The requirements listed below are representative of the knowledge, skill, and/or ability required: Build the networks by taking into consideration various factors like, bandwidth requirements, infrastructure requirements and security. Responsible for estimating growth and plan for the network upgrade to meet future demands.
Ability to work on multiple priorities and/or projects simultaneously.
Excellent listening and communications skills, both verbal and written.
flexible in working hours to support global project and migration during non-business hours.
Ability to collaborate with multiple teams to achieve project goals.
Organized, detail oriented and self-motivated.
Ability to provide and maintain detailed documentation on each project.
Demonstrate knowledge in advanced networking and infra security domain.
Ability to successfully train the operation team on the new solution(s) implemented.
Problem-solving skills and abilities to meet reasonable deadlines.
Ability to work with little supervision and manage a team.
Identify opportunities and recommend solutions for improving the overall network health by assessing overall effectiveness and efficiency.
Stay current with existing, emerging, and evolving technologies and when appropriate, make recommendations as to how we may best harness a new technology or idea.
BS in Engineering, Computer Science, or related field, with 15+ years of work experience in networking domain Have completed minimum 3 significant network solution designs In-depth knowledge of the OSI network model Experience with different network types (i.
e.
LAN, WAN, WLAN) Network protocols and technologies, e.
g.
DNS, HTTP, SSL, 802.
1x, Load Balancing, WAN optimization, SD-WAN, VPN, PKI Cisco network products (Nexus and Catalyst switches, routers, WLC, ISE) Knowledge of Palo Alto Networks firewall and IPS configuration and troubleshooting Knowledge of F5 load balancer Knowledge of public cloud is highly desirable Knowledge of Zero-Trust networking is highly desirable CCNP certification CCIE certification PCNSE certification Azure Network Engineer Associate
$144k-184k yearly est. 42d ago
Looking for a job?
Let Zippia find it for you.
Principal Cloud Security Engineer
Astreya 4.3
Security engineer job in San Ramon, CA
We are seeking an experienced and proactive DevSecOps engineer with expertise in AWS and AZURE Platforms to join our Cybersecurity Application Platform Security Team. This role combines expertise in AWS & AZURE platforms security with a strong foundation in DevSecOps practices to ensure the ‘secure by design', ‘secure by default' principles throughout development, deployment, and operation of AWS & AZURE platforms. The ideal candidate will have hands-on experience with Cybersecurity platforms, with a deep understanding of AWS & AZURE cloud platforms. This position plays a critical role in assisting customer portfolio teams to secure SaaS, PaaS platforms, maintain compliance and availability.
DevSecOps engineer role responsible for security automation of cloud services.
Job Responsibilities
Secure the AWS & AZURE Platform: Implement best practices to ensure AWS & AZURE applications are “secure by design” and “secure by default” protecting sensitive data and workflows.
Provide guidelines on usage of AppExchange / Vendor products versus using out of box capabilities with a keen eye for cybersecurity risk.
Risk Identification & Mitigation: Proactively identify security risks across the AWS & AZURE ecosystem and implement solutions to address vulnerabilities.
DevSecOps Enablement: Drive DevSecOps practices within the organization by embedding security into the development lifecycle of AWS & AZURE applications.
Collaboration with Stakeholders: Partner with various customer portfolio teams to influence their roadmaps, ensuring security is a foundational element in their strategies.
Data Security & Compliance: Ensure compliance with data protection regulations and implement robust data security measures within AWS & AZURE and integrated systems.
Cloud Integration Expertise: Leverage your knowledge of AWS & AZURE to secure integrations
Continuous Improvement: Stay up to date on emerging threats, trends, and technologies in application security to continuously improve our security posture.
Communication & Advocacy: Act as a trusted advisor on security matters, effectively communicating complex technical concepts to both technical and non-technical stakeholders.
Qualifications
We're looking for someone with:
Recent 5+ years of experience in IT focused on DevSecOps, DevOps or SecurityEngineering roles.
Recent 3+ years of shell scripting, aws-cli, python, lambda.
Recent 1+ years of Terraform deployments and Terraform templates (Infrastructure as Code).
Knowledge of and experience with CI/CD technologies.
Knowledge of and experience with continuous security practices.
Knowledge of infrastructure automation and infrastructure as code.
Demonstrated ability to integrate security practices into AWS & AZURE applications.
Proficiency in data protection techniques such as encryption, tokenization, and access controls.
Bachelor's degree in computer science, Information Security, or a related field.
Desired Skills
Experience with Salesforce, SAP, and MuleSoft architecture, development, and administration with a focus on platform security (e.g., profiles, roles, permissions, encryption).
Excellent Communication Skills: Ability to clearly articulate security concepts to diverse audiences, including engineers, product managers, and executives.
Collaboration & Influence: Proven ability to work cross-functionally with teams to align on security priorities and influence roadmaps.
Preferred Technical Skills/ Qualifications
Relevant certifications in Cybersecurity - SSCP, CISSP, CISM preferred.
AWS certifications (e.g., AWS Certified Solutions Architect or AWS Certified Security Specialty).
AZURE certifications.
Experience with regulatory frameworks like GDPR, CCPA, or HIPAA.
The ideal candidate will be passionate about security, have a proactive mindset, and be able to balance security requirements with business needs. They should be comfortable working in a fast-paced environment and be able to adapt to evolving security threats and technologies
Salary Range
$63.58 - $100.38 USD (Hourly)
Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.
Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including:
Medical provided through Cigna (PPO, HSA, EPO options) / Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through Cigna (DPPO & DHMO options)
Nationwide Vision provided through VSP
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
Corporate Wellness Program
Employee Assistance Program
Wellness Days
401k Plan
Basic Life, Accidental Life, Supplemental Life Insurance
Short Term & Long Term Disability
Critical Illness, Critical Hospital, and Voluntary Accident Insurance
Tuition Reimbursement (available 6 months after start date, capped)
Paid Time Off (accrued and prorated, maximum of 120 hours annually)
Paid Holidays
Any other statutory leaves, paid time, or other fringe benefits required under state and federal law
$63.6-100.4 hourly Auto-Apply 60d+ ago
Security Engineer
Integrated Resources 4.5
Security engineer job in Sacramento, CA
Integrated Resources, Inc., is led by a seasoned team with combined decades in the industry. We deliver strategic workforce solutions that help you manage your talent and business more efficiently and effectively. Since launching in 1996, IRI has attracted, assembled and retained key employees who are experts in their fields. This has helped us expand into new sectors and steadily grow.
We've stayed true to our focus of finding qualified and experienced professionals in our specialty areas. Our partner-employers know that they can rely on us to find the right match between their needs and the abilities of our top-tier candidates. By continually exceeding their expectations, we have built successful ongoing partnerships that help us stay true to our commitments of performance and integrity.
Our team works hard to deliver a tailored approach for each and every client, critical in matching the right employers with the right candidates. We forge partnerships that are meant for the long term and align skills and cultures. At IRI, we know that our success is directly tied to our clients' success.
Job Description
Hi,
Hope you are doing well,
I am sending you below job open with one of my direct client,
Send me your most updated copy of your resume in word document ASAP
Position: SecurityEngineer
Location: Sacramento CA
Duration 1 Year +
Start Date : 15th April 2016
Basic Qualifications (minimum 2 years' experience)
• Modern security, monitoring, and logging practices for system administration
• Modern continuous monitoring tools
• Experience with OAuth 2.0, Identity Management systems, and API authorization methods
• Experience with code quality tools, especially pertaining to code security vulnerabilities
• Experience with network level and application level security threats (i.e., SQL injection, DDOS, man in the middle attacks, etc.)
Nice to Have Skills (minimum 2 years' experience):
• Experience working with NIST 800-53 controls
• Experience working with IBM Main Frame permissions (i.e. RACF)
Additional Information
Thanks
nagesh
732-429-1641
$124k-169k yearly est. 1d ago
Offensive Security Engineer, Assessments (Web3)
Coinbase 4.2
Security engineer job in Sacramento, CA
Ready to be pushed beyond what you think you're capable of? At Coinbase, our mission is to increase economic freedom in the world. It's a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform - and with it, the future global financial system.
To achieve our mission, we're seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company's hardest problems.
Our ******************************** is intense and isn't for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there's no better place to be.
While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.
The Application Security organization at Coinbase is seeking to hire an experienced Offensive SecurityEngineer specializing in Web3 penetration testing and Web3 bug bounty program management and optimization. In this role, you will collaborate with the Bug Bounty Program Lead to drive Web3 bug bounty triage, validation, and strategic initiatives aimed at increasing program efficiency, maturity, and hacker engagement. You will work closely with whitehat hackers, securityengineers, and cross-functional teams to enhance Coinbase's security posture through an effective bug bounty program. Additionally, you will perform penetration tests on Web3 technologies and applications, ensuring the security of Coinbase's blockchain-based products and services.
*What you'll be doing (ie. job duties):*
* Conduct security assessments of Web3 products and services, including smart contracts, DeFi protocols, and blockchain infrastructure.
* Collaborate with partner teams to enhance detection and response capabilities for Web3 vulnerabilities.
* Stay informed on emerging security trends, advisories, and academic research in the Web3 space.
* Lead Web3 bug bounty triage and validation, ensuring timely and accurate assessments of reported vulnerabilities.
* Develop and implement strategies to incentivize high-quality bug bounty submissions and engage with the hacker community.
* Manage the Web3 bug bounty program, including scope updates, researcher communication, and payout disbursements.
* Analyze bug bounty data to identify trends, common vulnerabilities, and areas for improvement.
* Collaborate with engineering teams to prioritize and remediate vulnerabilities identified through the bug bounty program.
* Mentor and train junior securityengineers in Web3 bug bounty triage and analysis.
* Provide on-call support for critical Web3 bug bounty-related incidents.
* Document and report on Web3 bug bounty metrics and program effectiveness.
*What we look for in you (ie. job requirements):*
* Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
* 3+ years of experience in Web3 application security and penetration testing.
* Proven track record of identifying critical vulnerabilities across the blockchain protocol stack, Web2, and Web3 components.
* Extensive knowledge of the blockchain ecosystem, including L1/L2 networks, DeFi protocols, and staking mechanisms.
* Deep understanding of Web2 security concepts and common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
* Strong analytical skills to identify trends and patterns in vulnerabilities.
