Information Security Analyst Jobs in North Aurora, IL

The Security Analyst, Risk and Security is an individual contributor in Press Ganey's Information Security team and is responsible for reviewing and auditing controls that manage information risk and security. The duties of each member of the security team can fluctuate based on needs and risks, but this analyst will be primarily responsible for ensuring that the organization's security practices remain in compliance with all internal policies, pertinent laws and regulations, and client commitments. While this is not a primarily technical role, the analyst is expected to understand information security practices and technologies from an audit and compliance perspective. All analysts in the Risk and Security team are expected to design, implement, govern, and evaluate security policies, technologies, solutions, and processes to secure corporate applications, data, computers, and networks. As a contributor to the team, this analyst will be expected to stay informed of information security practices, changes to the company environment and act as a trusted subject matter expert for the team. The Security Analyst, Risk and Security is responsible for: Managing, triaging, and responding to third party auditor requests for artifacts related to the organization's Information Security Management Program Requesting, submitting and filing artifacts related to the completion of third party audits The primary focus of this role is the project management and maintenance of FEDRAMP authorization and support work related to other audit frameworks in use at PG Forsta to include: HITRUST CSF, SOC 2, ISO 27001, and TX-RAMP authorization The security team at Press Ganey has created a culture of growth and gratitude. Press Ganey has acquired more than 20 companies in the past 10 years, so the right candidate will be prepared to deal with a rapidly changing environment. For this role, we're focused on finding someone with a passion for security with a background in FedRAMP authorization program maintenance and other activities in conjunction with other audit and governance practices. This job will involve meeting with all levels of the organization to measure compliance with security policies and working with a team of skilled security analysts. This position will have no direct reports. This is a remote work position that will require occasional travel (1-2 times per year).In addition, working hours may vary and limited on-call time may be required. Duties and Responsibilities Audit and Internal Controls Monitoring Work with external auditors Review technical systems controls and report on security weaknesses and communicate significant control and compliance risk to management. Identify opportunities for improvement in evidence collection by consolidating audit requirements, identifying areas that would support automating evidence collection, and supporting an ongoing audit-friendly culture. Policy and Governance Monitor and audit people, process, and technology to ensure compliance with approved policies. Complete tasks associated with internal controls monitoring and report on collection difficulties or failures from responsible teams. Assist with the documentation of risk and security related areas of responsibility to include policies, procedures, tests, and product documentation. Data Protection and Risk Management Work with Legal, Technology, and business partners to maintain controls that protect data and appropriately manage its lifecycle. Identify, assess, and communicate risks relating to PG Forsta data, systems, and personnel. Suggest changes that can reduce risk. Contribute to risk assessments and the execution of tests of data processing systems to ensure functioning of data processing activities and security measures. Qualifications Education/training: Bachelor's degree or equivalent experience. Ability to manage multiple issues at one time with exceptional follow through. Excellent customer service, communication, interpersonal and presentation skills. Demonstrated analytical and problem-solving skills. Familiarity with ITIL Foundation certified preferred. Certification for information security management or networking (preferred) (i.e. CISA, CISSP, CISM, CRISC). Familiarity with security and risk domains, including standards and practices; organization and management; processes; integrity, confidentiality and availability; and software development, acquisition and maintenance. Intermediate understanding of system security boundaries, data element classification and the concept of shared or inherited responsibility models. Basic understanding of basic computer science: Algorithms, data structures, databases, operating systems, networks, and tool development (not production software, but tools that can help you do stuff). Basic understanding of IT operations: Help desk, networks, endpoint management and server management. Basic understanding of adversary motivations: cyber-crime, cyber hacktivism, cyber war, cyber espionage and the difference between cyber propaganda and cyber terrorism. Basic understanding of security operations concepts: Perimeter defenses, BYOD management, data loss protection, insider threat, kill chain analysis, risk assessment and security metrics. Experience: 3+ years Minimum of 3 years' experience directly related to the management and maintenance of a FedRAMP authorization program including the creation and submission of POAM artifacts, working with clients, 3PAOs, assessment firms and other program related entities. Minimum 3 years' of IT, audit, or risk management experience in one or more of the following frameworks: HITRUST CSF, SOC2, ISO 27001. Minimum 3 years' experience working in a government regulated industry, such as healthcare or finance. Experience identifying and management of risks for HIPAA, PCI-DSS, SOC2, etc. Basic knowledge of and ability to use system security and controls including firewall and anti-virus software, identity management, and computer control environments. Basic knowledge of business theory, business processes, management, budgeting, and business office operations. Teamwork: An individual who can work effectively in a collaborative environment and foster teamwork across all levels of the organization and also work independently as required. Technical Expertise: The job holder must have a background in information security, development, or networking. Business Acumen: The job holder should possess intermediate analytical and process management skills and have a broad understanding of business strategy and operations. Compliance & Ethics Expectations: Participates and successfully completes the company's compliance program requirements and adheres to the Code of Conduct, Company policies, and applicable federal and state requirements. Sets an example for other employees regarding how the Company's Code of Conduct and Compliance Program is applied and observed every day when dealing with customers, business operations, or other teammates. Reports potential violations of company policy, Code of Conduct, and/or applicable laws and regulations to the company hotline, thorough the chain of command, to the Compliance and Ethics Department, or through other channels made available by the company for reporting potential violations. Promotes an environment in which other employees are encouraged to report potential violations. As appropriate, provides input and suggestions regarding areas in which policies, procedures, workflows, and/or controls can be improved to enhance compliance. Special Working Conditions If the job requires a person to work in special working conditions this should be stated in the job description. Special working conditions may include working outside of normal business hours, shift work, extensive travel, etc. Special Physical Requirements The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Requires the ability to meet deadlines, frequent assignment changes, periodic heavy workload, rapidly changing environment, and dynamic business growth. Requires ability to concentrate on detailed tasks for sustained periods of time. Requires the ability to operate computer, printer, copy machine, calculator, other general office equipment, and to record written information. Requires the ability to communicate with customers, users and vendor representatives in person, in writing, and on the telephone. Requires the ability to read computer output and printed material. Requires the ability to read complex vendor reference material and written user manuals. Requires the ability to participate in interactive verbal group activities including brainstorming and application design working sessions.

