Information Security Analyst jobs at Veolia Environmental Services North America - 53 jobs

The Information Security Analyst is responsible for the operations and administration of the organization's enterprise security solutions and processes. The Information Security Analyst investigates and responds to enterprise security events and requests. **PRINCIPLE RESPONSIBILITIES:** + Administers and maintains security infrastructure/tool set. + Gathers and documents security requirements to support enterprise security initiatives. + Executes established information security management procedures (e.g., threat intelligence, metrics gathering, reporting, investigation) and produces quality deliverables. + Analyzes security alerts, incidents, and requests; identifies root causes; determines and executes appropriate steps for resolution. + Escalates security incidents/problems as required and monitors progress towards resolution until the incident/problem is closed/resolved. + Performs threat hunting using available security tools, indicators, and intelligence. + Builds, maintains, and manages strong relationships across internal and external teams to resolve problems and deliver information security services. + Ensures that information security assets are maintained and inventoried. + Drafts, reviews, and edits operating procedures and reports. + Performs other job-related duties as assigned or apparent. **QUALIFICATIONS:** + Information security certifications such as Certified Information Systems Security Professional (CISSP), or CompTIA Security+. + Experience with intrusion prevention systems (IPS), vulnerability scanning/management, system hardening, security standards, data loss prevention (DLP) solutions, and endpoint detection and response (EDR). + Intermediate to advanced proficiency in the use of Microsoft Office products: Word, Excel, PowerPoint, and Visio. + Prior experience with root cause analysis and security incident response. + Passion for customer service, problem-solving, investigation, and information security. + Strong analytical abilities and investigation skills. **MINIMUM QUALIFICATIONS:** + Minimum of 3 years of experience in an information security role with progressive experience in operating, supporting, and troubleshooting enterprise security solutions. + Experience operating at least two of the following: DNS based protections, email filtering and security, web proxies, anti-virus, threat hunting, or log review/investigation. **Rewarding Compensation and Benefits** Eligible employees can elect to participate in: - Comprehensive medical benefits coverage, dental plans and vision coverage. - Health care and dependent care spending accounts. - Short- and long-term disability. - Life insurance and accidental death & dismemberment insurance. - Employee and Family Assistance Program (EAP). - Employee discount programs. - Retirement plan with a generous company match. - Employee Stock Purchase Plan (ESPP). - Paid Time Off (PTO) - Benefits: ********************************************************* _The statements used herein are intended to describe the general nature and level of the work being performed by an employee in this position, and are not intended to be construed as an exhaustive list of responsibilities, duties and skills required by an incumbent so classified. Furthermore, they do not establish a contract for employment and are subject to change at the discretion of the Company._ EEO STATEMENT:Republic Services is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, relationship or association with a protected veteran (spouses or other family members), genetic information, or any other characteristic protected by applicable law. **ABOUT THE COMPANY** Republic Services, Inc. (NYSE: RSG) is a leader in the environmental services industry. We provide customers with the most complete set of products and services, including recycling, waste, special waste, hazardous waste and field services. Our industry-leading commitments to advance circularity and support decarbonization are helping deliver on our vision to partner with customers to create a more sustainable world. In 2023, Republic's total company revenue was $14.9 billion, and adjusted EBITDA was $4.4 billion. We serve 13 million customers and operate more than 1,000 locations, including collection and transfer stations, recycling and polymer centers, treatment facilities, and landfills. Although we operate across North America, the collection, recycling, treatment, or disposal of materials is a local business, and the dynamics and opportunities differ in each market we serve. By combining local operational management with standardized business practices, we drive greater operating efficiencies across the company while maintaining day-to-day operational decisions at the local level, closest to the customer. Our customers, including small businesses, major corporations and municipalities, want a partner with the expertise and capabilities to effectively manage their multiple recycling and waste streams. They choose Republic Services because we are committed to exceeding their expectations and helping them achieve their sustainability goals. Our 41,000 team members understand that it's not just what we do that matters, but how we do it. Our company values guide our daily actions: + **Safe** : We protect the livelihoods of our colleagues and communities. + **Committed to Serve** : We go above and beyond to exceed our customers' expectations. + **Environmentally Responsible:** We take action to improve our environment. + **Driven** : We deliver results in the right way. + **Human-Centered:** We respect the dignity and unique potential of every person. We are proud of our high employee engagement score of 86. We have an inclusive and diverse culture where every voice counts. In addition, our team positively impacted 4.6 million people in 2023 through the Republic Services Charitable Foundation and local community grants. These projects are designed to meet the specific needs of the communities we serve, with a focus on building sustainable neighborhoods. **STRATEGY** Republic Services' strategy is designed to generate profitable growth. Through acquisitions and industry advancements, we safely and sustainably manage our customers' multiple waste streams through a North American footprint of vertically integrated assets. We focus on three areas of growth to meet the increasing needs of our customers: recycling and waste, environmental solutions and sustainability innovation. With our integrated approach, strengthening our position in one area advances other areas of our business. For example, as we grow volume in recycling and waste, we collect additional material to bolster our circularity capabilities. And as we expand environmental solutions, we drive additional opportunities to provide these services to our existing recycling and waste customers. **Recycling and Waste** We continue to expand our recycling and waste business footprint throughout North America through organic growth and targeted acquisitions. The 13 million customers we serve and our more than 5 million pick-ups per day provide us with a distinct advantage. We aggregate materials at scale, unlocking new opportunities for advanced recycling. In addition, we are cross-selling new products