new technologies and supporting business processes

Assist with the implementation of the various technologies and security controls of the Information Security Program

Provide recommendations and suggest changes to security technologies to comply with legal, regulatory, and/or contractual requirements

Coordinate schedules and support in the execution of the implementation plans under the guidance of Senior Information Security Engineers

Author and maintain technical documentation, including operational runbooks and business processes

May participate in the investigation of intrusion incidents and conduct forensic investigations

Job Specifications

Typically has the following skills or abilities:

Bachelor’s Degree in Computer Science or related field, or equivalent experience

2+ years of hands-on technical information security experience

Intermediate level knowledge of security principles and technologies

Ability to interact with personnel at all levels of the organization and interpret business initiatives

Effective written and verbal communication skills

Ability to regularly exercise discretion and independent judgment in the performance of job duties

#LI-VISIONCARE

Compensation range for the role is listed below. Applicable salary ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. As a part of the compensation package, this role may include eligible bonuses and commissions. For more information regarding VSP Vision benefits, please click here.

Salary Ranges: $58,656.00 - $92,328.00

VSP Vision is an equal opportunity employer and gives consideration for employment to qualified applicants without regard to age, gender, race, color, religion, sex, national origin, disability or protected veteran status. We maintain a drug-free workplace and perform pre-employment substance abuse testing.

Unincorporated LA County Residents: Qualified Applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, and any other similar laws.

Notice to Candidates: Fraud Alert - Fake Job Opportunity Solicitations Used to Collect Fees/Personal Information.

We have been made aware that fake job opportunities are being offered by individuals posing as VSP Vision and affiliate recruiters. Click here to learn about our application process and what to watch for regarding false job opportunities.

As a regular part of doing business, VSP Vision (“VSP”) collects many different types of personal information, including protected health information, about our audiences, including members, doctors, clients, brokers, business partners, and employees.  VSP Vision employees will have access to this sensitive personal information and are subject to follow Information Security and Privacy Policies.

","hiringOrganization":{"@type":"Organization","name":"VSP Vision","sameAs":"https://www.vspvision.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote CA - R1, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":31,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-14","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer in Technology as part of Cybersecurity. Learn more about the career areas and lines of business at wellsfargojobs.com.

Wells Fargo is seeking a Senior Information Security Engineer for the Threat Disruptions (TD) Team within the Advanced Operational Services (AOS) organization of Cybersecurity. The TD team plays a critical role in protecting the company's digital environment by proactively identifying, mitigating, and disrupting cyber threats. The team's responsibilities include responding to and neutralizing phishing attempts reported by employees, dismantling brand infringement campaigns, and taking down malicious URLs targeting the organization. TD leverages multitude of advanced cyber security tools to investigate suspicious email related events. Additionally, TD manages and fine tunes Domain based Message Authentication, Reporting, and Conformance (DMARC) and Domain Name System (DNS) configurations to prevent spoofing to better safeguard the company's online presence.

In this role, you will:

Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Review and correlate security logs
Play a major role in phishing disruption efforts, including creation of new logic and procedures to identify phishing attacks impacting Wells Fargo customers and employees
Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
1+ year of Splunk experience

Desired Qualifications:

Strong investigative mindset with an attention to detail
Advanced problem solving skills, ability to develop effective long-term solutions to complex problems
Experience detecting and mitigating phishing attacks directed towards employees and the company brand
Experience creating regular expressions and YARA rules
Ability to manage complex issues and develop solutions
Experience in one or more of the following security disciplines: information security monitoring; incident response; vulnerability management; host/network forensics; cyber-crime investigations; Domain-based Message Authentication, Reporting and Conformance (DMARC); or cyber threat intelligence.
Ability to execute in a fast paced, high demand, environment while balancing multiple priorities
Certifications in one or more of the following: Global Information Assurance Certification (GIAC); Offensive Security Certified Professional (OSCP); or equivalent
Hands-on experience with information security tools such as an enterprise SIEM solution, IDS/IPS, endpoint security solutions, email/web security gateways, and other security detection/mitigation devices
Experience with host and/or network log analysis as applied to incident response / threat hunting
Knowledge of offensive security, with the ability to think like an adversary when hunting and responding to incidents
Strong experience in operating system and application security hardening and best practices

Pay Range

$100,000.00 - $196,000.00

Benefits

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Posting End Date:

21 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"141278-NC-CIC Customer Information Ctr, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":32,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-14","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer as a part of our network infrastructure team to support network segmentation program, cyber risk and threat identification by proactively and continuously monitoring the internal and external landscape for events, risks, threats, malicious code, vulnerabilities, and attacks related to the Financial Services industry or Wells Fargo Specifically. Candidate should be highly motivated with Remote Access solutions / VPN-Engineering to join our dynamic team. Remote Access solution team provides technical expertise in designing and implementing secure remote access solution and managing the infrastructure of a large organization. The primary goal for this role is to ensure system reliability of secure remote access with enhanced operational procedures and troubleshooting end users’ issues

In this role, you will:

Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to network security
Follow change and incident management formal processes
Review and correlate security logs for troubleshooting
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives
Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2+ years of network routing and switching experience
4+ years Palo Alto firewall experience (infrastructure and policy) – including PAN-OS advanced configuration, Application-based (App-ID), User-ID integration with Active Directory or Azure AD, SSL decryption (both inbound and outbound), Threat prevention, URL filtering, Wildfire, and DNS security.
2+ years expertise in Panorama – template stacks, device groups, policy hierarchy, logging, reporting, custom dashboards, role-based control
2+ years expertise with Palo Alto advanced features – Zone protection profiles and DoS policies, Decryption policy tuning and troubleshooting, SD-WAN or virtual wire deployments
Flexibility to support implementations outside of standard business hours.
Deliver high-quality technical artifacts, engineering solutions aligned with business objectives.

Desired Qualifications:

Experience with Global Protect
Experience with Ansible
information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
Experience with documentation creation/maintenance
Ability to provide leadership by coaching, training, and mentoring
Splunk experience
Agile experience
CCNA or CCNA-Security or Palo Alto Networks Certified Network Security Engineer (PCNSE) certified.
Leading and/or supporting the Palo Alto Global Protect VPN infrastructure operations with on-call responsibilities.
2+ years of Intermediate to Advanced level experience with scripting/automation using tools such as: Bash, Ansible Playbook/Role Development, PowerShell, Python, etc.
2+ years advanced understanding of Network concepts like DNS, Firewall and Load Balancing.
Proven experience with change and incident management practices in medium to large enterprise environments.
Basic understanding of TLS, Certificates, and MTLS.
Intimate knowledge of the inner workings of the Internet.
Experience with Agile Scrum or Kanban methodologies.
Excellent verbal, written, and interpersonal communication skills.
Advanced Information Security technical skills and solid knowledge and understanding of information security practices and policies.
ServiceNow, Jira and Confluence experience.
Technical documentation experience.
Strategic planning experience in translating leadership vision into executable strategies and initiatives.
Technology experience in the Financial Services sector.
Ability to coordinate completion of multiple tasks and meet aggressive time frames.
Advanced critical thinking, problem solving and technical troubleshooting abilities.
Strong analytical skills with high attention to detail and accuracy.
Experience with and the ability to thrive in a complex and fast-paced technology and/or information security organization, within a large enterprise environment.
Experience with Information Security Frameworks and standards (FFIEC, NIST, ISO).
Ability to work off hours and occasional weekends to support change activities.
Managed service delivery certifications like ITIL, Six Sigma will be beneficial.

Job Expectations:

This is a hybrid working position in the approved location 3 days per week and includes occasional after hours change implementation and issue resolution
Knowledge in maintaining, configuration, upgrades of Palo Alto platforms and configuring the Global Protect as per design.
Troubleshoot, identify and resolve Global Protect VPN issues and providing detailed root cause analysis regarding the problem.
Strong knowledge and experience in Palo Alto HIP/ Host-Checker policies, alert configuration.
Good knowledge of the TCP, HTTP, SSL protocol and headers, as well as packet-level protocol analysis capabilities.
Knowledge of Active Directory (machine/user objects, Organizational Units, group policy processing, etc.).
Strong knowledge and experience in the areas of IP routing, switching, load-balancing, and advanced network automation techniques and solutions.
Strong knowledge in the development of secure Network architectures and standards.
Strong experience with the application of advanced network-based technical security controls in large enterprise network environments.
Leading and/or supporting the Palo Alto Global Protect VPN infrastructure operations with on-call responsibilities.
Knowledge of DNS, DHCP, proxy technology, and Unix-based network appliances.
Experience with large-scale enterprise security solutions spanning multiple business functions and geographic locations.
Experience working with multifactor authentication.
Ability to work periodic after-hours work including participation in an on-call rotation.
Demonstrated enterprise experience in change management process.
Strong working knowledge of providing/understanding network security documentation.
Provide enterprise risk and threat communication efforts to key groups and the enterprise regarding potential threats and remediation efforts - including the ability to develop blog posts with effective analysis and actionable intelligence based on relevant security events.
Providing checklist, guidelines and implementation for Palo Alto Global Protect polices and investigation of security.
Intimate knowledge of the TCP, HTTP, SSL protocol and headers, as well as packet-level protocol analysis capabilities.
Track record of consistent proven experience with network infrastructure systems and Internet technologies.
Participates in the research, analysis, design, testing and implementation of complex computer network security/protection technologies for company information and network systems/applications.
Assists customers in identifying security solutions for the company's networks and virtual private networks, application systems, key public infrastructures, authentication and directory services to ensure the security of the network and confidential data.
Participates in computer security incident response activities and the technical investigations of security-related incidents.
Experience working in an environment utilizing Agile methodology and processing workflow using Jira tool.
Experience with logging, monitoring and data analysis tools such as Splunk, Google Cloud Platform and Grafana.
Experience at on-call support for network security related issues.
Periodic assignment to the team on-call rotation.
Support production deployments after-hours for Palo Alto infrastructure maintenance activities which involve communication and coordination with Engineering, Operations, Project Management, and Customer Application resources to ensure the scheduled deployments are successful.

