Security Architect
Security architect job in Santa Fe, NM
As a Product Security architect, you will be performing security reviews and providing hands-on help to development teams to address security issues systematically. We're looking for passionate engineer who is able to consider business impact and risk to Oracle and its customers while dealing with any security issues. You will work a trusted partner with one or more SaaS product development teams, while simultaneously collaborating with your peers in evolving or creating new security patterns or standards to address any security issues/gaps in an efficient way. You will research the product security landscape and help steer product security architecture for solutions that will provide a competitive edge for Oracle SaaS.
This position requires strong product security and application security experience. It will be highly valuable to have past experience in working in or with product development teams.
**Responsibilities**
**Key responsibilities:**
+ Evaluate existing and proposed SaaS Service architectures and perform security architecture reviews, threat modeling, risk assessment and provide guidance on mitigating the security risks.
+ Partner and collaborate with development teams for SaaS products and provide security expertise to product design conversations and implementation decisions.
+ Work with product teams and peers in security operations to analyze and triage security issues in production and deploy any mitigation such as WAF policies
+ Review and assess security posture and CVEs in third party libraries or products.
+ May perform source code review for vulnerability fixes by development teams.
+ Keep up to date on emerging threats and standards and translate into actionable guidance including but not limited to crypto, AI Security, Identity, Web security, multi-tenant deployment
+ Evolve security processes and integrate security architecture into SDLC leveraging AI and automation, as appropriate.
+ Engage in technical discussions, as needed and serve as a subject matter expert for security architecture and trusted advisor to executive leadership and key stakeholders.
+ Define and influence secure-by-design architecture standards, security patterns, and reference implementations for SaaS Services
+ May train and mentor team members
**Qualifications:**
+ 7+ years of information security experience including product security, application security, security testing/offensive security, security tools and security architecture.
+ Experience in helping or leading a product security architecture and assurance effort in a large-scale IaaS/PaaS/SaaS Cloud Service Provider, or Fortune 500 company.
+ Expert knowledge of modern vulnerability types and threats including intelligence, discovery, mitigation, remediation, and root cause.
+ Understanding of security risks in AI based solutions including AI Agents, MCP, Generative AI and ML.
+ Hands-on experience with at-least one programming languages such as Java, Python.
+ Hands-on experience and knowledge of product development lifecycle in a large enterprise software company.
+ Understanding of industry standard frameworks such as OWASP, MITRE, NIST, PCI, FedRAMP, etc.
+ Ability to guide and engage individuals and development teams located across multiple geographies and or cultures.
+ Knowledge of Oracle Cloud Infrastructure or Oracle SaaS Services is a plus.
+ Excellent written and verbal communication skills, strong analytical and problem-solving skills.
Disclaimer:
**Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.**
**Range and benefit information provided in this posting are specific to the stated locations only**
US: Hiring Range in USD from: $96,800 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Career Level - IC5
**About Us**
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.
We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_************* or by calling *************** in the United States.
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
Information Security Architect
Security architect job in Santa Fe, NM
*****CANDIDATE MUST BE US Citizen (due to contractual/access requirements)***** **To foster collaboration and team synergy, this position follows a hybrid model. Employees within a 50-mile radius of our Pittsburgh, Buffalo, or Camp Hill locations will be required to work from the office on Tuesdays, Wednesdays, and Thursdays.**
Execute a process to develop a security architecture that processes information of various levels of sensitivity. The security architecture must be compliant with existing enterprise technical security control requirements models. Produce gap analysis documentation to identify any gaps between specific technical security requirements and the architecture of the system and provide detailed technical recommendations on appropriate mitigation measures. Advise and consult clients responsible for the architecture, design, implementation, and deployment of technical security controls on appropriate application of existing security services to solve their problems or enable new business opportunities. Research and evaluate new security technologies to be used as point solutions to gaps where the project is unable to take advantage of or needing greater functionality than reusable enterprise security services. The security architecture work will include network security, network defense, operating system security identity, authentication and authorization, data protection, application security, activity audit and monitoring, mobile computing security, and partner/vendor access to corporate systems/data.
**ESSENTIAL RESPONSIBILITIES**
+ Enhance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
+ Determine security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates.
+ Plan security systems by evaluating network and security technologies.
+ Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.
+ Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
+ May begin to provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training.
+ Support assurance compliance to required standards, procedures, guidelines and processes.
+ Other duties as assigned or requested.
**REQUIRED EDUCATION**
+ Bachelor's degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and/or education as determined by the company in lieu of bachelor's degree
**PREFERRED EDUCATION**
+ Master's degree in Computer Science, Information Security or related field
**EXPERIENCE**
**_Minimum:_**
+ 5 - 7 years' experience architecting solutions
+ 5 - 7 years' experience in Information Security
+ Experience communicating with business partners
**_Preferred:_**
+ 7 - 10 years' experience architecting solutions
**SKILLS**
+ Business communication skills, both written and verbal and able to solve unconventional problems
+ Understanding of the TCP/IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL/TLS protocol knowledge
+ Understanding of the information technology and information security industries, their current developments, trends, issues, and fundamental concepts
+ In-depth expertise in analyzing a wide spectrum of technical systems and services robustness and needs, and making practical recommendations to address them
+ Detailed knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures
+ Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL
+ Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.)
+ Participate in evaluations and recommend solutions to support enterprises security controls including: networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security
**REQUIRED LICENSURE**
None
**PREFERRED LICENSURE**
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), etc.
**TRAVEL REQUIREMENT:**
0%- 25%
**LANGUAGE REQUIREMENT (** **_other than English_** **)?**
None
**PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS**
( _The physical, mental demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential function of their job. Reasonable accommodations will be made when necessary to enable individuals with disabilities to perform the essential duties of the position, to the extent that they do not cause undue hardship._
**_Position Type:_**
Office-Based
**_Office-Based Positions_**
An employee in this position works in an office environment. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.
Teaches/Trains others regularly
Occasionally
Travels regularly from the office to various work sites or from site-to-site
Occasionally
Works primarily out-of-the office selling products/services (Sales employees)
Never
Physical Work Site Required
Yes
**_Most On-The-Road Positions_**
An employee in this position may work in a home or company office environment but is also frequently driving to and from various locations to perform the work off-site. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.
**_Non-Office-Based Positions_**
An employee in this position is frequently required to move throughout the workplace, sit, stand and walk, use hands and fingers to hold objects, tools or controls, possess fine motor skills (e.g., to write and operate a computer or to steer transportation equipment), possess gross motor skills (e.g., to carry items), reach with hands and arms, climb stairs and ladders, balance, stoop, kneel crouch and crawl, communicate effectively, and talk and hear. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. The employee must be able to work in a busy environment where decisions often must be made quickly, must attend work on a regular and reliable basis, must adhere to all workplace policies, and may be called upon to work outside regular business hours. This work occurs in a [example: warehouse, hospital or provider's office or mailroom].
Lifting: up to 10 pounds
Does Not Apply
Lifting: 10 to 25 pounds
Does Not Apply
Lifting: 25 to 50 pounds
Does Not Apply
**ADDITIONAL INFORMATION**
**Changes Approved By:**
Kathleen Thompson
**_Disclaimer:_** _The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job._
**_Compliance Requirement:_** _This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies_
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
**Pay Range Minimum:**
$78,900.00
**Pay Range Maximum:**
$147,500.00
_Base pay is determined by a variety of factors including a candidate's qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets._
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at *****************************
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
Req ID: J272809
Principal Information Security Architect
Security architect job in Santa Fe, NM
Lumen connects the world. We are igniting business growth by connecting people, data and applications - quickly, securely, and effortlessly. Together, we are building a culture and company from the people up - committed to teamwork, trust and transparency. People power progress.
We're looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.
