Cloud Security Engineer
Security engineer job in Ogden, UT
We are seeking a qualified Cloud Security Engineer to support a secure DOD customer located in Ogden, UT. The overall program that this role supports aims to modernize legacy network infrastructure and migrate services into a new AWS Cloud Environment.
Clearance Requirements: Candidates must have an interim secret clearance (or above) as a precondition of employment
Location: Onsite 100% at Hill AFB, Ogden UT
Responsibilities:
Implement and manage Secure Cloud Computing Architecture (SCCA) controls, including Virtual Data Center Security Stack (VDSS) and Boundary Cloud Access Point (BCAP).
Work with DoD teams to ensure cloud environments are compliant with DoD security frameworks, including NIST, STIGs, and FedRAMP+.
Manage and enforce Trusted Cloud Credential Management (TCCM) practices for secure identity access and cloud credential management.
Configure and maintain cloud security services for monitoring, alerting, and logging using tools like SolarWinds, ELK, and native CSP security features.
Support cloud onboarding and migration, ensuring security best practices are adhered to during the transition.
Collaborate with cross-functional teams to ensure Zero Trust principles are implemented effectively in the cloud environment.
Assist in preparing and maintaining documentation for ATO processes, including mapping inherited controls and contributing to eMASS submissions.
Provide guidance on cloud security best practices and mentor junior team members in cloud security management.
Requirements:
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience).
CompTIA Security+ (or higher IE CISM or CISSP etc)
DoD-approved cloud security certifications (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer) preferred.
7+ years of experience in cloud security with hands-on experience in at least one CSP (OCI, Azure, or AWS).
Experience in implementing and managing security controls in cloud environments, including identity and access management (IAM), logging, and monitoring.
Experience with security incident management, vulnerability assessments, and cloud compliance processes.
Strong troubleshooting and problem-solving skills in cloud environments.
Solid understanding of DoD cloud security requirements, including NIST 800-53, STIGs, and FedRAMP+.
Proficiency with automation tools such as Terraform, Ansible, and PowerShell for managing cloud configuration.
Interim Secret clearance or above
What Blu Omega Can Offer You:
Competitive benefits including Health Insurance, 401K w/ match, Paid Time Off and more.
Results driven culture that embrace our core values
Rewarding work contributing to our Nation's mission critical programs
Blu Omega is a Woman Owned Small Business Federal Health Technology and Operations firm headquartered in Washington DC and supporting clients nationally. We provide Technology solutions for enterprise and government customers. Our team has a past performance in a diverse range of programs including those for Data Management, Cloud/Infrastructure, Software Development and Enterprise Applications.
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Information Security Analyst
Security engineer job in Lehi, UT
Who Is Elementum?
Elementum is the innovative startup that's using AI Driven Workflows so that businesses can operate faster, smarter, and cheaper. Elementum's unique IP allows its platform to run natively inside its customers' own data clouds, enabling instant automation without any integrations or APIs. It's also fully pre-integrated with all of the leading public and private AI/ML/LLMs, making it the only choice for secure, AI-driven automation. Industry leaders like Sanofi, Under Armour, and Snowflake are using AI Driven Workflows to transform their operations to increase productivity, delight customers, and capture market share.
Job Scope
Elementum is looking for an experienced Information Security Analyst to join our team. This role is a key driver of Governance, Risk, and Compliance (GRC) efforts, responsible for implementing and maintaining the organization's security program, with a special focus on securing our AI-Driven Workflow platform and its native execution environment.
The Information Security Analyst will interface directly with various teams and support security compliance efforts across the company and its products. This role reports to the company's Senior Audit Manager.
What You'll Do
Vendor Risk Management (VRM): Conduct thorough security assessments of third-party vendors, partners, and suppliers, particularly those providing AI/ML/LLM services or data cloud infrastructure, to identify potential risks and vulnerabilities.
Risk & Compliance: Operate and enhance Elementum's risk management processes by conducting comprehensive risk assessments of the Elementum platform's native data cloud deployment model and developing supporting documentation.
Collaborate closely with internal Engineering and Product teams to ensure the security and compliance of the AI-Driven Workflow features and the native execution environment.
Engage with internal and external stakeholders to assess the functionality of key information security controls related to vendor or in-house developed software/systems.
Analyze security reports, vulnerability scans, and other relevant data to make informed decisions and recommendations for improving the security posture of our platform.
Manage security issues and tasks assigned to vendors to closure, actively reducing associated security risks.
Complete detailed customer security and compliance questionnaires to offer assurance of Elementum's security posture regarding data cloud security, access control, and AI governance.
Identify improvement opportunities and provide strategic feedback to senior team members and management regarding the evolving security landscape in the AI and Data Cloud space.
Stay up-to-date with the latest security trends, vulnerabilities, and industry best practices related to LLM security, data cloud governance (e.g., Snowflake, Databricks, etc.), and data privacy regulations (GDPR, CCPA).
Assist in the creation and maintenance of documentation related to third-party security assessments and internal compliance processes.
You Should Have
2-3 years of experience in vendor risk, compliance, or security roles with hands-on experience in third-party security risk management.
Strong familiarity with ISO 27001 and SOC 2 (given the enterprise focus), and some familiarity with other relevant security frameworks such as NIST CSF & 800-53, SOX, SOC1, HITRUST/HIPAA, GDPR, CCPA, GxP, etc.
Demonstrable knowledge of or direct experience working with Cloud security and governance (AWS, Azure, GCP) and data cloud environments (Snowflake, Databricks).
Bachelor's degree in an IT-related field, cyber security, or equivalent experience.
2+ years of project management experience, preferably involving security compliance initiatives.
Experience in external or internal security audit/compliance activities.
Strong knowledge of risk management methods, standards, processes, governance models, and industry-standard risk analysis approaches.
Excellent written and verbal communication skills with the ability to present complex GRC and technical security information clearly to executives and customers.
Ability to think both strategically and tactically in a high-energy, fast-paced environment.
Proven ability to take ownership, self-motivate, and deliver results in ambiguous environments.
Nice to Have
Certifications: CRISC, CISA, or equivalent.
Prior experience in a startup or high-growth company operating in the AI/ML or Data Cloud space.
Understanding of working in regulated environments such as GDPR, CCPA, or HIPAA.
Competitive Benefits
Medical, dental, and vision coverage
401k matching
Flexible vacation policy
Engage with (and give high-fives to) senior management regularly
Get in on the ground floor of a huge opportunity
System Engineer
Security engineer job in Salt Lake City, UT
No C to C or Sponsorship
About the Opportunity
Solu Technology Partners is seeking a Systems Engineer on behalf of a leading North American beverage manufacturing and distribution enterprise operating across 13 states and supporting more than 8,000 employees.
This role bridges the gap between Systems Administrators and Systems Architects-working on advanced technical challenges while shaping scalable, reliable infrastructure solutions. The ideal candidate is strong in network infrastructure, security, and systems engineering, with excellent analytical and communication skills.
Why You'll Love This Opportunity
This role offers a competitive compensation and benefits package designed to support your overall well-being, including:
Multiple medical plan options, plus dental and vision
401(k) with company match
Health Savings Account with company match
Relocation assistance
Free virtual primary care, acute care, and physical therapy
Employee Assistance Program
Company-paid vacation, holidays, sick time, bereavement, disability leave, parental leave, and volunteer time
Discounted and complimentary product offerings
Tuition reimbursement
Opportunities for career development and advancement
Opportunities to support local community initiatives
Note: Enrollment in a company-sponsored medical plan may be required for certain benefits.
Role Summary
As a Systems Engineer, you will design, implement, and optimize core IT infrastructure to support mission-critical operations. You will engineer solutions across servers, storage, OT systems, virtualization, and network environments-while ensuring performance, resilience, and security. This is a hands-on technical role with opportunities to influence architecture, mentor team members, and drive continuous improvement.