Contract: Through the end of 2025 Hybrid: Chicago, IL *Available for Contract & Contract to Hire* Key Responsibilities: Develop and execute a comprehensive PAM governance strategy. Define and implement policies, procedures, and standards for managing privileged access. Provide technical leadership and guidance to the PAM team. Identify and mitigate risks related to privileged access. Conduct regular risk assessments of PAM processes and controls. Ensure compliance with relevant regulations and standards (NIST, ISO 27001). Develop training programs on PAM principles for employees and stakeholders. Drive continuous improvement initiatives for PAM governance. Serve as a subject matter expert on PAM governance. Define KPIs and metrics to measure PAM governance effectiveness. Prepare reports and presentations for senior management. Qualifications: Minimum 5 years of experience in identity governance and PAM. Familiarity with identity management tools like CyberArk. Knowledge of data privacy regulations and security best practices. Proficiency in Visio and Microsoft Office Suite. Experience in process improvement and creating metrics and dashboards. Ability to run SQL queries and analyze project details. Relevant certifications in identity and access management or data governance is a plus.

***Hybrid, 3 days onsite, 2 days remote*** ***We are unable to sponsor as this is a permanent full-time role*** A prestigious company is looking for an Associate Principal, Cyber Defense. This role is focused on threat intelligence, incident response, security alerts, events analysis, network traffic, etc. Responsibilities: Monitor security alerts and events from various security tools and technologies. Perform advanced analysis of security logs, network traffic, and endpoint data. Review and respond to security incidents escalated by Tier 1 analysts. Conduct thorough investigations to determine the scope and impact of security incidents. Implement containment, eradication, and recovery measures for confirmed incidents. Document and report findings, actions taken, and lessons learned. Work closely with threat intelligence team to enhance detection and response capabilities. Collaborate with other security team members and IT staff to address security incidents. Provide guidance and support to Tier 1 analysts on complex security issues. Communicate effectively with stakeholders regarding security incidents and mitigation efforts. Qualifications: Bachelor's degree in cybersecurity, computer science, or another related field. Minimum three years of information security experience, preferably in the financial services industry. Hands-on security operations experience including interdisciplinary experience with two or more of the following: Cyber Threat Analysis, Incident Response, Application Security, Operating Systems Security, Networking, Programming languages, Incident Response. Technical experience and comprehensive knowledge of threat actor capabilities, intentions, methodologies, and motives. Familiarity with computer network exploitation and network attack methodologies while maintaining an understanding of the relationship these activities have with the financial services industry and critical infrastructure. Shift work and working in an on-call response capacity is required including availability for 24 x 7 on-call support responsibilities. Strongly prefer at least one of the following certifications: CISSP, GCIA, GCIH, CHFI, GCFA, CASP+. Log analysis and security content development in SIEM solutions (Splunk, IBM QRadar, LogRhythm, etc.). SOAR products such as Splunk SOAR, Cortex XSOAR, FortiSOAR, etc. SOAR playbook development experience is a plus. Endpoint detection and response tools, e.g. CrowdStrike, SentinelOne, Microsoft Defender, etc. Incident Response playbook development, managing security incident analysis and remediation. Network-based preventative and detective technologies (IDS/IPS, firewalls, proxy servers) Standard technical writing tools including MS Word, Excel, Project and Visio Vulnerability assessment tools (Qualys, Nessus, nmap, etc.). Directory services, LDAP, and their inherent security (Active Directory, CA Directory, Entra ID). Client/server platforms including Sun Solaris, Windows, Linux. Operating system hardening procedures (Solaris, Linux, Windows, etc.) Web Application Firewalls. Scripting and development activities to appropriately leverage Application Programing Interfaces (APIs) to optimize integrations between disparate security monitoring and analysis devices.

[c. $120-160k Comp Package | Hybrid Working] Are you passionate about triaging complex security alerts, detecting insider threats, and enhancing cloud security in a growing, multi-cloud environment? Our client, a global trading powerhouse renowned for its innovative use of technology, is seeking a Security Analyst to join their Security Operations team. This hands-on role involves responding to day-to-day security alerts, performing incident response, and working at the firewall and Active Directory levels. With opportunities to engage in phishing analysis, threat detection, and digital forensics, this position suits a detail-oriented professional eager to contribute to an evolving security landscape while collaborating with experienced engineers! Key Responsibilities • Perform triage and respond to global security alerts from sources including IPS, Web Security, Endpoint Protection, and phishing • Analyse security incidents, perform digital forensics, and escalate as needed • Automate detection and response workflows using scripting/programming (e.g., Python, Bash, or PowerShell) • Assist with insider threat investigations and educate users on best practices • Evaluate new tools, enhance documentation, and support ongoing risk assessments • Collaborate with InfoSec peers to improve the firm's security posture Key Requirements • 2-4 years of experience in Security Operations or Incident Response (within a financial services environment) • Strong knowledge of Windows, mac OS, or Linux, with eagerness to expand expertise across platforms • Experience with SIEM platforms and SOAR solutions for security automation • Familiarity with core networking and cloud security concepts • Proficiency in analysing events from sources like IPS, Endpoint Protection, and Web Security • Knowledge of static/dynamic malware analysis and packet capture interpretation • Programming/scripting experience (e.g., Python, PowerShell, or Bash) …

The Security Analyst is responsible for protecting our organization's computer systems and networks. The successful candidate will implement security measures to actively protect sensitive data, identify vulnerabilities within the system, and provide strategic solutions to strengthen our security policies. Responsibilities: Planning and executing security measures to protect computer systems, networks, and data. Monitoring system performance and carrying out regular network security audits. Developing and implementing security protocols and procedures to prevent potential threats. Collaborating with the team to carry out tests and uncover network vulnerabilities. Helping to develop the company's disaster recovery plan. Responding to and investigating security breaches. Recommending security enhancements and purchases. Training staff on network security issues and best practices. Updating software to prevent security breaches at both the network and individual application level. Ensuring that all protocols for data and privacy are adhered to strictly. Qualifications: A bachelor's degree in Computer Science, Cyber Security, or a related field. Proven experience as a Security Analyst or a similar role. Strong understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts. Knowledge of risk assessment tools, technologies, and methods.