Posting End Date:

17 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110382-IND-HYDERABAD-INTL HYD WF CENTRE BLK 1B Twr-2, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":33,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-14","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:

Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

6+ years’ experience in development and automation testing methodologies
Strong hands-on experience with Playwright for UI automation.
Deep understanding of Power BI and Tableau dashboards and architecture.
Proficiency in JavaScript/TypeScript, Python, or C#.
Solid SQL skills for data validation and backend testing.
Experience in test automation frameworks and tools.
Familiarity with CI/CD tools like Azure DevOps, GitHub Actions, or Jenkins.
Excellent analytical and problem-solving skills.
Strong communication and stakeholder management abilities.
Ability to work independently and lead testing initiatives
Certifications in Power BI, Tableau, or Test Automation.
Experience with cloud platforms (Azure, AWS, GCP).
Exposure to Agile/Scrum methodologies.

Job Expectations:

Automation Strategy & Framework Development: Design and implement scalable automation frameworks using Playwright for dashboard testing.
Develop reusable test components and libraries for UI and data validation.
Validate visualizations, filters, drilldowns, and data accuracy in Power BI and Tableau dashboards.
Automate regression and smoke tests for dashboard releases.
Perform data integrity checks between source systems and dashboards.
Write SQL queries to validate ETL pipelines and data transformations.
Development & Scripting: Develop custom scripts and utilities in JavaScript/TypeScript, Python, or C# to support automation and testing.
Collaborate with developers to integrate testing into CI/CD pipelines.
Work closely with BI developers, data engineers, and business analysts to understand requirements.
Mentor junior team members and contribute to best practices in dashboard automation.
Document test cases, automation scripts, and test results.
Provide detailed defect reports and collaborate on root cause analysis.

Posting End Date:

21 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"111443-IND-HYDERABAD-INTL HYD WF CENTRE BLK B8 Twr-4, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":34,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-13","description":"

Who we are:

We are a leader in fraud prevention and AML compliance. Our platform uses device intelligence, behavior biometrics, machine learning, and AI to stop fraud before it happens. Today, over 300 banks, retailers, and fintechs worldwide use Sardine to stop identity fraud, payment fraud, account takeovers, and social engineering scams. We have raised $145M from world-class investors, including Andreessen Horowitz, Activant, Visa, Experian, FIS, and Google Ventures.

Our culture:

We have hubs in the Bay Area, NYC, Austin, and Toronto. However, we maintain a remote-first work culture. #WorkFromAnywhere
We hire talented, self-motivated individuals with extreme ownership and high growth orientation.
We value performance and not hours worked. We believe you shouldn't have to miss your family dinner, your kid's school play, friends get-together, or doctor's appointments for the sake of adhering to an arbitrary work schedule.

Location:

Remote - US (From Home / Beach / Mountain / Cafe / Anywhere!)
We are a remote-first company with a globally distributed team. So you can find your productive zone and work from there

About the role

We are seeking a highly motivated and experienced Information Security Engineer to join our growing team. In this role, you will be a critical defender of our infrastructure, responsible for building, maintaining, and operating the security systems that protect our company. You will tackle a wide range of security challenges, from ensuring regulatory compliance to responding to sophisticated threats, making a direct impact on the trust and safety of our platform.

What you’ll do

Security Operations: Day-to-day management of security tools and systems; monitor security alerts, triage events, and escalate as necessary.
Incident Response & Forensics: Act as a key member of the incident response team, leading technical investigation, containment, and eradication of security incidents. Conduct forensic analysis as needed.
PCI Compliance: Drive and maintain our PCI DSS compliance program, working with auditors and internal teams to ensure all requirements are met.
Vulnerability Management: Manage the lifecycle of vulnerabilities from discovery to remediation, utilizing scanning tools, prioritizing risks, and tracking patching efforts.
Security Control Testing: Design and execute tests to validate the effectiveness of security controls and recommend improvements.
Penetration Testing: Coordinate and/or perform penetration tests against applications, infrastructure, and networks to identify security weaknesses.
Audit & Logging: Define audit logging requirements across our technology stack and conduct regular reviews of logs to detect anomalous or malicious activity.
Threat Modeling: Proactively identify and assess threats to our applications and infrastructure by building and maintaining threat models.
Secure Configuration: Develop and enforce security configuration standards and baselines for servers, cloud services, and endpoints.
Architectural Review: Partner with engineering teams to review system architecture and new features, providing security guidance and ensuring secure-by-design principles are followed.

What you’ll bring

7+ years of hands-on experience in an information security or cybersecurity role.
Demonstrated experience with PCI DSS standards, controls, and audit processes.
Strong knowledge of vulnerability management principles and experience with tools like Nessus, Qualys, or OpenVAS.
Proven experience in security operations, including hands-on experience with SIEM, EDR, and other security monitoring tools.
Solid understanding of network security principles (e.g., firewalls, VPNs, IDS/IPS) and TCP/IP networking.
Experience securing cloud environments such as AWS and GCP.
Familiarity with incident response frameworks and experience handling security incidents.
Proficiency in at least one scripting language (e.g., Python, Bash, PowerShell) for automation and analysis.
Excellent communication and interpersonal skills, with the ability to effectively interact with technical and non-technical stakeholders.

Compensation: Base pay range of $105,000 - 135,000 USD + Series-C equity with tremendous upside potential + Attractive benefits

The compensation offered for this role will depend on various factors, including the candidate's location, qualifications, work history, and interview performance, and may differ from the stated range.

Benefits we offer:

Generous compensation in cash and equity
Early exercise for all options, including pre-vested
Work from anywhere: Remote-first Culture
Flexible paid time off, Year-end break, Self care days off
Health insurance, dental, and vision coverage for employees and dependents - US and Canada specific
4% matching in 401k / RRSP - US and Canada specific
MacBook Pro delivered to your door
One-time stipend to set up a home office — desk, chair, screen, etc.
Monthly meal stipend
Monthly social meet-up stipend
Annual health and wellness stipend
Annual Learning stipend
Unlimited access to an expert financial advisory

Join a fast-growing company with world-class professionals from around the world. If you are seeking a meaningful career, you found the right place, and we would love to hear from you.

To learn more about how we process your personal information and your rights in regards to your personal information as an applicant and Sardine employee, please visit our Applicant and Worker Privacy Notice.

","hiringOrganization":{"@type":"Organization","name":"Sardine","sameAs":"https://www.sardine.ai/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States - Remote","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":35,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-12","description":"

Redefine the future of customer experiences. One conversation at a time.

We’re changing the game with a first-of-its-kind, conversation-centric platform that unifies team collaboration and customer experience in one place. Powered by AI, built by amazing humans.

Our culture is forward-thinking, customer-obsessed and built on an unwavering belief that connection fuels business and life; connections to our customers with our signature Amazing Service®, our products and services, and most importantly, each other. Since 2008, 100,000+ companies and 1M+ users rely on Nextiva for customer and team communication.

If you’re ready to collaborate and create with amazing people, let your personality shine and be on the frontlines of helping businesses deliver amazing experiences, you’re in the right place.

Build Amazing - Deliver Amazing - Live Amazing - Be Amazing

The Senior Information Security Engineer is responsible for implementation, operation, monitoring and administration of a variety of tools and processes to protect company information in accordance with the Information Security Program and related policies. The engineer identifies security vulnerabilities, assesses risks, and recommends and implements remediations. The engineer writes and maintains policy and process documentation, documents controls, provides training and works across the organization to effect change and reduce risk. Responsibilities span the scope of information security management, including ID and Access, Vulnerability, Continuity, Operations, Secure Development, Cryptography and Vendor Management as well as Penetration Testing, Privacy and Compliance, and supporting internal and external audit. The engineer participates in Incident Response and investigates and assesses threats and responds to enterprise security events and incidents.

Key Responsibilities

Establish and maintain strong working relationships with the departments involved with information security (Operations, Development, IT, Legal, Human Resources, and others)
Develop Information Security Program policies, processes, procedures, standards, and guidelines, and train staff.
Recommend and implement improvements to the effectiveness of the Information Security Program.
Evaluate and recommend security tools to address information security risks and weaknesses.
Provide direction to employees according to established policies and management guidelines for system, application and network security.
Implement, operate, monitor and improve technical security controls across the enterprise, including AV, IDS, vulnerability scanning, WAF, code scanning, web proxies, encryption and audit log monitoring.
Perform periodic internal security reviews and risk assessments; coordinate and support internal and external information security audits.
Use a variety of vulnerability assessment and testing tools to identify security vulnerabilities and weaknesses, and ensure consistency and compliance with established standards and security policies.
Write scripts, queries and/or applications to automate common IT security related tasks, including system monitoring, user access audits, and alerting. Review reports for anomalies. Take appropriate action to address alerts and report findings.
Respond to security incidents, conduct root cause analysis of incidents, recommend corrective actions and ensure corrective action completion.
Initiate special projects related to information security.
Identify SaaS application, infrastructure and operational vulnerabilities, assess risks, and work with network, server, help desk and software development teams to remediate issues.
Review policy violations and breaches of information security with staff, identify root causes and determine plans of action to prevent future occurrences.
Document information security monitoring, scanning and testing procedures.
Keep up to date with the security field, including emerging vulnerabilities, and communicate trends for existing and proposed security systems.
Evaluate vendors’ security posture and perform periodic vendor assessments.
Perform other duties to support the technical and operational security of the organization as required.

Qualifications

Bachelor’s degree in an IT related field or equivalent experience and 5+ years of experience in working in IT security, IT systems or network engineering, software development, QA, or a related role.
Desired certifications – one or more of the following: CISSP (Certified Information Systems Security Professional), Certified Information Security Manager (CISM), SSCP (Systems Security Certified Practitioner), CCSP (Certified Cloud Security Professional) or CompTIA Security+.
Desired compliance/framework experience: familiarity with GDPR, CCPA, HIPAA or PCI privacy and security requirements and ISO 27001, SOC 2, NIST or CIS 20 frameworks.
Knowledge of security implications of threats to, and vulnerabilities of, networks, servers, operating systems, applications, and databases.
Flexibility to work off-hours to support global project teams and maintenance windows.
Ability to support 24x7 on-call for incident response on a rotating basis.
Other desired experience:\n
- Working knowledge of, and experience in, desktop and server environments, including Mac, Windows, and Linux operating systems.
- Experience with various IT technologies related to security, including Active Directory Group Policies, LDAP, SSO, SSL, encryption and hashing algorithms, and key management practices.
- Experience conducting security assessments, technology reviews and application requirements analysis from a security design perspective.
- Experience with basic scripting and SQL queries for automation of controls and reporting.
- Experience configuring and operating Web Application Firewalls, web servers, and reverse proxies to secure web applications.
- Experience installing, configuring, and managing network and host vulnerability scanning tools.
- Experience managing SIEM and log management tools.
\n

Competencies

Strong analytical problem-solving and critical thinking skills and attention to detail.
Organization, Time Management & Prioritization - Self-starter that focuses on key priorities; plans, organizes, schedules and executes on tasks and projects in an efficient and productive manner.
Ability to form productive relationships across the organization to accomplish information security objectives.
Ability and willingness to learn all aspects of the information security field.
Professional verbal and written communication skills in English, and the ability to write clear, concise, and effective policies and procedures.
Expresses ideas using clear, effective and efficient language. Listens patiently and attentively. Adapts to the purpose of the communication with appropriate style, substance, detail, confidence and channel. Possess the ability to manage multiple channels of communication simultaneously; phone, email, tickets, and chat.
Able to assess, document, and prioritize identified security flaws and vulnerabilities based on risk.