Key Responsibilities
Design, implement, and manage complex IT systems including servers, storage, and network infrastructure
Manage and support OT-related systems to ensure maximum uptime and reliability
Maintain and update system configuration and process documentation
Monitor system performance and implement improvements for efficiency and reliability
Contribute to the development and deployment of new technologies and solutions
Ensure adherence to security and compliance standards across all systems
Collaborate with Systems Administrators to troubleshoot and resolve advanced technical issues
Provide technical guidance and mentorship to junior team members
Participate in disaster recovery planning, testing, and execution
Conduct regular system audits and generate health/performance reports
Work with vendors and internal stakeholders to ensure optimal system operations
Required Qualifications
Bachelor's degree in Information Technology, Computer Science, or related field
Relevant certifications preferred (e.g., Microsoft Certified: Azure Administrator Associate - AZ-104)
3+ years of experience in IT systems administration and engineering
Experience with Windows and Linux operating systems
Experience with virtualization technologies such as Azure, Hyper-V, VMware, or Azure Local
Sentinel - Systems Security Engineer - 16416
Security engineer job in Roy, UT
RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE TYPE: SecretTRAVEL: Yes, 10% of the TimeDescriptionAt Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Join Northrop Grumman on our continued mission to push the boundaries of possible across land, sea, air, space, and cyberspace. Enjoy a culture where your voice is valued and start contributing to our team of passionate professionals providing real-life solutions to our world's biggest challenges. We take pride in creating purposeful work and allowing our employees to grow and achieve their goals every day by Defining Possible. With our competitive pay and comprehensive benefits, we have the right opportunities to fit your life and launch your career today.
Northrop Grumman Defense Systems is seeking a Systems Security Engineer, (Level 2), that will support the Sentinel (GBSD) program performing Hardware Assurance.
This position will be located in Roy, UT and will support the Ground Based Strategic Deterrent (GBSD) program.
The Mission Defense Team (MDT) is seeking a highly motivated and qualified system engineer to serve as a Hardware Assurance Engineer, Level 2. You will be responsible for assessing and prioritizing a broad spectrum of hardware security threats. Key protection activities will involve vendor research, hardware assurance, program protection, counterfeit prevention, and supply chain security.
Additional Responsibilities include:
Assessment and analysis of threats, vulnerabilities, and risk for identified mission-critical functions and critical components
Support courses of action based on knowledge and experience, initiative, guidance, and established regulations and policies
Research, analyze data, and derive facts per identified vulnerabilities
Participate in a variety of working groups and customer meetings; ensure communication of risk environment with stakeholders
Contributes to program plans, goals, objectives, and milestones to for Hardware Assurance
Review technical security assessments of SSE environments to identify points of vulnerability, non-compliance with established standards and regulations and recommended mitigation strategies
Execute completion Statement of Work requirements, Program Milestone Exit Criteria, and program maturity commitments
Ensure the architecture and design of systems are functional and secure; support the design, development, implementation, and integration of security systems and system components
Self-starters compelled to take action in the workplace without requiring prompting from supervisors
Support MDT with other duties as assigned
In addition to technical skills, you will be a self-starter with strong time management skills. Your organizational skills and ability to anticipate future challenges will serve you well
Basic Qualifications
Must be a US Citizen with an active DoD Secret Clearance, at time of application, current and within scope, with an investigation date within the last 6 years
Must have the ability to obtain and maintain Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business need
Requires a bachelor's degree in a STEM (Science, Technology, Engineering or Mathematics) discipline from an accredited university and 2 years of related experience; or a master's degree with 1 year
Minimum 2 years of applying and understanding Systems Security Engineering principles applicable to US Government Defense Programs
Minimum 2 years in showing the ability to communicate effectively and clearly present technical approaches and findings
Experience in any of the full product life cycles of: ASIC Design, FPGA Design
Experience in HDL (VHDL/Verilog), implementing designs using RTL
Ability to show self as team player, able to multi-task, able to generate quality work products independently, able to make excellent judgement and show interpersonal skills
Preferred Qualifications
Degree in Aerospace Engineering, Systems Engineering, Mechanical Engineering, Software Engineering, or similar
ICBM Experience
Experience developing Systems Security Engineering requirements for hardware and software assurance
Evaluating program processes and compliance strategies for large, complex multi-site programs
Demonstrated experience and familiarity with vulnerability management
Experience with Model-based Systems Engineering (MBSE) concepts and tools
A solid understanding of Program Protection applicable to US Government Defense Programs and applied knowledge in the application of SSE principles across a broad spectrum of security measures (Cybersecurity, Counterfeit Awareness, Anti-Tamper, HW/SW Assurance, OPSEC, etc.) to protect critical program information (CPI)
Top Secret clearance
Position Benefits
As a full-time employee of Northrop Grumman, you are eligible for our robust benefits package including:
Medical, Dental & Vision coverage
401k
Educational Assistance
Life Insurance
Employee Assistance Programs & Work/Life Solutions
Paid Time Off
Health & Wellness Resources
Employee Discounts
******************************************************************
This position's standard work schedule is a 9/80. The 9/80 schedule allows employees who work a nine-hour day Monday through Thursday to take every other Friday off.
This role may offer a competitive relocation assistance package.
#Sentinelsystems
Primary Level Salary Range: $77,200.00 - $115,800.00The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit *********************************** U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
Auto-ApplyCloud Security Engineer
Security engineer job in Ogden, UT
Zachary Piper Solutions is seeking a Cloud Security Engineer to support a secure client at Hill AFB in Utah for a fully onsite role. The Cloud Security Engineer will directly contribute towards modernizing legacy USAF network infrastructure and migrating services into a new AWS Cloud Environment.
Responsibilities of the Cloud Security Engineer:
* Implement and manage Secure Cloud Computing Architecture (SCCA) controls, including VDSS and BCAP.
* Ensure DoD cloud compliance with frameworks like NIST, STIGs, and FedRAMP+; support ATO documentation and eMASS submissions.
* Manage Trusted Cloud Credential Management (TCCM) for secure identity access; configure and maintain cloud security services (SolarWinds, ELK, CSP tools).
* Support cloud onboarding/migration with security best practices; collaborate to enforce Zero Trust principles.
* Provide cloud security guidance, mentor junior staff, and maintain documentation for inherited controls.
Qualifications for the Cloud Security Engineer:
* 7+ years cloud security experience with hands-on work in OCI, Azure, or AWS; strong troubleshooting/problem-solving skills.
* Bachelor's degree in CS, Cybersecurity, Info Systems, or equivalent experience
* Expertise in IAM, logging, monitoring, incident management, vulnerability assessments, and compliance processes.
* Solid understanding of DoD security standards (NIST 800-53, STIGs, FedRAMP+); proficiency with Terraform, Ansible, PowerShell.
* CompTIA Security+ certification.
* Active DoD Secret clearance or the ability to obtain one.
Compensation for the Cloud Security Engineer:
* Salary Range: $128,000 - $138,000 *depending on experience*
* Comprehensive Benefits: Cigna Medical, Dental, Vision, 401k Plan, PTO, Holidays, Sick Leave if required by law
This job opens for applications on12/18. Applications for this job will be accepted for at least 30 days from the posting date.
#LI-MS1
#LI-ONSITE
Keywords: Secure Cloud Computing Architecture, SCCA, Virtual Data Center Security Stack, VDSS, Boundary Cloud Access Point, BCAP, Trusted Cloud Credential Management, TCCM, Zero Trust, cloud security, DoD compliance, NIST 800-53, STIGs, FedRAMP+, ATO, eMASS, inherited controls, cloud onboarding, cloud migration, identity and access management, IAM, credential management, security monitoring, alerting, logging, SolarWinds, ELK stack, CSP security tools, AWS, Azure, OCI, cloud service providers, cloud configuration, automation, Terraform, Ansible, PowerShell, vulnerability assessments, incident management, troubleshooting, problem-solving, security frameworks, security best practices, cloud compliance, cloud architecture, cloud security services, security documentation, mentoring, cybersecurity, information systems, CompTIA Security+, DoD Secret clearance, cloud credential security, security controls, security stack, security principles, security governance, security operations, cloud infrastructure, cloud security posture, security auditing, security risk management, cloud security engineering, cloud security architecture
Network Security Analyst
Security engineer job in Lehi, UT
Mindlance is a national recruiting company which partners with many of the leading employers in the Life Sciences, IT, and Financial Services sectors, feel free to check us out at ************************* Job Description Job Title: Network Security Analyst
Duration: 6 Months
Location: Lehi, UT
Required:
• Minimum 3+ years exp.
• Experience with implementing policy on firewalls (Juniper & Palo alto experience preferred)
• Review requests for new firewall policy
• Understanding of IP stack
• Ability to prioritize work and meet defined SLAs
• Good communication skills - both verbal and written
Additional Information
Thanks & Regards,
______________________________________________________________________________________________________
Vikram Bhalla | Team-Recruitment | Mindlance, Inc. | Office: **************
Cloud Cyber Security Engineer
Security engineer job in Ogden, UT
T-Rex Solutions is seeking a qualified Cyber Security Engineer to support of a secure DOD customer located in Ogden, UT. The overall program that this role supports aims to modernize legacy network infrastructure and migrate services into a new AWS Cloud Environment. For any candidates not already local to the Ogden, UT area, T-Rex is offering a relocation support package to assist with moving costs.