The Cyber Security Engineer designs, implements, and maintains secure infrastructure to protect the organization's data, systems, and networks. This role requires hands-on expertise in managing cybersecurity tools, particularly Palo Alto firewalls, and emphasizes threat identification, risk mitigation, and compliance with industry standards. Additionally, the engineer collaborates across departments to embed security in organizational processes. DUTIES AND RESPONSIBILITIES Design, Develop, and Maintain Security Infrastructure: Lead the design, implementation, and management of robust security systems, including firewalls, intrusion prevention systems, and endpoint protection. Firewall Management Configure, monitor, optimize, and evaluate the performance of existing Palo Alto firewalls to meet evolving security needs. Recommend changes or upgrades as necessary to ensure optimal functionality. Manage Security Solutions: Oversee the deployment, integration, and configuration of new security solutions, and enhance existing systems, ensuring compliance with industry best practices. Incident and Risk Management: Develop, test, and execute comprehensive incident response plans to swiftly address security breaches and vulnerabilities. Conduct regular information security risk assessments and penetration tests to identify and mitigate risks. Disaster Recovery and Business Continuity: Contribute to the development, testing, and maintenance of disaster recovery and business continuity plans. Automation and Scripting: Provide automation via scripting for tasks like incident response, log analysis, and system monitoring. Security Awareness and Training: Assist in the creation and delivery of security awareness programs and training to employees to improve organizational cybersecurity posture and ensure adherence to security protocols. Enforce Security Policies: Develop, implement, and enforce enterprise-wide information security policies and procedures. Collaboration: Partner with cross-functional teams to integrate cybersecurity measures into both new and existing organizational processes and systems, ensuring alignment with security objectives and enterprise-wide awareness. Cloud Security: Implement and manage security measures in cloud environments to ensure secure cloud architecture and operations. Stay Current with Security Trends: Stay informed on cybersecurity technologies, legislation, regulations, vulnerabilities, and industry alerts to ensure the organization remains compliant and up to date. Security Monitoring and Reporting: Regularly review system security logs to identify and address potential threats. Mentorship: Guide and mentor junior staff, fostering their technical growth and understanding of cybersecurity principles and tools. Governess and Compliance: Oversee the development, implementation, and enforcement of enterprise-wide information security policies and procedures while ensuring compliance with relevant cybersecurity laws, regulations, and industry standards. Reporting to Senior Management: Prepare and present security metrics and risk assessments to senior leadership, offering actionable insights and recommendations. QUALIFICATIONS This position requires a Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field, with a minimum of 3 years of hands-on experience in cybersecurity engineering, with a focus on firewall management and incident response. CISSP, CISM, CEH, or equivalent certifications required; additional certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), CompTIA Security+, or GIAC are a plus. Strong knowledge of Palo Alto firewalls, intrusion detection and prevention systems (IDS/IPS), endpoint protection, and SIEM tools. Familiarity with frameworks such as NIST, ISO 27001, and regulatory requirements like GDPR or CCPA. Excellent analytical and troubleshooting skills to address complex security challenges. Exceptional verbal and written communication skills to present technical insights to diverse audiences. The ability to communicate clearly and write procedures and documentation to support both technical and non-technical stakeholders. Demonstrate the ability to prioritize tasks, adapt to changing security landscapes, and make critical decisions in high-pressure situations, ensuring effective incident response and security management. Demonstrates ability to work collaboratively and mentor junior staff. ALL APPLICANTS MUST APPLY DIRECTLY TO THE COMPANY WEBPAGE AT: CAREERS.THECHA.ORG Salary Range: $110,000 - 120,000 Grade: S9 FLSA: Exempt Union: None