Typical Office Environment: Requires extensive sitting with periodic standing and walking. May be required to lift up to 35 pounds unassisted. May be required to lift over 35 pounds using assistive device and/or team lift. Requires significant use of personal computer, phone and general office equipment. Needs adequate visual acuity, ability to grasp and handle objects. Needs ability to communicate effectively through reading, writing, and speaking in person or on telephone.

Nextiva DNA (Core Competencies)

Nextiva’s most successful team members share common traits and behaviors:

Drives Results: Action-oriented with a passion for solving problems. They bring clarity and simplicity to ambiguous situations, challenge the status quo, and ask what can be done differently. They lead and drive change, celebrating success to build more success.
Critical Thinker: Understands the \"why\" and identifies key drivers, learning from the past. They are fact-based and data-driven, forward-thinking, and see problems a few steps ahead. They provide options, recommendations, and actions, understanding risks and dependencies.
Right Attitude: They are team-oriented, collaborative, competitive, and hate losing. They are resilient, able to bounce back from setbacks, zoom in and out, and get in the trenches to help solve important problems. They cultivate a culture of service, learning, support, and respect, caring for customers and teams.

Total Rewards

Our Total Rewards offerings are designed to allow our employees to take care of themselves and their families so they can be their best, in and out of the office.

Our compensation packages are tailored to each role and candidate's qualifications. We consider a wide range of factors, including skills, experience, training, and certifications, when determining compensation. We aim to offer competitive salaries or wages that reflect the value you bring to our team. Depending on the position, compensation may include base salary and/or hourly wages, incentives, or bonuses.

Medical 🩺 - Medical insurance coverage is available for employees, their spouse, and up to two dependent children with a limit of 500,000 INR, as well as their parents or in-laws for up to 300,000 INR. This comprehensive coverage ensures that essential healthcare needs are met for the entire family unit, providing peace of mind and security in times of medical necessity.
Group Term & Group Personal Accident Insurance 💼 - Provides insurance coverage against the risk of death / injury during the policy period sustained due to an accident caused by violent, visible & external means.\n
- Coverage Type - Employee Only
- Sum Insured - 3 times of annual CTC with minimum cap of INR 10,00,000
- Free Cover Limit - 1.5 Crore
\n
Work-Life Balance ⚖️ - 15 days of Privilege leaves per calendar year, 6 days of Paid Sick leave per calendar year, 6 days of Casual leave per calendar year. Paid 26 weeks of Maternity leaves, 1 week of Paternity leave, a day off on your Birthday, and paid holidays
Financial Security💰 - Provident Fund & Gratuity
Wellness 🤸‍ - Employee Assistance Program and comprehensive wellness initiatives
Growth 🌱 - Access to ongoing learning and development opportunities and career advancement

At Nextiva, we're committed to supporting our employees' health, well-being, and professional growth. Join us and build a rewarding career!

Established in 2008 and headquartered in Scottsdale, Arizona, Nextiva secured $200M from Goldman Sachs in late 2021, valuing the company at $2.7B.To check out what’s going on at Nextiva, check us out on Instagram, Instagram (MX), YouTube, LinkedIn, and the Nextiva blog.

#LI-RQ1 #LI-Hybrid

","hiringOrganization":{"@type":"Organization","name":"Nextiva","sameAs":"https://www.nextiva.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Bangalore, Karnataka (Hybrid)","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":36,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-12","description":"

Redefine the future of customer experiences. One conversation at a time.

We’re changing the game with a first-of-its-kind, conversation-centric platform that unifies team collaboration and customer experience in one place. Powered by AI, built by amazing humans.

If you’re ready to collaborate and create with amazing people, let your personality shine and be on the frontlines of helping businesses deliver amazing experiences, you’re in the right place.

Build Amazing - Deliver Amazing - Live Amazing - Be Amazing

Key Responsibilities

Establish and maintain strong working relationships with the departments involved with information security (Operations, Development, IT, Legal, Human Resources, and others)
Develop Information Security Program policies, processes, procedures, standards, and guidelines, and train staff.
Recommend and implement improvements to the effectiveness of the Information Security Program.
Evaluate and recommend security tools to address information security risks and weaknesses.
Provide direction to employees according to established policies and management guidelines for system, application and network security.
Implement, operate, monitor and improve technical security controls across the enterprise, including AV, IDS, vulnerability scanning, WAF, code scanning, web proxies, encryption and audit log monitoring.
Perform periodic internal security reviews and risk assessments; coordinate and support internal and external information security audits.
Use a variety of vulnerability assessment and testing tools to identify security vulnerabilities and weaknesses, and ensure consistency and compliance with established standards and security policies.
Write scripts, queries and/or applications to automate common IT security related tasks, including system monitoring, user access audits, and alerting. Review reports for anomalies. Take appropriate action to address alerts and report findings.
Respond to security incidents, conduct root cause analysis of incidents, recommend corrective actions and ensure corrective action completion.
Initiate special projects related to information security.
Identify SaaS application, infrastructure and operational vulnerabilities, assess risks, and work with network, server, help desk and software development teams to remediate issues.
Review policy violations and breaches of information security with staff, identify root causes and determine plans of action to prevent future occurrences.
Document information security monitoring, scanning and testing procedures.
Keep up to date with the security field, including emerging vulnerabilities, and communicate trends for existing and proposed security systems.
Evaluate vendors’ security posture and perform periodic vendor assessments.
Perform other duties to support the technical and operational security of the organization as required.

Qualifications

Bachelor’s degree in an IT related field or equivalent experience and 5+ years of experience in working in IT security, IT systems or network engineering, software development, QA, or a related role.
Desired certifications – one or more of the following: CISSP (Certified Information Systems Security Professional), Certified Information Security Manager (CISM), SSCP (Systems Security Certified Practitioner), CCSP (Certified Cloud Security Professional) or CompTIA Security+.
Desired compliance/framework experience: familiarity with GDPR, CCPA, HIPAA or PCI privacy and security requirements and ISO 27001, SOC 2, NIST or CIS 20 frameworks.
Knowledge of security implications of threats to, and vulnerabilities of, networks, servers, operating systems, applications, and databases.
Flexibility to work off-hours to support global project teams and maintenance windows.
Ability to support 24x7 on-call for incident response on a rotating basis.
Other desired experience:\n
- Working knowledge of, and experience in, desktop and server environments, including Mac, Windows, and Linux operating systems.
- Experience with various IT technologies related to security, including Active Directory Group Policies, LDAP, SSO, SSL, encryption and hashing algorithms, and key management practices.
- Experience conducting security assessments, technology reviews and application requirements analysis from a security design perspective.
- Experience with basic scripting and SQL queries for automation of controls and reporting.
- Experience configuring and operating Web Application Firewalls, web servers, and reverse proxies to secure web applications.
- Experience installing, configuring, and managing network and host vulnerability scanning tools.
- Experience managing SIEM and log management tools.
\n

Competencies

Strong analytical problem-solving and critical thinking skills and attention to detail.
Organization, Time Management & Prioritization - Self-starter that focuses on key priorities; plans, organizes, schedules and executes on tasks and projects in an efficient and productive manner.
Ability to form productive relationships across the organization to accomplish information security objectives.
Ability and willingness to learn all aspects of the information security field.
Professional verbal and written communication skills in English, and the ability to write clear, concise, and effective policies and procedures.
Expresses ideas using clear, effective and efficient language. Listens patiently and attentively. Adapts to the purpose of the communication with appropriate style, substance, detail, confidence and channel. Possess the ability to manage multiple channels of communication simultaneously; phone, email, tickets, and chat.
Able to assess, document, and prioritize identified security flaws and vulnerabilities based on risk.

Nextiva DNA (Core Competencies)

Nextiva’s most successful team members share common traits and behaviors:

Drives Results: Action-oriented with a passion for solving problems. They bring clarity and simplicity to ambiguous situations, challenge the status quo, and ask what can be done differently. They lead and drive change, celebrating success to build more success.
Critical Thinker: Understands the \"why\" and identifies key drivers, learning from the past. They are fact-based and data-driven, forward-thinking, and see problems a few steps ahead. They provide options, recommendations, and actions, understanding risks and dependencies.
Right Attitude: They are team-oriented, collaborative, competitive, and hate losing. They are resilient, able to bounce back from setbacks, zoom in and out, and get in the trenches to help solve important problems. They cultivate a culture of service, learning, support, and respect, caring for customers and teams.

Total Rewards

Our Total Rewards offerings are designed to allow our employees to take care of themselves and their families so they can be their best, in and out of the office.

Medical 🩺 - Medical insurance coverage is available for employees, their spouse, and up to two dependent children with a limit of 500,000 INR, as well as their parents or in-laws for up to 300,000 INR. This comprehensive coverage ensures that essential healthcare needs are met for the entire family unit, providing peace of mind and security in times of medical necessity.
Group Term & Group Personal Accident Insurance 💼 - Provides insurance coverage against the risk of death / injury during the policy period sustained due to an accident caused by violent, visible & external means.\n
- Coverage Type - Employee Only
- Sum Insured - 3 times of annual CTC with minimum cap of INR 10,00,000
- Free Cover Limit - 1.5 Crore
\n
Work-Life Balance ⚖️ - 15 days of Privilege leaves per calendar year, 6 days of Paid Sick leave per calendar year, 6 days of Casual leave per calendar year. Paid 26 weeks of Maternity leaves, 1 week of Paternity leave, a day off on your Birthday, and paid holidays
Financial Security💰 - Provident Fund & Gratuity
Wellness 🤸‍ - Employee Assistance Program and comprehensive wellness initiatives
Growth 🌱 - Access to ongoing learning and development opportunities and career advancement

At Nextiva, we're committed to supporting our employees' health, well-being, and professional growth. Join us and build a rewarding career!

