Security Frameworks – Who Needs Engineers

Security Frameworks – Who Needs Engineers https://whoneedsengineers.com/wne_live Software Engineering Recruitment Sat, 26 Oct 2024 00:00:02 +0000 en-US hourly 1 https://wordpress.org/?v=6.6.2 https://whoneedsengineers.com/wne_live/wp-content/uploads/2023/06/cropped-wne_logo-3-32x32.png Security Frameworks – Who Needs Engineers https://whoneedsengineers.com/wne_live 32 32 Security Analyst https://whoneedsengineers.com/jobs/cybersecurity/security-analyst-14/ Sat, 26 Oct 2024 00:00:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/security-analyst-14/ Security Analyst

Job Description:

We are seeking a dedicated Security Analyst to join our team, responsible for safeguarding the integrity of our information systems and networks from potential cyber threats. In this pivotal role, you will actively monitor, analyze, and respond to security incidents while implementing robust security measures to prevent future vulnerabilities. Your expertise will be essential in ensuring that the company's data remains secure, and you will play a critical role in fostering a culture of security awareness across the organization.

IT Languages:

Python
Java
C++
SQL

As a Security Analyst, your responsibilities will include the following::

Continuously monitoring security systems such as firewalls, intrusion detection/prevention systems, and antivirus software to detect and address potential threats;; Investigating and responding to security incidents such as malware infections, data breaches, and unauthorized access attempts, collaborating with IT teams for mitigation;; Conducting regular vulnerability assessments and penetration tests to identify security weaknesses and working with IT teams to remediate them;; Performing security audits and assessments to ensure compliance with company policies and regulations, and preparing reports based on findings;; Developing, implementing, and maintaining security policies, procedures, and guidelines, ensuring all employees adhere to security best practices;; Conducting risk assessments to identify potential security risks and creating strategies for mitigation;; Providing security awareness training to employees to enhance the organization’s security culture;; Maintaining comprehensive documentation of security incidents, vulnerabilities, and remediation efforts;; Collaborating with various IT teams to integrate security into all aspects of the IT infrastructure;; Staying updated on the latest security trends, threats, and technologies through ongoing training and professional development

Spoken Languages:

English;; Spanish

Skillset:

Firewalls
IDS/IPS
SIEM
Antivirus software
Network protocols
Operating systems
Security frameworks

Soft Skills:

Analytical thinking
Problem-solving
Strong communication
Attention to detail
Team collaboration

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+ are preferred

Years of Experience:

Location:

Chicago, IL, United States

Job Benefits:

Competitive Compensation
401(k) with 6% match (Fully Vested at 2 Years)
Annual Incentive Bonus
Annual Merit increase opportunity
Employee Stock Purchase Plan
11 Corporate Holidays
Paid Parental Leave
Pre-Tax Transit
Fitness & Gym Reimbursement
Employer Contribution – Health, Dental, Vision
Optional Remote winter schedule

Working Conditions:

Hybrid

Employment Type:

Full-time

Company Culture:

We foster a collaborative and innovative work environment where employees are encouraged to continuously learn and grow. Our commitment to security and integrity is paramount, and we value proactive contributions from all team members.

Opportunities For Advancement:

Potential for career growth within the IT security domain, Access to professional development and training opportunities, Involvement in strategic security initiatives

Visa Sponsorship:

Not Available ]]> Cyber Security Analyst https://whoneedsengineers.com/jobs/cybersecurity/cyber-security-analyst-9/ Tue, 22 Oct 2024 16:00:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/cyber-security-analyst-9/ Cyber Security Analyst

Job Description:

We are seeking a dedicated Cybersecurity Analyst to join our team in Virginia. This pivotal role involves ensuring that our systems comply with security standards and regulations. The ideal candidate will conduct comprehensive analyses of vulnerability scans and compliance reports, providing critical insights into system security. Your expertise will help assess vulnerabilities and develop remediation strategies that are essential for maintaining the integrity of our security posture. You will prepare thorough reports summarizing scan results, including identified vulnerabilities and recommended actions for mitigation. This role requires collaboration with internal teams and clients to address security findings and implement effective solutions.