The Security Engineer is responsible for the engineering and development function supporting the creation and maintenance of the Information Security program, architecture and standards that deliver enterprise-wide Information Security services for internal and external customers. Partners with engineering, program management and operations personnel within the service delivery organization to implement changes to process and technology. Provides subject matter expertise on the area of Information Security including risk, architecture, protocols, processes, and governance. This position reports to the Manager, Information Security. Essential Job Functions Partner with Enterprise, Technical, and Application Architecture teams in integrating new technology products within Information Security Support architecture and design of Microsoft centric security solutions Manage technical deployments from lower environments through production Work with internal clients supporting requirements analysis Provide timely reporting and escalation of issues and risks Analyze business processes and existing technology solutions Develop test cases and test plans for Microsoft and other security solutions Manage system availability, recovery, and business continuity Provide documentation, knowledge transfer, and training as necessary Performance tuning of Information Security systems for optimal performance Maintain version control of code base using best practices and software development lifecycles Work with vendors to remain current on Microsoft and security tools, technology, and methodology Monitor systems to ensure delivery of IT security standards, implementation of best practices, adherence to security architecture, and the overall security of enterprise data Periodically test and evaluate Security controls and techniques to assure compliance with policies. Research, design, and advocate new security technologies, architectures and security products that will support security requirements for the enterprise and its customers, business partners, and vendors Work with vendor to provide support to identify and resolve product issues during deployment, configuration, and integration activities Review security reports and investigate possible security exceptions, updates, and maintain and document security controls. Develop business-relevant metrics to measure the efficiency and effectiveness of the Information Security program Lead and supervise the technical activities of SOC and other support personnel and administrators Duties, responsibilities, and activities may be assigned or changed from time to time Minimum Qualifications Bachelor's degree in Computer Science, Engineering, Information Systems (or related degree), or equivalent experience 3+ years of experience in the security field and/or software development with a minimum of 1 year in security technologies with Microsoft experience preferred Strong development or scripting skills (PowerShell, Python, Azure Logic Apps and Functions) Strong understanding of Windows, Azure, and Microsoft 365 technologies Ability to cope in a technically complex and fast-changing environment and to respond calmly and rationally to changing aspirations in a deadline-driven situation Strong planning and organizing skills including the ability to manage several work streams simultaneously Excellent communication skills with a capacity to present, discuss, and explain issues coherently and logically both in writing and verbally Clear decision-making ability with the facility to judge complex situations and assess when to escalate issues Must be detail oriented, outgoing, can balance conflicting and changing demands through prioritization and a pragmatic approach working with all levels of corporate personnel Ability to work non-traditional hours to support on call escalation issues to provide 24X7 service availability Ability to manage multiple priorities as well as flexibility to adapt to change with new systems and methods while working in a team environment Flexibility to travel when required Salary Range - $80,000 - $90,000+/year ** This is an estimated range based on the circumstances at the time of posting, however, may change based on a combination of factors, including but not limited to skills, experience, education, market factors, geographical location, budget, and demand** BEWARE OF FRAUD! Hub Group has become aware of online recruiting related scams in which individuals who are not affiliated with or authorized by Hub Group are using Hub Group's name in fraudulent emails, job postings, or social media messages. In light of these scams, please bear the following in mind Hub Group will never solicit money or credit card information in connection with a Hub Group job application. Hub Group does not communicate with candidates via online chatrooms such as Signal or Discord using email accounts such as Gmail or Hotmail. Hub Group job postings are posted on our career site: ******************************** About Us Hub Group is the premier, customer-centric supply chain company offering comprehensive transportation and logistics management solutions. Keeping our customers' needs in focus, Hub Group designs, continually optimizes and applies industry-leading technology to our customers' supply chains for better service, greater efficiency and total visibility. As an award-winning, publicly traded company (NASDAQ: HUBG) with $5 billion in revenue, our 6,000 employees and drivers across the globe are always in pursuit of "The Way Ahead" - a commitment to service, integrity and innovation. We believe the way you do something is just as important as what you do. For more information, visit ****************

Cloud Security Engineer - Integration Modernization Initiative Duration: 12 months (with potential for extension) We are seeking an experienced Cloud Security Engineer to support the Integration Modernization Initiative. This project focuses on enhancing our client's capabilities by modernizing systems, optimizing processes, and enabling seamless communication, with a move to Google Cloud Platform (GCP). Key tools involved include TIBCO, APIGEE, Kafka, and additional integration platforms. Key Responsibilities: Conduct security risk assessments for integration tools (TIBCO, APIGEE, Kafka, etc.) and mitigate potential vulnerabilities in cloud-based architectures. Collaborate with solution architects to design secure integration frameworks, ensuring proper authentication, authorization, and data protection. Secure integration platforms by managing configurations and aligning with industry standards. Implement and monitor security within CI/CD pipelines, DevOps workflows, and API lifecycle management. Set up continuous monitoring, incident response, and perform regular security audits. Ensure compliance with relevant regulations (e.g., GDPR, HIPAA, SOC 2). Provide documentation, and conduct knowledge transfer to security and IT teams. Skills & Experience: Cloud Security Expertise: Experience securing cloud architectures (AWS, Azure, GCP). Integration Platforms: Deep knowledge of TIBCO, APIGEE, and Kafka. API Security: Expertise in OAuth 2.0, OpenID Connect, JWT, etc. IAM: Experience with SSO, RBAC, MFA for integration platforms. Network Security: Knowledge of securing microservices and network communication. DevSecOps: Familiar with automating security controls in CI/CD processes. Required: 5+ years in cloud security or engineering, with 2+ years securing integration technologies. Proven experience in large-scale enterprise environments, especially in security and compliance-heavy industries. Join our direct client's team to ensure the secure and efficient modernization of our integration systems and contribute to the success of a major initiative! Apply now!

Apex Systems is seeking a Cloud-focused Content Detection Engineer for a 12+ month contract position with a large client. The position will working on a hybrid schedule (3 days onsite/2 remote) in Chicago, IL or Denver, CO. If interested, please apply within. Summary: Location: Chicago, IL or Denver, CO or Washington, DC Interview Process: Onsite Contract Length: 12+ months Requirements: 5+ years of Cyber Security Engineering experience Experience with SIEM platforms such as Splunk, Google Chronicle, etc. Experience writing rules for detections Experience with AWS or Azure Description: 5+ years of proven experience in SIEM and security operations (e.g., Splunk ES, Anvilogic, Palo Alto Cortex, CrowdStrike, MS Sentinel, Google Chronicle). 3+ years of experience with Splunk, certifications preferred 3+ Year experience with the detection and response-based security controls in at least one Public Cloud environment (e.g., AWS, GCP, Azure). 2+ years of experience with WIZ Understanding of Threat Modeling and Detection Engineering best practices. Proficient programming skills in languages such as Python, Java, or C++, with a solid understanding of data structures and algorithms. Familiarity with threat intelligence feeds, cybersecurity frameworks, and incident response methodologies. Strong leadership abilities, with experience in influencing technical teams and driving successful outcomes. Excellent problem-solving skills, analytical mindset, and a proactive approach to addressing security challenges. Experience with Infrastructure as Code (CDK, Cloud Formation, Terraform) Experience with Git base source code Management. Experience in Agile teams