Responsibilities:
Implement and manage Secure Cloud Computing Architecture (SCCA) controls, including Virtual Data Center Security Stack (VDSS) and Boundary Cloud Access Point (BCAP).
Work with DoD teams to ensure cloud environments are compliant with DoD security frameworks, including NIST, STIGs, and FedRAMP+.
Manage and enforce Trusted Cloud Credential Management (TCCM) practices for secure identity access and cloud credential management.
Configure and maintain cloud security services for monitoring, alerting, and logging using tools like SolarWinds, ELK, and native CSP security features.
Support cloud onboarding and migration, ensuring security best practices are adhered to during the transition.
Collaborate with cross-functional teams to ensure Zero Trust principles are implemented effectively in the cloud environment.
Assist in preparing and maintaining documentation for ATO processes, including mapping inherited controls and contributing to eMASS submissions.
Provide guidance on cloud security best practices and mentor junior team members in cloud security management.
Requirements:
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field (or equivalent experience).
CompTIA Security+
7+ years of experience in cloud security with hands-on experience in at least one CSP (OCI, Azure, or AWS).
Experience in implementing and managing security controls in cloud environments, including identity and access management (IAM), logging, and monitoring.
Experience with security incident management, vulnerability assessments, and cloud compliance processes.
Strong troubleshooting and problem-solving skills in cloud environments.
Solid understanding of DoD cloud security requirements, including NIST 800-53, STIGs, and FedRAMP+.
Proficiency with automation tools such as Terraform, Ansible, and PowerShell for managing cloud configuration.
Ability to obtain a DOD Secret clearance
Desired:
Secret Clearance or higher desired.
DoD-approved cloud security certifications (e.g., AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer) preferred.
T-Rex Overview
Established in 1999, T-Rex Solutions, LLC is a proven mid-tier business providing data-centric mission services to the Federal government as it increasingly tries to secure and leverage the power of data. We design, integrate, secure, and deploy advanced technical solutions for our customers so they can efficiently fulfill their critical objectives. T-Rex offers both IT and professional services to numerous Federal agencies and is a leader in providing high quality and innovative solutions in the areas of Cloud and Infrastructure Services, Cyber Security, and Big Data Engineering.
T-Rex is constantly seeking qualified people to join our growing team. We have built a broad client base through our devotion to delivering quality products and customer service, and to do that we need quality individuals. But more than that, we at T-Rex are committed to creating a culture that supports the development of every employee's personal and professional lives. T-Rex has made a commitment to maintain the status of an industry leader in compensation packages and benefits which includes competitive salaries, performance bonuses, training and educational reimbursement, Transamerica 401(k) and Cigna healthcare benefits.
T-Rex is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex (including pregnancy and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors.
In compliance with pay transparency guidelines, the annual base salary range for this position is $125,000 - $145,000. Please note that the salary information is a general guideline only. T-Rex considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer.
T-Rex offers a diverse and collaborative work environment, exciting opportunities for professional growth, and generous benefits, including: PTO available to use immediately upon joining (prorated based on start date), paid parental leave, individual and family health, vision, and dental benefits, annual budget for training, professional development and tuition reimbursement, and a 401(k) plan with company match fully vested after 60 days of employment among other benefits.
Auto-ApplyData Security Analyst - C78843 7.5 Salt Lake City, Utah
Security engineer job in Salt Lake City, UT
We are looking for a Data Security Analyst for our long-term multiyear project out of Salt Lake City, Utah. Build software libraries and services to provide secure-by-default services to software engineering teams, including authentication systems, secure service architectures, endpoint control solutions, and cloud controls
· Partner with colleagues from across engineering and risk to ensure an outstanding developer experience that satisfies the firm's security needs
· Collaborate on feature design and problem solving
· Help to provide frictionless integration with the firm's runtime, deployment and SDLC technologies
· Manage the full lifecycle of software components, from requirements through design, testing, development, release and demise
· Help to communicate and promote best practices for security engineering across the firm
· Engage in production troubleshooting
Basic Qualifications
· A strong grounding in security concepts, including secure coding practices, trusted computing and principles of authentication and authorization
· A good understanding of public key and symmetric key cryptography
· The ability to reason about performance, security, and process interactions in complex distributed systems
· Proficiency in designing, developing and testing cross-platform software in one or more of Java, Golang or C#; open to using multiple languages
· Experience developing, deploying and supporting software across the full Continuous Delivery life-cycle
· The ability to understand and effectively debug both new and existing software
· Experience meeting demands for high availability, low latency and scale
· The ability to communicate technical concepts effectively, both in writing and orally, as well as the interpersonal skills required to collaborate effectively with colleagues across diverse engineering teams
Preferred Qualifications
· An understanding of regulated environments, e.g. financial services
· Experience building services using public cloud providers such as AWS, Azure or GCP
· Experience with threat modeling and risk assessment
· Experience of practical security engineering in a Linux and/or Windows environment
· Familiarity with service mesh concepts and service-oriented architectures
· Familiarity with data protection principles and solutions
· Experience with deploying software to containerized environments - Kubernetes/Docker
· Experience monitoring, measuring, auditing and supporting software
· Scripting skills using Python, PowerShell or bash
· Experience with Terraform or similar infrastructure-as-code platforms, as a user and/or as a service provider
Engineer, Information Security and Risk
Security engineer job in Salt Lake City, UT
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
**Responsibilities:**
+ **M&A Integration Execution:** Collaborate and engage with IAM Lead and other business partners on planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Design and Implement Sailpoint IIQ Solutions:** Configure and customize Sailpoint IIQ components (Lifecycel Manager, Compliance Manager etc). Also develop workflows, rules, and connectors for identity governance.
+ **Application integration with Sailpoint IIQ:** Integrate Sailpoint IIQ with enterprise applications, directories and cloud platforms in addition to developing and maintaining connectros for provisioning and de-provisioning.
+ **Sailpoint IIQ Development and Scripting:** Write and maintain BeanShell scripts, Java code and XML configurations, develop customer Sailpoint tasks and workflows.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications**
+ Experience with SailPoint IdentityIQ (IIQ) is a must
+ Experience with SailPoint IIQ Integrations (Workday, Active Directory/LDAP, Webservices, SCIM, JDBC, SAP)
+ Experience implementing Life Cycle Manager (LCM) Configuration workflow tasks that model business functions, including Lifecycle Requests (Role or Entitlement), Lifecycle Events (Joiner, Mover, or Leaver), and LCM Workflow Details (Workflows and Subprocesses)
+ Solid understanding of the SailPoint object model, rules, and policies
+ Experience with both lifecycle manager (LCM) and compliance manager (CM) modules
+ Knowledge of Active Directory, LDAP, Workday, and cloud platforms (GCP, MS Entra ID) is required
+ Proven track record of successful IAM implementations including large scale enterprise deployments.
+ Experience working within regulatory standards and requirements such as, SOX, HIPAA, GDPR etc. is desired.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
Senior Security Engineer
Security engineer job in Lehi, UT
Our Company Changing the world through digital experiences is what Adobe's all about. We give everyone-from emerging artists to global brands-everything they need to design and deliver exceptional digital experiences! We're passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen.
We're on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!
Position summary:
The Senior Security Engineer position will be part of the Enterprise Security organization consisting of IAM professionals across several technologies. This specific position will have a specialized role in directory services and SaaS applications! It will focus on large implementations of Entra ID with integrations with other directories, IDPs, applications, and automated workflows. We give technical direction, administer tools, and provide support for various security technologies. We participate in driving Enterprise Security projects that use our cloud directory services for various internal and external Adobe services. We work with other specialists, architects, security teams, and software engineer teams across Adobe and collectively provide services, guidance, and strategies that protect services and data as well as adhere to various global government regulations. You will work with business customers, management teams, infrastructure teams, development teams, project managers, and other security teams to help implement the vision, structure, standards, and plan solutions that support the future architecture.
At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists! You will also be surrounded by colleagues who are committed to helping each other grow through our Check-In approach where ongoing feedback flows freely.
If you're looking to make an impact, Adobe is the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.
Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of race, gender, religion, age, sexual orientation, gender identity, disability or veteran status.
Primary Responsibilities May Include, but Are Not Limited To:
* Managing deep and complex directory architectures and services span directories, IDPs, and federated environments.
* Providing guidance and architecting solutions for directory service strategies across a variety of internal customers at Adobe.
* We help test, implement, and support secure services used by end-users, devices, and application workflows to all of Adobe.
* We engineer secure identity solutions for on-premises and cloud environments.