IT Languages:

Python
Java
C++
SQL

As a Cybersecurity Analyst, your responsibilities will include analyzing vulnerability scan results and ensuring compliance with security policies. You will also provide essential documentation and communication regarding security findings.:

Analyze Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guidelines (STIG) scan results;; Prepare detailed reports of findings, impacts, and remediation recommendations;; Maintain accurate records of vulnerabilities and remediation status;; Collaborate with teams and clients to develop effective remediation strategies;; Track and verify the completion of remediation actions;; Stay updated on the latest cybersecurity threats and best practices;; Contribute to enhancing scanning and reporting processes

Spoken Languages:

English;; German

Skillset:

Vulnerability assessment
Risk management
Security compliance
Networking protocols
Security frameworks

Soft Skills:

Strong problem-solving skills
Excellent verbal and written communication
Interpersonal skills for customer interaction
Attention to detail
Effective time management

Qualifications:

Proficiency with ACAS, AESS, and STIG tools and methodologies
Strong understanding of vulnerability assessment and risk management
Familiarity with networking protocols and security frameworks
Security+ or equivalent DoD 8570.01-M IA Tech Level II certification
Must obtain a computing environment certification within six months of hire

Years of Experience:

Location:

Virginia, United States

Job Benefits:

Health insurance
Retirement plan
Paid time off
Professional development opportunities

Working Conditions:

Full Time

Employment Type:

Contract

Company Culture:

Our organization values collaboration, innovation, and continuous improvement. We strive to maintain an inclusive environment that encourages professional growth and the sharing of ideas. Our team is committed to staying ahead of cybersecurity threats while supporting each other in achieving our goals.

Opportunities For Advancement:

Career development programs, Mentorship opportunities, Certification support

Visa Sponsorship:

Available ]]> Security Architect https://whoneedsengineers.com/jobs/cybersecurity/security-architect-7/ Sun, 20 Oct 2024 08:10:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/security-architect-7/ Security Architect

Job Description:

We are seeking a highly skilled Freelance Security Architect to join our innovative team in designing and enhancing security architectures for a wide range of clients across various sectors, including manufacturing, energy, financial services, and critical infrastructure. This role is based in Munich and offers a hybrid work model, allowing for a combination of remote work and occasional on-site visits to client locations throughout Germany. As a Security Architect, you will be instrumental in analyzing complex environments, creating tailored security frameworks, and ensuring that our clients adhere to industry standards and regulations. Your expertise will be pivotal in driving security strategies and guaranteeing that our clients' systems remain secure, resilient, and adaptable to emerging threats.

IT Languages:

CISSP
CISM
TOGAF
SABSA

As a Security Architect, you will be responsible for the following tasks::

Designing and implementing comprehensive security architectures for both IT and OT environments;; Developing security strategies, frameworks, and processes that align with client requirements;; Conducting thorough security assessments and risk analyses to identify vulnerabilities;; Collaborating with stakeholders to align security designs with business objectives;; Providing expertise on the secure integration of IT and OT systems;; Ensuring compliance with relevant security regulations and standards;; Overseeing the implementation of various security solutions;; Managing security projects from inception to completion;; Staying abreast of emerging security technologies and trends

Spoken Languages:

English;; German

Skillset:

Security frameworks
Firewalls
VPNs
IAM solutions
IDS/IPS
Encryption
Cloud security

Soft Skills:

Excellent communication skills
Ability to present complex concepts clearly
Strong analytical skills
Collaboration and teamwork

Qualifications:

7 years of experience in security architecture
Strong focus on IT and OT environments
Proven experience with complex security architectures
Familiarity with security frameworks and technologies

Years of Experience:

Location:

Germany

Job Benefits:

Competitive freelance rates based on experience
Flexible working environment with remote options
Opportunity to work with high-profile clients
Engagement in cutting-edge security projects

Working Conditions:

Hybrid

Employment Type:

Contract

Company Culture:

We prioritize socially responsible recruitment and value collaboration, innovation, and continuous professional growth within our team.