*****NO C2C OR THIRD PARTY INQUIRIES***** Senior Security Engineer Top skills/tools, etc. that are MUST haves: Panorama/NGFW Expert Strong Network Skills Checkpoint Migration Experience Job Description You will provide guidance and technical support to clients deploying security integrations. You'll act as the technical partner, providing strategic guidance around complex systems to secure a digital environment. Interacting directly with the client, you'll partner closely with client personnel to guide and suggest integrations to better serve their success. Your thorough understanding of our product integrations contributes to the development of new principles and concepts - providing detailed analysis around what's working, what's not, and what could be better. You enjoy implementation work, are proactive about resolving potential concerns, and operate well around strict best practices that enable our clients on their road to a more secure digital world. You're creative, innovative, and you love a challenge - learning how integrations might work better around new products and technologies. Responsibilities Communicate with the customer(s), sales teams, peers, engineering and support teams as appropriate Understand the customer environment, requirements, and security roadmap to implement the appropriate security solution Configure, implement, and maintain Security Operating Platform Optimize and migrate policies and objects from the existing environment to our Next-Gen Firewall Test and validate the migration environment Coordinate and execute cutover to production Provide guidance on code upgrades Facilitate the development of new application and threat signatures Interact with our Technical Assistance Center (TAC) to understand and diagnose support cases Some travel may be required, dependent on customer request You work with the customer's security & network teams to build confidence across the business units impacted by the change Experience High level of experience with Panorama and log collectors NGFW Global Protect BS in Computer Science, MIS, business, or equivalent education/training/experience Minimum of 5 years' experience with network/security solutions and technologies (BGP, SD-WAN concepts, VXLAN and general routing and switching) Minimum of 3 years' experience leading security solutions in large environments) Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances, ideally Palo Alto Networks products You're experienced in internetworking, LAN, and WAN technologies You have a good understanding of Internet protocols and applications Any of the following industry certifications or equivalent experience is a plus: CISSP, CCNA, PCNSE, JNCIE-SEC You effectively handle multiple projects and work calmly in high pressure You're an excellent writer, with strong verbal communication skills, with demonstrable ability to communicate to senior leaders and technical peers

As the nation's largest producer of clean, carbon-free energy, Constellation is a company purposely-built to meet the challenges of the climate crisis. Constellation has been the leader in clean energy production for more than a decade and we are growing our company and capabilities. Now, we're accelerating, speeding our low-carbon or no-carbon power to more people in more places, day and night, providing our customers and communities with options to buy, manage and use energy as part of their decarbonization mission. The race is on to confront the climate crisis and Constellation is ready to meet the challenge. Come join us as we lead energy, together. TOTAL REWARDS Constellation offers a wide range of benefits and rewards, designed to help our employees thrive professionally and personally. In addition to highly competitive salaries, we offer a bonus program, 401(k) with company match, employee stock purchase program comprehensive medical, dental and vision benefits, including a robust wellness program paid time off for vacation, holidays and sick days and much more. *****This Engineering role can be filled at the Mid-level to Senior Staff Engineer level. Please see minimum qualifications list below for each level***** Expected salary range: Mid-Level - $88,000 - $108,000 Sr Level - $115,000- $141,000 Sr Staff - $138,000 - 154,000 Ranges are per year based on experience, along with a comprehensive benefits package that includes bonus and 401K. PRIMARY PURPOSE OF POSITION As the engineering subject matter expert, this position will provide senior engineer level expertise in the area of Cyber Security. This position performs advanced engineering problem solving in support of nuclear plant operations and is responsible for technical decisions associated with Cyber Security. Supports fleet initiatives and plant design modifications, testing and problem solving. Assure all engineering products prepared or overseen are in accordance with applicable safety analyses, industry codes, and all regulatory requirements. Leads sub-project teams. Coordinates project accountabilities and planning goals with respect to engineering personnel. PRIMARY DUTIES AND ACCOUNTABILITIES Serves as a sub-team leader for fleet cyber security initiatives Coordinate IT and site teams to implement and administer the NRC mandated cyber security program. Serve as primary contact IT and site teams to implement and administer the FERC/NERC mandated cyber security program. Perform Cyber assessments as required by the NRC/FERC/NERC cyber security programs. Support the sites in testing and issue resolution associated with the cyber security programs. Maintain awareness of trends and issues in area of technical expertise evaluate new technologies or technology opportunities and provide analysis of their potential impact to the business. MINIMUM QUALIFICATIONS MINIMUM QUALIFICATIONS for Mid-level E02 Engineer B.S. in Engineering and 2+ years Nuclear or related engineering experience MINIMUM QUALIFICATIONS for Senior E03 Engineer B.S. in Engineering or Licensed Professional Engineer and 5+ years engineering experience MINIMUM QUALIFICATIONS for Senior Staff E04 Engineer B.S. in Engineering or Licensed Professional Engineer and 10+ years engineering experience Bachelor's degree in Computer Science or Engineering related discipline and 10 or more years experience in IT or engineering with at least 3 years in cyber security activities. Advanced technical skills in engineering, IT and cyber security. Previous project leadership experience Nuclear related experience Comprehensive understanding of change management techniques associated with new technology implementation. Demonstrate leadership ability. Strong judgment, excellent analytical ability and consulting skills. Excellent communications skills and ability to work effectively with all levels of IT and engineering.