#LI-RQ1 #LI-Hybrid

","hiringOrganization":{"@type":"Organization","name":"Nextiva","sameAs":"https://www.nextiva.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Chennai, Tamil Nadu (Hybrid)","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":37,"item":{"@type":"JobPosting","title":"Associate Information Security Engineer","datePosted":"2025-08-19","description":"

PURPOSE:

We are seeking a motivated and detail-oriented Associate Information Security Engineer to support our security and compliance initiatives. This entry-level role is ideal for recent graduates or early-career professionals with foundational knowledge of networking, network security, and ISO27001 compliance. The successful candidate will contribute to maintaining a secure IT environment by assisting with security reviews, compliance checks, and vulnerability assessments.

KEY RESPONSIBILITIES:

Support the implementation and maintenance of ISO27001 Information Security compliance requirements.
Collaborate with ISMS and IT teams to identify gaps and ensure compliance with security policies and procedures.
Perform regular reviews of network monitoring solutions and critical asset monitoring.
Conduct periodic security system checks to ensure reliability and effectiveness.
Assist in conducting periodic information security awareness sessions for employees.
Promote best practices and policies across teams to improve organizational security culture.
Assist in responding to security events and incidents under supervision.
Perform periodic vulnerability assessments of critical cloud assets and support remediation activities.
Work closely with ISMS and IT teams to identify potential weak points in security systems.
Provide input and recommendations to strengthen security posture.

QUALIFICATIONS, SKILLS, AND EXPERIENCE:

Bachelor’s degree in Computer Science, Information Security, or a related field.
0–1 year of experience in information security, networking, or a related domain.
Foundational understanding of network security and networking technologies.
Basic knowledge of ISO27001 compliance requirements.
Proficiency in Microsoft Office tools for reporting and documentation.
Strong critical thinking and problem-solving skills.
Good communication skills with the ability to work effectively in a team environment.
Ability to take initiative, learn quickly, and adapt to new security challenges.

A Culture of Belonging: At our core, we value diversity and inclusion. As an equal opportunity employer, we are dedicated to creating a workplace where every voice is heard, every person is respected, and everyone has the opportunity to succeed.

","hiringOrganization":{"@type":"Organization","name":"Strategic Systems International","sameAs":"https://www.ssidecisions.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Lahore, PK","addressCountry":"Pakistan","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":38,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-18","description":"

About this role:

Wells Fargo is seeking a Senior Information Security Engineer.

In this role, you will:

Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

4+ years of demonstrated experience leveraging security technologies such as SIEM for security incident analysis
2+ years of demonstrated experience with at least one scripting language (preferably JavaScript and its frameworks / Python) working on automation and engineering projects
Proficiency in detection engineering — developing and maintaining effective detection rules and correlation logic.
Correlation searches, rules, alerts.
Behavioral detections (e.g., brute-force, privilege escalation).
Anomaly detections (e.g., unusual logon patterns, entropy-based detections).
Hands-on experience with parsing configurations (props, transforms, regex, normalization techniques).
Expertise in log source onboarding, source categorization, and enrichment.
Strong understanding of security event types (firewall, endpoint, identity, cloud, SaaS logs).
Familiarity with common attack vectors (credential abuse, privilege escalation, lateral movement).
Knowledge of threat detection frameworks like MITRE ATT&CK, NIST, CIS.
Ability to work with threat intelligence feeds to build contextual detections.
Experience with log analysis, anomaly detection, and statistical detection methods.
Proficient in developing content for SIEMs such as Splunk, Sentinel, QRadar, ArcSight, Elastic, etc.
Optimize search performance and false positive tuning of existing detection rules.
Maintain deployment workflows for apps, configurations, and detection packages across the SIEM infrastructure.
Work with security analytics teams to develop data models or normalized schemas (CIM or equivalent).
Knowledge and understanding of banking or financial services industry
Should possess understanding of security and threat landscape relevant to cloud technologies
Excellent verbal, written, and interpersonal communication skills
Strong ability to identify anomalous behavior on endpoint devices and/or network communications
Advanced problem solving skills, ability to develop effective long-term solutions to complex problems
Relevant certifications such as Splunk Certified Admin, Splunk Enterprise Security Certified Admin.

Job Expectations:

The candidate will play a major role in our Secure content development team, including the vetting of new models and procedures to identify and react to anomalous network and/or endpoint behaviors. This position is designed to assure success in our next-generation ability to discover and react to advanced security threats.
The engineer will be responsible to develop rules and usecases on SIEM platform.
Responsible for finetuning of the rules/creating exceptions.
Develop and manage Technology Add-ons (TAs) / Data connectors for custom and third-party applications

Posting End Date:

22 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":39,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-18","description":"

About this role:

In this role, you will:

Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to network security
Follow change and incident management formal processes
Review and correlate security logs for troubleshooting
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives
Lead or participate in computer security incident response activities for moderately complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on medium projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for moderately complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals

Required Qualifications:

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2+ years of network routing and switching experience
4+ years Palo Alto firewall experience (infrastructure and policy) – including PAN-OS advanced configuration, Application-based (App-ID), User-ID integration with Active Directory or Azure AD, SSL decryption (both inbound and outbound), Threat prevention, URL filtering, Wildfire, and DNS security.
2+ years expertise in Panorama – template stacks, device groups, policy hierarchy, logging, reporting, custom dashboards, role-based control
2+ years expertise with Palo Alto advanced features – Zone protection profiles and DoS policies, Decryption policy tuning and troubleshooting, SD-WAN or virtual wire deployments
Flexibility to support implementations outside of standard business hours.
Deliver high-quality technical artifacts, engineering solutions aligned with business objectives.

Desired Qualifications:

Experience with Global Protect
Experience with Ansible
information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
Experience with documentation creation/maintenance
Ability to provide leadership by coaching, training, and mentoring
Splunk experience
Agile experience
CCNA or CCNA-Security or Palo Alto Networks Certified Network Security Engineer (PCNSE) certified.
Leading and/or supporting the Palo Alto Global Protect VPN infrastructure operations with on-call responsibilities.
2+ years of Intermediate to Advanced level experience with scripting/automation using tools such as: Bash, Ansible Playbook/Role Development, PowerShell, Python, etc.
2+ years advanced understanding of Network concepts like DNS, Firewall and Load Balancing.
Proven experience with change and incident management practices in medium to large enterprise environments.
Basic understanding of TLS, Certificates, and MTLS.
Intimate knowledge of the inner workings of the Internet.
Experience with Agile Scrum or Kanban methodologies.
Excellent verbal, written, and interpersonal communication skills.
Advanced Information Security technical skills and solid knowledge and understanding of information security practices and policies.
ServiceNow, Jira and Confluence experience.
Technical documentation experience.
Strategic planning experience in translating leadership vision into executable strategies and initiatives.
Technology experience in the Financial Services sector.
Ability to coordinate completion of multiple tasks and meet aggressive time frames.
Advanced critical thinking, problem solving and technical troubleshooting abilities.
Strong analytical skills with high attention to detail and accuracy.
Experience with and the ability to thrive in a complex and fast-paced technology and/or information security organization, within a large enterprise environment.
Experience with Information Security Frameworks and standards (FFIEC, NIST, ISO).
Ability to work off hours and occasional weekends to support change activities.
Managed service delivery certifications like ITIL, Six Sigma will be beneficial.

Job Expectations:

This is a hybrid working position in the approved location 3 days per week and includes occasional after hours change implementation and issue resolution
Knowledge in maintaining, configuration, upgrades of Palo Alto platforms and configuring the Global Protect as per design.
Troubleshoot, identify and resolve Global Protect VPN issues and providing detailed root cause analysis regarding the problem.
Strong knowledge and experience in Palo Alto HIP/ Host-Checker policies, alert configuration.
Good knowledge of the TCP, HTTP, SSL protocol and headers, as well as packet-level protocol analysis capabilities.
Knowledge of Active Directory (machine/user objects, Organizational Units, group policy processing, etc.).
Strong knowledge and experience in the areas of IP routing, switching, load-balancing, and advanced network automation techniques and solutions.
Strong knowledge in the development of secure Network architectures and standards.
Strong experience with the application of advanced network-based technical security controls in large enterprise network environments.
Leading and/or supporting the Palo Alto Global Protect VPN infrastructure operations with on-call responsibilities.
Knowledge of DNS, DHCP, proxy technology, and Unix-based network appliances.
Experience with large-scale enterprise security solutions spanning multiple business functions and geographic locations.
Experience working with multifactor authentication.
Ability to work periodic after-hours work including participation in an on-call rotation.
Demonstrated enterprise experience in change management process.
Strong working knowledge of providing/understanding network security documentation.
Provide enterprise risk and threat communication efforts to key groups and the enterprise regarding potential threats and remediation efforts - including the ability to develop blog posts with effective analysis and actionable intelligence based on relevant security events.
Providing checklist, guidelines and implementation for Palo Alto Global Protect polices and investigation of security.
Intimate knowledge of the TCP, HTTP, SSL protocol and headers, as well as packet-level protocol analysis capabilities.
Track record of consistent proven experience with network infrastructure systems and Internet technologies.
Participates in the research, analysis, design, testing and implementation of complex computer network security/protection technologies for company information and network systems/applications.
Assists customers in identifying security solutions for the company's networks and virtual private networks, application systems, key public infrastructures, authentication and directory services to ensure the security of the network and confidential data.
Participates in computer security incident response activities and the technical investigations of security-related incidents.
Experience working in an environment utilizing Agile methodology and processing workflow using Jira tool.
Experience with logging, monitoring and data analysis tools such as Splunk, Google Cloud Platform and Grafana.
Experience at on-call support for network security related issues.
Periodic assignment to the team on-call rotation.
Support production deployments after-hours for Palo Alto infrastructure maintenance activities which involve communication and coordination with Engineering, Operations, Project Management, and Customer Application resources to ensure the scheduled deployments are successful.

Posting End Date:

20 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110382-IND-HYDERABAD-INTL HYD WF CENTRE BLK 1B Twr-2, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":40,"item":{"@type":"JobPosting","title":"Senior Information Security Engineer","datePosted":"2025-08-19","description":"

The Role

Ready to trade security headaches for the satisfaction of outsmarting cyber threats and having a little fun along the way?

At Chainguard, you’ll design and deploy innovative technical controls, lead incident response efforts, and push the boundaries of what’s possible in cloud-native security. Your work empowers Chainguardians to perform at their best while raising the security bar for the entire industry.