* Excellent communication skills for engaging with internal teams.
* Passion for security and a drive to improve Web3 security posture.
* Ability to work independently and take ownership of penetration testing initiatives.
* Energy and self-drive for continuous learning in the rapidly evolving crypto space.
* Excellence in clear, direct, and kind communication with technical and non-technical stakeholders.
* Experience building relationships with product, engineering, and security teams.
*Nice to haves:*
* Participation in CTFs, bug bounty programs, or open-source security research.
* Expertise in Application Security, Network Security, or Cloud Security.
* Relevant security certifications (e.g., OSCP, GPEN).
* Experience developing and implementing security tooling to support bug bounty triage and analysis.
* Experience with bug bounty programs and platforms, including triage, validation, and researcher communication.
* Strong analytical skills to identify trends and patterns in bug bounty submissions.
* Excellent communication skills to effectively engage with bug bounty researchers.
Position ID: P69494
\#LI-remote
*Pay Transparency Notice:* Depending on your work location, the target annual salary for this position can range as detailed below. Full time offers from Coinbase also include bonus eligibility + equity eligibility**+ benefits (including medical, dental, vision and 401(k)).
Pay Range:
$152,405-$179,300 USD
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the *********************************************** in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations***********************************
*Global Data Privacy Notice for Job Candidates and Applicants*
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available ********************************************************** By submitting your application, you are agreeing to our use and processing of your data as required.
*AI Disclosure*
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
*The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment*. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com
$152.4k-179.3k yearly 60d+ ago
Security GRC Engineer - 25-210
Hill Physicians Medical Group
Security engineer job in San Ramon, CA
We're delighted you're considering joining us! At Hill Physicians Medical Group, we're shaping the healthcare of the future: actively managed care that prevents disease, supports those with chronic conditions and anticipates the needs of our members. Join Our Team!
Hill Physicians has much to offer prospective employees. We're regularly recognized as one of the "Best Places to Work in the Bay Area" and have been recognized as one of the "Healthiest Places to Work in the Bay Area." When you join our team, you're making a great choice for your professional career and your personal satisfaction.
DE&I Statement:
At PriMed, your uniqueness is valued, celebrated, encouraged, supported, and embraced. Whatever your relationship with Hill Physicians, we welcome ALL that you are.
We value and respect your race, ethnicity, gender identity, sexual orientation, age, religion, disabilities, experiences, perspectives, and other attributes. Our celebration of diversity and foundation of inclusion allows us to leverage our differences and capitalize on our similarities to better serve our communities. We do it because it's right!
Job Description:
We are seeking a skilled Governance, Risk, and Compliance (GRC) Engineer to strengthen our security posture and ensure adherence to healthcare regulations. The GRC Engineer will play a vital role in designing, implementing, and maintaining risk management processes, compliance frameworks, and policies that align with healthcare regulations such as HIPAA and HITECH. The ideal candidate will have experience with tools like SAI360, CyberArk, and other compliance and security platforms.
Job Responsibilities:
* Develop, implement, and maintain GRC policies, processes, and controls in alignment with industry best practices and regulatory requirements (e.g., HIPAA, HITECH, NIST, ISO 27001).
* Perform risk assessments and develop mitigation strategies for identified security risks.
* Administer and optimize SAI360 for governance, risk management, and compliance activities, including reporting and policy management.
* Collaborate with cross-functional teams to ensure new projects and systems are designed with security and compliance in mind.
* Monitor and report on compliance status, identifying gaps and proposing remediation strategies.
* Oversee third-party vendor risk assessments and ensure adherence to security requirements.
* Support internal and external audits by providing documentation, evidence, and responses to audit findings.
* Conduct security awareness training programs and promote a culture of compliance within the organization.
Required Experience/Skills/Knowledge:
* 5+ years of experience in Governance, Risk, and Compliance roles or a related field.
* Strong knowledge of healthcare regulations, including HIPAA, HITECH, and other relevant standards.
* Proficiency in GRC tools such as SAI360 for compliance and risk management.
* Experience with privileged access management tools like CyberArk.
* Solid understanding of risk assessment methodologies and security frameworks, including NIST CSF, ISO 27001, or COBIT.
* Excellent communication and collaboration skills to engage with technical and non-technical stakeholders.
* Strong analytical and organizational skills with attention to detail.
Preferred Experience/Skills/Knowledge:
* Experience working in the healthcare industry or with Protected Health Information (PHI).
* Familiarity with tools such as Varonis, Extrahop, or SIEM platforms.
* Knowledge of data classification, data loss prevention (DLP), and data governance.
* Relevant certifications such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or Certified Risk and Information Systems Control (CRISC).
* Experience implementing compliance with NIST 2.0 or managing frameworks for healthcare-related threats.
Required Education:
* Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.
* Equivalent work experience may be considered in lieu of a degree.
Additional Information:
This role is critical in maintaining our organization's compliance with healthcare security standards and reducing risk exposure.
The position offers a collaborative environment with opportunities for professional development and certifications.
Competitive salary and benefits package, with the chance to make a significant impact on healthcare security.
Salary: $135,000 - $150,000 Annual
Hill Physicians is an Equal Opportunity Employer
$135k-150k yearly Auto-Apply 57d ago
Security Engineer III, GRC - 25-210
Primed Management Consulting 4.2
Security engineer job in San Ramon, CA
We're delighted you're considering joining us!
At Hill Physicians Medical Group, we're shaping the healthcare of the future: actively managed care that prevents disease, supports those with chronic conditions and anticipates the needs of our members.
Join Our Team!
Hill Physicians has much to offer prospective employees. We're regularly recognized as one of the “Best Places to Work in the Bay Area” and have been recognized as one of the “Healthiest Places to Work in the Bay Area.” When you join our team, you're making a great choice for your professional career and your personal satisfaction.
DE&I Statement:
At PriMed, your uniqueness is valued, celebrated, encouraged, supported, and embraced. Whatever your relationship with Hill Physicians, we welcome ALL that you are.
We value and respect your race, ethnicity, gender identity, sexual orientation, age, religion, disabilities, experiences, perspectives, and other attributes. Our celebration of diversity and foundation of inclusion allows us to leverage our differences and capitalize on our similarities to better serve our communities. We do it because it's right!
Job Description:
Under the leadership of the Senior IT Security Manager, the SecurityEngineer is responsible for the overall architecture, engineering, implementation and monitoring of security solutions/technologies to protect the confidentiality, availability, reliability and integrity of the organization's systems and data in dynamic computing environment. Develops security standards, policies and procedures. This individual will be part of the IT securityengineering team who collectively demonstrate excellent technical competence, continually ensure the highest levels of security protections and systems availability, optimization, and reliability while ensuring the best possible user digital experience. The securityengineer will have a strong background in designing enterprise security architecture and developing cyber security protection initiatives.
Specialization
Responsible for governance, risk, and compliance engineering activities.
Designs and implements security standards, policies, and technical controls.
Ensures compliance with regulatory frameworks (ISO, SOC2, SOX, NIST, HIPAA, PCI, HITRUST).
Develops and maintains audit readiness, evidence collection, and remediation processes.
Performs security assessments and risk analysis for internal and external systems.
Implements data protection measures including encryption, DLP, and privacy compliance.
Conducts vulnerability reviews, risk mitigation, and root-cause analysis of security incidents.
Maps controls to frameworks and drives continuous improvement of compliance posture.
Job Responsibilities:
Work with Sr. IT Security Manager by making recommendations on products, services, protocols, and standards in support of security infrastructure projects.
Knowledge of IT audit and control, governance and technical writing and documentation
Install, upgrade, and maintain security hardware and software systems.
Ensure the security, integrity and availability of the organization's IT Infrastructure.
Duties require knowledge and background experience in networks and datacenter and cloud infrastructure which support data, voice, and video.
Collaborate with IT departments around vulnerability remediation plan and process.
Serves as technical and functional subject matter expert across multiple security domains, raising awareness and communicating security risks within the organization as well as partners and vendors.
Provide Tier-3 escalation engineer support to daily operational issues.
Advanced knowledge of IT audit and control, governance and technical writing and documentation
Required Experience and Professional Skills
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
CRISC (Certified in Risk and Information Systems Control)
CISA (Certified Information Systems Auditor)
ISO 27001 Lead Implementer or Auditor
Strong analytical, communication, teamwork and interpersonal skills.
Excellent team player - proven ability to resolve problems professionally and systematically.
Minimum 3-5 years of security administration/engineering experience
Experience in cloud, disaster recovery planning, high-availability, backup, recovery and continuity solutions.
Healthcare and security technology services experience preferred.
Required Education and Certifications
Education
Minimum Education: Bachelor's degree in Computer Science, or equivalent combination of education, training and work experience.
Industry security certification is a plus
Additional Information
Salary: $135,000 - $150,000 Annual
Hill Physicians is an Equal Opportunity Employer
$135k-150k yearly Auto-Apply 56d ago
Security Engineer - Client Security
Meta Platforms, Inc. 4.8
Security engineer job in Fremont, CA
Meta's Client Security team is seeking experienced SecurityEngineer who have a track record of solving complex security problems at scale. Client SecurityEngineers design and develop solutions to ensure Meta's data and systems can only be accessed by trusted devices, and that applicable security policies are enforced on devices.
Minimum Qualifications
* 2+ years of combined experience designing and deploying security infrastructure (such as PKI, key management, and certificate management)
* 2+ years of software development experience in PHP, Golang, Python, C\C++, Rust, or Ruby
* Experience applying fundamental security concepts to systems
* B.S. in Computer Science or a related field, or equivalent experience
Preferred Qualifications
* Mobile Security Experience on iOS and Android platforms including MDM, security policy
* OS development experience (Windows, Mac, Linux)
* Experience managing PKI for client devices
Responsibilities
* Drive Meta's trusted devices strategy by building tools that enable connectivity to our infrastructure only from Meta owned and managed devices
* Build machine attestation and secure certificate storage solutions to enable provable client identity
* Deploy systems that help mitigate security risks by understanding and controlling what software is allowed to execute on our client devices
* Develop, validate, and enforce our client security policies
* Build and deploy tools and automation that proactively detect and respond to security risks and threats to internal corporate services
* Advise and collaborate with other teams
About Meta
Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics.
Equal Employment Opportunity
Meta is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity notice here.