Chicago Only - hybrid, 3x/week 18 months to hire (could convert early) Pay: $69- $74/hr 2 Interviews: Phone interview, then onsite for final *Mandatory* (Can sponsor) - 3+ years of hands-on Disaster Recovery experience, including plan development, risk assessments, executing DR tests and communicating/coordinating with stakeholders - 8+ years experience in information technology field. - Collaborating with cross-functional teams to align recovery strategies with industry standards to ensure continued business operations - Working with technology teams to understand various components of application architecture - Overseeing creation, documentation, and maintenance of detailed recovery plans - Ensuring readiness during outages to automated/manual recovery - Leading efforts to identify gaps, remediate and demonstrate by executing DR drills - Working with Program Mgmt teams to ensure ongoing training and awareness programs to keep the procedures up to date - Proven experience in risk management, business continuity and disaster recovery - Proven experience handling large-scale complex systems from DR and resiliency perspective - Proven experience in design and execution of data recovery plans - Experience working with different OS (Linux, Windows, iOS), scripting, analyzing technical logs/data from Splunk or similar tools, some experience in SQL to analyze data

Senior Security Engineer Glenview, IL (must be able to work 2 days/week onsite) Contract to Hire opportunity We are seeking an experienced Senior Security Engineer with a strong background in security engineering within Azure environments. This role requires a highly skilled, self-driven "utility player" who can design, build, and enable security functions where they don't already exist, ensuring robust security posture across our cloud infrastructure. The ideal candidate will have the technical expertise to lead a security engineering team while also being highly hands-on with implementation and problem-solving. As a Senior Security Engineer, you will play a critical role in enhancing the security of our Azure environment, leading initiatives around Managed Detection and Response (MDR) solutions, and providing strategic guidance. Business acumen and stakeholder management skills are needed as you will be expected to collaborate with various internal teams and external clients. This opportunity includes a competitive compensation package while on contract and when hired permanently. This opportunity includes a hybrid work environment with remote flexibility, medical, dental, visual insurance, sick time/PTO, 401k accrual, etc. Key Responsibilities: Lead security engineering initiatives to design, build, and implement security functions in Azure environments where gaps exist. Serve as a hands-on "doer" and lead by example, driving both technical and operational security improvements. Collaborate with internal teams and external stakeholders to define security requirements and implement best practices across the cloud infrastructure. Support the deployment, configuration, and ongoing management of Managed Detection and Response (MDR) solutions. Utilize IAM for provisioning, authentication, authorization, and governance within the organization Work closely with stakeholders to ensure that security solutions align with business needs and regulatory requirements. Manage and enhance identity and access management (IAM) controls within the Azure environment, ensuring the proper implementation of policies and permissions. Provide leadership and mentorship to a security engineering team, ensuring efficient project delivery and fostering a security-first culture. Continuously assess and mitigate security risks, ensuring the protection of data, networks, and systems. Document security procedures, configurations, and policies for compliance and audit purposes. Stay up to date with the latest security trends, threats, and best practices to proactively improve the organization's security posture. Qualifications: Proven experience in security engineering, specifically within Azure environments with minimum of 5 years experience working within cyber security Strong hands-on experience designing and implementing security controls in cloud environments. Deep understanding of Managed Detection and Response (MDR) solutions and how to deploy and manage them effectively. Solid experience with Identity and Access Management (IAM) principles and technologies, including Azure AD, SSO, and role-based access control (RBAC). Ability to lead and mentor a team while maintaining a strong technical presence and executing security initiatives. Strong problem-solving skills with the ability to troubleshoot and resolve complex security issues. Experience working closely with business stakeholders and clients to understand requirements and deliver solutions. Familiarity with security tools and technologies related to cloud security, threat detection, and incident response. Excellent communication skills, both written and verbal, with a customer-facing and collaborative mindset. Business acumen with the ability to align security initiatives with broader business objectives. Relevant certifications (CISSP, CISM, Azure Security Engineer Associate, etc.) are a plus.

Role description: We are seeking a highly skilled and experienced IT Production Planning Solutions Analyst with global IT experience and a strong background in SAP PP/PPDS modules and satellite planning solutions (such as SAP IBP or Blue Yonder) to join our team and provide E2E expert support for integrated business planning and production execution. The ideal candidate will have a deep understanding of SAP PP/PPDS, a strong track record of delivering successful projects, and a passion for driving operational excellence in a global context. Responsibilities: Operational Support: Provide timely and effective support for production-related issues, troubleshooting problems, and resolving incidents Project Involvement: Contribute to planning and production execution related projects as needed, including implementation, upgrades, and enhancements Planning Solutions: Leverage expertise in planning tools to support planning projects and optimize processes Global Coordination: Work with global teams to ensure consistent processes and data management across different regions Business Requirements Analysis: Translate business requirements into functional specifications for IT Application solutions Best Practices: Identify and implement IT best practices to optimize planning and production execution Continuous Improvement: Drive continuous improvement initiatives to enhance efficiency and effectiveness Knowledge Sharing: Share expertise and knowledge with team members to foster a culture of learning and development Project Management: Capable of efficiently managing concurrent projects, project teams and prioritizing tasks to achieve project goals within specified timelines Minimum skills / qualifications: Bachelor's degree in IT or a related field Seven (7) years of hands-on experience with SAP PP/PPDS Five (5) years of hands-on experience with IBP applications (SAP IBP, Blue Yonder or comparable solutions) In-depth knowledge of SAP PP/PPDS modules (e.g., production planning, scheduling, MRP, material master, BOMs, Routing). In-depth knowledge of Integrated Business Planning applications preferable SAP IBP and Blue Yonder Good understanding of SAP ECC modules and integration with other planning modules Familiarity with IT infrastructure and cloud technologies. Configure SAP PP/PPDS modules to meet specific business needs, including master data setup, planning strategies, and scheduling parameters. Work with developers to deliver custom solutions and enhancements. Ensure the quality of SAP ECC and Integrated Business Planning solutions through rigorous testing and validation. Preferred skills / qualifications: Deep understanding of application development and lifecycle management. Ability to analyze project, program, and portfolio needs. Teamwork, Oral & written Communications, Logical Analysis, Business skills and methods, Business and Strategic Processes Knowledge of problem analysis, structured analysis, and design techniques. Experience in a global operations environment. Strong analytical and conceptual skills; ability to create original concepts/theories for a variety of stakeholders Ability to facilitate business meetings and influence best practices About Ardagh Group Ardagh Glass Packaging is a global leader in glass packaging solutions, producing packaging for the world's leading brands. We trace our roots all the way back to the Irish Glass Bottle Company, founded in 1932. Since then, we have grown rapidly to a team of more than 20,000 people with revenues of over $9 billion. Today we have a presence across Europe, Africa, and North America. Did you know that Ardagh produce many of the beverage cans and bottles you drink your favorite beverages from? Did you know we produce metal and glass packaging which are permanent materials, meaning they can be infinitely recycled without any loss of quality? Did you know we produce more than 160 million containers per day? Ardagh is passionate about sustainability and have a reputation for innovation. We push the boundaries of what's possible, pioneering new production methods, new design techniques and new ways to recycle and save energy. Our aim is to reduce any negative environmental impact while remaining economically sustainable and socially responsible. We believe that the success of our business depends on the success of our people. We strive to create working environments where our employees feel valued, can work to their full potential, and where their achievements are celebrated. Here at Ardagh, we offer exciting and rewarding opportunities for talented and creative people. If you have ambition and want to make an impact with your career, come and join our team, you'll enjoy the journey! Benefits Offered Medical, prescription, dental and vision plans Health Savings Account (HSA) and Flexible Spending Accounts (FSA) Life insurance 401(k) retirement plan with company match and an employer retirement contribution Paid holidays, floating days and vacation Short- and Long-Term Disability (STD/LTD) Employee Assistance Program (EAP) Tuition reimbursement program Professional and personal development opportunities through Employee Resource Groups Benefits available from day 1 of employment Flexible and hybrid working hours Ardagh Group is an Equal Employment Opportunity (EEO) Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other basis prohibited by federal, state, and local law. Ardagh Group complies with federal, state, and local disability laws and makes reasonable accommodations for applicants and employees with disabilities. Contact Clare McHugh (****************************) if a reasonable accommodation is needed.