Opportunities For Advancement:

Potential for long-term collaborations, Involvement in strategic cybersecurity initiatives, Growth opportunities in freelance consulting

Visa Sponsorship:

Available ]]> Security Architect https://whoneedsengineers.com/jobs/cybersecurity/security-architect-6/ Sun, 13 Oct 2024 08:25:03 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/security-architect-6/ Security Architect

Job Description:

IT Languages:

CISSP
CISM
TOGAF
SABSA

As a Security Architect, you will be responsible for the following tasks::

Spoken Languages:

English;; German

Skillset:

Security frameworks
Firewalls
VPNs
IAM solutions
IDS/IPS
Encryption
Cloud security

Soft Skills:

Excellent communication skills
Ability to present complex concepts clearly
Strong analytical skills
Collaboration and teamwork

Qualifications:

7 years of experience in security architecture
Strong focus on IT and OT environments
Proven experience with complex security architectures
Familiarity with security frameworks and technologies

Years of Experience:

Location:

Germany

Job Benefits:

Competitive freelance rates based on experience
Flexible working environment with remote options
Opportunity to work with high-profile clients
Engagement in cutting-edge security projects

Working Conditions:

Hybrid

Employment Type:

Contract

Company Culture:

We prioritize socially responsible recruitment and value collaboration, innovation, and continuous professional growth within our team.

Opportunities For Advancement:

Potential for long-term collaborations, Involvement in strategic cybersecurity initiatives, Growth opportunities in freelance consulting

Visa Sponsorship:

Available ]]> AWS DevSecOps Consultant https://whoneedsengineers.com/jobs/devops-cloud-and-it-operations/aws-devsecops-consultant/ Wed, 09 Oct 2024 09:55:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/aws-devsecops-consultant/ AWS DevSecOps Consultant

Job Description:

Join a dynamic team where collaboration is key, and where your expertise in AWS DevSecOps will be put to great use. As an AWS DevSecOps Consultant, you will work closely with diverse clients to transform their ideas into fully functional cloud applications. You will take a hands-on approach, guiding clients through the entire process from initial concept to production deployment. Your role will involve not just technical execution but also understanding the unique challenges faced by clients, providing empathetic solutions, and ensuring that the final product aligns perfectly with their business needs. You will thrive in an environment that values continuous learning and adaptability, and where your contribution directly impacts client satisfaction and success.

IT Languages:

Python
Bash

As an AWS DevSecOps Consultant, you will be responsible for leveraging your deep technical expertise and problem-solving skills to deliver tailored solutions for clients. This includes everything from resource provisioning to managing complex CI/CD pipelines. You will ensure that security is integrated at every stage of the development lifecycle and assist clients in navigating the complexities of cloud deployment.:

Collaborate with clients to understand their unique challenges and requirements;; Implement Infrastructure-as-Code using tools such as Terraform and AWS CloudFormation;; Develop and maintain CI/CD pipelines using Jenkins, GitHub, or GitLab;; Ensure compliance with security standards and best practices;; Manage Kubernetes clusters for container orchestration

Spoken Languages:

English

Skillset:

AWS
Kubernetes
Terraform
CI/CD
Infrastructure-as-Code
Security frameworks
Git
Python
Bash

Soft Skills:

Excellent communication skills
Problem-solving mindset
Adaptability
Team collaboration
Client empathy

Qualifications:

2-5 years of experience in cloud-based environments
Extensive knowledge of Amazon Web Services
Experience with Infrastructure-as-Code concepts
Familiarity with security frameworks like NIST 800-171 and NIST 800-53
Solid background in network, operations, and infrastructure

Years of Experience:

Location:

United States

Job Benefits:

Remote work flexibility
Paid time off
Company holidays
Comprehensive health benefits
401(k) with matching
Learning and development opportunities

Working Conditions:

Remote

Employment Type:

Permanent Contract

Company Culture:

Trility Consulting fosters a supportive and innovative work environment that emphasizes collaboration and continuous learning. Team members are encouraged to take initiative and are empowered to overcome challenges creatively. The company values open communication and respects diverse perspectives, creating a culture of trust and respect. Employees are seen as partners in delivering exceptional service to clients and are supported in their professional growth.