and services to better meet our customers' specific needs. **Environmental Solutions** Our comprehensive environmental solutions capabilities help customers safely manage their most technical waste streams. We are expanding both our capabilities and our geographic footprint. We see strong growth opportunities for our offerings, including PFAS remediation, an increasing customer need. **SUSTAINABILITY INNOVATION** Republic's recent innovations to advance circularity and decarbonization demonstrate our unique ability to leverage sustainability as a platform for growth. The Republic Services Polymer Center is the nation's first integrated plastics recycling facility. This innovative site processes rigid plastics from our recycling centers, producing recycled materials that promote true bottle-to-bottle circularity. We also formed Blue Polymers, a joint venture with Ravago, to develop facilities that will further process plastic material from our Polymer Centers to help meet the growing demand for sustainable packaging. We are building a network of Polymer Centers and Blue Polymer facilities across North America. We continue to advance decarbonization at our landfills. As demand for renewable energy continues to grow, we have 70 landfill gas-to-energy projects in operation and plan to expand our portfolio to 115 projects by 2028. **RECENT RECOGNITION** + Barron's 100 Most Sustainable Companies + CDP Discloser + Dow Jones Sustainability Indices + Ethisphere's World's Most Ethical Companies + Fortune World's Most Admired Companies + Great Place to Work + Sustainability Yearbook S&P Global

Join the Clean Energy Revolution Become a Senior Cyber Security Specialist, Threat Hunt at Southern California Edison (SCE) and build a better tomorrow. In this job, you'll be a part of the Cyber Threat Hunt and Intelligence team, a sub-team under SCE's broader Cybersecurity Operations Center (CSOC) - the team is responsible for keeping SCE's network and grid secure from emerging threats and cyber actors. As a Senior Cyber Security Specialist, Threat Hunt, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future? In this role as Senior Specialist for the Cyber Threat Hunt and Intelligence Team, you will be primarily responsible for not only conducting continuous research on emerging threats and threat actor activity but also actioning that intelligence through proactive and innovate threat hunts using SIEM, EDR, and other technology. We are looking for a Senior Cyber Specialist with a technical and analytical background that can leverage their solid understanding of networks, network architectures, and adversarial tradecraft to enable proactive and innovative approaches to their cybersecurity threat hunting work across the SCE environment, with a specific focus on Operational Technology (OT). Job function examples include: + Leverage technical expertise and adversarial knowledge to hunt across the SCE Admin, cloud, and OT environment + Aid in the development and maturation of the OT hunt program + Breaking down and leveraging technical intelligence reports and analyze Tactics Techniques and Procedures utilized by cyber adversaries and proactively hunt for those across the SCE environment. + Use understanding of Vulnerability Exploitation to Hunt for Evidence of exploitation of emerging vulnerabilities. + Through hunting efforts, proactively identify and document logging gaps, architectural gaps, visibility gaps, misconfigurations and control gaps, and other observations to aid in the maturation SCE's cyber posture. + Articulate hunt findings and advise on remediation methods. Aid in coordinating execution of these remediations. + Work with Threat Hunt Team lead to identify capability and process improvements for threat hunting program. + Assists in the development of relevant detections to identify current and future malicious/suspicious activity. Candidate should be comfortable creating detections within multiple different operating systems and network appliances. **Responsibilities** + Performs security risk, vulnerability assessments, and business impact analysis for medium complexity information systems + Carries out project reporting for assigned projects, monitoring project status, timeline and budgets + Assists in the planning and implementation of current and future security domains including those which may introduce new service areas + Adopts and follows security controls, processes, and procedures to manage risk across all information system environments (infrastructure, network, and applications) with the assistance of the application and infrastructure management teams + Monitors technology risk, identifies root cause or key themes, recommends for resolution + Investigates suspected attacks and manages security incidents. Uses forensics where appropriate + Reviews and shapes the production of evidence to support internal and external audits + Implements appropriate security measures for information systems and applications that control access to data, and prevents unauthorized modification, destruction, or disclosure of information + Develops and maintains metrics, alerts, dashboards, and reports for security monitoring + Maintains incident response plans and performs incident response activities as directed and in accordance with established procedures and guidelines and those of federal authorities + A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity. **Minimum Qualifications** + Five or more years of experience in information technology, information security and/or cybersecurity. + US Citizenship Required. Preferred Qualifications + Bachelor's degree in specialized field or an equivalent combination of education, training, and experience. + Two or more years of experience threat hunting. + Experience supporting cyber defense analysis of Operational Technology (OT) Networks to include Integrated Controls Systems (ICS), SCADA, and Process Control Networks (PCN). + Two or more years of experience working in Security Operations Centers. + Two or more years of experience working with Incident Response and Cyber Threat Intelligence functions. + Security +, CISSP, GCIA, GCIH, GMON, GICSP, GRID, etc. Additional Information + This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days. Unless otherwise noted, employees are required to work and reside in the state of California. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs. + Visit our Candidate Resource (************************************************************ page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more! + Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. About Southern California Edison The people at SCE don't just keep the lights on. Our mission is so much bigger. We're fueling the kind of innovation that's changing an entire industry, and quite possibly the planet. Join us and create a future with cleaner energy, while providing our customers with the safety and reliability they demand. At SCE, you'll have a chance to grow personally and professionally, making a real impact in Southern California and around the world. Southern California Edison is a proud Equal Opportunity Employer, including disability and protected veteran status. We are committed to ensuring that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodations at **************.