If you’re driven by curiosity, thrive in fast-moving environments, and want to make a meaningful impact on the open source ecosystem, this is your chance. Even if your experience doesn’t meet every requirement, we encourage you to apply.

What You’ll Do

Engineer and deploy clever controls so security incidents stay rare and boring
Lead incident response efforts, including tabletop exercises
Integrate security best practices with product teams who appreciate memes as much as mitigations
Conduct security assessments and penetration tests- bring your inner hacker
Automate detection and response workflows using Go, Python, or Shell, mostly so you can spend less time yelling at logs and more time celebrating wins
Stay one step ahead of emerging security threats
This position includes rotational on-call responsibilities; Not brutal- the workload is reasonable and shared across the team.

What We’re Looking For

5+ years’ experience in software development, security, or a related field
Experience and passion identifying, developing, and integrating threat intelligence into meaningful detection engineering and preventative controls
Experience securing cloud-native environments and endpoint detection & response
Familiarity with macOS or Linux security controls
Independent work style and strong communication skills
Experience with security frameworks: SOC 2, ISO 27001, NIST
Experience with open source software or red-teaming is a plus

\nBase Salary Range$139,000—$155,000 USD

About Us

Chainguard is the secure foundation for software development and deployment. By providing guarded open source software, built from source and updated continuously, Chainguard helps organizations eliminate threats in their software supply chains.

Founded by the industry's leading experts on open source software, security and cloud native development, Chainguard has built the largest library of open source software that is secure by default.

Chainguard’s mission is to be the safe source for open source.

We live and breathe our company values:

We are customer obsessed - We focus on delivering solutions to our customers that create value and make their lives better.

We have a bias for intentional action - We prioritize, plan, try things, and fail fast.

We don’t take ourselves too seriously (but we do serious work) - We are solving an important problem which takes focus, but we also like to enjoy the journey.

We trust each other and assume good intentions - We’re transparent with decisions to empower team members to make well informed decisions.

A few of the benefits we offer:

Flexible & Remote-First Culture: Work remotely with team meetup opportunities, bi-annual destination summits, and a $400 monthly stipend for coworking spaces, phone and internet costs.
Our Approach to Equity: Receive stock options upon hire and promotion. Plus, you can participate in secondary offerings and have 10 years to exercise your options (yes, you read that correctly: 10 years!).
100% Covered Health Insurance: We cover 100% of your health, vision and dental insurance premiums for you and your dependents. Nothing comes out of your paycheck.
∞ Flexible Time Off: Take the time you need – to do our best work, we need to recharge and reset.
18 Weeks Paid Parental Leave: We offer 18 weeks for birthing parents and 12 weeks for non-birthing parents, with the option to use it all at once or throughout your child's first year.
For a full list of our benefits and rewards, click here.

If your experience is close but doesn’t fulfill all requirements, please apply. We’re building the best team in technology and are focused on hiring “Chainguardians'' with unique backgrounds, perspectives, and experiences.

Chainguard is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

By submitting your application, you acknowledge that Chainguard will process your personal data in accordance with Chainguard’s Privacy Policy.

","hiringOrganization":{"@type":"Organization","name":"Chainguard","sameAs":"https://chainguard.dev/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"United States - Remote","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":41,"item":{"@type":"JobPosting","title":"Information Security Systems Engineer","datePosted":"2025-08-20","description":"

Title:

Information Security Systems Engineer

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.

Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.

Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

KBR is seeking an Information Systems Security Engineer will directly support SPARTA in Lorton, Virginia.

Qualifications:

Required:

A minimum of fifteen (10) years of related work experience in information security, and of those years, at least ten (10) years of experience supporting a component of the Department of Defense (DoD) or Intelligence Community (IC).
A master’s degree in computer science, Information Technology, Cyber-security, or a related field (or a bachelor’s of science degree in related field with an additional 4 years of related work experience).

Desired:

Experience with DEVSECOPS, containerization, and zero-trust architectures (preferred).
Splunk or Elastic Certifications (preferred).
Experience with Department of Defense (DoD) Special Access Program (SAP) administrative processes (preferred).
A DoD 8570.01-M IAT Level III technical certification (such as CISSP, CASP, or other level 3 technical certification)
Cloud Service Provider Associate Certification (AWS, Azure, Oracle, or Google).

Work Environment:

Location: On-site, Lorton, Virginia
Travel Requirements: Minimal 0-20%
Working Hours: Standard

Scheduled Weekly Hours:

40hrs

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

","hiringOrganization":{"@type":"Organization","name":"KBR, Inc.","sameAs":"https://www.kbr.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"USA, Herndon, 2551 Dulles View Drive, Suite 200 & 300, Virginia, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":42,"item":{"@type":"JobPosting","title":"Information Security Engineer – Data Protection","datePosted":"2025-06-30","description":"

Career Category

Information Systems

Job Description

HOW MIGHT YOU DEFY IMAGINATION?

The Amgen Capability Center in Lisbon, Portugal (ACCP) will be home to over 300 multi-national and multi-cultural employees, representing a broad range of cross functional capabilities, including Commercial, General and Administrative, Research and Development and more. The ACCP will offer rich career growth and development opportunities, regional and global exposure, and the opportunity to LIVE, WIN and THRIVE in one of Europe’s most attractive cities.

Our ACCP Office is located at Maleo – Sete Rios, Av. José Malhoa 19, 1070-040 Lisbon, in the vibrant city center of Lisbon.

If you feel like you’re part of something bigger, it’s because you are. At Amgen our shared mission—to serve patients—drives all that we do. It is key to our becoming one of the world’s leading biotechnology companies. We are global collaborators who achieve together—researching, manufacturing, and delivering ever-better products that read over 10 million patients worldwide. It’s time for a career you can be proud of. Join us.

Information Security Engineer – Data Protection

LIVE

What you will do

We are searching for a Information Security Engineer – Data Protection with a strong engineering focus to support and enhance our Data Loss Prevention (DLP) and Data Security Posture Management (DSPM) platforms. This role is part of the Data Security team and reports to the Manager of Global Data Security.

This position emphasizes engineering excellence in designing, developing, deploying, and maintaining critical data protection infrastructure across Amgen’s global enterprise.

Areas of responsibility include:

- Design, build, and deploy data security systems and infrastructure to support DLP and DSPM across on-premises, hybrid, and multi-cloud environments.
- Partner with architecture and platform teams to integrate security controls natively into cloud and on-prem environments (e.g., AWS, Azure, O365, Box, Salesforce).
- Monitor and maintain DLP and DSPM services to ensure system reliability, performance, and integrity.
- Lead service reliability efforts by identifying and eliminating operational bottlenecks and engineering improvements that increase service availability and fault tolerance.
- Provide engineering support for incident response, helping contain and remediate events by building and enhancing tooling for rapid investigation.
- Participate in solution architecture and DevSecOps initiatives to embed security early in the infrastructure development lifecycle.
- Develop and maintain technical documentation and implementation guides for infrastructure components and security solutions.

WIN

What we expect of you

Preferred Qualifications

- Proficiency in scripting and automation (Python, PowerShell, Bash, etc.), and expression languages (Regex, SQL).
- Experience with cloud-native security technologies and platforms (e.g., AWS native services, O365 security tools, Box Shield, Salesforce Shield).
- Strong understanding of infrastructure systems, including Windows, Linux, network services, and their interaction with enterprise DLP and DSPM technologies.
- Familiarity with modern security engineering principles, including zero trust architecture, infrastructure-as-code, container security, and API-driven design.
- Hands-on experience with DLP solutions and endpoint security technologies in large, distributed enterprises.
- Experience integrating data protection systems into CI/CD pipelines and agile development workflows.
- Exposure to SIEMs, SOAR tools, and security analytics to support investigation automation and intelligence-driven response.
- Familiarity with ITIL and DevOps practices, including incident, change, and configuration management.

Basic Qualifications:

- Doctorate degree
  OR
- Master’s degree and 2 years of Information Security or Information Technology experience
  OR
- Bachelor’s degree and 4 years of Information Security or Information Technology experience
  OR
- Associate’s degree and 10 years of Information Security or Information Technology experience
  OR
- High school diploma / GED and 12 years of Information Security or Information Technology experience

Preferred Certifications

Systems Security Certified Practitioner (SSCP), Security+

Relevant SANS Certifications (e.g., SEC401, SEC511, SEC530)

THRIVE

What you can expect of us

Vast opportunities to learn, develop, and move up and across our global organization.
Diverse and inclusive community of belonging, where colleagues are empowered to bring ideas to the table, take risks, and act.
Generous Amgen Total Rewards Plan comprising healthcare, finance, wealth and career benefits.
Flexible work arrangements.

APPLY NOW

for a career that defies imagination

In our quest to serve patients above all else, Amgen is the first to imagine, and the last to doubt. Join us.

careers.amgen.com

EQUAL OPPORTUNITY STATEMENT

Amgen is an Equal Opportunity employer and will consider you without regard to your race, colour, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.

.","hiringOrganization":{"@type":"Organization","name":"Amgen","sameAs":"https://www.amgen.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Portugal - ACC","addressCountry":"Portugal","addressRegion":"Europe"}}}},{"@type":"ListItem","position":43,"item":{"@type":"JobPosting","title":"Staff Software Engineer, Information Security","datePosted":"2025-08-08","description":"

Minimum qualifications:

Bachelor's degree or equivalent practical experience.
8 years of relevant work experience in software development.
5 years of experience building software for data privacy or security (e.g., identity and access management).
5 years of experience testing, and launching software products.
3 years of experience with software design and architecture.
Experience developing and designing APIs.

Preferred qualifications:

8 years of experience with data structures/algorithms.
Experience in Rust programming.
Experience building compilers.
Experience working with open source technologies.
Experience with Programming Language Implementation.

About the job

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Responsibilities

Join a team of software engineers working across multiple continents.
Design and implement new techniques and make them work for software systems across many product teams.
Build strong partnerships and collaborate with partner teams in Google's Memory Safety program, as well as with industry and academia.
Implement and validate security mitigations, apply techniques to improve spatial safety in C++ code, and contribute to the migration of Google's systems towards memory-safe programming languages such as Rust.

","hiringOrganization":{"@type":"Organization","name":"Google","sameAs":"https://www.google.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Munich, Germany","addressCountry":"Germany","addressRegion":"Europe"}}}},{"@type":"ListItem","position":44,"item":{"@type":"JobPosting","title":"Information Security Engineer - Data Protection","datePosted":"2025-08-07","description":"

Company :

enGen

Job Description :

JOB SUMMARY

Candidates residing within 50 miles of Pittsburgh, Mechanicsburg, or Buffalo are required to work in the office on Tuesdays, Wednesdays, and Thursdays.