Opportunities For Advancement:

Leadership training programs, Mentorship opportunities, Skill development workshops

Visa Sponsorship:

Not Available ]]> Cybersecurity Analyst https://whoneedsengineers.com/jobs/cybersecurity/cybersecurity-analyst-8/ Tue, 08 Oct 2024 01:45:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/cybersecurity-analyst-8/ Cybersecurity Analyst

Job Description:

We are seeking a highly skilled Cybersecurity Analyst who is passionate about safeguarding our digital assets. This role requires expertise in vulnerability management, security operations center (SOC) escalations, and incident response. You will be responsible for leveraging advanced tools such as SentinelOne and CrowdStrike to protect our endpoints and mitigate cyber threats. Your strong foundation in networking and infrastructure security will be instrumental in enhancing our overall security posture through the implementation of the NIST Cybersecurity Framework. As a Cybersecurity Analyst, you will take full ownership of the vulnerability management lifecycle, investigating complex cyber threats and ensuring smooth security operations.

IT Languages:

Python
Java
C++

In this role, you will play a critical part in managing and enhancing the organization’s cybersecurity measures. Your primary responsibilities will include the following::

Lead and execute the vulnerability scanning and remediation program, conducting regular assessments using tools like Qualys, Nessus, or Rapid7, and ensuring timely patch management.;; Collaborate closely with infrastructure and development teams to prioritize and address critical vulnerabilities based on risk assessments.;; Act as the main point of contact for SOC escalations, performing thorough analyses of escalated alerts to ensure swift containment and mitigation of threats.;; Utilize threat intelligence to enhance detection mechanisms and optimize monitoring processes within the SOC.;; Coordinate and manage the entire incident response lifecycle, which includes identification, containment, eradication, recovery, and post-incident reporting.;; Use Endpoint Detection and Response (EDR) tools such as SentinelOne, CrowdStrike, or Carbon Black to identify, isolate, and resolve malicious activities on endpoints.;; Document incidents to facilitate continuous improvement of incident response protocols and playbooks.;; Align cybersecurity operations with NIST Cybersecurity Framework standards and assist in conducting risk assessments and vulnerability tests to ensure compliance with industry regulations.;; Maintain a strong security architecture across network infrastructure, focusing on firewall management, intrusion detection/prevention systems, and VPN configurations.

Spoken Languages:

English

Skillset:

Vulnerability Management
Endpoint Detection & Response
Network Security
SIEM Solutions
Threat Intelligence
Security Frameworks

Soft Skills:

Analytical Thinking
Problem-Solving
Attention to Detail
Communication Skills
Team Collaboration

Qualifications:

Certified Ethical Hacker (CEH)
GIAC Certified Incident Handler (GCIH)
GIAC Certified Detection Analyst (GCDA)
CompTIA Cybersecurity Analyst (CySA+)
CompTIA Security+
Certified Threat Intelligence Analyst (CTIA)

Years of Experience:

Location:

United States

Job Benefits:

Health Insurance
Retirement Savings Plan
Paid Time Off
Professional Development Opportunities

Working Conditions:

Full Time

Employment Type:

Permanent Contract

Company Culture:

Our company fosters a culture of inclusivity and diversity, emphasizing teamwork and innovation. We value continuous learning and encourage our employees to develop their skills and advance their careers within the organization.

Opportunities For Advancement:

Senior Cybersecurity Analyst, Cybersecurity Manager, Director of Cybersecurity

Visa Sponsorship:

Not Available ]]> Director, Deputy CISO https://whoneedsengineers.com/jobs/project-management-and-business-analysis/director-deputy-ciso/ Mon, 30 Sep 2024 19:30:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/director-deputy-ciso/ Director, Deputy CISO

Job Description:

We are looking for a seasoned and strategic individual to serve as the Director and Deputy Chief Information Security Officer. This pivotal role will oversee the information security strategy and operations within our organization. Your primary responsibility will be to safeguard our digital assets, manage security risks, and cultivate a culture of security awareness throughout the company. The ideal candidate will have a hands-on approach, combining technical knowledge with strong leadership capabilities to propel our security initiatives forward. Reporting directly to the Chief Information Security Officer, you will be instrumental in enhancing our security framework and adapting our cybersecurity strategies to meet contemporary challenges. The successful execution of your responsibilities will contribute significantly to creating a resilient, adaptable, and security-focused organization.