**The Role**
The Principal Information Security Architect provides subject matter expertise for multiple, complex security systems, including developing security architectures and roadmaps, and evaluating, planning and designing security solutions. Additionally, the Principal Architect provides subject matter expertise to Product, IT, Network, and Security teams in the implementation of recommended solutions for identified technical security issues; ensures the implementation of security solutions utilizing advanced technical expertise; serves as architecture lead on major projects with the ability and expertise to develop overall architectural direction; initiates and executes advanced research and development activities of significance to future business security strategies.
**The Main Responsibilities**
+ Drives beneficial security change into the business through the development or review of architectures to ensure that they fit business requirements for security, mitigate risks, conform to the relevant security standards, and balance information risk against the cost of appropriate countermeasures.
+ Develops and designs new security solutions to reduce risk and align business requirements with security standards. Supports vendor relationships; leads vendor reviews through RFx process, working with Procurement and appropriate business partners on requirements and success criteria. Supports development of business case and approval process.
+ Delivers guidelines, best practices, and direction on security standards/policies and roadmaps. Provides subject matter expertise, consultation, and escalation support.
+ Provides support to Security Review process by assisting with complex questions and projects. Work with business units and partners as needed.
+ Acts as liaison between the business and technology from a security perspective, maintains an overview of the environment as a whole and its security aspects, understands business strategy and how it relates to security strategy, acts as a liaison between appropriate regulatory bodies, IT auditors, and business stakeholders, educates IT and enterprise roles on the need for (and consequences of) reducing information-related risk, and ultimately drives organizational change at all levels of the business.
**What We Look For in a Candidate**
Required:
+ Bachelor's degree in computer science, engineering, or related field with 15+ years of relevant experience or
+ Master's degree in computer science, engineering, or related field with 12+ years of relevant experience.
+ Applicable professional/technical certifications must be in place, such as CISSP, GPEN, GWAPT, GISEC, CISM or CISA.
+ Knowledge of information security industry and regulatory obligations (ISO 27001/27002, NIST Framework, FISMA, FedRAMP, and GDPR).
+ Software development experience.
**Compensation**
This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.
Location Based Pay Ranges:
$149,084 - $198,779 in these states: AL, AR, AZ, FL, GA, IA, ID, IN, KS, KY, LA, ME, MO, MS, MT, ND, NE, NM, OH, OK, PA, SC, SD, TN, UT, VT, WI, WV, and WY.
$156,539 - $208,718 in these states: CO, HI, MI, MN, NC, NH, NV, OR, and RI.
$163,993 - $218,657 in these states: AK, CA, CT, DC, DE, IL, MA, MD, NJ, NY, TX, VA, and WA.
Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process.
Learn more about Lumen's:
+ Benefits (****************************************************
+ Bonus Structure
\#LI-Remote
**What to Expect Next**
Requisition #: 340981
**Background Screening**
If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. For more information on these checks, please refer to the Post Offer section of our FAQ page (************************************* . Job-related concerns identified during the background screening may disqualify you from the new position or your current role. Background results will be evaluated on a case-by-case basis.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
**Equal Employment Opportunities**
We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, "protected statuses"). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training.
**Disclaimer**
The job responsibilities described above indicate the general nature and level of work performed by employees within this classification. It is not intended to include a comprehensive inventory of all duties and responsibilities for this job. Job duties and responsibilities are subject to change based on evolving business needs and conditions.
In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.
Please be advised that Lumen does not require any form of payment from job applicants during the recruitment process. All legitimate job openings will be posted on our official website or communicated through official company email addresses. If you encounter any job offers that request payment in exchange for employment at Lumen, they are not for employment with us, but may relate to another company with a similar name.
Information Security Officer (56240)
Security architect job in Farmington, NM
Information Security Officer Make a Positive Impact First State Community Bank is seeking a detail-oriented and technically skilled Information Security Officer. The Information Security Officer (ISO) is responsible for developing, implementing, and maintaining First State's Information Security and Cybersecurity Governance Program. This role ensures the confidentiality, integrity, and availability of information assets, compliance with regulatory requirements, and protection against evolving cyber threats. The ISO provides oversight, governance, and strategic direction for all information security initiatives across the organization. Responsibilities in Accordance with Our Corporate Values Professionalism Maintain and enforce the company's Information Security and Cybersecurity Governance Program in alignment with FFIEC, GLBA, and other regulatory standards. Develop and update security policies, procedures, and standards. Report regularly to senior management and the Board on security posture, risk assessments, and compliance status. Accountability Conduct ongoing risk assessments and cybersecurity evaluations. Identify vulnerabilities and implement mitigation strategies. Oversee vendor security reviews and third-party risk management. Initiative Lead the Incident/Cyber Incident Response Team. Develop and maintain the Business Continuity and Disaster Recovery plans. Coordinate investigations of security breaches and regulatory reporting. Adaptability Implement security awareness programs for employees. Provide guidance and training on emerging threats and best practices. Monitor network and system security controls. Ensure proper documentation of network architecture and security measures. Collaborate with IT teams to integrate security into all technology initiatives. What You Can Expect Competitive pay and benefits package - including an annual bonus program 401(k) with generous employer match benefit Helpful, qualified, and available leadership A caring, stable work environment Strong growth opportunity in this position. The Data and Workflow Analyst will be able to transition into multiple different areas focusing more on Data Science, Data Engineering, or Integration/Automation project Qualifications Bachelor's degree in Information Technology, Cybersecurity, or related field (Master's preferred). Minimum 5 years in information security, preferably in banking or financial services. CISSP, CISM, or equivalent certifications strongly preferred. Deep understanding of regulatory requirements (GLBA, FFIEC). Strong knowledge of risk management frameworks (NIST, ISO 27001). Excellent communication and leadership skills. Demonstrated ability to work with auditors, regulators, and senior executives. Physical Requirements Must be able to remain in a stationary position for long durations (e.g., 6-8 hours with breaks). Occasionally required to stand or walk short distances. Manual dexterity for using keyboard, mouse and telephone system. Visual acuity to read computer screens and written documents. Occasionally lifting office supplies, files and small packages (typically up to 10-25 lbs.) Ability to hear and understand spoken communication, including customer (internal and external) inquiries and phone conversations. Ability to speak clearly and be understood in person and over the phone.
Additional Information
Being a First Stater . . .
Being a First Stater means that you roll up your sleeves and dig in. It means you work hard and do your best. It means that you enjoy learning new skills and are always eager to improve. It means you help the team by being a great teammate. It means you're passionate about making a difference in the lives of our customers and our communities. It means you consistently find new ways to improve our organization.
Do you have what it takes to be a First Stater?
Make a Difference - Apply Now!
First State Bancshares Inc. is an Equal Opportunity Employer. All your information will be kept confidential according to EEO guidelines.
Information Systems Security Officer (ISSO) - Socorro, New Mexico
Security architect job in Socorro, NM
Are you an Information Systems Security Officer looking for a place to make an impact every day? Serco has a place for you! Join our team today as the Information Systems Security Officer in support of our Ground-Based Electro-Optical Deep Space Surveillance (GEODSS) program in Socorro, New Mexico.
This mission is vital to keeping existing satellites safe and to provide critical information to organizations launching new satellites in the future. One of the assets USSF uses to accomplish this mission is the Ground-based Electro Optical Deep Space Surveillance (GEODSS) System.This optical sensor is employed at three (3) different locations around the world (White Sands Missile Range, New Mexico; Diego Garcia, British Indian Ocean Territory; and Maui, Hawaii) and helps track the objects in deep space orbit (altitude of 10,000 to 45,000 km).
In this role, you will:
+ Perform computer security assessments and implement required countermeasures; implement and maintain a site mission system and network Cybersecurity program.
+ Execute cybersecurity responsibilities protecting and defending information systems by ensuring the availability, integrity, confidentiality, authentication, and non-repudiation of data through the application of cybersecurity measures.
+ Protect ISs, their operating system, peripherals (media and devices), applications, and the information it contains against loss, misuse, unauthorized access, or modification.
+ Ensure all users and ISSOs receive COMPUSEC training.