We are at the forefront of technology and innovation, where speed, precision, agility, and robust security are essential to success. As a Security Engineering Lead, you will drive our systems' first line of defense by embedding strong security measures across diverse technical domains. You will align technical and business priorities, lead security initiatives, and collaborate with global teams to safeguard our infrastructure, data, and operations. Your work will balance risk mitigation with operational agility, enabling innovation without compromising security. You will play a critical role in shaping the direction of current solutions and defining the future strategy and architecture of the security landscape. Core Responsibilities: Assess and fortify global security infrastructure, identifying opportunities for improvement. Define and prioritize security engineering efforts to implement scalable, uniform controls. Build a roadmap of security initiatives across software development and operational practices that elevate security posture. Collaborate with first-line teams to embed security into systems and workflows without sacrificing flexibility. Partner with the information security team to ensure alignment on risk oversight and security strategy. Lead vulnerability assessments and coordinate efforts to mitigate risks. Skills and Experience: 5+ years of experience shaping security strategies and implementing solutions in a complex, high-stakes environment. Proficiency with security technologies and protocols such as encryption, PKI, TLS, Kerberos, and OAuth, applied in a Linux environment. Prior experience with secure software development practices. Experience with scripting or programming in Java, JavaScript, Python, Go, or C++. Comfortable analyzing code bases and submitting patches to owner teams to fix an issue or clarify an implementation approach. Demonstrated experience in cloud security with hosted and on-prem cloud infrastructure. Hands-on experience with security assessment tools and methodologies. Industry certifications (e.g., CISSP, SANS) and a commitment to continuous learning a plus. Excellent communication skills with the ability to convey technical concepts to diverse audiences.

What Working at Hexaware offers: Hexaware is a dynamic and innovative IT organization committed to delivering cutting-edge solutions to our clients worldwide. We pride ourselves on fostering a collaborative and inclusive work environment where every team member is valued and empowered to succeed. Hexaware provides access to a vast array of tools that enhance, revolutionize, and advance professional profile. We complete the circle with excellent growth opportunities, chances to collaborate with highly visible customers, chances to work alongside bright brains, and the perfect work-life balance. With an ever-expanding portfolio of capabilities, we delve deep into and identify the source of our motivation. Although technology is at the core of our solutions, it is still the people and their passion that fuel Hexaware's commitment towards creating smiles. “At Hexaware we encourage to challenge oneself to achieve full potential and propel growth. We trust and empower to disrupt the status quo and innovate for a better future. We encourage an open and inspiring culture that fosters learning and brings talented, passionate, and caring people together.” We are always interested in, and want to support, the professional and personal you. We offer a wide array of programs to help expand skills and supercharge careers. We help discover passion-the driving force that makes one smile and innovate, create, and make a difference every day. The Hexaware Advantage: Your Workplace Benefits Excellent Health benefits with low-cost employee premium. Wide range of voluntary benefits such as Legal, Identity theft and Critical Care Coverage Unlimited training and upskilling opportunities through Udemy and Hexavarsity. Job Role - Entra ID Architect - Cyber Security Location- Chicago, IL (Day1 Onsite- Hybrid, No remote) Job Type - Fulltime permanent Mandatory - Entra ID, Azure Active Directory, OKTA Active Directory synchronization Job Description: 1) Minimum 8+ years of relevant experience in IT Security/Active directory environment 2) Minimum 4+ years of experience as a Entra ID developer. 3) Advanced knowledge of Active Directory, Azure Active Directory/Entra ID, Lightweight Directory Access Protocol, Active Directory Federation Services, and other centralized identity stores 4) Knowledge of Azure Active Directory/Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager, and Application Registrations 5) Knowledge of implementing security on Active Directory and Entra ID and hardening those platforms 6) Experience in performing Disaster Recovery exercises 7) Experience with PowerShell scripting and automation, including utilizing APIs such as Microsoft Graph 8) Understanding of effective dimensional modeling techniques as they relate to the performance of Cognos 9) Understanding of Single-Sign-On and authentication protocols such as SAML & OIDC 10) Familiarity with directory synchronization tools, especially Entra ID Connect 11) Lead Active Directory and Entra ID disaster recovery exercises and ensure operational stability of backup solutions 12) Knowledge of Entra ID capabilities such as Conditional Access Policies, Privileged Identity Manager, and Application Registrations 13) Strong communication and collaboration skills to work effectively with cross-functional teams. 14) Ability to work independently as well as on a team.