* We are a team of Security Engineers that handle incoming requests, respond to issues, solve reported problems, and develop solutions.
* We meet with teams to get business requirements, understand workflows, and devise solutions.
* We help assess SaaS implementations for identity integrations and general security.
* We generate useful metrics to help make decisions, identify issues, and manage our sevices.
Requirements:
* Possess a Bachelor's or advanced degree in MIS, Computer Science, Cybersecurity, or Engineering OR 10+ years in IT or Cybersecurity
* Comfortable working on and leading different projects with many teams at one time
* In-depth understanding of Windows, Mac and UNIX/Linux based systems, permissions, and interoperability.
* Strong knowledge of machine to machine and application to machine connections using MFA, certificates, tokens, and other methods.
* Strong understanding of the identity lifecycle, secure by design, least privileged and zero trust.
* An in-depth knowledge and understanding of managing and securing cloud directories (e.g. Entra ID/AWS/Okta) and integrating with traditional directories (e.g. Active Directory/389DS/ LDAP based directories).
* Proficient in written and verbal communications, skilled at working alongside differing viewpoints to accomplish shared objectives.
* Able to work independently and as a team member.
* Capable of conveying technical concepts to diverse audiences including non-technical users, architects, and senior leadership.
* Professional written, verbal, and presentation communication skills to engage with senior leadership.
* A deep understanding of Cloud Directories, especially Entra ID, and how to secure it, use conditional access policies, and apply/create automation.
* Ability to teach and mentor others while fostering a collaborative environment.
* Can model leadership behavior and help to grow other's leadership behavior.
Preferred:
* Understanding of Desktop operating systems including Windows, Linux, and Mac
* Experience or knowledge of Public Key Infrastructure
* Strong abilities in programming/scripting languages for automating repeatable tasks like Python, PowerShell, etc.
* Experience and/or Knowledge of dashboarding and log correlation engines such as Grafana, Telegraph, Splunk, etc.
* Experience with SaaS Security Posture Management technologies.
* Experience with developing PowerBI dashboards.
The Person Should:
* Have strong social skills, ability to "win people over" and be a great teammate.
* Be able to communicate, influence and mentor across business and executive leadership as well as partners while being able to explain the benefits for their teams.
* Be neutral toward technology, vendor and product choices; more interested in results than in personal preferences.
* Have the ability to think creatively and to solve complex tasks and problems with minimal direction.
Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $168,200 -- $310,100 annually. Pay within this range varies by work location and may also depend on job-related knowledge, skills, and experience. Your recruiter can share more about the specific salary range for the job location during the hiring process. In California, the pay range for this position is $214,100 - $310,100 In Washington, the pay range for this position is $194,000 - $281,000
At Adobe, for sales roles starting salaries are expressed as total target compensation (TTC = base + commission), and short-term incentives are in the form of sales commission plans. Non-sales roles starting salaries are expressed as base salary and short-term incentives are in the form of the Annual Incentive Plan (AIP).
In addition, certain roles may be eligible for long-term incentives in the form of a new hire equity award.
State-Specific Notices:
California:
Fair Chance Ordinances
Adobe will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and "fair chance" ordinances.
Colorado:
Application Window Notice
If this role is open to hiring in Colorado (as listed on the job posting), the application window will remain open until at least the date and time stated above in Pacific Time, in compliance with Colorado pay transparency regulations. If this role does not have Colorado listed as a hiring location, no specific application window applies, and the posting may close at any time based on hiring needs.
Massachusetts:
Massachusetts Legal Notice
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Adobe is proud to be an Equal Employment Opportunity employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call **************.
Security Engineer
Security engineer job in Sandy, UT
Design and support secure infrastructure across cloud and on-prem environments while managing key security tools and processes. This role focuses on integrating security into development workflows, responding to incidents, and driving automation to improve efficiency. Success in this position requires strong scripting skills, a collaborative mindset, and a solid understanding of modern security practices and compliance standards.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Engineer and sustain a hybrid‑security architecture that protects on‑premises infrastructure, Microsoft Azure services, and Microsoft 365, ensuring high availability and documented secure baselines.
Serve as the primary security‑engineering liaison to the managed SOC, refining detection logic, tuning alert thresholds, and providing Tier‑3 escalation support for complex incidents.
Administer and optimize core security platforms including; endpoint protection, network detection, email/web filtering, firewalls, VPN, and backup / DR systems.
Embed DevSecOps controls into CI/CD pipelines (Azure DevOps), integrating SAST, DAST, secret‑scanning, IaC checks, and policy gate reviews; facilitate threat modeling and secure‑code standards with development teams.
Run the vulnerability‑management program: schedule scans, validate and risk‑rank findings, drive remediation with system owners, and report key metrics to the CISO.
Govern identity and privileged access across on‑prem Active Directory and Microsoft Entra ID (Azure AD); enforce least‑privilege roles, MFA, periodic entitlement reviews, and break‑glass account processes.
Administer enterprise Data Loss Prevention (DLP) and information‑protection controls for Microsoft Purview/M365, endpoints, and web gateways by defining policies and tuning detectors.
Manage encryption and certificate services, including PKI, TLS endpoint configuration, and key‑vault operations, ensuring timely renewal and compliance with regulatory standards.
Automate and document security workflows using PowerShell, Python, or Terraform (e.g., configuration drift checks, compliance evidence collection) to reduce manual effort and improve consistency.
Contribute to incident‑response readiness by maintaining runbooks, participating in tabletop exercises, and coordinating post‑incident root‑cause analysis and lessons learned.
Develop and maintain security policies, standards, and procedures aligned to NIST CSF, FFIEC, and FDIC guidance; provide audit evidence and executive‑level control‑effectiveness reporting.
Collaborate with IT teams to ensure security is integrated into all infrastructure and application deployments.
ADDITIONAL RESPONSIBILITIES
Demonstrates high degree of professionalism in communication, attitude and teamwork with customers, peers, and management
Demonstrates the ability to work independently with minimal supervision
Demonstrates the ability to work in a dynamic environment capable of managing multiple IT related projects simultaneously
Demonstrates high level of quality work, attendance, and appearance
Adheres to all Company Policies & Procedures and Safety Regulations
Adheres to local, state, and federal laws
Understands and complies with all company rules and regulations
Attends training and maintains a basic knowledge of procedures to ensure compliance with laws and regulations governing financial institutions, as they apply to your position and job responsibilities, with an emphasis on the BSA/AML/CIP, Consumer Privacy, Regulation CC, Information Security, Bank Protection Act, FACT-Identity Theft, Information Technology and GLBA.
Additional duties as assigned as it relates to the position
SUPERVISORY RESPONSIBILITIES
This position does not have supervisory responsibilities
MINIMUM QUALIFICATIONS
A bachelor's degree in computer science or information systems
5+ years equivalent experience required
COMPETENCIES:
Adaptability
Communication
Decision Making
Initiative
Innovation
Motivator
Organization
Professionalism
Results Orientated
PHYSICAL DEMANDS: In general, the following physical demands are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to allow differently-abled individuals to perform the essential functions of the job.
Standing, walking, and squatting less than fifty percent of the work shift
Required to lift, move, and carry up to 40 pounds
Ability to read, count and write to accurately complete all documentation and reports
Must be able to see, hear and speak in order to communicate with employees and other customers
Specific vision abilities include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus
Manual dexterity required using hands to finger; handle, feel and type; reach with hands and arms
(Check the box that applies by double clicking on the box.)
Sedentary: Limited activity, no lifting, limited walking
Moderate: Mostly standing, walking, bending, frequent lifting
X Light: Office work, some lifting, bending, stooping, or kneeling, walking
Arduous: Heavy lifting, bending, crawling, climbing
WORK ENVIRONMENT: In general, the following conditions of the work environment are representative of those that an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to allow differently-abled individuals to perform the essential functions of the job within the environment.
The workspace is clean, orderly, properly lighted and ventilated with the proper safety compliance
Noise levels are considered moderate
Sunwest Bank Is an Equal Opportunity Employer
Sunwest Bank works with staff members and customers without regard to race, ancestry, national origin, sex, marital status, age, religion, medical condition, handicap, disability, or veteran status and to assist the Bank in maintaining its Affirmative Action Program.
Compliance with Bank Secrecy Act laws and regulations is considered an extremely serious matter, and it is intended that Sunwest Bank, through the purposeful efforts of its employees and officers, are expected to make every resolute attempt to conform to its Bank Secrecy Act Program and Procedures. Failure to comply will be reflected in their performance review as well as in any bonus compensation programs in which they may participate.