+ Provide information to update system Assessment and Authorization (A&A) packages.
+ Review TEMPEST packages and provide documentation for TEMPEST package updates.
Get to know your recruiter: (https://serco.kzoplatform.com/player/medium/**********937301809?embed=true&layout=fullscreen&overlay=false&auth=public)
**Qualifications**
To be successful in this role, you will have:
+ An active DoD Secret clearance.
+ An active DoD IAT Level II compliant certification
+ A high school diploma/GED
+ 2+ years' of relevant working experience
+ Ability to travel up to 10% of the time as needed.
Additional desired experience and skills:
+ An active DoD Top Secret clearance
+ A bachelor's degree in computer science or other related field.
+ Working knowledge of Microsoft Windows OS and RedHat Linux and Tru64 UNIX Operating System.
+ An active DoD IAM Level III compliant certification
+ CISSP highly preferred
If you are interested in supporting and working with our military and sailors and a passionate Serco team- then submit your application now for immediate consideration. It only takes a few minutes and could change your career!
**Company Overview**
Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco's 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.
To review Serco benefits please visit: *********************************************************** . If you require an accommodation with the application process please email: ******************** or call the HR Service Desk at ************, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.
Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice (**************************************** .
Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email ********************* .
Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
**Pay Transparency**
Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance-so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.
Salary range: The range for this position can be found at the top of the posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.
Benefits HIGHLIGHTS - Comprehensible Benefits for Full-time Employees (Part-time members receive a customized package tailored to their role).
+ Medical, dental, and vision insurance
+ Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
+ 401(k) plan that includes employer matching funds
+ Tuition reimbursement program
+ Life insurance and disability coverage
+ Optional coverages you can buy, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
+ Birth, adoption, parental leave benefits
+ Employee Assistance Plan that includes counseling conditions
+ Specific benefits are dependent upon the specific contract as well as whether the position is covered by a collective bargaining agreement or the Service Contract Act.
To review all Serco benefits please visit: ***************************************** .
Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations. Please submit applications exclusively through Serco's external (or internal) career site. This is a U.S.-based role. If an applicant has any concerns with job posting compliance, please send an email to: ******************** .
Click here to apply now (******************************************************************************************************************************************************************************
**New to Serco?**
Join our Talent Community! (***************************************************
**ID** _72111_
**Recruiting Location : Location** _US-NM-Socorro_
**Category** _Information Security/Cyber_
**Position Type** _Full-Time_
**Security Clearance** _Secret_
**Telework** _No - Teleworking not available for this position_
**Salary Range/Amount** _$85032.00 - $141721.00_
Easy ApplyInformation Systems Security Manager (ISSM)
Security architect job in Albuquerque, NM
ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps.Job Details
The Southwest Division (SWD) of Applied Research Associates, Inc. (ARA) is seeking an experienced Information Systems Security Manager (ISSM) to join our Albuquerque, NM. security team. In this role, you will be responsible for overseeing and managing the classified information security program; developing and implementing information security policies, standards and procedures. The ISSM will support Information System (IS) full life cycle activities including preparing accreditation/certification packages in accordance with relevant regulations and standards, maintenance and monitoring of operational systems, system upgrades and feature additions during program execution, and system decommission and de-certification activities.
The ISSM must have experience in developing Risk Management Facility (RMF) accreditation packages to ensure IS's are operated and maintained in accordance with ARA and customer security requirements. The ISSM will maintain Authorization to Operate (ATO) certifications for networked systems and ARA applications by developing IS documentation including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, risk assessments, equipment specifications, and any relevant plans of action and milestones.
The ability to work independently, as well as with teammates, is paramount for this position as it is an extremely dynamic environment. A successful candidate will have strong written and oral communication skills who takes the initiative and creates decisive paths to complete tasks. The ISSM should have experience with security assessments & hardening tools; possess strong understanding of operating systems (Windows and Linux); have or be able to obtain Security + certification and have a working knowledge of eMASS applications.
ARA is an employee-owned company that offers competitive compensation and excellent benefits including medical and dental coverage, 401(k) profit sharing, life and long-term disability insurance, performance bonuses, and professional development.
Salary Range: $100,000 - $115,000 (Dependent on experience)
Basic Qualifications:
SECRET security clearance with the ability to obtain a TOP SECRET security clearance
Position requires a minimum of five to seven years of related experience.
Previous experience as an ISSO/ISSM is required.
DoD Directive 8570.1 IAM Level II or higher certification.
Familiar with the 32 CFR Part 117, DAAG, NIST RMF, DoDM 5205.07, and/or JSIG IS requirements.
Experience investigating security incidents to include data spills, data integrity incidents and malicious code incidents
Experience with compliance certifications of various operating systems.
Experience with Windows and Server as well as Linux/Unix-based systems.
Education
Preferred: Bachelors or better.
Experience Required
5-7 years: Relevant work experience
Offensive Security Engineer, Assessments (Web3)
Security architect job in Santa Fe, NM
Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
The Application Security organization at Coinbase is seeking to hire an experienced Offensive Security Engineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, security engineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services.
*What you'll be doing (ie. job duties):*
* Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure.
* Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities.
* Stay informed on emerging security trends, advisories, and academic research in the Web3 space.
* Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities.
* Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community.
* Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements.
* Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement.
* Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program.
* Mentor and train junior security engineers in Web3 bug bounty triage and analysis.
* Provide on-call support for critical Web3 bug bounty-related incidents.
* Document and report on Web3 bug bounty metrics and program effectiveness.
*What we look for in you (ie. job requirements):*
* Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
* 3+ years of experience in Web3 application security and penetration testing.
* Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components.
* Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms.
* Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
* Strong analytical skills to identify trends and patterns in vulnerabilities.
* Excellent communication skills for engaging with internal teams.
* Passion for security and a drive to improve Web3 security posture.
* Ability to work independently and take ownership of penetration testing initiatives.
* Energy and self-drive for continuous learning in the rapidly evolving crypto space.
* Excellence in clear, direct, and kind communication with technical and non-technical stakeholders.
* Experience building relationships with product, engineering, and security teams.
*Nice to haves:*
* Participation in CTFs, bug bounty programs, or open-source security research.
* Expertise in Application Security, Network Security, or Cloud Security.
* Relevant security certifications (e.g., OSCP, GPEN).
* Experience developing and implementing security tooling to support bug bounty triage and analysis.
* Experience with bug bounty programs and platforms, including triage, validation, and researcher communication.
* Strong analytical skills to identify trends and patterns in bug bounty submissions.
* Excellent communication skills to effectively engage with bug bounty researchers.
Position ID: P69494
\#LI-remote
*Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)).
Pay Range:
$152,405-$179,300 USD
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations***********************************
*Global Data Privacy Notice for Job Candidates and Applicants*
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required.
*AI Disclosure*
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
Engineer, Information Security and Risk
Security architect job in Santa Fe, NM
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
Lead IAM work for new customer onboardings and migrations. Collaborate with CAH Account Management, Application Teams, and Customers to design, implement, and test federated SSO solution based on customer login requirements. Provide technical guidance and act as primary point of contact for business partners and customer related to IAM work for onboarding. Additional responsibilities include supporting application integrations and enhancing SSO self service application onboarding.
**Responsibilities:**
+ **Customer Onboarding IAM Efforts - Strategy & Execution :** Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e-commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, Information Security and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical internal and external stakeholders.
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) frameworks.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Information Systems Security Officer (L3)
Security architect job in Albuquerque, NM
A leading federal contractor is seeking a qualified and motivated Cybersecurity Information System Security Officer (ISSO) Level 3 to support a mission-critical Department of Defense (DoD) program. This role offers the opportunity to join a team of professionals committed to cybersecurity excellence and national defense.
As an ISSO, you will apply and manage IT security controls to protect the confidentiality, integrity, and availability of DoD systems and data. You will ensure alignment with current hardware and software configurations and coordinate with system and network configuration managers.