Client Name: NYC Office Of Technology & Innovation Contract Legth (In Weeks): 104 (2 years) SCOPE OF SERVICES TASKS: Perform many critical functions within the Threat Management discipline including staffing 24x7x365 coverage at the City's Security Operations Center (SOC) augmenting FTE shift schedules including days, nights, weekends, and holidays. Interface with Cyber Command teams internally, with City agencies, vendors, and information -sharing partners. Monitor City networks and security alerts for intrusion, attempted compromise, and anomalous behavior; apply mitigation techniques or escalation factors; correlate threat intelligence across various logs collected by established security controls. Produce routine SOC metrics & reporting. Maintain situation reports (SITREPS) Perform weekly quality control checks. Works closely with SOC Director on incident preparation including the continuous development of new SOC playbooks and runbooks. RequirementsMANDATORY SKILLS/EXPERIENCE Note: Candidates who do not have the mandatory skills will not be considered Minimum 8 years of experience in Threat Management/SOC/Incident Response environment. For a senior position, leadership this includes the ability to lead and mentor junior analysts, coordinate team activities, and manage SOC operations effectively. Prior experience working in a SOC environment is mandatory. This includes familiarity with SOC operations, procedures, and tools such as SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems (IDS/IPS), and endpoint detection and response (EDR) tools. DESIRABLE SKILLS/EXPERIENCE: Knowledge of cybersecurity principles, practices, and procedures Strong understanding of network and host technologies Experience applying techniques for detecting host and network -based intrusion using IDS methods and technologies. Experience with SIEM technologies, malware analysis and mitigation techniques Apply cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, non -repudiation) Interpret information collected by diagnostic network tools (Netflow, security event logs, IDS systems, etc.) Ability to investigate and solve complex problems. Excellent communication skills are crucial for effectively communicating security incidents, risks, and recommendations to technical and non -technical stakeholders, including SOC Director and senior management. Threat Hunting: Proactive threat hunting capabilities to identify and investigate potential security threats or anomalies within the environment before they escalate into incidents. Incident Response: Experience in incident response procedures and methodologies, including the ability to analyze security incidents, contain threats, mitigate risks, and recover from security breaches effectively and efficiently.

Share Our Purpose. Be Yourself. Feel Valued. People are the heart of our business. As an American Water employee, you will be offered a competitive salary and health benefits package, along with opportunities to develop, grow, and evolve your career. Our benefits packages focus on key areas such as health & wellness, emotional & well-being, and savings for current & future goals. We are Beautifully Different. We strongly believe having diversity across our company makes us more successful and helps us provide essential services to our customers. We are stronger because we embrace different ideas, viewpoints, experiences, and backgrounds. American Water is the best choice for your next role! Click here for more information on our inclusion, diversity, and equity journey. About American Water American Water (NYSE: AWK) is the largest regulated water and wastewater utility company in the United States. With a history dating back to 1886, We Keep Life Flowing by providing safe, clean, reliable and affordable drinking water and wastewater services to more than 14 million people across 14 regulated jurisdictions and 18 military installations. American Water's 6,500 talented professionals leverage their significant expertise and the company's national size and scale to achieve excellent outcomes for the benefit of customers, employees, investors and other stakeholders. As one of the fastest growing utilities in the U.S., American Water expects to invest $40 to $42 billion in infrastructure repairs and replacement, system resiliency and regulated acquisitions over the next 10 years. The company has a long-standing history of executing its core operations, aligned with sustainable best practices, through its commitments to safety, affordability, customer service, protecting the environment, an inclusive workforce and strengthening communities. American Water has been recognized on the 2023 Bloomberg Gender-Equality Index for the fifth consecutive year, ranked 18th on Barron's 100 Most Sustainable U.S. Companies 2023 List, earned the U.S. Department of Homeland Security SAFETY Act designation and U.S. Environmental Protection Agency's WaterSense Excellence Award, among additional state, local and national recognitions. For more information, visit amwater.com and join American Water on LinkedIn, Facebook, Twitter and Instagram. Job Information Salary Range: $102,290 - $118,100 The base salary range represents a good faith salary range for this position. This position is eligible for annual incentive pay and has the opportunity for continued salary growth. If you are hired at American Water your base salary compensation will be determined based on factors such as market, geography, skills, education and/or experience. At American Water, we are committed to pay equity. In addition to compensation, you will be offered a comprehensive benefits package including 401(k), Defined Contribution Plan, Employee Stock Purchase Plan, medical, prescription, dental and vision coverage, plus disability, paid time off, life insurance, voluntary benefits, health and wellness programs and much more! American Water is also proud to offer employees learning opportunities and work experiences to grow professionally! Primary Role The Cybersecurity Analyst is responsible for investigating escalated cybersecurity alerts, incidents, and events identified by L1 analysts. This role focuses on triage, analysis, and response within documented processes to ensure the security and resilience of the organization's systems. The analyst will serve as the lead investigative analyst on escalated cybersecurity events and collaborate with other cybersecurity teams, but will not have direct people management responsibilities. Key Accountabilities Monitor and analyze security alerts from SIEM, IDS/IPS, endpoint protection, firewalls, and other cybersecurity tools. Perform initial or secondary triage, categorization, and documentation of security events. Follow documented standard operating procedures (SOPs) for investigating and escalating incidents. Direct Palo MDR for containment of assets involved in an incident. Conduct daily security tasks such as log reviews, system health checks, and routine monitoring. Accurately record incident findings, investigation steps, and escalation details in case management systems. Collaborate with team members to ensure effective 24/7/365 incident handling coverage Knowledge/Skills Water Utility Experience, Project involvement, Security Operations, Change Management Processes, Working knowledge of: Endpoint detection Intrusion detection/prevention systems Firewalls SIEM