Meta is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, fill out the Accommodations request form.
$158k-207k yearly est. 35d ago
Security Architect / Engineer - Zero Trust Architecture
Wavestrong
Security engineer job in Sacramento, CA
Exciting Security Architect / Engineer - Zero Trust Architecture contract opportunity.
Requirements
5 plus years of experience as a Security Architect / Engineer with expertise evaluating Zero Trust Architecture (ZTA).
ZTA implementation roadmap (Plan, Schedule, and Decks), Cybersecurity Program and Architecture Risk Review and architect and engineer support for Zero Trust Architecture (ZTA) implementation activities
Experience evaluating, recommending, and implementing commercial hardware and software security products to augment and enhance enterprise cybersecurity program.
Experience with system, device, and application-level hardening and assessing the cybersecurity posture of software, hardware, and firmware.
Experience with supporting an integrated, dynamic cyber defense and leveraging cybersecurity solutions to deliver cybersecurity operational services.
Experience researching emerging technology, requisite security requirements, and emerging threats to develop a way forward to meet organizational goals
B.S computer Science (CS), Management of Information Systems (MIS), Electrical Engineering (EE), or Cybersecurity from an accredited University.
DESIRABLE QUALIFICATIONS:
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified - Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP), ISACA Certified Information Security Manager (CISM), ISACA Certified in Risk and Information Systems Control (CRISC), CompTIA Certified Advanced Security Practitioner (CASAP+), CompTIA Security+
$124k-179k yearly est. Auto-Apply 60d+ ago
Security Architect / Engineer - Zero Trust Architecture
Wavestrong, Inc.
Security engineer job in Sacramento, CA
Job Description
Exciting Security Architect / Engineer - Zero Trust Architecture contract opportunity.
Requirements
5 plus years of experience as a Security Architect / Engineer with expertise evaluating Zero Trust Architecture (ZTA).
ZTA implementation roadmap (Plan, Schedule, and Decks), Cybersecurity Program and Architecture Risk Review and architect and engineer support for Zero Trust Architecture (ZTA) implementation activities
Experience evaluating, recommending, and implementing commercial hardware and software security products to augment and enhance enterprise cybersecurity program.
Experience with system, device, and application-level hardening and assessing the cybersecurity posture of software, hardware, and firmware.
Experience with supporting an integrated, dynamic cyber defense and leveraging cybersecurity solutions to deliver cybersecurity operational services.
Experience researching emerging technology, requisite security requirements, and emerging threats to develop a way forward to meet organizational goals
B.S computer Science (CS), Management of Information Systems (MIS), Electrical Engineering (EE), or Cybersecurity from an accredited University.
DESIRABLE QUALIFICATIONS:
ISC2 Certified Information Systems Security Professional (CISSP), ISC2 Certified - Governance Risk and Compliance (CGRC) or Certified Authorization Professional (CAP), ISACA Certified Information Security Manager (CISM), ISACA Certified in Risk and Information Systems Control (CRISC), CompTIA Certified Advanced Security Practitioner (CASAP+), CompTIA Security+
$124k-179k yearly est. 34d ago
Security Engineer II
Trustmark 4.6
Security engineer job in Sacramento, CA
Trustmark's mission is to improve wellbeing - for everyone. It is a mission grounded in a belief in equality and born from our caring culture. It is a culture we can only realize by building trust. Trust established by ensuring associates feel respected, valued and heard. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture of diversity and inclusion where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves. At Trustmark, we have a commitment to welcoming people, no matter their background, identity or experience, to a workplace where they feel safe being their whole, authentic selves. A workplace made up of diverse, empowered individuals that allows ideas to thrive and enables us to bring the best to our colleagues, clients and communities.
We are seeking a highly skilled Cyber SecurityEngineer to join our team and play a pivotal role in safeguarding our organization's digital assets. The ideal candidate will possess a deep understanding of cybersecurity principles, a strong technical background, and a passion for protecting sensitive information.
You will be responsible for engineering, implementing and monitoring security measures for the protection of Trustmark's computer systems, networks and information. The role helps identify and define system security requirements as well as develop detailed cyber security designs.
**Responsibilities:**
+ Design, implement, and maintain security architectures, systems, and solutions to protect critical infrastructure and data.
+ Conduct vulnerability assessments and penetration testing to identify and mitigate risks.
+ Develop and implement security policies, standards, and procedures.
+ Monitor security systems and respond to incidents promptly and effectively.
+ Stay up-to-date with the latest cybersecurity threats and trends.
+ Collaborate with cross-functional teams to ensure security is integrated into all aspects of the business.
+ Provide technical guidance and support to internal stakeholders.
**Qualifications:**
+ Bachelor's degree in Computer Science, Information Technology, or a related field or
+ 3-5 Years of network engineering or cyber engineering experience
+ Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
+ Proficiency in network security, systems security, application security, and data security.
+ Hands-on experience with security tools and technologies (e.g., firewalls, intrusion detection systems, encryption, SIEM).
+ Excellent problem-solving and analytical skills.
+ Strong communication and interpersonal skills.
+ Ability to work independently and as part of a team.
**Preferred Qualifications:**
+ Certifications such as CISSP, CISA, or CEH.
+ Experience with cloud security (e.g., AWS, Azure, GCP).
+ Knowledge of scripting and programming languages (e.g., Python, PowerShell).
Brand: Trustmark
Come join a team at Trustmark that will not only utilize your current skills but will enhance them as well. Trustmark benefits include health/dental/vision, life insurance, FSA and HSA, 401(k) plan, Employee Assistant Program, Back-up Care for Children, Adults and Elders and many health and wellness initiatives. We also offer a Wellness program that enables employees to participate in health initiatives to reduce their insurance premiums.
**For the fourth consecutive year we were selected as a Top Workplace by the Chicago Tribune.** The award is based exclusively on Trustmark associate responses to an anonymous survey. The survey measured 15 key drivers of engaged cultures that are critical to the success of an organization.
All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, sexual identity, age, veteran or disability.
Join a passionate and purpose-driven team of colleagues who contribute to Trustmark's mission of helping people increase wellbeing through better health and greater financial security. At Trustmark, you'll work collaboratively to transform lives and help people, communities and businesses thrive. Flourish in a culture where appreciation, mutual respect and trust are constants, not just for our customers but for ourselves.
Introduce yourself to our recruiters and we'll get in touch if there's a role that seems like a good match.
When you join Trustmark, you become part of an organization that makes a positive difference in people's lives. You will play a vital role in delivering on our mission of helping people increase wellbeing through better health and greater financial security. Our customers tell us they simply appreciate the personal attention and knowledgeable service. Others tell us we've changed their lives.
At Trustmark, you'll be part of a close-knit team. You'll enjoy abundant opportunities to grow your career. That's why so many of our associates stay at Trustmark and thrive. Trustmark benefits from more than 100 years of experience but pairs that rich history with a palpable sense of optimism, growth and excitement for what's ahead - and beyond. This is a place where associates bring their whole selves to work each day. A place where you can be yourself. Whatever your beyond is, you can achieve it at Trustmark.
$103k-137k yearly est. 60d+ ago
Engineer, Information Security and Risk
Cardinal Health 4.4
Security engineer job in Sacramento, CA
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
We are seeking a highly skilled and experienced Identity and Access Management (IAM) Engineer to join our team. In this pivotal role, you will be instrumental in designing, implementing, and managing IAM solutions that secure our enterprise applications and facilitate the secure, efficient, and seamless integration of identity and access systems in context of our rapid growth through Mergers and Acquisitions. You will ensure robust access controls, streamline user experiences, and maintain operational continuity across our diverse IT landscape. The ideal candidate will have deep technical expertise in modern IAM principles, protocols and products along with strong management and communication skills.
**Responsibilities:**
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **M&A Integration Strategy & Execution:** Lead the planning, design, and execution of IAM integration strategies for M&A activities, ensuring alignment with overall business and security objectives. This includes assessing the IAM landscapes of merging entities to identify challenges and solutions.
+ **Identity System Merging & Consolidation:** Manage the complex process of merging disparate identity providers, user directories (e.g., Active Directory, Azure AD, LDAP), and access management systems from acquired companies into the existing infrastructure.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC) frameworks.
+ **Security & Compliance:** Ensure IAM systems and processes comply with regulatory requirements (e.g., GDPR, HIPAA, SOX) and internal security policies, providing auditable records of access activities. Protect against data breaches by ensuring only authorized personnel can access sensitive information.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Information Security, IT Operations, HR, and Application Development, to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical stakeholders.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA, and privileged access management (PAM).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Experience with scripting languages (e.g., PowerShell, Python) for automation and integration.
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Understanding of DevOps practices.
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ **M&A Specific Skills:** Proven track record of managing complex integration projects, including assessing existing IAM capabilities, workflow, systems, and processes of acquired entities. Ability to navigate the complexities of integrating diverse identity infrastructures.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
+ Adaptability to stay ahead of evolving IAM technologies and security threats.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
$94.9k-135.6k yearly 53d ago
Cloud Security Analyst-AWS or Azure, Devops
360 It Professionals 3.6
Security engineer job in San Ramon, CA
Hands-on cloud securityengineer who has a deep understanding of emerging technologies including Openstack, PaaS - Pivotal cloud foundry, Mesos, Docker container, Security, Software defined networks, Cloud integration technologies. Hands-on deployment of AWS\Azure IaaS components necessary to support the Cyber Security deployment needs, as well as approved Cyber Security specific solutions in the AWS\Azure environment to support these efforts.
Qualifications
Bachelor's Degree in STEM and/or a minimum of 4 years of equivalent experience
Minimum of 6 years of experience of application design and architecture
Minimum of 6 years of experience with deployment of cloud controls for infrastructure, platform, and applications (IaaS/SaaS/PaaS)
AWS and Azure experience a must
Additional Information
All your information will be kept confidential according to EEO guidelines.
$85k-112k yearly est. 1d ago
Network Security Engineer
Govcio
Security engineer job in Sacramento, CA
Govico is currently hiring for a remote Network SecurityEngineer to support the US Courts. **Responsibilities** The Firewall Operations and Management team provides Tier 2/3 support and manages the firewall devices that protect networks. The current solution consists of approximately 1,100 Palo Alto firewalls at customer locations and three dozen Cisco firewalls (e.g., ASAs and FirePowers) at two data centers.