Attend and complete all required classroom, computer-based, web-based and seminar training. It is the individual responsibility of every employee to maintain a current awareness and understanding of and to fully comply with Sunwest Bank's “Code of Ethics and Conduct.” Each employee is also expected to maintain an awareness of the laws, regulations, internal policies, and procedures that are appropriate for his/her position
Note: The preceding has been designed to indicate the general nature and level and work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job. All job descriptions can be amended without notice as warranted by business necessity.
Senior Security Engineer
Security engineer job in Lehi, UT
GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more. Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand. Thousands of professionals deploying home efficiency and solar solutions rely on GoodLeap's proprietary, AI-powered applications and developer tools to drive more transparent customer communication, deeper business intelligence, and streamlined payment and operations. Our platform has led to more than $30 billion in financing for sustainable solutions since 2018.
GoodLeap is also proud to support our award-winning nonprofit, GivePower, which is building and deploying life-saving water and clean electricity systems, changing the lives of more than 1.6 million people across Africa, Asia, and South America.
Position Summary
The GoodLeap security team is responsible for both business enablement and safeguarding the organization's information assets; it is involved in virtually all aspects of the business, from product safety and resilience, to building security paved roads, customer, partner, and regulatory trust, managing technology governance and compliance, and ensuring the privacy, and safety of GoodLeap's customers, partners, and employees information.
The senior security engineer role provides a unique opportunity to shape the security and resilience of GoodLeap corporate systems, services, and operational processes. In this role, you will work closely with product, engineering, IT, and business teams within GoodLeap, acting as the key individual with both the authority and responsibility to ensure the safety and resilience of enterprise systems, products, and services.
Your oversight will encompass:
* Enterprise systems:Identifying potential misuse and abuse cases, proposing solutions to address these scenarios, and identifying product features, configuration settings, and/or mitigating or compensating controls to meet resilience requirements.
* Build-time controls: Managing applications/products security controls and activities during development.
* Runtime controls: Overseeing security measures at runtime, from prevention to detection and response.
Additionally, you will be involved with aspects of internally built products and represent all areas of security, spanning governance, risk, and compliance (GRC) to security monitoring, for a number of departments/teams. You will also have the authority and ability to involve other security team members as needed.
While you will take on multiple responsibilities-from advisor to builder and beyond-your primary focus will be designing and building security patterns and practices for services and processes, and fostering strong relationships with product, business, and engineering.
Essential Job Duties & Responsibilities
* Lead, participate in, and contribute to partnerships between security, IT, General & Administrative teams, engineering, product, and operations teams to build, orchestrate, and automate security controls and services in GoodLeap enterprise systems, products, services, and operational processes.
* Identify potential misuse and abuse cases in enterprise systems, propose solutions to address these scenarios, and identify product features, configuration settings, and/or mitigating or compensating controls to meet resilience requirements.
* Support or develop components of the security analytics platform.
* Contribute to investigations, threat hunting, and incident response activities in a supporting role.
* Collaborate with the monitoring and response team to create playbooks for specific incident response scenarios related to the products and services you oversee. These investigations, incidents, and playbooks may address security, fraud, privacy, resilience, and related concerns.
* Support the security operations team with the vulnerability management lifecycle for products and services under your purview.
* Ensure technical alignment for the products and services you oversee with team initiatives, including GRC, security operations, and monitoring and response activities.
Required Skills, Knowledge & Abilities
* Strong communicator with the ability to lead technical architecture discussions, drive technical decisions, and effectively communicate with non-technical audiences.
* Expertise in agile product lifecycles. Ideally, you have experience in a product manager or engineering manager role and understand how SaaS products (B2B, B2B2C, and B2C) are built, including roadmap planning and feature and defect prioritization.
* Experience with threat modeling methodologies, with the ability to create efficient and scalable approaches to conducting such assessments.
* Familiarity with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, and IAM (knowledge of GCP and/or Azure is a plus).
* Proven ability to establish credibility and build trust with business, engineers, and operational staff; confident yet humble.
* Hands-on experience with managing security for core enterprise systems, e.g., ERP, HCM, Salesforce, etc.
* Strong understanding of both human and non-human identity management and common enterprise and consumer authentication standards and use cases.
* Practical experience with CI/CD pipelines and DevOps tools, including Infrastructure-as-Code (IaC) tools like Terraform, Pulumi, or CDK; GitHub and GitHub Actions; artifact management; and secrets management tools like Doppler and HashiCorp Vault.
* Passionate about learning new technologies. While you're not expected to know everything, you should demonstrate a willingness and ability to learn as needed.
* Prior experience interfacing and supporting with G&A teams, internal product teams, and other cross-functional areas.
* Proficiency in writing automation scripts in multiple languages, with prior experience automating security processes in cloud or SaaS environments.
* Experience engaging with vendors in design partnerships.
* Experience overseeing vulnerability and threat management at the platform and application levels.
* Familiarity with penetration testing and red team exercises, including manual verification, exploitation, and lateral movement.
* Ability to balance a high-level view of security strategy with attention to detail, ensuring thorough and effective execution.
$146,000 - $170,000 a year
In addition to the above salary, this role may be eligible for a bonus.
Additional Information Regarding Job Duties and s:
Job duties include additional responsibilities as assigned by one's supervisor or other managers related to the position/department. This job description is meant to describe the general nature and level of work being performed; it is not intended to be construed as an exhaustive list of all responsibilities, duties and other skills required for the position. The Company reserves the right at any time with or without notice to alter or change job responsibilities, reassign or transfer job position or assign additional job responsibilities, subject to applicable law. The Company shall provide reasonable accommodations of known disabilities to enable a qualified applicant or employee to apply for employment, perform the essential functions of the job, or enjoy the benefits and privileges of employment as required by the law.
If you are an extraordinary professional who thrives in a collaborative work culture and values a rewarding career, then we want to work with you! Apply today!
We are committed to protecting your privacy. To learn more about how we collect, use, and safeguard your personal information during the application process, please review our Employment Privacy Policy and Recruiting Policy on AI.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Sr. Security Analyst
Security engineer job in South Jordan, UT
Job Description
Lightspeed is a leading provider of cloud-based software for dealerships and Original Equipment Manufacturers (OEMs), serving the Powersport, Marine, RV, Trailer, Outdoor Power Equipment, and Golf Cart industries. Lightspeed's Dealer Management Solution (DMS) enables dealerships to optimize their end-to-end business operations, including sales, parts, service, rentals, accounting, and Customer Relationship Management (CRM). When implemented into their daily operations, Lightspeed helps dealers increase their profitability by selling more units, service, and parts, all while creating a more streamlined experience for customers. For nearly 40 years, Lightspeed has been empowering 4,500+ dealers across North America with the tools and technology they need to manage their dealerships.
The Senior Security Analyst is responsible for team lead activities, such as monitoring, analyzing, and responding to security incidents across enterprise systems, cloud environments, and networks. This role ensures the confidentiality, integrity, and availability of organizational information through proactive detection, incident response, and continuous improvement. The ideal candidate will have a strong technical background in leading threat analysis, SIEM integration and management, vulnerability management, and incident handling.
What you'll do:
Monitor and investigate security alerts and events across SIEM, EDR, and network systems.
Conduct root cause analysis and coordinate remediation of security incidents.
Lead vulnerability assessments and ensure timely patching and mitigation.
Develop and maintain incident response playbooks and escalation procedures.
Collaborate with IT, DevOps, and Development teams to strengthen overall security posture.
Lead proactive threat hunting and continuous tuning of detection mechanisms.
Support internal and external audits (e.g., SOC 2) and risk assessments by providing evidence and guidance.
Perform firewall management, including rule changes, troubleshooting, and SOP development for hybrid cloud/on-prem environments.
Lead to red/blue team exercises and implement findings to improve defenses.
Coordinate and assist with enterprise pen-tests, risk assessments, and compliance initiatives.
Serve as a lead security advisor to business and technical teams, providing guidance on secure design, risk mitigation, and compliance using industry frameworks and best practices.
What you should have:
Qualifications:
Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
8+ years of experience in information security, incident response, or SOC operations.
Proven hands-on experience with SIEM tools (Splunk, Sentinel, QRadar, etc.) and EDR/XDR platforms (CrowdStrike, Darktrace, Microsoft Defender).
Strong experience securing and monitoring cloud environments (AWS, Azure).
Deep knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2).
Advanced scripting and automation proficiency (Python, PowerShell, Terraform).
Excellent analytical, problem-solving, and communication skills.
Preferred Qualifications:
Relevant certifications such as AWS Security, CISSP, GCIH, GCIA, GPEN, GWAPT preferred.
Experience integrating AI and automation into security operations workflows.