Strong knowledge of digital technologies and applicability for the water and wastewater industries Familiarity with common attack techniques and frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with attention to detail. Excellent written and verbal communication skills. Experience/Education Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; or equivalent professional experience. Appropriate technical certification in specialty area preferred. Minimum of 2 years of professional experience in Information Technology operations. At least 1 year of Security Operations experience preferred. Experience in utilities, critical infrastructure, or other highly regulated industries strongly preferred. Work Environment Office Environment, Camden, NJ. Travel Requirements As necessary, up to 10% #LI-LKO Competencies Champions safety Customer obsessed Cultivates innovation Nimble learning Drives ResultsCollaborates Join American Water...We Keep Life Flowing™ American Water is firmly committed to Equal Employment Opportunity (EEO) and prohibits employment discrimination for employees and applicants based on his or her age, race, color, pregnancy, gender, gender identity, sexual orientation, national origin, religion, marital status, citizenship, or because they are an individual with a disability, protected veteran or other status protected by federal, state, and local laws.

Share Our Purpose. Be Yourself. Feel Valued. People are the heart of our business. As an American Water employee, you will be offered a competitive salary and health benefits package, along with opportunities to develop, grow, and evolve your career. Our benefits packages focus on key areas such as health & wellness, emotional & well-being, and savings for current & future goals. We are Beautifully Different. We strongly believe having diversity across our company makes us more successful and helps us provide essential services to our customers. We are stronger because we embrace different ideas, viewpoints, experiences, and backgrounds. American Water is the best choice for your next role! Click here for more information on our inclusion, diversity, and equity journey. About American Water American Water (NYSE: AWK) is the largest regulated water and wastewater utility company in the United States. With a history dating back to 1886, We Keep Life Flowing by providing safe, clean, reliable and affordable drinking water and wastewater services to more than 14 million people across 14 regulated jurisdictions and 18 military installations. American Water's 6,500 talented professionals leverage their significant expertise and the company's national size and scale to achieve excellent outcomes for the benefit of customers, employees, investors and other stakeholders. As one of the fastest growing utilities in the U.S., American Water expects to invest $40 to $42 billion in infrastructure repairs and replacement, system resiliency and regulated acquisitions over the next 10 years. The company has a long-standing history of executing its core operations, aligned with sustainable best practices, through its commitments to safety, affordability, customer service, protecting the environment, an inclusive workforce and strengthening communities. American Water has been recognized on the 2023 Bloomberg Gender-Equality Index for the fifth consecutive year, ranked 18th on Barron's 100 Most Sustainable U.S. Companies 2023 List, earned the U.S. Department of Homeland Security SAFETY Act designation and U.S. Environmental Protection Agency's WaterSense Excellence Award, among additional state, local and national recognitions. For more information, visit amwater.com and join American Water on LinkedIn, Facebook, Twitter and Instagram. Job Information Salary Range: $102,290 - $118,100 The base salary range represents a good faith salary range for this position. This position is eligible for annual incentive pay and has the opportunity for continued salary growth. If you are hired at American Water your base salary compensation will be determined based on factors such as market, geography, skills, education and/or experience. At American Water, we are committed to pay equity. In addition to compensation, you will be offered a comprehensive benefits package including 401(k), Defined Contribution Plan, Employee Stock Purchase Plan, medical, prescription, dental and vision coverage, plus disability, paid time off, life insurance, voluntary benefits, health and wellness programs and much more! American Water is also proud to offer employees learning opportunities and work experiences to grow professionally! Primary Role The Cybersecurity Analyst is responsible for investigating escalated cybersecurity alerts, incidents, and events identified by L1 analysts. This role focuses on triage, analysis, and response within documented processes to ensure the security and resilience of the organization's systems. The analyst will serve as the lead investigative analyst on escalated cybersecurity events and collaborate with other cybersecurity teams, but will not have direct people management responsibilities. Key Accountabilities Monitor and analyze security alerts from SIEM, IDS/IPS, endpoint protection, firewalls, and other cybersecurity tools. Perform initial or secondary triage, categorization, and documentation of security events. Follow documented standard operating procedures (SOPs) for investigating and escalating incidents. Direct Palo MDR for containment of assets involved in an incident. Conduct daily security tasks such as log reviews, system health checks, and routine monitoring. Accurately record incident findings, investigation steps, and escalation details in case management systems. Collaborate with team members to ensure effective 24/7/365 incident handling coverage Knowledge/Skills Water Utility Experience, Project involvement, Security Operations, Change Management Processes, Working knowledge of: Endpoint detection Intrusion detection/prevention systems Firewalls SIEM Strong knowledge of digital technologies and applicability for the water and wastewater industries Familiarity with common attack techniques and frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with attention to detail. Excellent written and verbal communication skills. Experience/Education Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field; or equivalent professional experience. Appropriate technical certification in specialty area preferred. Minimum of 2 years of professional experience in Information Technology operations. At least 1 year of Security Operations experience preferred. Experience in utilities, critical infrastructure, or other highly regulated industries strongly preferred. Work Environment Office Environment, Camden, NJ. Travel Requirements As necessary, up to 10% #LI-LKO Competencies Champions safety Customer obsessed Cultivates innovation Nimble learning Drives ResultsCollaborates Join American Water...We Keep Life Flowing™ American Water is firmly committed to Equal Employment Opportunity (EEO) and prohibits employment discrimination for employees and applicants based on his or her age, race, color, pregnancy, gender, gender identity, sexual orientation, national origin, religion, marital status, citizenship, or because they are an individual with a disability, protected veteran or other status protected by federal, state, and local laws.