***CANDIDATE MUST BE US Citizen (due to contractual/access requirements)***

This job works with others to plan, research, evaluate, design and develop Information Security and Risk Management (ISRM) Infrastructure systems by applying engineering, hardware and software design theories and principles to develop a compatible system infrastructure in line with organizational strategies. Assists with the design, development, and implementation of ISRM Infrastructure components such as operating systems, software tools, and utilities. Supports studies of ISRM Infrastructure performance and traffic analysis. Determines systems design requirements and ensures that system improvements are successfully implemented and monitored to increase efficiency. Assists with the development of ISRM Infrastructure engineering policies, standards and procedures.

ESSENTIAL RESPONSIBILITIES

Serve on or may lead teams in clearly defining requirements, deliverables and timeframes. Escalate issues and make recommendations to resolve them to the appropriate audience.
Conduct root cause analysis to identify and resolve complex problems impacting ISRM Infrastructure.
Develop and/or deliver technical training in complex technical areas. Mentor less senior staff in the execution of their duties.
Complete project tasks to enable the on time, within budget and scope delivery of ISRM Infrastructure projects.
Implement, monitor, configure, and maintain security systems.
Assure compliance to required standards, procedures, guidelines and processes.
Other duties as assigned or requested.

REQUIRED EDUCATION

Bachelor’s Degree in Computer science, information systems, or closely related field

Substitutions

None

PREFERRED EDUCATION

None

EXPERIENCE

Minimum:

3 - 5 years' experience with information security and systems analysis
3 - 5 years' with information security and/or information risk management and/or information technology
3 - 5 years' with operating systems and software administration
3 - 5 years' developing, communicating and presenting information security and risk management concepts to varying audiences
3 - 5 years' with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms

Preferred:

5 - 7 years' experience with information security and systems analysis
1 - 3 years' experience working within an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework
3 - 5 years' IT/information security risk advisory experience
3 - 5 years' In-depth understanding of network security architecture, network and networking protocols
3 - 5 years' database management, system administration and software development lifecycle

SKILLS

Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
Familiarity with secure SDLC best practices
Knowledge of Microsoft Apps and Suites, Windows Server, SharePoint, etc.
Strong teamwork and inter-personal skills

REQUIRED LICENSURE

None

PREFERRED LICENSURE

Certified Information Systems Security Professional (CISSP), Security +

TRAVEL REQUIREMENT:
0% - 25%

LANGUAGE REQUIREMENT (other than English)?

None

PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS
(The physical, mental demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential function of their job. Reasonable accommodations will be made when necessary to enable individuals with disabilities to perform the essential duties of the position, to the extent that they do not cause undue hardship.

Position Type:

Office-Based

Office-Based Positions

An employee in this position works in an office environment. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.

Teaches/Trains others regularly

Occasionally

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Most On-The-Road Positions

An employee in this position may work in a home or company office environment but is also frequently driving to and from various locations to perform the work off-site. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.

Non-Office-Based Positions

An employee in this position is frequently required to move throughout the workplace, sit, stand and walk, use hands and fingers to hold objects, tools or controls, possess fine motor skills (e.g., to write and operate a computer or to steer transportation equipment), possess gross motor skills (e.g., to carry items), reach with hands and arms, climb stairs and ladders, balance, stoop, kneel crouch and crawl, communicate effectively, and talk and hear. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. The employee must be able to work in a busy environment where decisions often must be made quickly, must attend work on a regular and reliable basis, must adhere to all workplace policies, and may be called upon to work outside regular business hours. This work occurs in a [example: warehouse, hospital or provider’s office or mailroom].

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

ADDITIONAL INFORMATION

Changes Approved By:

Kathleen Thompson

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Pay Range Minimum:

$67,500.00

Pay Range Maximum:

$126,000.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

","hiringOrganization":{"@type":"Organization","name":"Highmark Health","sameAs":"https://www.highmarkhealth.org/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"PA, Working at Home - Pennsylvania, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":45,"item":{"@type":"JobPosting","title":"Senior / Staff Information Security Engineer","datePosted":"2025-08-06","description":"

About Fluidstack

We build and operate high-performance GPU clusters so the most ambitious teams can move fast, stay focused, and scale without friction. Our clusters power top AI labs, governments, and enterprises. Our customers include Mistral, Poolside, Black Forest Labs, Meta, and more.

Our team is highly motivated, and focused on providing a world class supercomputing experience. We put our customers first in everything we do, working hard to not just win the sale, but to win repeated business and customer referrals.

We hold ourselves and each other to high standards. We expect you to care deeply about the work you do, the products you build, and the experience our customers have in every interaction with us.

You must work hard, take ownership from inception to delivery, and approach every problem with an open mind and a positive attitude. We value effectiveness, competence, and a growth mindset.

About the Role

As a senior member of a small, high-impact security team, you will shape strategy, drive engineering execution, and be a trusted advisor who keeps our customers’ data and our infrastructure safe.

Focus

Own the end-to-end security engineering program for multiregion bare-metal and cloud environments, covering threat intel, detection & response, vulnerability management and hardening of Kubernetes/SLURM, Linux and network fabrics.

Design and automate security controls and telemetry pipelines (SIEM, SOAR, EDR) to operate at multi-terabit scale, integrating with Terraform-based IaC and GPU scheduling stacks
Lead incident response, threat hunting and post-mortems; continuously tune detections and drive root-cause fixes with platform teams.
Champion a zero-trust architecture, including IAM, SSO, secrets management and least-privilege policies.
Partner with Compliance to meet SOC 2, ISO 27001 and customer requirements
Build a security culture: embedding security reviews into CI/CD and product lifecycles.
Mentor engineers, influence roadmap trade-offs and report risk posture to executive leadership.

About You

8+ years in information or infrastructure security with at least 3 years securing large-scale cloud or HPC environments.
Expert in container and orchestration security (Kubernetes, container-d runtime), Linux internals and network segmentation.
Proven track record implementing SIEM/EDR tooling, crafting detections and running incident response aligned to MITRE ATT&CK.
Strong scripting or coding skills in Python, Go or Bash; comfortable automating via Terraform, Helm and GitOps workflows.
Deep understanding of IAM, PKI, zero-trust networking and modern auth protocols (OIDC, SAML).
Familiar with SOC 2, ISO 27001, NIST 800-53 and cloud-shared-responsibility models; able to translate controls into engineering tasks.

Nice to haves

Experience with GPU/AI infrastructure, high-performance rendering or energy-efficient edge data centers.
Background in adversary tracking, threat-intel feed curation and eBPF-based telemetry.
Contributions to open-source security projects or published CVEs.
Relevant certs such as CISSP, OSCP, GCPN or KCNA.

Benefits

Competitive total compensation package (cash + equity)
Retirement or pension plan, in line with local norms
Health, dental, and vision insurance
Generous PTO policy, in line with local norms

Fluidstack is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

","hiringOrganization":{"@type":"Organization","name":"Fluidstack","sameAs":"https://www.fluidstack.io/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"New York City","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":46,"item":{"@type":"JobPosting","title":"Information Security Engineer I - Cybersecurity","datePosted":"2025-08-05","description":"

At FHLB Des Moines, we work each day to develop an inclusive culture that supports and leverages the complexity of a diverse workforce. This enables us to effectively serve the needs of our members and help them succeed.

Promote security awareness to staff and consultants. Perform/Monitor security controls, track and gather security metrics, analyze vulnerabilities, and respond to security threats. Provide security guidance to project teams delivering business solutions, perform risk assessments of technology-related vendors, and research industry threat trends and mitigation actions. Additional duties include security program maintenance and improvement.

Accountabilities:

Key Responsibilities:

Monitor, analyze and report on the security of information systems.
Promote security awareness through in-person training, online training, and Bank-wide communication of policies and security threats.
Collaborate with IT and business units to produce customer friendly procedures.
Provide excellent security services to Bank business units.
Advise and assist with operational security and response to information security incidents.
Conduct or assist with vendor assessments according to procedures.
Provide information security requirement input in support of project initiatives.
Assist in research of technologies and methods that better utilize existing technology.
Assist in the maintenance of security standards, procedures, and guidelines used to mitigate risk in the Bank's information security posture (internal/external).
Assist with information security strategies and organizational governance. Communicate security strategies and framework to staff, partners, and other stakeholders.
Perform or monitor departmental internal controls; monitor regulatory issues.
Perform vulnerability scans and track mitigation.
Monitor security information/event management software for potential security problems.
Provide support with security projects, vendor management, monitoring/review of system changes and assist in security program management.
Make recommendations for improvements in automation efficiencies, security practices and end-user experience.
Help support the Data Loss Prevention(DLP) Program; including creating and maintaining policies.
Monitor, analyze and report on security events related to DLP.

Requirements:

Bachelor of Science in Computer Science, Management Information Systems or related field, or relevant experience
1 + years’ experience as an information security analyst, engineer, architect, specialist or consultant
Experience providing and validating security requirements related to network and operating system security
Security+, GISF, GSEC, or similar security certification is highly desirable
Knowledge of IDS/IPS, anti-malware, web content filtering, vulnerability scanners and other security tools
Strong written and verbal communication skills
Detail oriented, self-starting and motivated
Ability to assess risk
Proficiency in networking and/or operating systems preferred
Experience in supporting a DLP and Data Classification system
Experience in creating and maintaining DLP Policies

Compensation Range:

Annual Salary: $79,883.11 - $94,861.20

This salary range represents the Bank’s good faith and reasonable estimate of possible compensation at the time of hire. Offer to be determined by selected applicant’s education, experience, knowledge, skills & abilities, as well as internal equity and alignment with market data. This role is also eligible to participate in the Bank’s annual incentive plan.

As part of our competitive Total Rewards package, the Bank offers 11 paid holidays, 5 weeks of PTO and a work culture that values work/life balance. Most roles are eligible for our hybrid work schedule. We match 100% of the first 6% you contribute to your 401(k) and provide an additional 4% non-discretionary contribution to your 401(k) at the end of year. More information on our Total Rewards program can be found here.

At FHLB Des Moines, we work to create an inclusive culture. This enables us to effectively serve the needs of our members and help them succeed. FHLB Des Moines is proud to be an Equal Opportunity Employer. We prohibit discrimination on the basis of race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, disability, veteran status, genetic information (including family medical history), status as a parent or any other characteristic protected by federal, state or local law.