This position supports the full Risk Management Framework (RMF) lifecycle-including assessment, authorization, sustainment, and system disposition. You'll collaborate with Certified Defense Contractors to uphold continuous monitoring standards and meet change management requirements. Close coordination with the Security Control Assessor (SCA) and Authorizing Official Designated Representative (AODR) is essential to obtain and maintain security approvals.
Additional duties include account management, auditing, vulnerability scanning, and advising both civilian and military personnel on cybersecurity matters. The role also supports compliance efforts and audit readiness.
This is an excellent opportunity for an experienced cybersecurity professional to contribute technical knowledge and strategic insight in a mission-focused environment.
Responsibilities / Required Skills
Active Top Secret clearance with SCI eligibility (TS/SCI)
Willing and able to submit to a Counterintelligence (CI) polygraph
10+ years of relevant DoD experience
4+ years of experience in SAP and/or SCI environments within the past 5 years
Willingness to travel as needed
Subject Matter Expert in RMF, cyber engineering, and project management
Strong communication skills, both verbal and written
Ability to convey complex technical concepts clearly and concisely
Proven ability to anticipate and mitigate potential issues
Highly organized with strong problem-solving and critical-thinking skills
Strategic mindset with the ability to support senior leadership
Education / Certifications
MA/MS/ME in Computer Science, Cybersecurity, MIS, or related field
Relevant certifications or equivalent experience may be considered in lieu of a degree
1+ year of experience implementing RMF IT security controls and policies
DoD 8140 / DoD 8570 IASAE Level II certification
Security Professional Education Development (SPēD) certification
Benefits
Employer-paid medical insurance
Dental and vision insurance
401(k)
Paid time off (PTO)
Tuition reimbursement
Security Clearance
Applicants must be U.S. Citizens with an active Top Secret clearance and SCI eligibility. Final hiring is contingent upon successful completion of a security investigation and the ability to meet eligibility requirements for access to classified government information.
ANLY, INFO SECURITY SR
Security architect job in Albuquerque, NM
POSTING DEADLINE is posted until filled. DEPARTMENT Department: Information Security PREFERENCES * 24/7 rotating on call required * This will be on-site 5x/week * The following certifications are preferred * CompTIA Security+ * CompTIA CySa+ * Certified Ethical Hacker (C|EH)
Information Security Analyst I
Salary Grade: G07
Minimum Midpoint Maximum
$69,581 - $92,194 - $114,808
Personnel in this job title may be covered by NERC CIP cyber security standards. If the position is covered, prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.
SUMMARY:
Under general supervision, provisions electronic access to systems and applications. Acts as an IT security subject matter expert for supported systems and applications. Responsible for Identity and Access Management (IAM), access management, provisioning and compliance controls relating to managing access based on business need. Analyzes the security of systems and applications, and develops security baselines to protect information against unauthorized access.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Provisions electronic access for supported systems and applications in accordance with Access Management and Provisioning program
Ensures all access issues are handled in a timely manner and that supported systems are functioning properly
Creates, modifies and deletes profiles and other access controls as part of Role Based Access Control (RBAC) program
Provides routine reaccreditation of existing users and associated entitlements
Produces evidence in support of Company policies and regulatory requirements, such as Sarbanes-Oxley (SOX) and North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
Recommends security access requirements for systems and applications; creates ad hoc reports for review
Participates in major projects, as needed, in support of business initiatives; ensures project work is completed in a timely manner in accordance with Information Security policies, programs and standards; contributes and recommends improvements to the Access Management and Provisioning program
Performs user access reviews supporting Company investigation needs; assists with data preservation requests for litigation holds; conducts digital forensics in support of the Security program
COMPETENCIES:
Knowledge of Company business practices and familiarity with Company products and services
Ability to develop and make recommendations for security processes, procedure improvements and management level security standards
Ability to identify best practices for security risk assessments, policies, standards and processes
Policy, process, and standard development experience
QUALIFICATIONS
MINIMUM EDUCATION AND/OR EXPERIENCE:
Bachelor's degree from a four-year college or university in Information Resource Management, Business Computer Systems, Computer Science or Computer Security with three to five years related experience, or equivalent combination of education and/or experience related to the discipline.
COMMUNICATION SKILLS:
Ability to maintain positive and productive working relationships with various individuals and groups
Ability to recognize and initiate tasks without direction
Ability to read and interpret technical manuals and reports, instructional documents, and procedure manuals
Ability to write procedural documentation and user instructions
Ability to speak effectively with various individuals, groups, and vendors
MATHEMATICAL SKILLS:
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume
Ability to apply concepts of basic algebra and geometry
COMPUTER SKILLS:
To perform this job successfully, an individual should have in-depth knowledge and experience with IBM/UNIX servers, client/server applications and information security issues
In-depth knowledge of Microsoft, IBM and UNIX server security functionality
Working knowledge of related security software
Working knowledge of database product security technology, specifically Oracle, SQL and DB2 and general knowledge of physical security methods for securing automated systems and network components
ANALYSIS AND PROBLEM-SOLVING ABILITY:
Ability to understand and assimilate complex technical information. Ability to solve partial problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.
DECISION MAKING:
Ability to make access management and provisioning decisions without direction, in accordance with Company policies, procedures and programs. Examines potential areas for service improvement and makes recommendations for changes to senior staff or management.
PHYSICAL DEMANDS:
While performing the duties of this job, the employee is regularly required to sit up to 2/3 of the time and talk and listen for long periods of time.
WORK ENVIRONMENT:
Office environment.
JOB DESCRIPTION
Information Security Analyst Sr.
Salary Grade: G06
Minimum Midpoint Maximum
$78,537 - $106,024 - $133,511
Personnel in this job title may be covered by NERC CIP cyber security standards. If the position is covered, prior to being hired, promoted, or transferred into the position, the candidate must successfully pass a Personnel Risk Assessment, which includes identity verification and a criminal background check. Prior to being granted unescorted access to cyber secure areas, the candidate must attend cyber security training. Annual cyber security training is also required.
SUMMARY:
Acts as an IT security subject matter expert and technical consultant for security initiatives. Functions as technical engineer, system architect and operational support for the Identity Management (IDM) suite of products. Analyzes the security of systems and applications, and develops security baselines to protect information against unauthorized access. Conducts forensic investigations including investigations done in coordination with other departments.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Assesses, designs, and recommends security access requirements for systems and applications; creates ad hoc reports for review
Collaborates with enterprise architecture on the development of system and application security standards and baselines
Provisions electronic access for supported systems and applications in accordance with the Enterprise Access Provisioning Program
Ensures all access issues are handled in a timely manner and that supported systems are functioning properly
Creates, modifies and deletes profiles and other access controls as part of Role Based Access Control (RBAC) program
Provides routine reaccreditation of existing users and associated entitlements
Produces evidence in support of Company policies and regulatory requirements, such as Sarbanes-Oxley (SOX) and North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)
Participates in projects as a subject matter expert in support of business initiatives; ensures project work is completed in a timely manner in accordance with Information Security policies, programs and standards; oversees and continuously improves the Enterprise Access Provisioning Program
Performs user access reviews supporting Company investigation needs; assists with data preservation requests for litigation holds; conducts digital forensics in support of the Information Security program
Ensures teamwork to reduce security exposures
COMPETENCIES:
Strong knowledge of Company business practices and familiarity with Company products and services
Strong knowledge of digital forensic steps and incident response
Ability to develop and make recommendations for complex security processes, procedure improvements and management level security standards
Ability to identify best practices for security risk assessments, policies, standards and processes
Extensive policy, process, and standard development experience
Ability to demonstrate leadership skills and provide guidance to less experienced team members
QUALIFICATIONS
MINIMUM EDUCATION AND/OR EXPERIENCE:
Bachelor's degree from a four-year college or university in Information Resource Management, Business Computer Systems, Computer Science or Computer Security with five to seven years related experience, or equivalent combination of education and/or experience related to the discipline.