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients. We are is seeking a full-time Information Security Analyst to support DoD customer. This position is to provide support in the China Lake, CA area. Responsibilities: Serves as a team member providing network monitoring and scanning functions. Provides network vulnerability scanning to ensure IAVA compliance and remediation. Provides antivirus management using antivirus tools. Provides wireless scanning using network detection software. Implements system security policies, and scans Provides Cybersecurity reporting requirements to appropriate authorities. Provides assistance for personnel / users needing information/assistance with Information Assurance (IA) related issues. Directly supports Information Assurance (IA) requirements, within the immediate area of responsibility (AOR), managing and tracking system administrator elevated level of access to network resources. Works with team members to identify IA trends and suggests long-term strategies to help mitigate IA issues. Assesses procedures and identifies opportunities to improve customer service. Champions customer service and sets and monitors parameters for customer service excellence. Qualifications Requirements: Active SECRET clearance Bachelor's Degree in Engineering, Computer Science, or Information Assurance 6 years' additional work experience may be substituted for a Bachelor's Degree Min 3 to 10 years of relevant focused experience Must meet specific certification and training requirements in accordance with DoD 8570.1-M, DoDD 8570.1 Experience and Skills: Excellent oral and written skills. Excellent critical thinking skills. Proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook. Ability to work independently and as a team member

Secur-Serv is a leading managed services provider of IT, print, and hardware services, with a security focus at the core of every service. Secur-Serv provides nationwide, on-site service to businesses of every size, focusing on the financial, manufacturing, transportation, and healthcare industries. Why Secur-Serv? Join Secur-Serv because we are committed to professional and personal growth, working with employees to develop a defined career path and helping them achieve their career goals with internal and external training. We empower our employees to innovate and be a part of solutions that improve processes, systems, and transformation. We recognize and provide an environment where each and every employee can make an impact.. Explore new training opportunities through our LinkedIn Learning platform and partners to develop your skills and career. Free wellness and mental health resources via our Employee Assistance Program (EAP) available which is all employees for help with life's stresses and up to three visits with a professional. This is a remote, work-from-home position, and all qualified candidates are encouraged to apply in the continental U.S., with the exception of candidates from California, Maryland, Minnesota, Colorado, Washington, New York, Maine, Illinois, or New Jersey. POSITION SUMMARY The Security Engineer designs, implements, and maintains secure network access solutions for our customer's (Palo Alto) enterprise environment. Will work closely with network, cloud, and IT operations teams to optimize performance, troubleshoot issues, and ensure compliance with organizational security standards. ESSENTIAL RESPONSIBILITIES Follow all Secur-Serv requirements, policies, procedures, and management directions Migrate customers from legacy firewall technologies to Palo Alto Networks platforms Build custom security policies and application signatures, configured for our client's needs Take every opportunity to maintain proficiency and increase the level of knowledge on Palo Alto Networks SASE products, software, and services Provide after-hours and weekend on-call support as needed to support maintenance activities Analyze logs and events from the solution to perform initial troubleshooting and issue identification Work with our Technical Assistance Center to troubleshoot and diagnose support cases Maintain the Company's solution and provide mentorship on code upgrades and best practices Ensure client needs are met and deliverables produced on time according to specified project deliverables and scope REQUIREMENTS Bachelor's degree in Computer Science, Electrical Engineering, Computer Engineering or a related technical field or equivalent background or military experience Minimum 4 years' experience in professional services PCNSE, CCNA, CCNP, and/or CCIE certification Project leadership experience - ability to drive organizations and resources to complete required tasks in service of end goals Detailed technical experience in the installation, configuration, and operation of high-end firewall appliances Strong understanding of LAN and WAN networking protocols and technologies, including switching, routing, firewalls and security solutions Strong TCP/IP networking skills Strong dynamic routing skills (BGP, OSPF, etc) Experience working with Remote Access VPN solutions, IPSEC, PKI & SSL, TCP/IP, Authentication Protocols (LDAP, RADIUS, SAML, etc.) Experience working with URL filtering Experience working with Proxy and SSL Decryption Experience working with Windows and MAC OS including (debugging, editing Windows Registries, Plist, etc.) Experience with one or more of these vendors: Palo Alto Networks NGFW, Cisco, Checkpoint, Juniper (Netscreen), Fortinet products, Symantec/ Blue Coat, Zscaler Good troubleshooting skills and ability to use tools like tcpdump & Wireshark Application Delivery expertise - L7 SLB / Global SLB / Traditional Link LB Application Performance Monitoring expertise - Response time metrics, Application identification Packet capture analysis / fault isolation and remediation In-depth knowledge and deployment experience of SD-WAN and Remote Access technologies Network Security expertise (IPS/IDS, ZBFW, NGFW) In-depth IP Routing protocol expertise (BGP, OSPF, EIGRP) Implementation of Legacy WAN solutions (MPLS, Leased Line, Frame Relay, Satellite, Internet VPN, ECMP, DMVPN) Global-scale network design Demonstrable Virtualization experience (VMware/Microsoft/Citrix/Linux KVM) Ability to work in a cross-functional environment which involves coordination with different teams such as Sales/Pre Sales/Product Management/Engineering Good written and verbal