Hands-on experience performing dynamic application security testing and red team exercises across endpoint and cloud environments.
Expert-level networking and firewall expertise with platforms such as Palo Alto, Cisco, or Checkpoint.
Master's degree in Cybersecurity, Information Technology, or a related field.
Inclusion and Diversity at Lightspeed:
At Lightspeed, we celebrate the uniqueness of every individual and encourage diverse perspectives. We believe that inclusion drives innovation and fosters meaningful connections. We are committed to building an environment where everyone feels valued and empowered to make an impact.
Equal Employment Opportunity Statement:
Lightspeed is an Equal Opportunity Employer and is dedicated to building a diverse and inclusive workforce. All qualified applicants will be considered for employment without regard to race, color, creed, ancestry, national origin, gender, sexual orientation, gender identity, gender expression, marital status, religion, age, disability, veteran status, or any other protected category.
Important Note:
Applicants must be authorized to work in the U.S.
Ready to apply?
Take the next step in your career-apply today and join a team where your skills will make an impact!
Physical Security Systems Administrator
Security engineer job in West Jordan, UT
Job Title: Physical Security Systems Administrator Job Type: Full-Time | On-Site About NOVVA: NOVVA Data Centers is a privately held data center company providing state-of-the-art wholesale and multi-tenant colocation services in Utah, Colorado, and Nevada. NOVVA was designed and built with sustainability, scalability, and security in mind. We deliver exceptional client experiences by combining advanced technology, sustainable design, and innovative security practices in world-class data center environments.
Position Overview:
The Physical Security Systems Administrator is responsible for administering, maintaining, and optimizing NOVVA's enterprise-level physical security systems - including LenelS2 OnGuard access control and Milestone XProtect video management systems. This role ensures the reliable and secure operation of NOVVA's access control and surveillance infrastructure across all data center facilities. This role will focus on maintaining and troubleshooting Access Control (ACS), Video Management (VMS), Audio-Visual (AV) systems, and structured cabling infrastructure. The ideal candidate will ensure compliance with corporate standards, optimize system performance, and address technical issues effectively.
The ideal candidate brings a strong technical background, hands-on experience with enterprise security platforms, and a proactive approach to ensuring uptime, performance, and compliance in mission-critical environments.
Key Responsibilities:
System Administration & Maintenance
* Administer and maintain LenelS2 OnGuard and Milestone XProtect systems across all NOVVA data center locations.
* Monitor system health, network connectivity, storage, and server performance to ensure reliability and redundancy.
* Manage and configure user access levels, credentials, and badge permissions within OnGuard.
* Oversee camera configurations, recording policies, and retention schedules within Milestone.
* Perform regular software updates, firmware upgrades, and database backups in coordination with IT and vendors.
* Assist in the implementation of new systems and upgrades at the site, ensuring alignment with corporate specifications and standards.
Operational Support & Incident Response
* Provide day-to-day operational and technical support for access control and video surveillance systems.
* Respond to alarms, alerts, and incident investigations in coordination with Security and Operations teams.
* Maintain accurate system documentation, network diagrams, and change management records.
* Support onboarding and offboarding processes for employee and contractor badge access.
Integration & Project Support
* Support integrations between OnGuard, Milestone, and other enterprise systems such as Active Directory, visitor management, and building automation.
* Participate in the planning, deployment, and commissioning of new physical security installations or expansions.
* Collaborate with internal stakeholders and vendors to ensure timely and compliant delivery of security projects.
Security Compliance & Best Practices
* Ensure physical security systems align with NOVVA's security policies and compliance standards (SOC 2, ISO 27001, etc.).
* Maintain best practices for system hardening, access management, and data retention.
* Assist in audits, risk assessments, and incident investigations as needed.
Documentation and Reporting
* Maintain accurate records of system configurations, maintenance activities, and troubleshooting efforts for tracking and accountability.
* Generate routine reports for the Facilities Technology Manager, detailing system health, repairs, and updates performed
Qualifications:
Required
* 3+ years of experience supporting enterprise access control and video management systems.
* Hands-on experience with LenelS2 OnGuard and Milestone XProtect platforms.
* Strong understanding of IP networking, Windows Server environments, and SQL database administration.
* Experience with Active Directory integration, virtualized environments (VMware/Hyper-V), and network storage systems.
* Strong troubleshooting, documentation, and communication skills.
* Proficiency in tools like AutoCAD, Bluebeam, Revit, and construction/project management platforms (e.g., Procore).
* Must be able to lift and carry equipment weighing up to 50 lbs., perform rack installations, run cabling, and engage in other physical labor associated with IT infrastructure deployment and maintenance.
Preferred
* LenelS2 Certified Professional (LCP) or Milestone Certified Design Engineer/Technician certifications.
* Experience supporting physical security infrastructure in data center or critical facility environments.
* Familiarity with intrusion detection, intercom, and visitor management systems.
* Understanding of compliance frameworks relevant to physical and information security.
Work Environment
* Standard business hours with occasional after-hours support for critical incidents or maintenance.
* On-site position located at NOVVA's West Jordan, Utah campus, with occasional travel to other NOVVA sites.
Why Join NOVVA:
At NOVVA, you'll be part of a forward-thinking organization redefining the data center experience through innovation, sustainability, and security. We offer a collaborative culture, opportunities for professional growth, and a chance to work with cutting-edge technology in one of the most advanced data centers in the country.
Sr. Security Engineer
Security engineer job in Payson, UT
Full-time Description
Rocky Mountain is hiring a new Team Member to join our IT Department as a Sr. Security Engineer.
For over 40 years, Rocky Mountain ATV/MC has grown to become one of the world's largest providers for power-sport enthusiasts - having the largest selection of riding gear and parts available. Rocky Mountain ATV/MC is not just a distributor, we are also gear testers, product developers, manufacturers of off-road parts/components, and one of the powersports industries leading resources for instruction and demonstration.
There has never been a better time to start your career with us! In 2021, Rocky Mountain ATV/MC became a 100% Employee-Owned Organization. Come join us as an Employee-Owner and work with the best in a fast paced, exciting industry. Do you love powersports? Do you want to work for a company with a fun and rewarding environment? Rocky Mountain ATV/MC is that company, we are comprised of powersports enthusiasts just like you. We currently have amazing opportunities for dynamic and dependable individuals who want to share their passion and experience. GET READY.
As a colleague at Rocky Mountain ATV/MC, you can enjoy benefits and perks including:
Employee Stock Ownership Program (ESOP)
Competitive compensation with regular bonuses
Excellent tuition reimbursement, graduation bonus and ZERO interest education loans for all employees
Delicious onsite cafeterias with discounted meals
Excellent Medical, Dental, Vision, and Voluntary Life insurance plans
401K with company match
PTO and holiday pay
Wellness programs and discounted local gym membership
Powersport and wellness race/participation reimbursements
Generous employee discount on thousands of products
Career advancement, professional development, and opportunities to grow
What you will do in this role:
Assist in the development, testing, and implementation of secure end-user security technologies
Conduct static and dynamic code analysis using industry standard tools
Ability to effectively give, receive, and respond to feedback
Ensure company compliance with security standards and company policy
Create and maintain company documentation regarding security policies and procedures
Mentor and train junior team members
Make recommendations in response to current security events, covering the spectrum from sudden zero-day vulnerabilities to upcoming end-of-life system preparations
Research and give security recommendations regarding new technologies, evolution of business requirements, system and network designs
Ability to troubleshoot security related issues
Monitor security posture, respond to incidents, and manage day-to-day security tasks
Work collaboratively and cooperatively with others, committing to a workplace of teamwork, dignity, and respect
Other duties as assigned
How you will thrive in this role:
CCSP or similar
Working knowledge of next-gen firewall administration and configuration, network security, and operations best practices
5+ years of information security applications and systems experience
5+ years of experience with network security, endpoint security, or security threat vectors
1+ year of Packet Analysis experience
Excellent communications skills
Good Project Management skills
Well versed in security frameworks (NIST/CIS)
Ability to conduct forensic analytical studies and investigations effectively and efficiently
Detail oriented
Networking - VLAN, WAN, LAN, Routers, Switches, Access Points, Firewalls, IPS, VPN, etc
Proficiency with LINUX commands
Scripting skills (python, PowerShell, bash)
Ability to understand, read, and/or comprehend instructions and directions including different numbers and specifications
Be a collaborative team player who is willing to work with others and independently.