COMMUNICATION SKILLS:
Ability to maintain positive and productive working relationships with various individuals and groups
Ability to recognize and initiate complex tasks without direction
Ability to read and interpret technical manuals and reports, instructional documents, and procedure manuals
Ability to write procedural documentation and user instructions
Ability to speak effectively with various individuals, groups, and vendors
MATHEMATICAL SKILLS:
Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume
Ability to apply concepts of basic algebra and geometry
COMPUTER SKILLS:
In-depth knowledge and experience with Linux/UNIX servers, client & server applications and information security issues
In-depth knowledge of Microsoft, Linux and UNIX server security functionality
In-depth knowledge of related security software
In-depth knowledge of database product security technology, specifically Oracle and SQL, and general knowledge of physical security methods
ANALYSIS AND PROBLEM-SOLVING ABILITY:
Ability to understand and assimilate complex technical information. Ability to solve partial problems and deal with a variety of concrete variables in situations where only limited standardization exists. Ability to interpret a variety of instructions furnished in written, oral, diagram or schedule form.
DECISION MAKING:
Ability to make access management and provisioning decisions without direction, in accordance with Company policies, procedures and programs. Examines potential areas for service improvement and makes recommendations for changes to senior staff or management.
PHYSICAL DEMANDS:
While performing the duties of this job, the employee is regularly required to sit up to 2/3 of the time and talk and listen for long periods of time.
WORK ENVIRONMENT:
Office environment.
SAFETY AND ADA STATEMENT
Safety Statement:
Safety is a core value at (TXNM Energy/PNM/TNMP) and our vision, "everyone goes home safe", reflects our commitment to promoting an environment conducive to learning, improving and building safety practices. Our safety value is built upon the belief that every employee deserves to work in an environment free from harm.
Americans with Disabilities Act (ADA) Statement:
If you require assistance with the job application process due to a disability, please contact HR ADA Analyst, at ************.
Information System Security Officer III
Security architect job in Albuquerque, NM
Summary: The ISSO III's primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities.
Essential Duties & Responsibilities:
Review, prepare, and update AIS authorization packages
Notify customer when changes occur that might affect AIS authorization
Perform AIS self-inspections, provide security coordination and review of all system test plans
Identify AIS vulnerabilities and implement countermeasures
Represent the customer on various technical review and inspection teams
Conduct security surveys at subordinate facilities and gather pertinent security documentation for inclusion into system authorization packages
Coordinate, prepare, and track AIS inspections, reports, and responses
Maintain AIS security records and prepare Co-Utilization Agreements for network nodes operating in government facilities
Prepare reports on the status of security safeguards applied to computer systems
Ensure AIS and network nodes are operated, maintained, and disposed of in accordance with security policies and practices
Perform ISSO duties in support of in-house and external customers
Assist Department of Defense, National Agency and Contractor organizations with the development of assessment and authorization (A&A) efforts
Review, track, and conduct AIS training
Provide leadership, mentoring, and quality assurance for Team Members
Requirement:
Five (5) to Seven (7) years related experience
Bachelor's Degree in a related area or equivalent experience (Four (4) years)
Must meet position and certification requirements outlined in DoD Directive 8570.01-M for Information Assurance Technician Level 2 within 6 months of the date of hire.
Security Requirements:
Current Top Secret Clearance with SCI Eligibility
Eligibility for access to Special Access Programs
Willingness to submit to a Counterintelligence Polygraph
Skills:
Ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel and industry partners
Working knowledge of Microsoft Office (Word, PowerPoint, and Excel)
Possess a high degree of originality, creativity, initiative requiring minimal supervision
Must be familiar with security policy/manuals and the appropriate DCIDs/JAFANs and other guiding policy documents
Requires travel within the organizational geographic Area of Responsibility (AOR) (note - could be extensive, and will include both air and ground transportation)
Must be able to lift up to 50lbs
Physical Requirements: This position requires employees to be willing and able to: sit, bend, reach, stoop, squat, stand, and walk.
Communication: Excellent customer service via phone and face to face conversation, excellent written and oral command of English.
GRS is an Equal Opportunity Employer. GRS will continue to abide by obligations under VEVRRA and Section 503 physical or mental disability, protected veteran status, or any other characteristics that are protected by law.
Auto-ApplySecurity Engineer II
Security architect job in Santa Fe, NM
Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities.
We are seeking a highly skilled Cyber Security Engineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information.
You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs.
**Responsibilities:**
+ Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data.
+ Conduct vulnerability assessments and penetration testing to identify and mitigate risks.
+ Develop and implement security policies, standards, and procedures.
+ Monitor security systems and respond to incidents promptly and effectively.
+ Stay up-to-date with the latest cybersecurity threats and trends.
+ Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business.
+ Provide technical guidance and support to internal stakeholders.
**Qualifications:**
+ Bachelor's degree in Computer Science, Information Technology, or a related field or
+ 3-5 Years of network engineering or cyber engineering experience
+ Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
+ Proficiency in network security, systems security, application security, and data security.
+ Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM).
+ Excellent problem-solving and analytical skills.
+ Strong communication and interpersonal skills.
+ Ability to work independently and as part of a team.
**Preferred Qualifications:**
+ Certifications such as CISSP, CISA, or CEH.
+ Experience with cloud security (e.g., AWS, Azure, GCP).
+ Knowledge of scripting and programming languages (e.g., Python, PowerShell).
Brand: Trustmark
Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums.
**For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability.
Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves.
Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match.
When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives.
At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
Licensed Architect
Security architect job in Albuquerque, NM
If you are a self-motivated professional who is looking for the opportunity for growth while practicing your craft, we have a position for you. We are looking for experienced architects to be part of our team, to lead projects related to architectural design, provide project management and embrace teamwork. With top tier benefits, and the understanding of a work life balance, Wilson & Company provides a career-nurturing work environment.
Wilson & Company is seeking a licensed architect to provide project management for the design and construction of a wide variety of project types. The position requires experience in the development of construction documents, specifications, and technical expertise on projects. The candidate will be responsible for supporting or leading projects and associated efforts on an interesting and diverse mix of educational, industrial, municipal, and commercial projects. Familiarity with a wide variety of architectural building construction materials and systems is needed, along with an understanding of related codes and experience with construction-related services.
Essential Job Functions:
Willingness to learn and effectively communicate in a collaborate team environment.
Client interaction and coordination on a frequent basis.
Effectively fosters relationships with team members and clients, as well as industry stakeholders.
Participates in business development activities, such as marketing, developing project win strategies, and preparing technical data for proposals and interviews.
Ensure quality management with implementation of quality control standards.
Responsibilities and Duties:
Creation and management of the architectural scope of work and fee for projects.
Develop project plans to include scheduling of effort, allocation of resources and planned financial success for required business operations.
Collaborate with team members for effective execution of the work across all phases of design and construction.
Possess and demonstrate strong organization skills with project documentation with willingness to follow implemented standards and procedures whether internal or external.
Prepare technical equipment specifications for construction documents.
Develop and maintain progress, quality control, schedule, staffing planning and coordination with project management including regular reporting.
Coordination of communications between the project team, the engineering and design team members to assure quality of work, and that consistent technical content drawing/design packages are maintained throughout a project.
Target pursuit opportunities and client relationship development.
Be energetic, positive, and inspiring.
Required Skills:
Effective communication skills - both verbal and written.
Strong understanding of required architectural design and construction principles.
Experience with project management, managing technical professionals and demonstrated ability to lead and direct multiple concurrent projects.
Experience in managing project pursuits, preparing proposals, and working with marketing staff.
Required Experience:
Professional degree in Architecture.
A minimum of 5 years of experience in the field of architecture.
Licensed Architect registered in the State of New Mexico, Arizona or Texas.
Experience with industry standard software such as Revit and AutoCAD.
Experience in the preparation of work plans, budgets and project schedules is highly desired.
Please note that Wilson & Company is not currently sponsoring applicants for work visas.