communication skills with confirmed ability to communicate with senior leaders and technical peers Desire to learn on your feet and thrive on the bleeding edge of networking. PREFERRED SKILLS/EXPERIENCE Experience with Prisma Access Experience with public clouds like AWS/GCP/Azure Scripting and automation development experience PHYSICAL/MENTAL REQUIREMENTS Sit Frequently at a desk Frequent fine hand and finger movements (keyboard, writing, mouse movement) Continual close visual acuity for reading Hearing and Speaking for communication within and outside of company. May be required to lift/push/pull up to 10 pounds for set up/movement of office equipment, Mental Requirements - must be able to consistently: Learn new tasks, Remember Processes, Maintain focus, Complete tasks independently Make timely decisions in the context of a workflow, Ability to communicate effectively, Able to adhere to process protocol in a timely manner WE ARE AN EQUAL OPPORTUNITY EMPLOYER. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Applicants who have disabilities may request that accommodations be made in order to complete the selection process by contacting our People Department by emailing [email protected] or calling ************. EEO is the law. To review your rights under Equal Employment Opportunity please visit: **********************************************************

The Information Security Manager will be responsible for developing, implementing and monitoring a strategic and comprehensive IT security plans across multiple geographies and driving security in manufacturing sites, Distribution Centers, and warehouses across the US. Your role: * Develop and implement robust OT (Operational Technology), Cloud, Network, IoT (Internet of Things) security strategies on ISC (Integrated Supply Chain) manufacturing process aligned with industry standards, such as establishing security architecture compliance with regulations (e.g., HIPAA, FDA) and deploy technologies like firewalls and OT IDS (Operational Tech. Intrusion Detection System) solutions for system segmentation and protection. * Leverage experience with OT technologies (e.g., Nozomi Guardian, Armis, Claroty) and perform vulnerability assessments by applying frameworks like MITRE ATT&CK and STRIDE for threat modeling and attack simulations, driving solutions to address security threats. * Identify, assess, and mitigate: Operational Technology (OT) Cloud, Network, IoT (Internet of Things) risk and/or threats on Integrated Supply Chain (ISC) manufacturing security through cross-functional collaboration, develop incident response plans, lead investigations, and implement corrective actions to address root causes of security breaches. * Secure supply chain systems by collaborating with vendors, conducting assessments, and enforcing compliance with security standards. * Build a culture of security through targeted training programs and stakeholder education. You're the right fit if: * You have 5+ years of experience with Bachelor's OR 3+ years of experience with Master's in areas such as Security Architecture, Network Security, Cybersecurity Technology, Information Security or equivalent * You have a Bachelor's or Master's Degree in Computer Science, Information Technology, Cybersecurity or equivalent. * You are knowledgeable on MITRE Framework, IEC 62443/NIST 800:23. Preferred to have a CISSP, CISM, CISA, CIPP certification. * Your skills include thorough understanding of Security Management and Governance principles, along being able to deliver cross-cultural etiquette, customer-centric and collaborative mindset. * You must be able to successfully perform the following minimum Physical, Cognitive and Environmental job requirements with or without accommodation for this position. How we work together We believe that we are better together than apart. For our office-based teams, this means working in-person at least 3 days per week. Onsite roles require full-time presence in the company's facilities. Field roles are most effectively done outside of the company's main facilities, generally at the customers' or suppliers' locations. This is an in office role in any of our offices in Reedsville (PA), Murrysville (PA), Colorado Springs (CO), Ontario (CA) or Freemont (CA). About Philips We are a health technology company. We built our entire company around the belief that every human matters, and we won't stop until everybody, everywhere, has access to the quality of healthcare that we all deserve. Do the work of your life to help improve the lives of others. * Learn more about our business. * Discover our rich and exciting history. * Learn more about our purpose. * Learn more about our culture. Philips Transparency Details The pay range for this position in Reedsville or Murrysville, Pennsylvania and for Colorado Springs, Colorado is from $ 117,000 to $187,200. The pay range for this position in Ontario, California is from $ 122,850 to $196,560. The pay range for this position in Freemont, California is from $ 131,040 to $209,664. The actual base pay offered may vary within the posted ranges depending on multiple factors including job-related knowledge/skills, experience, business needs, geographical location, and internal equity. In addition, other compensation, such as an annual incentive bonus, sales commission or long-term incentives may be offered. Employees are eligible to participate in our comprehensive Philips Total Rewards benefits program, which includes a generous PTO, 401k (up to 7% match), HSA (with company contribution), stock purchase plan, education reimbursement and much more. Details about our benefits can be found here. At Philips, it is not typical for an individual to be hired at or near the top end of the range for their role and compensation decisions are dependent upon the facts and circumstances of each case. Additional Information US work authorization is a precondition of employment. The company will not consider candidates who require sponsorship for a work-authorized visa, now or in the future. #LI-PH1 #EOS #EEIT This requisition is expected to stay active for 45 days but may close earlier if a successful candidate is selected or business necessity dictates. Interested candidates are encouraged to apply as soon as possible to ensure consideration. Philips is an Equal Employment and Opportunity Employer including Disability/Vets and maintains a drug-free workplace.