Strong work ethic focused on commitment, pride of work, quality, desire to learn, and dependability
Physical Demands:
Position performance will require the regular physical ability to walk and function in elevation changes means of self-propulsion to include steps, ladders, and varied walking and working surfaces. Ability to negotiate warehouse work areas in a safe manner and behavior. Vision abilities specific to the position will include close vision, peripheral vision, depth perception, and the ability to focus. Performing in this role will require the use of hands to use and handle tools, objects, materials, and controls. Performance requires the frequent ability to sit, talk, hear, stand, climb, balance, stoop kneel, crouch, or crawl. Employee may have to lift and/or move up to 45 pounds.
Equality:
Rocky Mountain ATV/MC is proud to be a company of inclusion, belonging, and fairness. We rely on our colleagues to collaborate, have a voice, and perspective. We embrace everyone and are proud to be an equal opportunity employer that does not discriminate on the basis of race, color, ethnicity, ancestry, religion, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity/expression, veteran status, or genetic information or any other category protected under applicable law.
Information Security and Compliance Analyst
Security engineer job in Pleasant Grove, UT
At Veracity, we aim to be a different kind of insurance partner - one that is free from outside investors, venture capital, or the pressures of a corporate parent. Ours is a culture of empowerment - one that believes in effort, results, and accountability. We believe that transparency fosters trust, trust fosters growth, and that growth drives innovation. Our commitment to rigorous evaluation and relentless execution lead to rapid evolution.
We answer only to the small business owners we serve, and this independence allows us to stay focused on what matters most: helping their businesses thrive by providing expert guidance and best-in-class insurance policies.
We're growing fast and want you to be a part of it!
We're seeking a talented, detail-oriented Information Security and Compliance Analyst to join our team. Reporting to the Technical Operations and Information Security Manager, this role is responsible for supporting the organization's cybersecurity posture by maintaining and enhancing security policies, controls, and monitoring systems, and ensuring compliance with frameworks such as SOC 2 and PCI DSS to protect company and client data.
Key Responsibilities
Strengthen the organization's cybersecurity posture by implementing, maintaining, and improving security policies, standards, and technical controls
Monitor security tools and system activity to identify, investigate, and escalate potential threats or vulnerabilities
Support vulnerability management, including performing scans, tracking remediation, and validating fixes
Maintain accurate, audit-ready documentation and coordinate evidence collection for SOC 2, PCI DSS, and other compliance frameworks
Support incident response processes, including triage, documentation, and post-incident follow-up
Assist with user access reviews, control testing, risk assessments, and security awareness efforts
Collaborate with IT, Engineering, and Compliance teams on secure configurations, remediation plans, and cross-functional security initiatives
Participate in routine policy, procedure, and control reviews to ensure alignment with regulatory requirements and security best practices
Maintain detailed logs and reports of security activities, metrics, and compliance obligations
Identify opportunities to strengthen controls, streamline processes, and enhance overall security program maturity
Required to perform other duties as requested, directed, or assigned
Requirements and Qualifications
Bachelor's degree in information systems, IT, Cybersecurity, or a related field
2-3 years of experience in security compliance, auditing, or governance (SOC 2 experience preferred)
Strong integrity, attention to detail, and accountability in handling sensitive or regulated information
Proactive problem-solving skills with the ability to anticipate and address risks effectively
Strong collaboration and communication skills with experience working across technical and compliance teams
Ability to remain composed and effective under pressure, including during audits and security incident
Perks
Health, dental, and vision plans
Amazing work-life balance with 4 weeks of Paid Time Off
10 Paid Company Holidays with 2 floating holidays
401K Programs with employer match
Personal assistance programs for support in a healthy personal and work life
Why Veracity?
Here at Veracity, you'll be part of a team of trailblazers and visionaries. We're not just revolutionizing the way people “do” insurance; we are creating a whole new paradigm. Here, you will experience a vibrant and inclusive workplace where your ideas matter! With us, you have a chance to:
Engage in groundbreaking projects that are reshaping the insurance landscape
Collaborate with a group of dedicated, like-minded professionals
Experience a culture that prioritizes growth and development
Compensation Range: $75k/yr - $85k/yr
We are proud to be an equal-opportunity employer. We are committed to providing equal opportunities to all qualified applicants, regardless of race, color, religion, sex, national origin, disability, or any other legally protected characteristics.
If you need accommodation, please let us know during the interview process.
Auto-ApplyCyber Security Engineer
Security engineer job in Ogden, UT
Blu Omega is looking for an experienced Cyber Security Engineer to support a highly secure Department of Defense customer in Ogden, UT. This position supports a major initiative focused on modernizing legacy network systems and transitioning mission services into an AWS-based cloud environment while maintaining strict DoD security compliance.
Responsibilities:
Design, implement, and maintain Secure Cloud Computing Architecture (SCCA) security controls, including Virtual Data Center Security Stack (VDSS) and Boundary Cloud Access Point (BCAP).
Partner with DoD stakeholders to ensure cloud platforms comply with established security standards such as NIST 800-53, STIGs, and FedRAMP+.
Enforce Trusted Cloud Credential Management (TCCM) policies to protect identity, authentication, and cloud credentials.
Configure and manage cloud security monitoring, logging, and alerting solutions using tools such as SolarWinds, ELK, and cloud-native security services.
Support the onboarding and migration of applications and systems into the cloud, ensuring security controls are properly applied throughout the transition.
Collaborate with engineering and security teams to implement Zero Trust Architecture principles within cloud environments.
Contribute to Authorization to Operate (ATO) activities by documenting security controls, mapping inherited controls, and supporting eMASS submissions.
Provide technical leadership by advising on cloud security best practices and mentoring junior cybersecurity staff.
Qualifications:
Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a closely related discipline, or equivalent professional experience.
CompTIA Security+ certification (required).
Preferred DoD-recognized cloud security certifications such as AWS Certified Security - Specialty or Microsoft Azure Security Engineer.
7+ years of hands-on cloud security experience, with expertise in at least one major cloud service provider (AWS, Azure, or OCI).
Demonstrated experience implementing and managing cloud security controls, including IAM, logging, monitoring, and compliance enforcement.
Background in security incident response, vulnerability management, and cloud compliance assessments.
Strong analytical, troubleshooting, and problem-solving skills within complex cloud environments.
In-depth knowledge of DoD cloud security requirements, including NIST 800-53 controls, STIGs, and FedRAMP+ frameworks.
Experience using automation and infrastructure-as-code tools such as Terraform, Ansible, and PowerShell to manage secure cloud configurations.
Salary Range: $130,000 - $145,000
Our final salary offer will be based on several factors, including depth of technical skills, work experience, education, certifications, and clearance
What Blu Omega Can Offer You:
Competitive benefits including Health Insurance, 401K w/ match, Paid Time Off and more.
Results driven culture that embrace our core values
Rewarding work contributing to our Nation's mission critical programs
Blu Omega is a Woman Owned Small Business Federal Technology services firm headquartered in Washington DC and supporting clients nationally. We provide Technology solutions for enterprise and government customers. Our team has a past performance in a diverse range of programs including those for Data Management, Cloud/Infrastructure, Software Development and Enterprise Applications.
An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Network Security Analyst
Security engineer job in Lehi, UT
Mindlance is a national recruiting company which partners with many of the leading employers in the Life Sciences, IT, and Financial Services sectors, feel free to check us out at *************************
Job Description
Job Title: Network Security Analyst
Duration: 6 Months
Location: Lehi, UT
Required:
• Minimum 3+ years exp.
• Experience with implementing policy on firewalls (Juniper & Palo alto experience preferred)
• Review requests for new firewall policy
• Understanding of IP stack
• Ability to prioritize work and meet defined SLAs
• Good communication skills - both verbal and written
Additional InformationThanks & Regards,
______________________________________________________________________________________________________
Vikram Bhalla | Team-Recruitment | Mindlance, Inc. | Office: **************
Sr. Security Analyst
Security engineer job in South Jordan, UT
Lightspeed is a leading provider of cloud-based software for dealerships and Original Equipment Manufacturers (OEMs), serving the Powersport, Marine, RV, Trailer, Outdoor Power Equipment, and Golf Cart industries. Lightspeed's Dealer Management Solution (DMS) enables dealerships to optimize their end-to-end business operations, including sales, parts, service, rentals, accounting, and Customer Relationship Management (CRM). When implemented into their daily operations, Lightspeed helps dealers increase their profitability by selling more units, service, and parts, all while creating a more streamlined experience for customers. For nearly 40 years, Lightspeed has been empowering 4,500+ dealers across North America with the tools and technology they need to manage their dealerships.