Job Details: Job Title: Cyber Security Specialist Duration: 2+ Months (Possible project based tenure extension) Shift Timings: 1st Shift Mon - Fri (8AM - 5PM) Core responsibilities of this job are: Advise on cyber risks during mobile and/or cloud-based product development Ensure that development teams adhere to industry cybersecurity requirements Perform threat modeling during the development of products Leverage cyber testing results to evaluate the security posture of products Advise teams regarding the prioritization and remediation of security deficiencies Communicate important product security concerns to leadership as appropriate About you: 5+ years in a technical advisory role within cybersecurity, or as a product engineer with a cybersecurity focus Professional experience with of one or more of the following: Advising on cloud computing architectures and associated security design challenges Advising on cloud application development and associated security design challenges Advising on mobile application development and associated security design challenges Experience performing cyber threat modelling using industry frameworks (e.g, STRIDE, PASTA) Strong understanding of information security fundamentals and defense-in-depth practices Ability to build relationships, influence without authority, and drive positive outcomes across multiple stakeholder groups Ability to provide clear oral and written communication to a variety of business and technical audiences Ability to prioritize work and adapt to changing needs in a dynamic work environment University degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related discipline Familiarity with medical device industry cybersecurity frameworks preferred

Center 3 (19075), United States of America, McLean, VirginiaManager, Information Security Office (ISO) Consultant At Capital One, you will help consult on initiatives, programs, and projects to raise their game in Information Security. You are pragmatic and practical in your understanding of risk and security, but also willing to know when to pull in experts and escalate. You collaborate and innovate with other teams within Capital One to push the envelope. You are comfortable with Cloud Service technologies like Storage Services, Security & Access Control Management, Container Services, and API Implementation and Management. You are familiar with various Cloud computing models to include IaaS, PaaS, and SaaS along with their architectural differences. You are enthusiastic about enabling developers to securely develop software efficiently. Security is essential to what we do here, from protecting our customers to our associates. Responsibilities: Act as a central Information Security point of contact for Delivery Experience teams Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Resiliency, Data Security, Network Architecture and Design, and User Access Management Serve as an expert in Capital One's Information Security capabilities, solutions, policies, procedures and standards Influence customers to leverage security capabilities and solutions to shift and integrate security to the left in the development processes Escalate and manage cyber security risk Provide ad hoc support on special Information Security hot topics for the business Provide regular updates to executive leadership with your line of business on the overall Information Security health and risk environment Work with line of business leadership to anticipate their objectives and needs to better serve the line of business About You: You have a desire to work in a very fast moving, forward leaning, and modern computing environment You have a deep passion for Securing modern computing platforms You have a strong desire to continually learn about new technologies You possess strong conceptual thinking and communication skills You are able to work well under minimal supervision You are a demonstrated leader with team-oriented interpersonal skills and the ability to interface effectively with a broad range of people and roles, including upper management, IT leaders, and technology vendors You maintain calmness and clarity of thought under pressure and ability to maintain confidentiality You have a deep understanding of strategic business objectives and the ability to drive results toward those objectives Basic Qualifications: High School Diploma, GED or equivalent certification At least 4 years of experience working in cybersecurity or information technology At least 3 years of experience providing guidance and oversight of cyber security concepts At least 3 years of experience performing security risk assessments or security architecture reviews At least 3 years of experience with software design, networking, or cloud infrastructure Preferred Qualifications: Bachelor's Degree 1+ year of experience in securing a public cloud environment (e.g. AWS, GCP, Azure) Experience with Threat Modeling Experience with integrating SaaS products into an Enterprise Environment Experience with securing Container services Professional certifications such as AWS Certified Solutions Architect and Certified Information Systems Security Professional (CISSP) Experience in Offensive or Defensive Security techniques Experience in a regulated environment Experience with the Software Development Life Cycle (SDLC) governance Experience with DevSecOps At this time, Capital One will not sponsor a new applicant for employment authorization, or offer any immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, or another type of work authorization). The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked. New York City (Hybrid On-Site): $201,400 - $229,900 for Manager, Cyber TechnicalIllinois (Hybrid On-Site): $187,700 - $214,200 for Manager, Cyber Technical Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate's offer letter. This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan. Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level. This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to sex (including pregnancy, childbirth or related medical conditions), race, color, age, national origin, religion, disability, genetic information, marital status, sexual orientation, gender identity, gender reassignment, citizenship, immigration status, protected veteran status, or any other basis prohibited under applicable federal, state or local law. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City's Fair Chance Act; Philadelphia's Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at ************** or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations. For technical support or questions about Capital One's recruiting process, please send an email to ********************** Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site. Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).

Salary: $140k-$150k + bonus Hybrid: 3 days onsite, 2 days remote *We are unable to provide sponsorship for this role* Qualifications Bachelor's degree 3+ years of related experience Hands-on security operations experience including interdisciplinary experience with two or more of the following: Cyber Threat Analysis, Incident Response, Application Security, Operating Systems Security, Networking, Programming languages, Incident Response. Technical experience and comprehensive knowledge of threat actor capabilities, intentions, methodologies, and motives. Familiarity with computer network exploitation and network attack methodologies while maintaining an understanding of the relationship these activities have with the financial services industry and critical infrastructure. Responsibilities Monitor security alerts and events from various security tools and technologies. Perform advanced analysis of security logs, network traffic, and endpoint data. Review and respond to security incidents escalated by Tier 1 analysts. Conduct thorough investigations to determine the scope and impact of security incidents. Implement containment, eradication, and recovery measures for confirmed incidents. Document and report findings, actions taken, and lessons learned.