Duties:
Provide leadership and overall direction in support of the IDC firewalls by managing firewalls in DMZ, Secure Zone, and Atlas to provide boundary protection to DCN and manage firewalls to protect the network
**Qualifications**
+ Bachelor's with 12+ years (or commensurate experience)
+ Deep knowledge and expert skills in Cisco ASA, Cisco Firepower, Palo Alto firewalls, and various firewall tools such as SolarWinds and Cisco Prime
+ Clearance Required: Ability to maintain a Public Trust clearance
**Company Overview**
GovCIO is a team of transformers--people who are passionate about transforming government IT. Every day, we make a positive impact by delivering innovative IT services and solutions that improve how government agencies operate and serve our citizens.
But we can't do it alone. We need great people to help us do great things - for our customers, our culture, and our ability to attract other great people. We are changing the face of government IT and building a workforce that fuels this mission. Are you ready to be a transformer?
**What You Can Expect**
**Interview & Hiring Process**
If you are selected to move forward through the process, here's what you can expect:
+ During the Interview Process
+ Virtual video interview conducted via video with the hiring manager and/or team
+ Camera must be on
+ A valid photo ID must be presented during each interview
+ During the Hiring Process
+ Enhanced Biometrics ID verification screening
+ Background check, to include:
+ Criminal history (past 7 years)
+ Verification of your highest level of education
+ Verification of your employment history (past 7 years), based on information provided in your application
**Employee Perks**
At GovCIO, we consistently hear that meaningful work and a collaborative team environment are two of the top reasons our employees enjoy working here. In addition, our employees have access to a range of perks and benefits to support their personal and professional well-being, beyond the standard company offered health benefits, including:
+ Employee Assistance Program (EAP)
+ Corporate Discounts
+ Learning & Development platform, to include certification preparation content
+ Training, Education and Certification Assistance*
+ Referral Bonus Program
+ Internal Mobility Program
+ Pet Insurance
+ Flexible Work Environment
*Available to full-time employees
Our employees' unique talents and contributions are the driving force behind our success in supporting our customers, which ultimately fuels the success of our company. Join us and be a part of a culture that invests in its people and prioritizes continuous enhancement of the employee experience.
**We are an Equal Opportunity Employer.** All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, disability, or status as a protected veteran. EOE, including disability/vets.
**Posted Pay Range**
The posted pay range, if referenced, reflects the range expected for this position at the commencement of employment, however, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, education, experience, and internal equity. The total compensation package for this position may also include other compensation elements, to be discussed during the hiring process. If hired, employee will be in an "at-will position" and the GovCIO reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, GovCIO or individual department/team performance, and market factors.
**Posted Salary Range**
USD $124,540.00 - USD $140,000.00 /Yr.
Submit a referral to this job (******************************************************************************************************************************
**Location** _US-Remote_
**ID** _2026-7341_
**Category** _Information Technology_
**Position Type** _Full-Time_
$124.5k-140k yearly 4d ago
Network Security Engineer
Solidigm
Security engineer job in Rancho Cordova, CA
Join a multibillion-dollar global company that brings together amazing technology, people, and operational scale to become a powerhouse in the memory industry. Headquartered in Rancho Cordova, California, Solidigm combines elements of an established, successful technology company with the spirit, agility, and entrepreneurial mindset of a start-up. In addition to the U.S. headquarters and other facilities in the U.S., the company has international presence in Asia, Europe, and the Americas. Solidigm will continue to lead the world in innovating new Memory technologies with aspirations to be the #1 NAND memory company in the world. At Solidigm, we view problems as opportunities to define innovative solutions that hold the power to change the world and unleash the potential technological needs that the future holds. At Solidigm, we are One Team that fosters a diverse, equitable, and inclusive culture that embraces individual uniqueness and empowers us to bring our best selves to deliver excellence in support of Solidigm's vision and mission to be the go-to partner for optimized data storage solutions. You can be part of the takeoff of an innovative business that develops cutting-edge products, delivers strong business value for customers, provides an engaging workplace for its employees, and serves a greater impact on the world. This is a golden opportunity for the right applicant to join us and help design, build, and lead Solidigm. We want a diverse team of dedicated professionals who will not just be Solidigm team members but contribute to how we shape the future of the organization. We are seeking applicants who will grow and thrive in our culture; be customer inspired, trusting, innovative, team-oriented, inclusive, results driven, collaborative, passionate, and flexible.
Job Description
The Network SecurityEngineer (Level 7) is a hands-on technical specialist responsible for the engineering, configuration, maintenance, and operational support of Solidigm's global network security controls. This role serves as a Palo Alto Networks subject matter expert, supporting the configuration and operation of the enterprise firewall stack across data centers, labs, cloud environments, and remote access platforms. Primary responsibilities include global firewall operations, lab network segmentation, on-prem and cloud proxies, and supporting VPN security operations. This is an execution-focused, engineering-driven role with no people-management, MSP oversight, roadmap ownership, or governance leadership responsibilities.
Essential Duties & Responsibilities
Firewall Engineering & Operations (Primary Responsibility)
Configure, maintain, and troubleshoot Palo Alto NGFWs, Panorama policies, security profiles, and routing.
Perform firewall rule deployments, address/object updates, and security policy tuning.
Maintain Cortex and Strata integrations aligned with the enterprise ELA framework.
Monitor firewall system health, sessions, licensing, and platform performance.
Perform packet captures, traffic analysis, and security event troubleshooting.
Lab Network Segmentation (Secondary Responsibility)
Configure segmentation policies and firewall rules for lab VLANs, research environments, and isolated network zones.
Support secure connectivity between engineering labs, data centers, and development platforms.
Validate segmentation controls through testing and routine verification.
Proxy & Secure Web Gateway Operations
Support the engineering and administration of:
On-premise proxy appliances
Cloud-based secure web gateways
Perform policy changes, URL filtering updates, and certificate handling.
Troubleshoot user proxy access issues and web security events.
VPN & Remote Access Support
Support day-to-day operations of Palo Alto Global Protect and remote access security controls.
Troubleshoot authentication, tunnel stability, routing, and posture-based access issues.
Ensure proper integration between VPN, RADIUS, and AD authentication services.
Operational Support & Procedures
Execute change requests for firewall, segmentation, VPN, and proxy environments.
Respond to L2/L3 tickets related to global network security platforms.
Maintain technical documentation for configurations, SOPs, and runbooks.
Support incident response activities related to firewall or remote access infrastructure.
Qualifications
Bachelor's degree in IT, Engineering, Cybersecurity, or equivalent experience.
5-7 years of experience in network securityengineering.
Strong hands-on experience with Palo Alto firewalls, Panorama, security policies, objects, NAT, and routing.
Experience with Cortex, Strata, and associated Palo Alto toolsets.
Familiarity with: Global Protect VPN, Secure web gateways and proxies, Network segmentation, DNS/DHCP fundamentals (preferably Infoblox)
Solid understanding of TCP/IP, BGP/OSPF, SSL/TLS, PKI, SAML/SSO.
Preferred certifications: Palo Alto PCNSE, CCNP Security, Cloud networking cert (Azure/AWS) a plus.
Additional Information
The compensation range for this role is $91,500 - $157,300. Actual compensation is influenced by a variety of factors including but not limited to skills, experience, qualifications, and geographic location.
This is a hybrid position that can be based out of Rancho Cordova CA, San Jose CA, or Longmont CO.
Powered by SmartRecruiters -
Candidate Privacy Policy
$91.5k-157.3k yearly 1d ago
QA Automation and Security Test Architect
Intelliswift 4.0
Security engineer job in Pleasanton, CA
QA Automation and Security Test Architect Job ID: 21-14390 Top must haves are: * 5+ years of experience as Automation Architect and doing web application security testing as per OWASP standards * 5+ years of experience designing, developing and executing Automation Scripts using Selenium
* Ability to provide application security risk assessment of technologies stack used in cloud or web applications.
TECHNICAL KNOWLEDGE AND SKILLS:
* 5+ years of experience as an Automation Architect and doing web application security testing as per OWASP standards
* 5+ years of experience designing, developing and executing Automation Scripts using Selenium
* Knowledge and experience in other Automation tools (like QTP, Rational Robot, AutoIT)
* Understanding and working knowledge with Data Driven, Keyword Driven and Hybrid frameworks
* Knowledge of Defect Management Tool (Quality Center, JIRA)
* Exploit application security flaws and vulnerabilities with attack simulations on multiple projects working against specific client-focused scopes of work.
* Ability to provide application security risk assessment of technologies stack used in cloud or web applications.
* Ability to perform application vulnerability assessments or application penetration testing, utilizing tools commercial and open source tools.
* Perform, review and analyze security vulnerability data to identify applicability and false positives.
* Create risk based security code reviews (Static, Dynamic and Interactive).
* Conduct application security testing in line with OWASP (Open Web application Security Project)
* Mentor junior engineers to build their skills and contribution levels
* Write technical reports that include suggested resolution for identified problem areas and perform operational risk assessment.
* Perform Proof of Concept testing and do evaluation of new security technologies and tools.
* Assist and support Security Test Analysts as they perform vulnerability, network and network security assessments.
* Experience DevOps tools like DynaTrace, Chef, Splunk and Vagrant.
* Experience with scripting languages (e.g. python, PERL, SQL) a plus
* Ability to perform below tasks:
o Dynamic Application Security Testing (DAST)
o Static Application Security Testing (SAST)
o Interactive Application Security Testing (IAST)
o Web Application Penetration Testing
o Product Security Testing
o Cloud Application Security Testing
o Web Services Security Testing
o Security Code Review
o Network Security Assessment
* Application Security Testing Tools: VeraCode, Synopsys, Contrast IAST, Burp Suite, Tamper Data, Live http Headers, Client Fortify, VeraCode, OWASP Top 10, N-Stealth, Hailstorm, Paros, SANS Top 20, Acunetix, Nessus
* Fast learning, problem solving and analytical skills
* Excellent communication, presentation, and interpersonal skills
* Track record of good time management
* Efficient in effort estimation, planning and prioritization
* Ability to understand Business Requirements and transform them to functional units
* Knowledge of SDLC and implementation
* Knowledge of SoapUI
* Proficiency in Java language
* Proficiency in SQL
* Job details
*
$125k-167k yearly est. 60d+ ago
Information Systems Analyst III - Security Analyst
San Joaquin County, Ca 3.8
Security engineer job in Stockton, CA
Introduction This examination is being given to fill one vacancy in the Information Systems Department and to establish an eligible list which may be used to fill future vacancies. Resumes will not be accepted in lieu of an application. A completed application must be postmarked or received online by the final filing deadline.