","hiringOrganization":{"@type":"Organization","name":"Federal Home Loan Bank of Des Moines","sameAs":"https://www.fhlbdm.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Des Moines, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":47,"item":{"@type":"JobPosting","title":"Information Security Engineer - Digital Signature","datePosted":"2025-08-04","description":"About the Role
We are looking for you to join our defensive security team at GoTo Financial, with a specific focus on supporting our digital signature business, DigiSign. This role will be responsible for designing, developing, and maintaining key defensive security platforms that safeguard our systems and services. You will gain exposure to a range of financial products and services, particularly in the area of digital identity. In daily operations, as the Information Security Engineer, you will contribute to blue team security activities, including log monitoring and hardening of system components. In addition, you will assist in implementing and monitoring security policies, ensuring that all necessary controls are functioning effectively to meet organizational objectives. This position also involves your participation in compliance initiatives, including ISO 27001 certification and regulatory audits such as those required by PSrE.\n

What You Will Do

Develop, implement, and sustain threat detection capabilities using SIEM, log analytics, and other security platforms to address emerging threats
Assist stakeholders in utilizing security tools and conducting investigations to uncover details of potential suspicious activities, assess their impact, and identify associated risks
Integrate data feeds (logs) into SIEM from deployed devices and applications
Manage the integration of security tools such as firewalls, IDS/IPS, SIEM, endpoint protection, encryption technologies, and identity/access management systems
Conduct log analysis to support troubleshooting tasks relevant to security events within the organization
Act as a Subject Matter Expert in regards to infrastructure hardening to provide relevant & applicable consultation within the digital identity product & services
Act as a Subject Matter Expert to the stakeholders and provide relevant & applicable consultation for addressing the security requirements in digital identity products & services

What You Will Need

A minimum of 5 years of experience as an Information Security Engineer (Blue Team) or IT Governance, Risk and Compliance (IT GRC) or IT Auditors with sufficient technical capabilities needed in this role
Advanced knowledge and experience of Blue Team security operations, especially in managing SIEM platforms, with previous experience that includes architectural design, configuring, operating, and problem-solving activities
Hands-on expertise with security technologies including firewalls, SIEM, endpoint security, identity/access management, and vulnerability management tools
Demonstrate excellent communication and writing skills, and be proficient in written and spoken English
Experienced in dealing with regulatory audits to represent the organization's security operations
Having good knowledge of local and regional digital identity regulatory requirements (ex. PSrE) and how they impact security operations (having experience is preferred)
Having excellent experience with ISO 27001, or similar and relevant standards

About the Team
DigiSign is a digital signature solution built upon nearly two decades of experience in Indonesia’s national payment industry. Initially developed to enhance the security of financial transactions during our time managing switching payments, DigiSign has since evolved into a trusted digital signature provider, recognized and registered by the Indonesian government through the Ministry of Communication and Information (Kominfo). Our solution goes beyond document signing. We also provide transaction signing to ensure a higher level of security and trust in every digital interaction.
At DigiSign, we are guided by three core values: Technology — as a tech-driven company, we are committed to building robust and scalable software solutions that serve both financial and non-financial sectors across Indonesia; Inspiration — we envision a unified digital ecosystem in Indonesia and are actively shaping our products and strategies to help realize that future; Teamwork — our team operates with a shared vision and passion to grow together, constantly challenging ourselves to evolve and improve.
We are proud to support Indonesia’s digital transformation by providing world-class infrastructure and secure digital signature services. Our mission is to deliver innovative and differentiated solutions through strong partnerships with our clients, always striving to bring greater value to both consumers and stakeholders.
About GoTo GroupGoTo Group is the largest digital ecosystem in Indonesia with its mission to “Empower Progress’ by offering technological infrastructure and solutions for everyone to access and thrive in the digital economy. The GoTo ecosystem consists of on-demand transportation services, food and grocery delivery, logistics and fulfillment, as well as financial and payment services through the Gojek and GoTo Financial platforms.It is the first platform in Southeast Asia that hosts these crucial cases in a single ecosystem, capturing the majority of Indonesia’s vast consumer household.
About Gojek Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.
About GoTo FinancialGoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.
GoTo and its business units, including Gojek and GoToFinancial (\"GoTo\") only post job opportunities on our official channels on our respective company websites and on LinkedIn. GoTo is not liable for any job postings or job offers that did not originate from us. You should conduct your own due diligence to prevent being victims of any fake job scams, if they did not originate from GoTo's official recruitment channels.

#LI-ONSITE","hiringOrganization":{"@type":"Organization","name":"GoTo Group","sameAs":"https://www.gotocompany.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Jakarta","addressCountry":"Indonesia","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":48,"item":{"@type":"JobPosting","title":"Information Security Operations Center Engineer","datePosted":"2025-08-06","description":"

Job Seekers can review the Job Applicant Privacy Policy by clicking here.

Job Description:

Summary

The Security Operations Center (SOC) Engineer Role is designed to provide senior level leadership for the design, engineering, and implementation of the security event data collection for the Enterprise Information Security organization related to incident response, threat monitoring, threat intelligence, and operations across SIEM platforms. This Role will be engaged in work related to data identification, assessment, ingestion, normalization and enrichment activities required for Ryder’s Security Operations Center to perform proper detection and analytics of cyber threats and response. The role also provides proactive and preventive analysis of systems through product-specific SIEM tools and ancillary solutions used in security. The role also ensures SIEM solutions aid in the output of metrics to senior management to help maintain a safe and secure enterprise technical operation. Daily, the engineer ensures SIEM solutions are healthy, maintaining integrity and performing optimally, and that capacity keeps up with demand as well as managing and optimizing security infrastructure, including robust monitoring, effective alerting, automation, comprehensive reporting, and hands-on system administration. To be successful, a solid understanding of and practical hands-on experience with security principles, host configurations and networking is required.

Essential Functions

Serve as the SOC engineer for SIEM design, related components, and the confidentiality, integrity, and availability (CIA) of logs.
Implement and manage automated alerting systems to ensure timely detection and response to potential security incidents, enabling proactive mitigation efforts.
Oversee the management and maintenance of security systems, ensuring proper configuration, regular updates, and seamless integration into the organization's broader security infrastructure. This includes the continual evaluation of system performance and effectiveness.
Maintain and manage a variety of security tools and hardware, ensuring their optimal performance, availability, and configuration. This includes routine hardware upkeep, troubleshooting technical issues, and software updates to align with industry standards and emerging technological advancements.
Integrate threat intelligence into operational frameworks to enhance detection capabilities. This involves analyzing external intelligence sources, correlating them with internal data, and adapting defense strategies based on insights.
Lead and perform the content development within the SIEM platform which includes use case creation, dashboard design, tuning of use cases to minimize false positives, development of reporting metrics such as SLA and KPI reports and Log source configuration.
Leverage SOAR (Security Orchestration, Automation, and Response) technologies to streamline and automate incident response workflows, reducing reaction times and improving operational efficiency.
Review and enhance logging information flow strategies and technical information flow required for log onboarding; create the work plan required for logging onboarding to include determining the technical details.
Help correlate events to support SOC response requirements.

Additional Responsibilities

Be readily available for incident response, forensic, troubleshooting and security issues requiring event details.
Support SOC automation initiatives leveraging playbooks, while also using human analysis as needed.
Actively engage in security projects across the business to implement event and logging requirements.
Actively participate in threat hunting tabletop exercises to hone and strengthen skills across the team.
Maintain up-to-date level of knowledge related to security threats, vulnerabilities and mitigations set forth to reduce attack surface.
Openly support the CISO, management team and executive leadership, even during tumultuous times.
Support SOC Analyst Tier 1-3
Act as an escalation point for the security Analysts to assist and advise on the most complex security threat investigations.
Leverage advanced knowledge of security operations, cyber security tools, intrusion detection, and secured networks to integrate with eh SIEM platform.
Perform other duties as assigned.

Skills and Abilities

Strong communication skills, enabling effective collaboration across various departments and clear articulation of findings and recommendations., Required
Ability to analyze event and incident logs and work with SOC and IR teams to assess security events related to malware, vulnerabilities, exploits and kill chain methodology., Required
Ability to interface with threat intelligence platforms and SOAR solutions to centralize and manage incidents and remediation workflow., Required
Excellent organizational and time-management skills to navigate and prioritize multiple security tasks simultaneously while maintaining focus on key objectives., Required
Ability to liaison to conduct tabletop exercises for security incidents and events., Required
Ability to grasp and assess “big picture” issues and bring them to light to foster positive change for a more robust data ingestion platform and process., Required
Strong project management, multitasking and organizational skills., Required
Capable of working with diverse teams and promoting a positive enterprise-wide security culture, Required
Highly organized, efficient, self-starter requiring minimal supervision., Required

Qualifications

Bachelor's Degree in Computer Science or 4+ years as a Cyber Security/SOC Engineer, Required
4 years or more in Cybersecurity or information technology practitioner experience., Required
4 years or more in Experience configuring Log data collection, enrichment, deployment, integration and deployment., Preferred
4 years or more in Experience operating in a Security Operations Center (SOC) and incident response environment., Preferred
Knowledgeable of and hands-on experience with supporting intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint solutions, data loss prevention (DLP), Active Directory (AD) and application security. Intermediate, Required
Advanced knowledge of operating system configuration (Windows, Unix, Linux) and networking (DNS, DHCP, routing protocols). Intermediate, Required
Strong understanding of key performance indicators (KPIs) and service-level agreements (SLAs) attributed to security and business objectives for key stakeholders. Advanced, Required
Experienced with one or more scripting languages (e.g., Python, PowerShell, Bash, etc.). Intermediate, Preferred
Experience preparing and delivering presentations to peers or senior executives. Intermediate, Required
& Information Risk, Privacy, or Security Certification (CISSP, CCSK, CCSP, PCSM), Required, 1 Year

Travel

Yes, 0-10%

Job Category

Information Security

Compensation Information:

The compensation offered to a candidate may be influenced by a variety of factors, including the candidate’s relevant experience; education, including relevant degrees or certifications; work location; market data/ranges; internal equity; internal salary ranges; etc. The position may also be eligible to receive an annual bonus, commission, and/or long-term incentive plan based on the level and/or type. Compensation ranges for the position are below:

Pay Type:

Salaried

Minimum Pay Range:

$90,000.00

Maximum Pay Range:

$110,000.00

Benefits Information:

For all Full-time positions only: Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax-advantaged 401(k) retirement savings plan.