Annual Salary Range, commensurate on experience: $58,000.00 - $95,000.00
About Us:
Wilson & Company has a rich history in planning and design, and the right candidate will become part of our bright future. We provide multidisciplinary engineering, architecture, surveying, mapping, environmental, and planning services, and employ staff throughout 15 offices in 9 states. The firm was founded in 1932 and provides services to a diverse client base including railroads; municipal, state, and federal agencies; energy, industrial, and commercial companies; and private developers.
The cornerstone of our success is Higher Relationships, standards in Discipline, Intensity, Collaboration, Shared Ownership, and Solutions. Discipline is doing it right, with attention to details without exception. Intensity is doing what it takes to meet and exceed expectations. Collaboration is working together and bringing out the best in each other. Shared Ownership means we adopt the goals of others as our own. Finally, Solutions are achieved in a win-win environment. We value this commitment to Higher Relationships with our employees, clients, and the communities where we live and work. And for you, our culture intends to help you achieve personal and professional success. Come grow with us!
Wilson & Company provides a comprehensive benefits package that encourages employee health and well-being. We have several options to choose from for health insurance, life insurance, disability insurance, paid time off, and retirement savings plan benefits. We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment background checks.
Wilson & Company is a federal contractor and subject to various health and safety regulations enforced by federal, state, and local agencies, as well as health and safety requirements of our clients. Wilson & Company is committed to complying with all regulations and requirements, which could include, but are not limited to, vaccination requirements, testing requirements, masking requirements, and personal protective equipment requirements. All regulations and requirements are subject to change, which could impact Wilson & Company policy and requirements for employees.
Auto-ApplyHIT Learning Architect
Security architect job in Santa Fe, NM
Takes direction from the leadership team, operations management, executive stakeholders, and partners with fellow educators, subject matter experts, application team members, and vendors to develop, deliver, and optimize portfolio of systems and service education and training programs.
**_Please note that a video interview through Microsoft Teams will be required as well as potential onsite interviews and meetings._**
**_We are committed to offering flexible work options where approved and stated in the job posting._** **_However, we are currently not considering candidates who reside or plan to reside in the following states: California, Connecticut, Hawaii, Illinois, New York, Rhode Island, Vermont, and Washington._**
**Essential Functions**
+ Plans and tracks educational event logistics. Performs instructional design, development, and delivery responsibilities to the standards set forth by leadership. Contributes to the development of project and deliverable development timelines. Identifies operational inefficiencies and problems and communicates/coordinates improvements.
+ Conducts organizational education programs, including preparing for class, setting up the event, planning logistics, facilitating the event, following up on all outstanding questions, and collecting feedback from participants. Monitors and reports the effectiveness of training on associates during the orientation and post-orientation period for the purposes of career development. Facilitate and deliver education programs using a wide range of platforms and mediums as requested and/or determined by a needs assessment. Partners with assigned education development and delivery team members and executes training material revision and integration tasks, tests lesson plans and assists in training environment build.
+ Contributes to process improvement cycles in support of system initiatives. Applies process improvement methods that improve quality, associate performance, and client satisfaction while reducing waste and/or cost. Observes trends and patterns to identify improvement opportunities.
+ Creates and maintains educational assets complementing the Intermountain Health portfolio of associate development programs. Interprets both operational and system processes and workflows in the design, development, and implementation of Intermountain Health education and training program for all associates.
+ Trains and credentials trainers for end-user training. Acts as a liaison between the subject matter expert/build team and the end user. Provides Command Center support during and after go-live. Identifies risks and concerns to ensure problem resolution and continuity of service.
+ Supports achievement of organizational goals by optimizing performance and facilitating change. Seeks feedback and mentoring for personal improvement. Coaches and mentors others to support ongoing development and professional practice.
+ May be called upon to serve as principal for assigned projects. Develops and supports effective team interactions through open and honest communication. Models these behaviors and supports relationships that create an environment where individuals and team members learn and grow professionally. Employs knowledge of group dynamics to facilitate effective team functioning and problem solving.
+ Independently completes assigned projects, collaborates, and coordinates with contracted vendors as needed. Independently manages curriculum projects and works with cross-departmental partners to ensure project training deliverables meet business needs. Prioritizes project work independently to meet customer needs. Participates in special projects as needed and performs other duties as assigned. Demonstrates professional growth and development through self-leadership and continuing self- education and training.
+ Promotes mission, vision, and values of Intermountain Health, and abides by service and leadership behavior standards.
**Skills**
+ Strong communication skills, both written and verbal.
+ Organizational skills
+ The ability to relate and build connections with all staff across all levels of the organization; as well as the ability to encourage and motivate people.
+ Strong organizational skills and the ability to self-manage multiple priorities and deliverables.
+ Background in instructional design/curriculum development and delivery as well as knowledge of adult learning methods.
+ Must possess strong presentation skills, strong technical documentation skills, and attain proficiency in assigned systems and applications to the standards set by leadership.
+ Ability to travel to deliver training and/or special projects.
+ Critical Thinking: Uses active listening and critical inquiry skills, integrates system perspectives, and questions assumptions to analyze performance and recommend optimal interventions. Uses informed judgment to recommend and/or take action. Demonstrates reflective reasoning and coaches others to develop critical thinking and problem-solving skills.
+ Change and Adaptability: Leads and helps others navigate through change. Recognizes the need to adapt to the rapidly changing needs of the customer, workflow, team, organization, and external environment. Facilitates organizational awareness and understanding of the rationale and desired outcome of changes. Negotiates project timelines, deadlines and/or deliverables.
+ Maintains or develops knowledge of Intermountain Health system functions and related system workflows through the credentialing process.
**Qualifications:**
+ High School Diploma or equivalent
+ Epic Certification and/or CIT (Mager Consortium), or the ability to obtain said certification(s) within 18 months of employment.
+ Experience in developing, coordinating, and delivering associate education and training programs is required.
+ Previous experience in a healthcare setting, functional experience as a subject matter expert (clinical, revenue, or other), Learning Management System (LMS) administration experience, basic, intermediate or advanced adaptive learning solution design and development expertise, artificial and mixed reality authoring systems expertise, e-learning authoring tools experience, screen-cast software is preferred.
+ Project management experience
+ Epic experience
+ Training experience
**Preferred Qualifications:**
+ Expert level Articulate knowledge is preferred
**Physical Requirements:**
**Physical Requirements**
+ Ongoing need for caregiver to see and read information, labels, documents, monitors, identify equipment and supplies, and be able to assess customer needs.
+ Frequent interactions with providers, colleagues, customers, patients/clients and visitors that require caregiver to verbally communicate as well as hear and understand spoken information, needs, and issues quickly and accurately.
+ Manual dexterity of hands and fingers to manipulate complex and delicate supplies and equipment with precision and accuracy. This includes frequent computer use for typing, accessing needed information, etc.
+ For roles requiring driving: Expected to drive a vehicle which requires sitting, seeing and reading signs, traffic signals, and other vehicles.
**Location:**
Peaks Regional Office
**Work City:**
Broomfield
**Work State:**
Colorado
**Scheduled Weekly Hours:**
40
The hourly range for this position is listed below. Actual hourly rate dependent upon experience.
$33.75 - $53.16
We care about your well-being - mind, body, and spirit - which is why we provide our caregivers a generous benefits package that covers a wide range of programs to foster a sustainable culture of wellness that encompasses living healthy, happy, secure, connected, and engaged.
Learn more about our comprehensive benefits package here (***************************************************** .
Intermountain Health is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
At Intermountain Health, we use the artificial intelligence ("AI") platform, HiredScore to improve your job application experience. HiredScore helps match your skills and experiences to the best jobs for you. While HiredScore assists in reviewing applications, all final decisions are made by Intermountain personnel to ensure fairness. We protect your privacy and follow strict data protection rules. Your information is safe and used only for recruitment. Thank you for considering a career with us and experiencing our AI-enhanced recruitment process.