IT Languages:

Python
Java
C#
SQL

The Director of Information Security will oversee multiple facets of the organization’s security program, ensuring that security measures align with business objectives.:

Assist the CISO in formulating and executing the overarching security strategy.;; Lead long-term planning to adapt the security organization to evolving threats and business needs.;; Collaborate with various leadership teams to ensure security initiatives are in line with business goals.;; Identify and assess new security trends and technologies for potential organizational impact.;; Develop and implement strategies for managing change to foster the adoption of new security initiatives.;; Integrate security considerations into business processes and decision-making frameworks.;; Establish governance models that harmonize security requirements with business agility.;; Create metrics and KPIs to evaluate the success of security integration efforts.;; Assess and redesign the security team structure to maximize efficiency.;; Build and mentor a high-performing information security team, defining roles and responsibilities clearly.;; Develop career pathways for security professionals and promote a culture of continuous learning within the team.;; Foster robust relationships with C-suite executives and communicate security initiatives effectively to diverse audiences.;; Oversee daily operations of the information security team, including policy development and incident management.;; Conduct regular risk assessments and implement compliance strategies.;; Evaluate and recommend security technologies, ensuring proper integration across the IT infrastructure.

Spoken Languages:

English

Skillset:

Information security principles
Risk management
Incident response
Security frameworks
Security policy development

Soft Skills:

Strategic thinking
Strong decision-making
Collaboration
Excellent communication
Adaptability
Problem-solving

Qualifications:

Bachelor’s degree in Computer Science, Information Security, or a related field
Master’s degree preferred
Relevant certifications such as CISSP, CISM, or equivalent

Years of Experience:

Location:

United States

Job Benefits:

Competitive compensation
Incentives
Health and wellness programs
Professional development opportunities
Flexible work arrangements

Working Conditions:

Full Time

Employment Type:

Permanent Contract

Company Culture:

At IDEXX, we are committed to fostering a positive and respectful work environment that values diversity and inclusion. We encourage our employees to embrace challenges, engage in continuous learning, and strive for excellence in their roles. Our culture prioritizes collaboration, innovation, and a shared purpose in making a meaningful impact in the industries we serve.

Opportunities For Advancement:

Leadership development programs, Mentorship opportunities, Career growth pathways within the security team

Visa Sponsorship:

Not Available ]]> Information Technology Security Analyst https://whoneedsengineers.com/jobs/cybersecurity/information-technology-security-analyst-2/ Mon, 30 Sep 2024 02:30:03 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/information-technology-security-analyst-2/ Information Technology Security Analyst

Job Description:

We are seeking an experienced Information Technology Security Analyst to join our team. In this pivotal role, you will lead initiatives to achieve and uphold SOC 2 compliance while developing and refining security policies and procedures. You will play a crucial role in monitoring compliance, ensuring that internal teams maintain thorough documentation aligned with SOC 2 standards. Your expertise will be essential in collaborating with various departments and external vendors to gather the necessary evidence for audits, acting as the primary liaison for auditors to meet all requirements. Additionally, you will conduct regular risk assessments to identify vulnerabilities and devise effective strategies for mitigation, fostering a culture of security awareness through training and workshops for employees.