NOTE: All correspondences relating to this recruitment will be delivered via e-mail. The e-mail account used will be the one provided on your employment application during time of submittal. Please be sure to check your e-mail often for updates. If you do not have an e-mail account on file, Human Resources will send you correspondences via US Mail.
DEFINITION
Under direction, performs specialized and advanced professional computer and related systems support work within the Information Systems Division; troubleshoots, analyzes and resolves difficult systems and applications hardware and software problems; and performs other related work as required in accordance with Rule 3, Section 3 of the Civil Service Rules.
CLASS CHARACTERISTICS
This is the advanced journey level class in the Information Systems Analyst series. Incumbents perform work of a professional nature, utilizing skills that require an advanced understanding of complex analytical procedures and processes while working with a significant amount of independent authority and judgment. As assigned, some positions may exercise technical supervision over lower level staff; however, these supervisory duties are ancillary in nature and are not considered to be the primary purpose of the class. The program assignment will determine the emphasis of an incumbent's duties as described below. This class is distinguished from the Information Systems Analyst II level by it's requirement for specialized, functional or technical expertise beyond the journey level. Incumbents perform the more difficult and responsible types of duties assigned to classes within the series including systems analysis, development and direct client/maintenance support to large and complex systems and applications.
This class is distinguished from the Information Systems Analyst IV in that the latter provides highly advanced systems analysis, design and development support to one or more departments with highly complex systems and programs. Incumbents at the Information Systems Analyst IV level may also serve in the capacity of database administrator or as a project lead on a component of assigned information systems projects.
TYPICAL DUTIES
* Performs professional level specialized and complex duties to support information technology systems in assigned area; areas of responsibility include the analysis, evaluation, design, programming, development, testing, implementation, documentation and maintenance of large and complex systems, networks, programs and applications across multiple platforms and technologies.
* Designs and develops components of current or new systems; serves on assigned projects for large and complex systems; in conjunction with project team members, analyzes user requirements and recommends technology solution; reviews and evaluates current and third party systems and applications; determines method of integrating new programming code into existing programs to meet user needs; develops data flow diagrams and other systems documentation; creates program specifications; designs data structures, screens, file structures, reports, forms, and menus; develops optimum system configurations; locates and downloads existing system data; develops and implements testing plan; performs quality assurance duties; determines whether new program meets the client's business and technology requirements; recommends changes as needed.
* Serves as resource and provides highly specialized support to maintaining existing systems; assesses, reviews and conducts research on system operational problems and functionality; provides technical solutions to client on alternative systems or applications.
* Performs a variety of complex analytical duties in planning, developing, installing, implementing, integrating, testing and evaluating the County's local and wide area networks; installs, configures and manages servers; coordinates the installation and maintenance of computers, circuits, data communications equipment, printers and other peripheral equipment.
* Investigates, analyzes and resolves network-related problems; resolves compatibility problems; troubleshoots network failures, router problems and telecommunications problems; recommends and implements changes and improvements.
* Monitors network security and performance; identifies unauthorized access and potential security risks; measures volume and performance of network traffic; identifies utilization and performance issues; recommends improvements to security and network performance.
* Develops, implements and maintains the County's Internet and Intranet sites; recommends design and layouts; writes code; creates database connections; develops written technical procedures; implements interactive website components; provides Internet training for County staff.
* Performs technical writing duties in the development and production of system documentation, instructional and procedural manuals.
* Identifies training issues and coordinates training sessions for client users on assigned systems or applications; develops training schedule; designs training manuals; conducts training sessions.
* Attends and participates in professional group meetings; stays abreast of new trends and innovations in the field of information technology.
* May exercise technical supervision over lower level staff; assists in selecting, training, motivating and evaluating assigned staff; provides or coordinates staff training; works with employees to correct deficiencies.
MINIMUM QUALIFICATIONS
Note: The following special requirements were approved by the Director of Human Resources on May 19, 2025.
Education: Graduation from an accredited four-year college or university with a major in computer science, information systems, mathematics, business administration or a related field.
Experience: Two years of increasingly responsible professional, cybersecurity analytical and related systems work in an information systems environment.
Substitution #1: Possession of an approved information systems technology certificate, or completion of an approved information systems training course may substitute for all or part of the above required education. A list of approved certificates and/or courses shall be maintained within the Human Resources Department.
Substitution #2: Additional qualifying experience may substitute for the above required education on a year-for-year basis to a maximum of two years.
Special Requirement: The above required experience and any certification used to qualify under substitution pattern #1, may need to be within the assigned specialist or functional area.
KNOWLEDGE
Operations, services and activities of a comprehensive information systems program across multiple operating platforms; advanced principles and practices of computer science and information systems; methods and techniques of highly complex system analysis, design and development; advanced methods and techniques of system hardware and software troubleshooting and installation; advanced principles and practices of structured programming; operational characteristics of systems hardware and software across multiple environments; methods and techniques of evaluating business operations to develop technology solutions; principles and procedures of quality assurance; methods and techniques of developing testing procedures; methods and techniques of designing, implementing and maintaining internet and intranet web sites; operations, services and activities of local and wide area network design, development, security and administration; local and wide area network protocols, routing techniques and installation methods; methods and techniques of installing and maintaining and administering network servers, hardware and software; pertinent Federal, State and local codes, laws and regulations.
ABILITY
Provide advanced level technical support for system analysis, implementation and maintenance; detect, isolate and resolve complex information system problems; recommend, design, implement and install systems and programs; independently perform complex systems and applications programming and analysis duties; design, configure, install and test local and wide area network servers, hardware, software, routers and associated components; analyze procedures and data to develop logical solutions to complex systems problems; troubleshoot and analyze complex local and wide area network operating system or hardware and software problems; learn to analyze and assess the technological needs of departments with large and highly complex systems; learn operations and characteristics of database management systems, tools and utilities; learn and apply concepts and principles of database management and administration; learn principles, practices, methods and techniques of serving as project lead on assigned information systems projects; communicate clearly and concisely, both orally and in writing; establish and maintain effective working relationships with those contacted in the course of work.
PHYSICAL/MENTAL REQUIREMENTS
Mobility - Frequent use of keyboards; frequent sitting, standing or walking for long periods; occasional pushing/pulling, bending, squatting and crawling; driving. Lifting - frequently 5-30 pounds; occasionally 70 pounds or less. Vision - constant use of good overall vision; frequent reading/close-up work; occasional color, depth and peripheral vision. Dexterity - frequent repetitive motion; frequent writing; frequent grasping, holding, reaching. Hearing/Talking - frequent talking/hearing in person and on the telephone. Emotional/Psychological - frequent decision making and concentration; frequent public contact; occasional working alone, working nights and traveling. Environmental - frequent exposure to noise.
San Joaquin County complies with the Americans with Disabilities Act and, upon request, will consider reasonable accommodations to enable individuals with disabilities to perform essential job functions.
Equal Opportunity Employer
San Joaquin County is an Equal Employment Opportunity (EEO) Employer and is committed to providing equal employment to all without regard to age, ancestry, color, creed, marital status, medical condition, national origin, physical or mental disability, political affiliation or belief, pregnancy, race, religion, sex, or sexual orientation. For more information go to Equal Employment Opportunity Division (sjgov.org).
Accommodations for those covered by the Americans with Disabilities Act (ADA):
San Joaquin County complies with the Americans with Disabilities Act and, upon request, will consider reasonable accommodations to enable individuals with disabilities to perform essential job functions.
BENEFITS
Employees hired into this classification are members of a bargaining unit which is represented by SEIU Local 1021.
Health Insurance: San Joaquin County provides employees with a choice of three health plans: a Kaiser Plan, a Select Plan, and a Premier Plan. Employees pay a portion of the cost of the premium. Dependent coverage is also available.
Dental Insurance: The County provides employees with a choice of two dental plans: Delta Dental and United Health Care-Select Managed Care Direct Compensation Plan. There is no cost for employee only coverage in either plan; dependent coverage is available at the employee's expense.
Vision Insurance: The County provides vision coverage through Vision Service Plan (VSP). There is no cost for employee only coverage; dependent coverage is available at the employee's expense.
For more detailed information on the County's benefits program, visit our website at ************* under Human Resources/Employee Benefits.
Life Insurance: The County provides eligible employees with life insurance coverage as follows:
1 but less than 3 years of continuous service: $1,000
3 but less than 5 years of continuous service: $3,000
5 but less than 10 years of continuous service: $5,000
10 years of continuous service or more: $10,000
Employee may purchase additional term life insurance at the group rate.
125 Flexible Benefits Plan: This is a voluntary program that allows employees to use pre-tax dollars to pay for health-related expenses that are not paid by a medical, dental or vision plan (Health Flexible Spending Account $2550 annual limit with a $500 carry over); and dependent care costs (Dependent Care Assistance Plan $5000 annual limit).
Retirement Plan: Employees of the County are covered by the County Retirement Law of 1937. Please visit the San Joaquin County Employees' Retirement Association (SJCERA) at ************** for more information. NOTE: If you are receiving a retirement allowance from another California county covered by the County Employees' Retirement Act of 1937 or from any governmental agency covered by the California Public Employees' Retirement System (PERS), you are advised to contact the Retirement Officer of the Retirement Plan from which you retired to determine what effect employment in San Joaquin County would have on your retirement allowance.
Deferred Compensation: The County maintains a deferred compensation plan under Section 457 of the IRS code. You may annually contribute $22,500 or 100% of your includible compensation, whichever is less. Individuals age 50 or older may contribute to their plan, up to $30,000. The Roth IRA (after tax) is also now available.
Vacation: Maximum earned vacation is 10 days each year up to 3 years; 15 days after 3 years; 20 days after 10 years; and 23 days after 20 years.
Holidays: Effective July 1, 2017, all civil service status employees earn 14 paid holidays each year. Please see the appopriate MOU for details regarding holidays, accruals, use, and cashability of accrued time.