All positions subject to close without notice.
Security Architect - Secure Technology, Architecture and Safety
Security architect job in Santa Fe, NM
**About the role** You will design and govern security reference architectures, standards, and controls for cloud primitives (compute, network, storage), identity and access, data protection, container/Kubernetes platforms, AI/ML systems, and developer platforms. You will lead high-impact design reviews, threat modeling, and cryptographic strategy; guide zero-trust adoption; and drive detection, response, and resilience patterns at scale.
You will collaborate with senior leaders and product teams, mentor engineers, and influence roadmaps through clear writing, principled prioritization, and metrics.
Ideal candidates bring deep experience "building clouds," large-scale distributed systems, and security-by-design, with a track record of shipping secure platforms. You are practical, inclusive, and customer-obsessed, balancing rigor with velocity. If you thrive at the intersection of architecture, hands-on engineering, and incident leadership-and want to make a broad impact across Oracle's cloud-this role is for you.
**About the business**
Oracle's Secure Technology, Architecture and Safety (STAS) group sets the strategic technical direction for security across Oracle, shaping the future of secure cloud computing while partnering deeply with engineering and operations. We are seeking a Security Architect (Architect/Distinguished Engineer caliber) to define end-to-end security architecture for hyperscale cloud platforms and services, raise the security bar across the software lifecycle, and lead response to complex security incidents.
**What you'll do**
+ Set strategy: Define multi-year security architecture strategy and roadmaps for cloud foundations, identity, data protection, platform security, AI/ML safety, and secure supply chain.
+ Authoritative design: Publish security reference architectures, control baselines, patterns, and design blueprints; lead cross-org design reviews and bar-raising architecture councils.
+ Build the cloud securely: Advise and co-design core cloud services (compute, networking, storage, virtualization, container/ orchestration, service mesh) with secure-by-default configurations.
+ Identity and zero trust: Advance strong identity, least privilege, policy-as-code, workload identity, and continuous verification aligned to zero-trust principles.
+ Cryptography and data protection: Drive KMS/HSM strategy, key lifecycle, envelope encryption, tokenization, privacy-enhancing technologies, and data governance at scale.
+ Secure SDLC: Embed threat modeling, secure coding, SAST/DAST/IAST, fuzzing, software provenance/SBOMs, signing, and deployment gates into developer platforms and CI/CD.
+ Detection and response: Partner with SOC and service teams on high-signal detection, telemetry standards, adversary emulation, incident response playbooks, and chaos/resilience testing.
+ Risk, compliance, and safety: Translate regulatory and customer requirements into engineering-ready controls and evidence; integrate safety-by-design for emerging technologies.
+ Incident leadership: Lead or advise on significant incidents; perform post-incident reviews, drive systemic fixes, and establish preventative guardrails and metrics.
+ Influence at scale: Produce clear design docs and RFCs; mentor senior engineers; run architecture reviews; build communities of practice; create learning pathways and reusable assets.
**Responsibilities**
**What you'll bring**
+ 12+ years in security architecture/engineering for large-scale distributed systems; significant experience "building clouds" (IaaS/PaaS) or platform engineering.
+ Expertise in at least three: identity and access management; network and micro segmentation; container/Kubernetes security; virtualization/compute; data protection/crypto; detection/response; supply chain security.
+ Hands-on depth with one or more: OCI, AWS, Azure, GCP; Kubernetes; service mesh; Terraform/Policy-as-Code; CI/CD; Linux hardening; observability stacks.
+ Demonstrated ability to lead cross-org initiatives, influence without authority, and deliver secure-by-default solutions at scale.
+ Strong written and verbal communication; ability to produce clear design docs, threat models, and executive narratives.
+ Commitment to inclusive collaboration and mentoring.
**Preferred Qualifications:**
+ Experience designing KMS/HSM services, workload identity, confidential computing/TEE, or privacy-enhancing technologies.
+ Proven leadership in major incident response and post-incident systemic improvements.
+ Track record of published standards, OSS contributions, or patents in cloud security.
+ Advanced degree in Computer Science, Engineering, or related field (or equivalent experience).
**Leadership competencies**
+ Performance, drive, and execution You'll deliver value and shape a performance-driven culture while ensuring accountability and communicating expectations.
+ Collaboration You understand and promote the value of collaboration and inclusivity and can align strategic aims with organizational goals.
+ Communicating for impact You inspire confidence by championing a clear understanding and support of organizational strategy and objectives.
+ Inspirational leadership You build a reputation for strategy by inspiring and empowering others while showing leadership internally and externally.
+ Competitive edge You anticipate changes in customer needs and seize opportunities to build value, encourage innovation, and meet objectives.
Disclaimer:
**Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.**
**Range and benefit information provided in this posting are specific to the stated locations only**
US: Hiring Range in USD from: $136,600 to $338,500 per annum. May be eligible for bonus, equity, and compensation deferral.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Career Level - IC6
**About Us**
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.
We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_************* or by calling *************** in the United States.
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
Information Systems Security Officer (ISSO) - Socorro, New Mexico
Security architect job in Holloman Air Force Base, NM
Are you an Information Systems Security Officer looking for a place to make an impact every day? Serco has a place for you!
Join our team today as the Information Systems Security Officer in support of our Ground-Based Electro-Optical Deep Space Surveillance (GEODSS) program in Socorro, New Mexico.
This mission is vital to keeping existing satellites safe and to provide critical information to organizations launching new satellites in the future. One of the assets USSF uses to accomplish this mission is the Ground-based Electro Optical Deep Space Surveillance (GEODSS) System. This optical sensor is employed at three (3) different locations around the world (White Sands Missile Range, New Mexico; Diego Garcia, British Indian Ocean Territory; and Maui, Hawaii) and helps track the objects in deep space orbit (altitude of 10,000 to 45,000 km).
In this role, you will:
Perform computer security assessments and implement required countermeasures; implement and maintain a site mission system and network Cybersecurity program.
Execute cybersecurity responsibilities protecting and defending information systems by ensuring the availability, integrity, confidentiality, authentication, and non-repudiation of data through the application of cybersecurity measures.
Protect ISs, their operating system, peripherals (media and devices), applications, and the information it contains against loss, misuse, unauthorized access, or modification.
Ensure all users and ISSOs receive COMPUSEC training.
Provide information to update system Assessment and Authorization (A&A) packages.
Review TEMPEST packages and provide documentation for TEMPEST package updates.
Get to know your recruiter:
Qualifications
To be successful in this role, you will have:
An active DoD Secret clearance.
An active DoD IAT Level II compliant certification
A high school diploma/GED
2+ years' of relevant working experience
Ability to travel up to 10% of the time as needed.
Additional desired experience and skills:
An active DoD Top Secret clearance
A bachelor's degree in computer science or other related field.
Working knowledge of Microsoft Windows OS and RedHat Linux and Tru64 UNIX Operating System.
An active DoD IAM Level III compliant certification
CISSP highly preferred
Apply today to discover your place in our world!
In compliance with state and local laws regarding pay transparency, the salary range for this role is $83,365.11 to $138,941.85; however, Serco considers several factors when extending an offer, including but not limited to, the role and associated responsibilities, a candidate's work experience, education/training, and key skills.
Company Overview
Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco's 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.
To review Serco benefits please visit: ************************************************************ If you require an accommodation with the application process please email: ******************** or call the HR Service Desk at ************, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.
Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.
Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email *********************.
Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
Auto-ApplyEngineer, Information Security and Risk
Security architect job in Santa Fe, NM
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
**Responsibilities:**
+ **M&A Integration Execution:** Collaborate and engage with IAM Lead and other business partners on planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Design and Implement Sailpoint IIQ Solutions:** Configure and customize Sailpoint IIQ components (Lifecycel Manager, Compliance Manager etc). Also develop workflows, rules, and connectors for identity governance.
+ **Application integration with Sailpoint IIQ:** Integrate Sailpoint IIQ with enterprise applications, directories and cloud platforms in addition to developing and maintaining connectros for provisioning and de-provisioning.