Ryder is proud to be an Equal Opportunity Employer and Drug Free workplace.

All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.

Important Note:

Some positions require additional screening that may include employment and education verification; motor vehicle records check and a road test; and/or badging or background requirements of the customer to which you are assigned.

Security Notice for Applicants:

Ryder will only communicate with an applicant directly from a [@ryder.com] email address and will never conduct an interview online through a chat type forum, messaging app (such as WhatsApp or Telegram), or via an online questionnaire. During an interview, Ryder will never ask for any form of payment or banking details and will never solicit personal information outside of the formal submitted application through www.ryder.com/careers.

Should you have any questions regarding the application process or to verify the legitimacy of an interview or Ryder representative, please contact Ryder at careers@ryder.com or 800-793-3754.

Current Employees:

If you are a current employee at Ryder, please click here to log in to Workday to apply using the internal application process.

Job Seekers can review the Job Applicant Privacy Policy by clicking here.

","hiringOrganization":{"@type":"Organization","name":"Ryder System, Inc.","sameAs":"https://www.ryder.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"USA - Austin TX Howard Ln, United States","addressCountry":"United States","addressRegion":"North America"}}}},{"@type":"ListItem","position":49,"item":{"@type":"JobPosting","title":"Lead Information Security Engineer- IR","datePosted":"2025-08-11","description":"Job Description

About this role:

Wells Fargo is seeking a Lead Information Security Engineer for the ICS Team.

The ICS team is seeking a Lead Information Security Engineer with extensive experience in incident response, network-focused forensics, and threat hunting. The ideal candidate will have a well-rounded background in endpoint/network defenses and security incident response, as well as some offensive security knowledge to allow the ability to think like an adversary. The candidate will also have experience partnering with content development teams to resolve gaps in detection capabilities, as well as experience in conducting technical research and identifying methods to detect evolving Advanced Persistent Threat (APT) Tactics, Techniques, and Procedures (TTPs).

This role will serve as an incident responder to assess the risk, impact, and scope of identified security threats, as well as leading the response efforts to include containment, eradication, and recovery. Strong verbal and written communication skills are desired, to ensure thorough and accurate reporting during and concluding a security incident. The candidate will also play a major role in detecting advanced threats that are not detected via traditional security tools and understand how to operationalize cyber threat intelligence. Regular collaboration with multiple teams such as the Cyber Threat Fusion Center, Security Content Development, Cyber Threat Intelligence, and Offensive Security Research teams will be critical to success.

In this role, you will:

Lead computer security incident response activities for highly complex events
Conduct technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies
Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
Review and correlate security logs
Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
Collaborate and influence all levels of professionals including managers
Lead a team to achieve objectives

Required Qualifications:

5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications:

Strong years of experience in Information Security Industry.
Experience with SIEM tools like Splunk, Arcsight.
Incident Response Protocols and Tools experience
Information technology applications and systems experience
Experience in managing cybercrime detection, investigation, and intelligence strategies
DPI (Deep Packet Inspection) experience
Knowledge and understanding of banking or financial services industry
Strong verbal and written communication skills are desired, in order to ensure thorough and accurate reporting during and concluding a security incident.
Ability to execute in a fast paced, high demand, environment while balancing multiple priorities
Demonstrate the ability to provide written and verbal communications to management to address real-time issues and incidents, including writing formal incident reports
Knowledge of offensive security, with the ability to think like an adversary when performing reverse engineering and responding to incidents

Job Expectations:

Information security experience including experience in one or more of the following security disciplines: information security monitoring, incident response, vulnerability management, host/network forensics, cyber-crime investigation, penetration testing, business continuity, or cyber threat intelligence
Ability to execute in a fast paced, high demand, environment while balancing multiple priorities
Highly refined and professional verbal and written communications
Knowledge and understanding of banking or financial services industry
Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Global Information Assurance Certification (GIAC), or Web Application Penetration Tester (WAPT) certification

Posting End Date:

17 Aug 2025

*Job posting may come down early due to volume of applicants.

We Value Equal Opportunity

Applicants with Disabilities

To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo.

Drug and Alcohol Policy

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.

Wells Fargo Recruitment and Hiring Requirements:

a. Third-Party recordings are prohibited unless authorized by Wells Fargo.

b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.

","hiringOrganization":{"@type":"Organization","name":"Wells Fargo","sameAs":"https://www.wellsfargo.com/"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"110380-IND-BENGALURU-INTL BLR Twr-1&2 CARNATION, India","addressCountry":"India","addressRegion":"Asia/Pacific"}}}},{"@type":"ListItem","position":50,"item":{"@type":"JobPosting","title":"Sr. Staff Information Security Engineer","datePosted":"2025-08-18","description":"

About Blackhawk Network

Today, through BHN’s single global platform, businesses of all kinds can tap into the world’s largest network of branded payment solutions. BHN helps businesses grow revenue, increase loyalty, motivate and reward their teams, disburse funds, and engage consumers. Branded payment solutions include the issuance and distribution of gift cards, egifts, corporate payouts, and rewards, along with the technology to deliver these products in seamless, integrated ways. BHN’s network spans the globe with more than 400,000 consumer touchpoints.

This position may be performed remotely anywhere within the United States except for the State of Alaska, North Dakota, or South Dakota. Employees located within 50 miles of a BHN office will be considered a \"Hybrid\" employee and are required to come into the office 2 days per week based on office schedule.

Overview

We are seeking a Senior Staff Information Security Engineer to join our Technology organization. Reporting to the Sr. Director of InfoSec, you will play a pivotal role in embedding security throughout our software development lifecycle (SDLC) and securing our cloud-native environments. This role blends technical expertise, strategic leadership, and cross-team collaboration to solve complex application and cloud security challenges and elevate the organization’s security posture.

Responsibilities

Application Security Leadership:

Embed security into the SDLC, including requirements, design, development, and deployment phases.
Define and promote secure coding practices across engineering teams.
Perform security design reviews, threat modeling, and architecture assessments for applications, APIs, and microservices.

Cloud Security Enablement:

Collaborate with cloud engineering teams to secure AWS environments, leveraging tools like GuardDuty, CloudTrail, Macie, and AWS Config.
Ensure application security controls extend seamlessly into cloud-native workloads.

Risk Management:

Conduct vulnerability assessments using SAST, DAST, and software composition analysis (SCA).
Analyze findings, prioritize remediation, and track to resolution.
Develop and implement risk mitigation strategies aligned with business needs.

Collaboration & Mentorship:

Partner with engineering, DevOps, and product teams to raise security maturity.
Mentor junior engineers and advocate for a security-first mindset.

Qualifications

Deep Application Security Expertise:

Strong background in secure coding practices, API security, and software architecture.
Hands-on experience with tools like SAST, DAST, SCA, and fuzzing platforms.

Cloud Security Knowledge:

Solid understanding of AWS services (IAM, Lambda, S3, VPC) and AWS-native security tooling.
Experience securing containerized and microservice-based environments.

Leadership & Communication:

Ability to influence cross-functional teams and communicate effectively with technical and non-technical stakeholders.
Strong problem-solving, analytical, and risk prioritization skills.

Certifications & Frameworks:

Relevant certifications such as CISSP, CSSLP, or AWS Security Specialty preferred.
Familiarity with security standards and frameworks (OWASP, NIST, ISO 27001).

Experience: 7+ years of experience in application security, cloud security, or related fields.

Why Join Us?

At Blackhawk Network, we believe security is not just a necessity but a catalyst for innovation. You’ll have the opportunity to:

Shape cutting-edge security strategies in a global organization.
Work with a dynamic team that values collaboration, creativity, and continuous growth.
Enjoy a culture that celebrates diverse perspectives and empowers you to make a lasting impact.

Ready to elevate your career and redefine what’s possible in security? Join us and be part of a team that’s transforming the future of technology.

Apply today!

Benefits

Salary Range for all U.S. Residents (excluding Alaska, California, North Dakota, South Dakota): $125,100.00 to $168,900.00.Salary Range for California Residents Only: $157,030.00 to $212,000.00

Blackhawk Network offers benefits including 401k with employer match, medical, dental, vision, 12 paid holidays throughout the year, 1 hour of sick pay accrual for every 30 hours worked, parental leave, life insurance, disability insurance, accident and illness insurance, health and dependent care flexible spending accounts, wellness benefits, and flexible time off for all full-time employees.

EEO Statement

Blackhawk Network provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Blackhawk Network believes that diversity leads to strength. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Blackhawk Network encourages applicants with previous criminal records to apply to all positions and, pursuant to the San Francisco and Los Angeles Fair Chance Acts (and other “Fair Chance” laws), Blackhawk Network will consider for employment qualified applicants with arrest and conviction records. For Philadelphia applicants or jobs, please see a copy of Philadelphia’s ordinance on this topic by clicking this link: https://codelibrary.amlegal.com/codes/philadelphia/latest/philadelphia_pa/0-0-0-280104.

","hiringOrganization":{"@type":"Organization","name":"Blackhawk Network","sameAs":"https://www.blackhawknetwork.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Remote, United States","addressCountry":"United States","addressRegion":"North America"}}}}]}

Set your job search on autopilot

Engineer Jobs

Information Security Engineer

Information Security Engineer

Information Security Engineer

Information Security Engineer

Information Security Engineer

Information Security Engineer

Engineer, Information Security

Information Security Engineer

INFORMATION SECURITY ENGINEER

Information Security Engineer

Information Security Engineer

Information Security Engineer

Information Security Engineer

Senior Information Security Engineer

Lead Information Security Engineer

Sr. Information Security Engineer

Information Security Compliance Engineer

Senior Information Security Engineer

Principal Information Security Engineer

Information Security Engineer II

Lead Information Security Engineer

Lead Information Security Engineer

Senior Information Security Engineer

Lead Information Security Engineer

Senior Information Security Engineer

Lead Information Security Engineer

Lead Information Security Engineer

Associate Engineer, Information Security

Information Security Operations Engineer

Associate Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Associate Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Senior Information Security Engineer

Information Security Systems Engineer

Information Security Engineer – Data Protection

Staff Software Engineer, Information Security

Information Security Engineer - Data Protection

Senior / Staff Information Security Engineer

Information Security Engineer I - Cybersecurity

Information Security Engineer - Digital Signature

Information Security Operations Center Engineer

Lead Information Security Engineer- IR

Sr. Staff Information Security Engineer