Sick Leave: 12 working days of sick leave annually with unlimited accumulation. Sick leave incentive: An employee is eligible to receive eight hours administrative leave if the leave balance equals at least one- half of the cumulative amount that the employee is eligible to accrue. The employee must also be on payroll during the entire calendar year.
Bereavement Leave: 3 days of paid leave for the death of qualifying family member, 2 additional days of accrued leave for death of employee's spouse, domestic partner, parent or child.
Merit Salary Increase: New employees will receive the starting salary, which is the first step of the salary range. After employees serve 52 weeks (2080 hours) on each step of the range, they are eligible for a merit increase to the next step.
Job Sharing: Employees may agree to job-share a position, subject to approval by a Department Head and the Director of Human Resources.
Educational Reimbursement Program: Eligible employees may be reimbursed for career-related course work up to a maximum of $850 per fiscal year. Eligible employees enrolled in an approved four (4) year College or University academic program may be reimbursed up to $800 per semester for a maximum of $1600 per fiscal year.
Parking Supplemental Downtown Stockton: The County contributes up to $20 per pay period for employees who pay for parking and are assigned to work in the Downtown Core Area.
School Activities: Employees may take up to 40 hours per year, but not more than eight (8) hours per month, to participate in their children's school activities.
Selection Procedures
Applicants who meet the minimum qualifications will go through the following examination process:
* Written Exam: The civil service written exam is a multiple choice format. If the written exam is administered alone, it will be 100% of the overall score. Candidates must achieve a minimum rating of 70% in order to be placed on the eligible list.
* Oral Exam: The oral exam is a structured interview process that will assess the candidate's education, training, and experience and may include a practical exercise. The oral exam selection process is not a hiring interview. A panel of up to four people will determine the candidate's score and rank for placement on the eligible list. Top candidates from the eligible list are referred for hiring interviews. If the oral exam is administered alone, it will be 100% of the overall score. Candidates must achieve a minimum rating of 70% in order to be placed on the eligible list.
* Written & Oral Exam: If both a written exam and an oral exam is administered, the written exam is weighted at 60% and the oral exam is weighted at 40% unless otherwise indicated on the announcement. Candidates must achieve a minimum rating of 70% on each examination in order to be placed on the eligible list.
* Rate-out: A rate-out is an examination that involves a paper rating of the candidate's application using the following criteria: education, training, and experience. Candidates will not be scheduled for the rate-out process.
Note: The rating of 70 referred to may be the same or other than an arithmetic 70% of the total possible points.
Testing Accommodation: Candidates who require testing accommodation under the Americans with Disabilities Act (ADA) must call Human Resources Division at ************** prior to the examination date.
Veteran's Points: Eligible veterans, unmarried widows and widowers of veterans of the United States Armed Forces who have been honorably discharged and who have served during wartime shall be given veteran's points in initial appointment to County service. Eligible veterans receive 5 points and eligible disabled veterans receive 10 points. Disabled veterans must submit a recent award letter stating a 10% service connected disability issued by the United States Veterans Administration. Note: A copy of your DD214 showing the discharge type must be received in the Human Resources by the date of the examination.
Acceptable wartime service dates:
* September 16, 1940 to December 31, 1946
* June 27, 1950 to January 31, 1955
* August 5, 1964 to May 7, 1975
* Persian Gulf War, August 2, 1990, through a date to be set by law or Presidential Proclamation.
Eligible Lists: Candidates who pass the examination will be placed on an eligible list for that classification. Eligible lists are effective for nine months, but may be extended by the Human Resources Director for a period which shall not exceed a total of three years from the date established.
Certification/Referral: Names from the eligible list will be referred to the hiring department by the following methods.
* Rule of the Rank: The top rank or ranks of eligibles will be referred for hiring interviews. The minimum number of names to be referred will be equal to the number of positions plus nine, or 10% of the eligible list, whichever is higher. When filling nine or more positions in a department at the same time, the top rank or ranks will be referred and the minimum number of names shall be two times the number of positions to be filled or 10% of the eligible list, whichever is higher. This applies only to open competitive recruitments.
* Rule of Five: The top five names will be referred for hiring interviews. This applies only to department or countywide promotional examination.
* Rule of the List: For classifications designated by the Director of Human Resources, the entire eligible list will be referred to the department.
Physical Exam: Some classifications require physical examinations. Final appointment cannot be made until the eligible has passed the physical examination. The County pays for physical examinations administered in its medical facilities.
Pre-Employment Drug Screening Exam: Some classifications require a new employee successfully pass a pre-employment drug screen as a condition of employment. Final appointment cannot be made until the eligible has passed the drug screen. The County pays for the initial drug screen.
Employment of Relatives: Applicants who are relatives of employees in a department within the 3rd degree of relationship, (parent, child, grand parent, grand child or sibling) either by blood or marriage, may not be appointed, promoted, transferred into or within the department when;
* They are related to the Appointing Authority or
* The employment would result in one of them supervising the work of the other.
Department Head may establish additional limitations on the hiring of relatives by departmental rule.
Proof of Eligibility: If you are offered a job you will be required to provide proof of U.S. citizenship or other documents that establish your eligibility to be employed in the U.S.
HOW TO APPLY
Apply Online:
*************/department/hr
By mail or in person:
San Joaquin County Human Resources
44 N. San Joaquin Street Suite 330
Stockton, CA 95202
Office hours:
Monday - Friday 8:00 am to 5:00 pm; excluding holidays.
Phone: **************
Job Line:
For current employment opportunities please call our 24-hour job line at **************.
When a final filing date is indicated, applications must be filed with the Human Resources Division before 5:00 p.m. or postmarked by the final filing date. Resumes will not be accepted in lieu of an application. Applications sent through county inter-office mail, which are not received by the final filing date, will not be accepted. (The County assumes no responsibility for mailed applications which are not received by the Human Resources Division).
San Joaquin County Substance Abuse Policy: San Joaquin County has adopted a Substance Abuse Policy in compliance with the Federal Drug Free Workplace Act of 1988. This policy is enforced by all San Joaquin County Departments and applies to all San Joaquin County employees.
Equal Opportunity Employer: San Joaquin County is an Equal Employment Opportunity (EEO) Employer and is committed to providing equal employment to all without regard to age, ancestry, color, creed, marital status, medical condition, national origin, physical or mental disability, political affiliation or belief, pregnancy, race, religion, sex, or sexual orientation. For more information go to *************/department/hr/eeo.
Click on a link below to apply for this position:
$22.5k yearly 4d ago
Information Systems Analyst III - Security Analyst
Sjgov
Security engineer job in Stockton, CA
Introduction
This examination is being given to fill one vacancy in the Information Systems Department and to establish an eligible list which may be used to fill future vacancies. Resumes will not be accepted in lieu of an application. A completed application must be postmarked or received online by the final filing deadline.
NOTE: All correspondences relating to this recruitment will be delivered via e-mail. The e-mail account used will be the one provided on your employment application during time of submittal. Please be sure to check your e-mail often for updates. If you do not have an e-mail account on file, Human Resources will send you correspondences via US Mail.
DEFINITION Under direction, performs specialized and advanced professional computer and related systems support work within the Information Systems Division; troubleshoots, analyzes and resolves difficult systems and applications hardware and software problems; and performs other related work as required in accordance with Rule 3, Section 3 of the Civil Service Rules. CLASS CHARACTERISTICS This is the advanced journey level class in the Information Systems Analyst series. Incumbents perform work of a professional nature, utilizing skills that require an advanced understanding of complex analytical procedures and processes while working with a significant amount of independent authority and judgment. As assigned, some positions may exercise technical supervision over lower level staff; however, these supervisory duties are ancillary in nature and are not considered to be the primary purpose of the class. The program assignment will determine the emphasis of an incumbent's duties as described below. This class is distinguished from the Information Systems Analyst II level by it's requirement for specialized, functional or technical expertise beyond the journey level. Incumbents perform the more difficult and responsible types of duties assigned to classes within the series including systems analysis, development and direct client/maintenance support to large and complex systems and applications.
This class is distinguished from the Information Systems Analyst IV in that the latter provides highly advanced systems analysis, design and development support to one or more departments with highly complex systems and programs. Incumbents at the Information Systems Analyst IV level may also serve in the capacity of database administrator or as a project lead on a component of assigned information systems projects. TYPICAL DUTIES
Performs professional level specialized and complex duties to support information technology systems in assigned area; areas of responsibility include the analysis, evaluation, design, programming, development, testing, implementation, documentation and maintenance of large and complex systems, networks, programs and applications across multiple platforms and technologies.
Designs and develops components of current or new systems; serves on assigned projects for large and complex systems; in conjunction with project team members, analyzes user requirements and recommends technology solution; reviews and evaluates current and third party systems and applications; determines method of integrating new programming code into existing programs to meet user needs; develops data flow diagrams and other systems documentation; creates program specifications; designs data structures, screens, file structures, reports, forms, and menus; develops optimum system configurations; locates and downloads existing system data; develops and implements testing plan; performs quality assurance duties; determines whether new program meets the client's business and technology requirements; recommends changes as needed.
Serves as resource and provides highly specialized support to maintaining existing systems; assesses, reviews and conducts research on system operational problems and functionality; provides technical solutions to client on alternative systems or applications.
Performs a variety of complex analytical duties in planning, developing, installing, implementing, integrating, testing and evaluating the County's local and wide area networks; installs, configures and manages servers; coordinates the installation and maintenance of computers, circuits, data communications equipment, printers and other peripheral equipment.
Investigates, analyzes and resolves network-related problems; resolves compatibility problems; troubleshoots network failures, router problems and telecommunications problems; recommends and implements changes and improvements.
Monitors network security and performance; identifies unauthorized access and potential security risks; measures volume and performance of network traffic; identifies utilization and performance issues; recommends improvements to security and network performance.
Develops, implements and maintains the County's Internet and Intranet sites; recommends design and layouts; writes code; creates database connections; develops written technical procedures; implements interactive website components; provides Internet training for County staff.
Performs technical writing duties in the development and production of system documentation, instructional and procedural manuals.
Identifies training issues and coordinates training sessions for client users on assigned systems or applications; develops training schedule; designs training manuals; conducts training sessions.
Attends and participates in professional group meetings; stays abreast of new trends and innovations in the field of information technology.