+ **Sailpoint IIQ Development and Scripting:** Write and maintain BeanShell scripts, Java code and XML configurations, develop customer Sailpoint tasks and workflows.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications**
+ Experience with SailPoint IdentityIQ (IIQ) is a must
+ Experience with SailPoint IIQ Integrations (Workday, Active Directory/LDAP, Webservices, SCIM, JDBC, SAP)
+ Experience implementing Life Cycle Manager (LCM) Configuration workflow tasks that model business functions, including Lifecycle Requests (Role or Entitlement), Lifecycle Events (Joiner, Mover, or Leaver), and LCM Workflow Details (Workflows and Subprocesses)
+ Solid understanding of the SailPoint object model, rules, and policies
+ Experience with both lifecycle manager (LCM) and compliance manager (CM) modules
+ Knowledge of Active Directory, LDAP, Workday, and cloud platforms (GCP, MS Entra ID) is required
+ Proven track record of successful IAM implementations including large scale enterprise deployments.
+ Experience working within regulatory standards and requirements such as, SOX, HIPAA, GDPR etc. is desired.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Senior Security Architect
Security architect job in Santa Fe, NM
Provides advanced level skills and knowledge in the design and review of secure networks, applications, systems, infrastructure, environments and security systems, ensuring requirements are in line with Corporate information security policies and processes, as well as Line of
Business (including Cloud) security standards.
Qualifications:
+ Minimum of 5 years related experience in an information security role, supporting security programs and security engineering/architecture in complex enterprise environments.
+ Hands on experience with enterprise security architecture, engineering and implementation required.
+ Ability to communicate with developers to explain how security controls and requirements pertain to their code and products.
+ Familiarity with programming languages such as java, python, etc.
+ Knowledge of cloud architecture and containers.
+ Knowledge of compliance program security controls, like ISO 27001, SOC 2 and HITRUST as applied to cloud SaaS, PaaS and IaaS operations.
+ Preferred, but not required: Bachelor-level university degree in a relevant field from an accredited university, or equivalent.
**Responsibilities**
Provides advanced level skills and knowledge in the design and review of secure networks,
applications, systems, infrastructure, environments and security systems, ensuring requirements
are in line with Corporate information security policies and processes, as well as Line of
Business (including Cloud) security standards.
Evaluates existing and proposed technical architectures for security risk, provides advanced
technical advice to support the design and development of secure architectures and identifies
security controls to mitigate those risks.
Provides technical leadership regarding security protocols related to all aspects of enterprise and
cloud computing.
Evaluations of security architecture may include design assessment, risk assessment, threat
modeling and code review.
Designs automated toolsets for implementing security controls, and monitoring the security of
networks, systems and applications.
Identifies and prioritizes security design issues and vulnerabilities.
Conducts security research regarding threats, troubleshoots issues and manages upgrades on
security platforms.
Provides advanced level advice on data security issues, compliance, and privacy requirements.
May train and mentor other staff.
Disclaimer:
**Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.**
**Range and benefit information provided in this posting are specific to the stated locations only**
US: Hiring Range in USD from: $87,000 to $178,100 per annum. May be eligible for bonus and equity.
Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business.
Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.
Oracle US offers a comprehensive benefits package which includes the following:
1. Medical, dental, and vision insurance, including expert medical opinion
2. Short term disability and long term disability
3. Life insurance and AD&D
4. Supplemental life insurance (Employee/Spouse/Child)
5. Health care and dependent care Flexible Spending Accounts
6. Pre-tax commuter and parking benefits
7. 401(k) Savings and Investment Plan with company match
8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
9. 11 paid holidays
10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
11. Paid parental leave
12. Adoption assistance
13. Employee Stock Purchase Plan
14. Financial planning and group legal
15. Voluntary benefits including auto, homeowner and pet insurance
The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.
Career Level - IC3
**About Us**
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's challenges. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity.
We know that true innovation starts when everyone is empowered to contribute. That's why we're committed to growing an inclusive workforce that promotes opportunities for all.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer competitive benefits based on parity and consistency and support our people with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by emailing accommodation-request_************* or by calling *************** in the United States.
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
Engineer, Information Security and Risk
Security architect job in Santa Fe, NM
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills.
**Responsibilities:**
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **M&A Integration Strategy & Execution:** Lead the planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA, and privileged access management (PAM).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Experience with scripting languages (e.g., PowerShell, Python) for automation and integration.
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Understanding of DevOps practices.
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ **M&A Specific Skills:** Proven track record of managing complex integration projects, including assessing existing IAM capabilities, workflow, systems, and processes of acquired entities. Ability to navigate the complexities of integrating diverse identity infrastructures.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
+ Adaptability to stay ahead of evolving IAM technologies and security threats.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Information Systems Security Officer (ISSO) - Socorro, New Mexico
Security architect job in Holloman Air Force Base, NM
Are you an Information Systems Security Officer looking for a place to make an impact every day? Serco has a place for you!
Join our team today as the Information Systems Security Officer in support of our Ground-Based Electro-Optical Deep Space Surveillance (GEODSS) program in Socorro, New Mexico.
This mission is vital to keeping existing satellites safe and to provide critical information to organizations launching new satellites in the future. One of the assets USSF uses to accomplish this mission is the Ground-based Electro Optical Deep Space Surveillance (GEODSS) System. This optical sensor is employed at three (3) different locations around the world (White Sands Missile Range, New Mexico; Diego Garcia, British Indian Ocean Territory; and Maui, Hawaii) and helps track the objects in deep space orbit (altitude of 10,000 to 45,000 km).
In this role, you will:
Perform computer security assessments and implement required countermeasures; implement and maintain a site mission system and network Cybersecurity program.
Execute cybersecurity responsibilities protecting and defending information systems by ensuring the availability, integrity, confidentiality, authentication, and non-repudiation of data through the application of cybersecurity measures.
Protect ISs, their operating system, peripherals (media and devices), applications, and the information it contains against loss, misuse, unauthorized access, or modification.
Ensure all users and ISSOs receive COMPUSEC training.
Provide information to update system Assessment and Authorization (A&A) packages.
Review TEMPEST packages and provide documentation for TEMPEST package updates.
Get to know your recruiter:
Qualifications
To be successful in this role, you will have:
An active DoD Secret clearance.
An active DoD IAT Level II compliant certification
A high school diploma/GED
2+ years' of relevant working experience
Ability to travel up to 10% of the time as needed.
Additional desired experience and skills:
An active DoD Top Secret clearance
A bachelor's degree in computer science or other related field.
Working knowledge of Microsoft Windows OS and RedHat Linux and Tru64 UNIX Operating System.
An active DoD IAM Level III compliant certification
CISSP highly preferred
If you are interested in supporting and working with our military and sailors and a passionate Serco team- then submit your application now for immediate consideration. It only takes a few minutes and could change your career!
Company Overview
Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco's 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.
To review Serco benefits please visit: ************************************************************ If you require an accommodation with the application process please email: ******************** or call the HR Service Desk at ************, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.
Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.
Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email *********************.
Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.
Pay Transparency
Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance-so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.
Salary range: The range for this position can be found at the top of the posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.
Benefits HIGHLIGHTS - Comprehensible Benefits for Full-time Employees (Part-time members receive a customized package tailored to their role).
Medical, dental, and vision insurance
Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
401(k) plan that includes employer matching funds
Tuition reimbursement program
Life insurance and disability coverage
Optional coverages you can buy, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Employee Assistance Plan that includes counseling conditions
Specific benefits are dependent upon the specific contract as well as whether the position is covered by a collective bargaining agreement or the Service Contract Act.
To review all Serco benefits please visit: ******************************************
Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations. Please submit applications exclusively through Serco's external (or internal) career site. This is a U.S.-based role. If an applicant has any concerns with job posting compliance, please send an email to: ********************.
Auto-Apply