IT Languages:

Python
Java
SQL

The Information Technology Security Analyst will be responsible for ensuring the security and compliance of organizational systems.:

Lead SOC 2 compliance management efforts and certification processes;; Develop, implement, and review security policies, procedures, and controls;; Monitor adherence to security policies and procedures;; Guide teams in creating and maintaining documentation for SOC 2 compliance;; Collaborate with internal teams to gather evidence for audits;; Conduct regular risk assessments and vulnerability analyses;; Implement strategies to mitigate identified security risks;; Conduct training sessions to promote security awareness

Spoken Languages:

English;; Spanish

Skillset:

Information security
Risk management
SOC 2 compliance
Security frameworks
Vulnerability analysis

Soft Skills:

Excellent communication skills
Detail-oriented
Strong organizational skills
Ability to work independently and collaborate with teams

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, or a related field
Proven experience in information security, risk management, or compliance
Familiarity with SOC 2 standards and certification processes
Strong understanding of security frameworks and best practices

Years of Experience:

Location:

United States

Job Benefits:

Health insurance
Retirement plan
Paid time off
Professional development opportunities

Working Conditions:

Hybrid

Employment Type:

Temporary Contract

Company Culture:

We foster a collaborative environment that values security awareness and professional growth. Our team is dedicated to maintaining high standards of compliance and security while encouraging continuous learning and development.

Opportunities For Advancement:

Potential for permanent placement, Career growth in cybersecurity, Access to ongoing training and certification programs

Visa Sponsorship:

Not Available ]]> Senior Information Security Analyst https://whoneedsengineers.com/jobs/cybersecurity/senior-information-security-analyst/ Sun, 22 Sep 2024 06:50:02 +0000 https://whoneedsengineers.com/wne_live/jobs/jobs-categories/senior-information-security-analyst/ Senior Information Security Analyst

Job Description:

Are you a seasoned professional in information security seeking a new and thrilling opportunity? We are in search of a Senior Information Security Analyst who will spearhead our organization’s initiatives to safeguard our information systems and networks against cyber threats. In this pivotal role, you will be instrumental in formulating and executing security policies, procedures, and standards to ensure the protection of our information assets. The ideal candidate will possess a robust background in Information Security, particularly in Identity and Access Management (IAM), along with project management expertise. This position offers a chance to make a significant impact in a dynamic environment where your skills will be highly valued.

IT Languages:

Python
Java
SQL

As a Senior Information Security Analyst, you will undertake various responsibilities to bolster our security framework.:

Lead the development and implementation of comprehensive security policies and procedures to uphold the confidentiality, integrity, and availability of our information assets.;; Oversee IT Security projects across the organization, mentoring junior team members while coordinating with stakeholders from other departments.;; Conduct regular security risk assessments and vulnerability scans to pinpoint potential threats and vulnerabilities, devising effective mitigation strategies.;; Formulate and execute security incident response plans, carrying out thorough investigations to identify root causes and implementing measures to avert future incidents.;; Continuously monitor and analyze security logs and alerts to detect potential security threats and incidents, taking necessary actions to mitigate risks.;; Collaborate with various IT teams and departments to ensure adherence to industry standards and regulations, including DNB IT Security Good Practice Guide, ISO 27001, and GDPR.;; Provide mentorship and guidance to junior security analysts and other IT personnel.;; Stay abreast of the latest trends, threats, and technologies in security to proactively identify vulnerabilities and enhance our security posture.;; Design and implement security controls to safeguard our IT infrastructure and systems.;; Manage and maintain IAM systems to ensure compliance with security policies and regulations.

Spoken Languages:

English;; German;; Dutch

Skillset:

Information Security
Identity and Access Management
Project Management
Security Tools
Firewalls
Intrusion Detection Systems
Vulnerability Scanners
ISMS Maintenance
Incident Response
Security Frameworks

Soft Skills:

Excellent problem-solving abilities
Strong communication skills
Ability to work under pressure
Team collaboration

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, or related field
At least 7 years of experience in Information Security analysis, focusing on IAM and project management

Years of Experience:

Location:

Berlin, Germany, EU

Job Benefits:

13 month salary
Travel allowance
Training budget of €2000 per year
Team trips and activities
Relaxed and informal working environment

Working Conditions:

Full Time

Employment Type:

Permanent Contract

Company Culture:

We foster a collaborative and inclusive atmosphere where employees are encouraged to grow both personally and professionally. Our team-oriented approach ensures that everyone contributes to our successes, making it a stimulating place to work.

Opportunities For Advancement:

Professional development programs, Mentorship opportunities, Career growth within the organization

Visa Sponsorship:

Available ]]>