May exercise technical supervision over lower level staff; assists in selecting, training, motivating and evaluating assigned staff; provides or coordinates staff training; works with employees to correct deficiencies.
MINIMUM QUALIFICATIONS Note: The following special requirements were approved by the Director of Human Resources on May 19, 2025.
Education: Graduation from an accredited four-year college or university with a major in computer science, information systems, mathematics, business administration or a related field.
Experience: Two years of increasingly responsible professional, cybersecurity analytical and related systems work in an information systems environment.
Substitution #1: Possession of an approved information systems technology certificate, or completion of an approved information systems training course may substitute for all or part of the above required education. A list of approved certificates and/or courses shall be maintained within the Human Resources Department.
Substitution #2: Additional qualifying experience may substitute for the above required education on a year-for-year basis to a maximum of two years.
Special Requirement: The above required experience and any certification used to qualify under substitution pattern #1, may need to be within the assigned specialist or functional area. KNOWLEDGE Operations, services and activities of a comprehensive information systems program across multiple operating platforms; advanced principles and practices of computer science and information systems; methods and techniques of highly complex system analysis, design and development; advanced methods and techniques of system hardware and software troubleshooting and installation; advanced principles and practices of structured programming; operational characteristics of systems hardware and software across multiple environments; methods and techniques of evaluating business operations to develop technology solutions; principles and procedures of quality assurance; methods and techniques of developing testing procedures; methods and techniques of designing, implementing and maintaining internet and intranet web sites; operations, services and activities of local and wide area network design, development, security and administration; local and wide area network protocols, routing techniques and installation methods; methods and techniques of installing and maintaining and administering network servers, hardware and software; pertinent Federal, State and local codes, laws and regulations. ABILITY Provide advanced level technical support for system analysis, implementation and maintenance; detect, isolate and resolve complex information system problems; recommend, design, implement and install systems and programs; independently perform complex systems and applications programming and analysis duties; design, configure, install and test local and wide area network servers, hardware, software, routers and associated components; analyze procedures and data to develop logical solutions to complex systems problems; troubleshoot and analyze complex local and wide area network operating system or hardware and software problems; learn to analyze and assess the technological needs of departments with large and highly complex systems; learn operations and characteristics of database management systems, tools and utilities; learn and apply concepts and principles of database management and administration; learn principles, practices, methods and techniques of serving as project lead on assigned information systems projects; communicate clearly and concisely, both orally and in writing; establish and maintain effective working relationships with those contacted in the course of work. PHYSICAL/MENTAL REQUIREMENTS Mobility - Frequent use of keyboards; frequent sitting, standing or walking for long periods; occasional pushing/pulling, bending, squatting and crawling; driving. Lifting - frequently 5-30 pounds; occasionally 70 pounds or less. Vision - constant use of good overall vision; frequent reading/close-up work; occasional color, depth and peripheral vision. Dexterity - frequent repetitive motion; frequent writing; frequent grasping, holding, reaching. Hearing/Talking - frequent talking/hearing in person and on the telephone. Emotional/Psychological - frequent decision making and concentration; frequent public contact; occasional working alone, working nights and traveling. Environmental - frequent exposure to noise.
San Joaquin County complies with the Americans with Disabilities Act and, upon request, will consider reasonable accommodations to enable individuals with disabilities to perform essential job functions.
Equal Opportunity Employer
San Joaquin County is an Equal Employment Opportunity (EEO) Employer and is committed to providing equal employment to all without regard to age, ancestry, color, creed, marital status, medical condition, national origin, physical or mental disability, political affiliation or belief, pregnancy, race, religion, sex, or sexual orientation. For more information go to Equal Employment Opportunity Division (sjgov.org).
Accommodations for those covered by the Americans with Disabilities Act (ADA):
San Joaquin County complies with the Americans with Disabilities Act and, upon request, will consider reasonable accommodations to enable individuals with disabilities to perform essential job functions.
BENEFITS
Employees hired into this classification are members of a bargaining unit which is represented by SEIU Local 1021.
Health Insurance: San Joaquin County provides employees with a choice of three health plans: a Kaiser Plan, a Select Plan, and a Premier Plan. Employees pay a portion of the cost of the premium. Dependent coverage is also available.
Dental Insurance: The County provides employees with a choice of two dental plans: Delta Dental and United Health Care-Select Managed Care Direct Compensation Plan. There is no cost for employee only coverage in either plan; dependent coverage is available at the employee's expense.
Vision Insurance: The County provides vision coverage through Vision Service Plan (VSP). There is no cost for employee only coverage; dependent coverage is available at the employee's expense.
For more detailed information on the County's benefits program, visit our website at ************* under Human Resources/Employee Benefits.
Life Insurance: The County provides eligible employees with life insurance coverage as follows:
1 but less than 3 years of continuous service: $1,000
3 but less than 5 years of continuous service: $3,000
5 but less than 10 years of continuous service: $5,000
10 years of continuous service or more: $10,000
Employee may purchase additional term life insurance at the group rate.
125 Flexible Benefits Plan: This is a voluntary program that allows employees to use pre-tax dollars to pay for health-related expenses that are not paid by a medical, dental or vision plan (Health Flexible Spending Account $2550 annual limit with a $500 carry over); and dependent care costs (Dependent Care Assistance Plan $5000 annual limit).
Retirement Plan: Employees of the County are covered by the County Retirement Law of 1937. Please visit the San Joaquin County Employees' Retirement Association (SJCERA) at ************** for more information. NOTE: If you are receiving a retirement allowance from another California county covered by the County Employees' Retirement Act of 1937 or from any governmental agency covered by the California Public Employees' Retirement System (PERS), you are advised to contact the Retirement Officer of the Retirement Plan from which you retired to determine what effect employment in San Joaquin County would have on your retirement allowance.
Deferred Compensation: The County maintains a deferred compensation plan under Section 457 of the IRS code. You may annually contribute $22,500 or 100% of your includible compensation, whichever is less. Individuals age 50 or older may contribute to their plan, up to $30,000. The Roth IRA (after tax) is also now available.
Vacation: Maximum earned vacation is 10 days each year up to 3 years; 15 days after 3 years; 20 days after 10 years; and 23 days after 20 years.
Holidays: Effective July 1, 2017, all civil service status employees earn 14 paid holidays each year. Please see the appopriate MOU for details regarding holidays, accruals, use, and cashability of accrued time.
Sick Leave: 12 working days of sick leave annually with unlimited accumulation.
Sick leave incentive
: An employee is eligible to receive eight hours administrative leave if the leave balance equals at least one- half of the cumulative amount that the employee is eligible to accrue. The employee must also be on payroll during the entire calendar year.
Bereavement Leave: 3 days of paid leave for the death of qualifying family member, 2 additional days of accrued leave for death of employee's spouse, domestic partner, parent or child.
Merit Salary Increase: New employees will receive the starting salary, which is the first step of the salary range. After employees serve 52 weeks (2080 hours) on each step of the range, they are eligible for a merit increase to the next step.
Job Sharing: Employees may agree to job-share a position, subject to approval by a Department Head and the Director of Human Resources.
Educational Reimbursement Program: Eligible employees may be reimbursed for career-related course work up to a maximum of $850 per fiscal year. Eligible employees enrolled in an approved four (4) year College or University academic program may be reimbursed up to $800 per semester for a maximum of $1600 per fiscal year.
Parking Supplemental Downtown Stockton: The County contributes up to $20 per pay period for employees who pay for parking and are assigned to work in the Downtown Core Area.
School Activities: Employees may take up to 40 hours per year, but not more than eight (8) hours per month, to participate in their children's school activities.
Selection Procedures
Applicants who meet the minimum qualifications will go through the following examination process:
Written Exam: The civil service written exam is a multiple choice format. If the written exam is administered alone, it will be 100% of the overall score. Candidates must achieve a minimum rating of 70% in order to be placed on the eligible list.
Oral Exam: The oral exam is a structured interview process that will assess the candidate's education, training, and experience and may include a practical exercise. The oral exam selection process is not a hiring interview. A panel of up to four people will determine the candidate's score and rank for placement on the eligible list. Top candidates from the eligible list are referred for hiring interviews. If the oral exam is administered alone, it will be 100% of the overall score. Candidates must achieve a minimum rating of 70% in order to be placed on the eligible list.
Written & Oral Exam: If both a written exam and an oral exam is administered, the written exam is weighted at 60% and the oral exam is weighted at 40% unless otherwise indicated on the announcement. Candidates must achieve a minimum rating of 70% on each examination in order to be placed on the eligible list.
Rate-out: A rate-out is an examination that involves a paper rating of the candidate's application using the following criteria: education, training, and experience. Candidates will not be scheduled for the rate-out process.
Note: The rating of 70 referred to may be the same or other than an arithmetic 70% of the total possible points.
Testing Accommodation: Candidates who require testing accommodation under the Americans with Disabilities Act (ADA) must call Human Resources Division at ************** prior to the examination date.
Veteran's Points: Eligible veterans, unmarried widows and widowers of veterans of the United States Armed Forces who have been honorably discharged and who have served during wartime shall be given veteran's points in initial appointment to County service. Eligible veterans receive 5 points and eligible disabled veterans receive 10 points. Disabled veterans must submit a recent award letter stating a 10% service connected disability issued by the United States Veterans Administration. Note: A copy of your DD214 showing the discharge type must be received in the Human Resources by the date of the examination.
Acceptable wartime service dates:
September 16, 1940 to December 31, 1946
June 27, 1950 to January 31, 1955
August 5, 1964 to May 7, 1975
Persian Gulf War, August 2, 1990, through a date to be set by law or Presidential Proclamation.
Eligible Lists: Candidates who pass the examination will be placed on an eligible list for that classification. Eligible lists are effective for nine months, but may be extended by the Human Resources Director for a period which shall not exceed a total of three years from the date established.
Certification/Referral: Names from the eligible list will be referred to the hiring department by the following methods.
Rule of the Rank: The top rank or ranks of eligibles will be referred for hiring interviews. The minimum number of names to be referred will be equal to the number of positions plus nine, or 10% of the eligible list, whichever is higher. When filling nine or more positions in a department at the same time, the top rank or ranks will be referred and the minimum number of names shall be two times the number of positions to be filled or 10% of the eligible list, whichever is higher. This applies only to open competitive recruitments.