The Senior Security Analyst is responsible for team lead activities, such as monitoring, analyzing, and responding to security incidents across enterprise systems, cloud environments, and networks. This role ensures the confidentiality, integrity, and availability of organizational information through proactive detection, incident response, and continuous improvement. The ideal candidate will have a strong technical background in leading threat analysis, SIEM integration and management, vulnerability management, and incident handling.
What you'll do:
Monitor and investigate security alerts and events across SIEM, EDR, and network systems.
Conduct root cause analysis and coordinate remediation of security incidents.
Lead vulnerability assessments and ensure timely patching and mitigation.
Develop and maintain incident response playbooks and escalation procedures.
Collaborate with IT, DevOps, and Development teams to strengthen overall security posture.
Lead proactive threat hunting and continuous tuning of detection mechanisms.
Support internal and external audits (e.g., SOC 2) and risk assessments by providing evidence and guidance.
Perform firewall management, including rule changes, troubleshooting, and SOP development for hybrid cloud/on-prem environments.
Lead to red/blue team exercises and implement findings to improve defenses.
Coordinate and assist with enterprise pen-tests, risk assessments, and compliance initiatives.
Serve as a lead security advisor to business and technical teams, providing guidance on secure design, risk mitigation, and compliance using industry frameworks and best practices.
What you should have:
Qualifications:
Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent experience.
8+ years of experience in information security, incident response, or SOC operations.
Proven hands-on experience with SIEM tools (Splunk, Sentinel, QRadar, etc.) and EDR/XDR platforms (CrowdStrike, Darktrace, Microsoft Defender).
Strong experience securing and monitoring cloud environments (AWS, Azure).
Deep knowledge of security frameworks (NIST CSF, ISO 27001, SOC 2).
Advanced scripting and automation proficiency (Python, PowerShell, Terraform).
Excellent analytical, problem-solving, and communication skills.
Preferred Qualifications:
Relevant certifications such as AWS Security, CISSP, GCIH, GCIA, GPEN, GWAPT preferred.
Experience integrating AI and automation into security operations workflows.
Hands-on experience performing dynamic application security testing and red team exercises across endpoint and cloud environments.
Expert-level networking and firewall expertise with platforms such as Palo Alto, Cisco, or Checkpoint.
Master's degree in Cybersecurity, Information Technology, or a related field.
Inclusion and Diversity at Lightspeed:
At Lightspeed, we celebrate the uniqueness of every individual and encourage diverse perspectives. We believe that inclusion drives innovation and fosters meaningful connections. We are committed to building an environment where everyone feels valued and empowered to make an impact.
Equal Employment Opportunity Statement:
Lightspeed is an Equal Opportunity Employer and is dedicated to building a diverse and inclusive workforce. All qualified applicants will be considered for employment without regard to race, color, creed, ancestry, national origin, gender, sexual orientation, gender identity, gender expression, marital status, religion, age, disability, veteran status, or any other protected category.
Important Note:
Applicants must be authorized to work in the U.S.
Ready to apply?
Take the next step in your career-apply today and join a team where your skills will make an impact!
Auto-ApplySenior Security Engineer
Security engineer job in Lehi, UT
About GoodLeap:GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more. Over 1 million homeowners have benefited from our simple, fast, and frictionless technology that makes the adoption of these products more affordable, accessible, and easier to understand. Thousands of professionals deploying home efficiency and solar solutions rely on GoodLeap's proprietary, AI-powered applications and developer tools to drive more transparent customer communication, deeper business intelligence, and streamlined payment and operations. Our platform has led to more than $30 billion in financing for sustainable solutions since 2018. GoodLeap is also proud to support our award-winning nonprofit, GivePower, which is building and deploying life-saving water and clean electricity systems, changing the lives of more than 1.6 million people across Africa, Asia, and South America.
Position Summary The GoodLeap security team is responsible for both business enablement and safeguarding the organization's information assets; it is involved in virtually all aspects of the business, from product safety and resilience, to building security paved roads, customer, partner, and regulatory trust, managing technology governance and compliance, and ensuring the privacy, and safety of GoodLeap's customers, partners, and employees information.
The senior security engineer role provides a unique opportunity to shape the security and resilience of GoodLeap corporate systems, services, and operational processes. In this role, you will work closely with product, engineering, IT, and business teams within GoodLeap, acting as the key individual with both the authority and responsibility to ensure the safety and resilience of enterprise systems, products, and services.
Your oversight will encompass: - Enterprise systems:Identifying potential misuse and abuse cases, proposing solutions to address these scenarios, and identifying product features, configuration settings, and/or mitigating or compensating controls to meet resilience requirements. - Build-time controls: Managing applications/products security controls and activities during development. - Runtime controls: Overseeing security measures at runtime, from prevention to detection and response.
Additionally, you will be involved with aspects of internally built products and represent all areas of security, spanning governance, risk, and compliance (GRC) to security monitoring, for a number of departments/teams. You will also have the authority and ability to involve other security team members as needed.
While you will take on multiple responsibilities-from advisor to builder and beyond-your primary focus will be designing and building security patterns and practices for services and processes, and fostering strong relationships with product, business, and engineering. Essential Job Duties & Responsibilities
Lead, participate in, and contribute to partnerships between security, IT, General & Administrative teams, engineering, product, and operations teams to build, orchestrate, and automate security controls and services in GoodLeap enterprise systems, products, services, and operational processes.
Identify potential misuse and abuse cases in enterprise systems, propose solutions to address these scenarios, and identify product features, configuration settings, and/or mitigating or compensating controls to meet resilience requirements.
Support or develop components of the security analytics platform.
Contribute to investigations, threat hunting, and incident response activities in a supporting role.
Collaborate with the monitoring and response team to create playbooks for specific incident response scenarios related to the products and services you oversee. These investigations, incidents, and playbooks may address security, fraud, privacy, resilience, and related concerns.
Support the security operations team with the vulnerability management lifecycle for products and services under your purview.
Ensure technical alignment for the products and services you oversee with team initiatives, including GRC, security operations, and monitoring and response activities.
Required Skills, Knowledge & Abilities
Strong communicator with the ability to lead technical architecture discussions, drive technical decisions, and effectively communicate with non-technical audiences.
Expertise in agile product lifecycles. Ideally, you have experience in a product manager or engineering manager role and understand how SaaS products (B2B, B2B2C, and B2C) are built, including roadmap planning and feature and defect prioritization.
Experience with threat modeling methodologies, with the ability to create efficient and scalable approaches to conducting such assessments.
Familiarity with AWS services, including KMS, SST, Container Registry, ELBs, Lambda, API Gateway, CloudTrail, and IAM (knowledge of GCP and/or Azure is a plus).
Proven ability to establish credibility and build trust with business, engineers, and operational staff; confident yet humble.
Hands-on experience with managing security for core enterprise systems, e.g., ERP, HCM, Salesforce, etc.
Strong understanding of both human and non-human identity management and common enterprise and consumer authentication standards and use cases.
Practical experience with CI/CD pipelines and DevOps tools, including Infrastructure-as-Code (IaC) tools like Terraform, Pulumi, or CDK; GitHub and GitHub Actions; artifact management; and secrets management tools like Doppler and HashiCorp Vault.
Passionate about learning new technologies. While you're not expected to know everything, you should demonstrate a willingness and ability to learn as needed.
Prior experience interfacing and supporting with G&A teams, internal product teams, and other cross-functional areas.
Proficiency in writing automation scripts in multiple languages, with prior experience automating security processes in cloud or SaaS environments.
Experience engaging with vendors in design partnerships.
Experience overseeing vulnerability and threat management at the platform and application levels.
Familiarity with penetration testing and red team exercises, including manual verification, exploitation, and lateral movement.
Ability to balance a high-level view of security strategy with attention to detail, ensuring thorough and effective execution.
In addition to the above salary, this role may be eligible for a bonus. Additional Information Regarding Job Duties and s:
Job duties include additional responsibilities as assigned by one's supervisor or other managers related to the position/department. This job description is meant to describe the general nature and level of work being performed; it is not intended to be construed as an exhaustive list of all responsibilities, duties and other skills required for the position. The Company reserves the right at any time with or without notice to alter or change job responsibilities, reassign or transfer job position or assign additional job responsibilities, subject to applicable law. The Company shall provide reasonable accommodations of known disabilities to enable a qualified applicant or employee to apply for employment, perform the essential functions of the job, or enjoy the benefits and privileges of employment as required by the law.
If you are an extraordinary professional who thrives in a collaborative work culture and values a rewarding career, then we want to work with you! Apply today!
We are committed to protecting your privacy. To learn more about how we collect, use, and safeguard your personal information during the application process, please review our Employment Privacy Policy and Recruiting Policy on AI.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.