Rule of Five: The top five names will be referred for hiring interviews. This applies only to department or countywide promotional examination.
Rule of the List: For classifications designated by the Director of Human Resources, the entire eligible list will be referred to the department.
Physical Exam: Some classifications require physical examinations. Final appointment cannot be made until the eligible has passed the physical examination. The County pays for physical examinations administered in its medical facilities.
Pre-Employment Drug Screening Exam: Some classifications require a new employee successfully pass a pre-employment drug screen as a condition of employment. Final appointment cannot be made until the eligible has passed the drug screen. The County pays for the initial drug screen.
Employment of Relatives: Applicants who are relatives of employees in a department within the 3rd degree of relationship, (parent, child, grand parent, grand child or sibling) either by blood or marriage, may not be appointed, promoted, transferred into or within the department when;
They are related to the Appointing Authority or
The employment would result in one of them supervising the work of the other.
Department Head may establish additional limitations on the hiring of relatives by departmental rule.
Proof of Eligibility: If you are offered a job you will be required to provide proof of U.S. citizenship or other documents that establish your eligibility to be employed in the U.S.
HOW TO APPLY
Apply Online:
*************/department/hr
By mail or in person:
San Joaquin County Human Resources
44 N. San Joaquin Street Suite 330
Stockton, CA 95202
Office hours:
Monday - Friday 8:00 am to 5:00 pm; excluding holidays.
Phone: **************
Job Line:
For current employment opportunities please call our 24-hour job line at **************.
When a final filing date is indicated, applications must be filed with the Human Resources Division before 5:00 p.m. or postmarked by the final filing date. Resumes will not be accepted in lieu of an application. Applications sent through county inter-office mail, which are not received by the final filing date, will not be accepted. (The County assumes no responsibility for mailed applications which are not received by the Human Resources Division).
San Joaquin County Substance Abuse Policy: San Joaquin County has adopted a Substance Abuse Policy in compliance with the Federal Drug Free Workplace Act of 1988. This policy is enforced by all San Joaquin County Departments and applies to all San Joaquin County employees.
Equal Opportunity Employer: San Joaquin County is an Equal Employment Opportunity (EEO) Employer and is committed to providing equal employment to all without regard to age, ancestry, color, creed, marital status, medical condition, national origin, physical or mental disability, political affiliation or belief, pregnancy, race, religion, sex, or sexual orientation. For more information go to *************/department/hr/eeo.
$22.5k yearly 3d ago
Security Engineer - Client Security
Meta 4.8
Security engineer job in Fremont, CA
Meta's Client Security team is seeking experienced SecurityEngineer who have a track record of solving complex security problems at scale. Client SecurityEngineers design and develop solutions to ensure Meta's data and systems can only be accessed by trusted devices, and that applicable security policies are enforced on devices.
**Required Skills:**
SecurityEngineer - Client Security Responsibilities:
1. Drive Meta's trusted devices strategy by building tools that enable connectivity to our infrastructure only from Meta owned and managed devices
2. Build machine attestation and secure certificate storage solutions to enable provable client identity
3. Deploy systems that help mitigate security risks by understanding and controlling what software is allowed to execute on our client devices
4. Develop, validate, and enforce our client security policies
5. Build and deploy tools and automation that proactively detect and respond to security risks and threats to internal corporate services
6. Advise and collaborate with other teams
**Minimum Qualifications:**
Minimum Qualifications:
7. 2+ years of combined experience designing and deploying security infrastructure (such as PKI, key management, and certificate management)
8. 2+ years of software development experience in PHP, Golang, Python, C\C++, Rust, or Ruby
9. Experience applying fundamental security concepts to systems
10. B.S. in Computer Science or a related field, or equivalent experience
**Preferred Qualifications:**
Preferred Qualifications:
11. Mobile Security Experience on iOS and Android platforms including MDM, security policy
12. OS development experience (Windows, Mac, Linux)
13. Experience managing PKI for client devices
**Public Compensation:**
$122,000/year to $181,000/year + bonus + equity + benefits
**Industry:** Internet
**Equal Opportunity:**
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@fb.com.
$122k-181k yearly 25d ago
Engineer, Information Security and Risk
Cardinal Health 4.4
Security engineer job in Sacramento, CA
Cardinal Health, Inc. (NYSE: CAH) is a global healthcare services and products company. We provide customized solutions for hospitals, healthcare systems, pharmacies, ambulatory surgery centers, clinical laboratories, physician offices and patients in the home. We are a distributor of pharmaceuticals and specialty products; a global manufacturer and distributor of medical and laboratory products; an operator of nuclear pharmacies and manufacturing facilities; and a provider of performance and data solutions. Working to be healthcare's most trusted partner, our customer-centric focus drives continuous improvement and leads to innovative solutions that improve the lives of people every day. With approximately 50,000 employees worldwide, Cardinal Health ranks among the top fifteen in the Fortune 500.
**_Department Overview:_**
**Information Technology** oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.
**Information Security and Risk** develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure, or destruction. This job family develops system back-up and disaster recovery plans, conducts incident responses, threat management, vulnerability scanning, virus management and intrusion detection as well as completes risk assessments.
Lead IAM work for new customer onboardings and migrations. Collaborate with CAH Account Management, Application Teams, and Customers to design, implement, and test federated SSO solution based on customer login requirements. Provide technical guidance and act as primary point of contact for business partners and customer related to IAM work for onboarding. Additional responsibilities include supporting application integrations and enhancing SSO self service application onboarding.
**Responsibilities:**
+ **Customer Onboarding IAM Efforts - Strategy & Execution :** Lead the planning, design, and execution for Customer Onboarding via federated SSO, ensuring alignment with overall business and security objectives. This includes assessing multiple Cardinal Health e-commerce applications, understanding login requirements for new/existing customers, designing, testing and implementing solutions etc to ensure top notch user login experience and enhancing Cardinal Health's security posture.
+ **Collaboration & Communication:** Coordinate cross-functional teams, including Customer Business and IT teams, Cardinal Health's Account Management/Sales and Application teams, Information Security and others to ensure effective IAM implementation and seamless integration with business processes. Communicate complex security concepts to technical and non-technical internal and external stakeholders.
+ **Application Integration Leadership:** Lead the integration of various enterprise applications (SaaS, on-premise, custom-built) with our core IAM infrastructure, ensuring secure authentication, authorization, and user provisioning/de-provisioning.
+ **User Lifecycle Management:** Streamline and automate user provisioning, de-provisioning, and periodic access reviews for employees, contractors, and partners across all integrated systems, ensuring smooth onboarding and offboarding during M&A transitions.
+ **Solution Design & Implementation:** Design, implement, and maintain IAM solutions including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC) frameworks.
+ **Technical Troubleshooting & Support:** Troubleshoot, identify, and resolve technical identity and access management-related issues, providing expert support to internal teams and end-users during and after integration.
+ **Documentation & Best Practices:** Develop, review, and maintain comprehensive technical documentation, including architecture diagrams, configuration guides, and operational procedures. Stay up-to-date with IAM best practices, regulatory requirements, and security trends.
**Qualifications:**
+ **Education:** Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent practical experience.
+ **Experience:** 5+ years of progressive experience as an IAM Engineer, designing and implementing enterprise scale solutions with significant experience in supporting M&A integration projects preferred.
+ **Technical Expertise:**
+ Extensive knowledge and experience with authentication standards and technologies such as SSO (SAML, OAuth, OpenID Connect), MFA
+ Proficiency in directory services (e.g., Active Directory, Azure AD, LDAP).
+ Hands-on experience with leading IAM platforms (e.g., Okta, Microsoft Azure AD, CyberArk, ForgeRock, Ping Identity, SailPoint).
+ Strong understanding of security principles, risk management, and access control models (e.g., RBAC).
+ Familiarity with Zero Trust architecture principles.
+ Familiarity with AI/ML concepts and their practical application in security and risk management, especially in IAM context.
+ Strong communication and interpersonal skills to collaborate effectively with various teams and stakeholders.
+ Detail-oriented mindset to ensure precise access control configurations and compliance.
+ Excellent problem-solving and analytical abilities to troubleshoot access issues and design solutions for unique business requirements
+ Must be a self-starter who takes full ownership of projects from inception to completion , holding oneself accountable for the security and operation integrity of IAM platform.
+ Ability to manage multiple priorities and meet tight deadlines in a fast-paced M&A environment.
**Anticipated salary range:** $94,900 - $135,600
**Bonus eligible:** No
**Benefits:** Cardinal Health offers a wide variety of benefits and programs to support health and well-being.
+ Medical, dental and vision coverage
+ Paid time off plan
+ Health savings account (HSA)
+ 401k savings plan
+ Access to wages before pay day with my FlexPay
+ Flexible spending accounts (FSAs)
+ Short- and long-term disability coverage
+ Work-Life resources
+ Paid parental leave
+ Healthy lifestyle programs
**Application window anticipated to close:** 12/20/2025 *if interested in opportunity, please submit application as soon as possible.
The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate's geographical location, relevant education, experience and skills and an evaluation of internal pay equity.
_Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply._
_Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal_ _Opportunity/Affirmative_ _Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._
_To read and review this privacy notice click_ here (***************************************************************************************************************************
$94.9k-135.6k yearly 53d ago
Cloud Security Analyst-AWS or Azure, Devops
360 It Professionals 3.6
Security engineer job in San Ramon, CA
Hands-on cloud securityengineer who has a deep understanding of emerging technologies including Openstack, PaaS - Pivotal cloud foundry, Mesos, Docker container, Security, Software defined networks, Cloud integration technologies.
Hands-on deployment of AWS\Azure IaaS components necessary to support the Cyber Security deployment needs, as well as approved Cyber Security specific solutions in the AWS\Azure environment to support these efforts.
Qualifications
Bachelor's Degree in STEM and/or a minimum of 4 years of equivalent experience
Minimum of 6 years of experience of application design and architecture
Minimum of 6 years of experience with deployment of cloud controls for infrastructure, platform, and applications (IaaS/SaaS/PaaS)
AWS and Azure experience a must
Additional Information
All your information will be kept confidential according to EEO guidelines.
How much does a security engineer earn in Stockton, CA?
The average security engineer in Stockton, CA earns between $96,000 and $189,000 annually. This compares to the national average security engineer range of $77,000 to $141,000.