The Epic Security Analyst II is responsible for managing user access, security policies, and role-based permissions within the Epic electronic health record (EHR) system. This role ensures compliance with HIPAA, organizational security policies, and Epic best practices while supporting security design, audits, and troubleshooting access-related issues. The analyst collaborates with IT teams, Compliance Officers, Privacy, Information Security and Epic application analysts to maintain secure, efficient, and compliant system access. Please note this is a hybrid position with a set scheduled 3 days (Tues - Thurs) per month onsite in Springfield, IL. Travel expenses are covered per our company guidelines for non-local employees. We are happy to offer the flexibility of a hybrid position with some remote/ at home flexibility. Please note you must reside on one of our approved states in order to be considered: Illinois, Indiana, Kansas, Kentucky, Michigan, Missouri, Ohio, and Wisconsin are the approved states. Qualifications Minimum Qualifications: Educational Background: Bachelor's degree in computer science, Information Systems, Healthcare Informatics, or a related field is preferred. Epic Certification: Certification in Epic Security is required within 1 year of hire date. • Three plus years of IT experience desired. • Experience with EMP, SER, and identity management is preferred. • Experience with user provisioning, role-based access control (RBAC), and security model design is preferred. • Understanding of HIPAA, HITECH, and other healthcare security regulations. • Experience with Active Directory (AD), single sign-on (SSO), multi-factor authentication (MFA), and identity management solutions. • Strong analytical, problem-solving, and troubleshooting skills related to Epic security and access issues. • Excellent communication and collaboration skills to work with IT teams, compliance officers, and end users. Responsibilities Principle Duties & Responsibilities: 1. Manage user access, templates, and security roles within Epic. 2. Maintain and configure EMP records, SER security, and role-based access to align with job functions. 3. Implement security best practices to protect patient data and comply with regulatory requirements. 4. Conduct regular security audits and access reviews to ensure compliance with HIPAA and organizational policies. 5. Work with compliance teams and auditors to address security risks and findings. 6. Monitor system logs and security reports to detect and respond to unauthorized access or security breaches. 7. Troubleshoot access issues, security permissions, and authentication problems within Epic. 8. Provide user support, training, and documentation on security policies and access management. 9. Assist in resolving user provisioning errors, break the glass access events, and role conflicts. 10. Work with IT teams to integrate Active Directory, single sign-on (SSO), and identity management systems with Epic security. 11. Coordinate with Epic application analysts and clinical departments to define appropriate security roles. 12. Participate in Epic upgrades, security patches, and system maintenance to ensure ongoing security. 13. Develop and maintain Epic security policies, procedures, and documentation. 14. Identify opportunities for automation, process improvement, and enhanced security measures. 15. Stay up to date with Epic security updates, best practices, and regulatory changes. The intent of this job description is to provide a representative summary of the major duties and responsibilities performed by incumbents of this job. Incumbents may be requested to perform tasks other than those specifically presented in this description. Not ready to apply? Connect with us for general consideration.

Waste Management (WM), a Fortune 250 company, is the leading provider of comprehensive waste and environmental services in North America. We are strongly committed to a foundation of operating excellence, professionalism and financial strength. WM serves nearly 25 million customers in residential, commercial, industrial and municipal markets throughout North America through a network of collection operations, transfer stations, landfills, recycling facilities and waste-based energy production projects. I. Job Summary The Network Security Analyst will focus on designing, implementing, and maintaining secure network security policies to protect organizational assets. This role emphasizes network security engineering, firewall policy management, secure browser configuration, and security tooling/reporting. Analysts will collaborate closely with developers, infrastructure teams, vendors, and security stakeholders to ensure robust security controls across all network layers. Analyst will participate in efforts across these functions including monthly metric and project reporting, hands on engineering tasks across cybersecurity initiatives, and participate in the testing, onboarding, and automation of cybersecurity tools. II. Duties and Responsibilities include the following: To perform this job successfully, an individual must be able to perform each duty satisfactorily. Other ancillary duties may be assigned. * Firewall Policy Management: Develop, review, and enforce firewall rules and access control lists to minimize risk. * Secure Browser Management: Implement and maintain secure browser configurations and policies across enterprise endpoints. * Security Tooling & Reporting: Utilize network monitoring and security tools to generate reports, dashboards, and actionable insights. * Incident Support: Assist in investigating and mitigating network-based security incidents. * Collaboration: Work closely with developers, infrastructure teams, vendors, and security stakeholders to integrate security into network and application architectures. * Compliance & Documentation: Maintain documentation for audits, compliance, and internal security standards. * Continuous Improvement: Research emerging network security technologies and recommend enhancements. * Other duties may be assigned and may vary by location and/or business needs. * Firewall Policy Management: Develop, review, and enforce firewall rules and access control lists to minimize risk. * Secure Browser Management: Implement and maintain secure browser configurations and policies across enterprise endpoints. * Position may require on-call coverage for evenings, weekends, and holidays. IV. Qualifications A. Education and Experience * Required: Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study. Three (3) years of previous experience required. An additional four (4) years of related experience may substitute for the Bachelor's degree. * Preferred: Bachelor's Degree and at least three (3) years of experience in network, host, data and/or application security in multiple operating system environments. B. Certificates, Licenses, Registrations or Other Requirements * None required. * Preferred: Other professional certifications desired include: CWSP, CISA, GIAC * Other vendor certifications desired include: CCNA, CCNP, CCSP, MSCE C. Other Knowledge, Skills or Abilities Required Intermediate knowledge or skills in one or more of the following is required: * Knowledge of threat and vulnerability and/or identity related processes and technology. * Proficiency in vulnerability management tools such as Qualys, Core Impact, WebInspect, etc. D. Other Knowledge, Skills or Abilities that Contribute to Success May require intermediate skills in one or more of the following: * Fortune 500 experience. * Intermediate knowledge or skills in one or more of the following is required: * Knowledge of threat and vulnerability and/or identity related processes and technology. * Proficiency in vulnerability management tools such as Qualys, Core Impact, WebInspect, etc. * Previous Criminal Justice experience. Technical skills across a broad range of computing platforms and network protocols. * Experience in several or more of the following technologies: Firewalls, Intrusion Prevention, Vulnerability Scanning, Data Loss Prevention, Email Security, Endpoint Security, DNS, Web Content Filtering, SEIM, AV, Certificate Authority and encryption. * Understanding and experience with IP address space management, subnetting, name resolution, and directory service protocols and be able to participate and guide future network LAN/WAN planning and implementation. Familiarity with key security models and regulations such as ISO 2700X, SOX and PCI. * Ability to support both internal and external audits. * Experience in the areas of change control, problem management, incident management troubleshooting of security solutions. * Ability to multi-task and work on multiple projects at one time. * Ability to communicate both written and verbally. * Proficiency in investigative practices and procedures (forensics knowledge is a plus). V. Work Environment and Essential Functions Listed below are key points regarding environmental demands and work environment of the job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job. [Note: The following is defaulted for office setting position] * Required to use motor coordination with finger dexterity (such as keyboarding, machine operation, etc.) most of the work day; * Required to exert physical effort in handling objects less than 30 pounds rarely; * Required to be exposed to physical occupational risks (such as cuts, burns, exposure to toxic chemicals, etc.) rarely; * Required to be exposed to physical environment which involves dirt, odors, noise, weather extremes or similar elements rarely; * Normal setting for this job is: office setting and based onsite at downtown Houston headquarters Monday Through Thursday with a flexibe=le work from home day on Friday. Benefits At Waste Management, each eligible employee receives a competitive total compensation package including Medical, Dental, Vision, Life Insurance and Short Term Disability. As well as a Stock Purchase Plan, Company match on 401K, and more! Our employees also receive Paid Vacation, Holidays, and Personal Days. Please note that benefits may vary by site. If this sounds like the opportunity that you have been looking for, please click "Apply".

Job Description Mobile Access Cyber Security Analyst Pay range: $65,000 to $115,000 per year Employment Status: Regular Full-time External candidates apply at northwesternenergy.com Internal candidates apply through iConnect. About this position: The Cyber Security Analyst provides access to applications, data, and other electronic assets; they educate users on good security practices, ensure data is available, and secure systems and applications to help avoid cyber threats. We offer great benefits: NorthWestern Energy is a fully regulated electric and natural gas utility serving Montana, South Dakota and Nebraska. We employ ovre 1,600 amazing people and serve over 800,000 customers who are our neighbors in our communities. We are a top employer and offer competitive benefits, including: 401K with company match up to 4% and non-elective contribution up to 7% Healthcare and wellbeing programs, including dental and vision for you, your spouse and dependents, Health Savings Account (HSA), healthcare and dependent care flexible spending account (FSA) Employee Assistance Programs (Offering up to six free counseling sessions, per person, per issue, per year for employees, spouses and dependents to include financial heath) Life Insurance (Company pays basic employee policy; spouse, dependent insurance also available) Tuition reimbursement Competitive pay (Scheduled performance-based wage increases and annual incentive opportunities.) Paid company endorsed volunteer opportunities Paid parental leave Paid bereavement leave Paid training opportunities Paid time off starting on your first day, plus 11 paid holidays Benefits may vary by position or as negotiated as part of a collective bargaining agreement. About this job: Ensure the integrity and security of server environment and confidential information Implement and manage user provisioning and de-provisioning Configure and support applications and appliances for security functions Support corporate email system, as well as relevant enterprise applications Manage and secure company-owned mobile devices, field laptops, and other portable endpoints through enterprise mobility management (EMM/UEM) platforms Develop and maintain mobile security standards for corporate-issued devices, ensuring alignment with company and regulatory policies Train users on good security awareness including firewalls, network access controls, intrusion detection and prevention, wireless networking, mobile access, and anti-virus and malware systems Provide user training and support for secure mobile access, remote connectivity, and endpoint hygiene Research and implement new security systems, devices, and applications Research, manage and implement threat detection and remediation technologies Understand cloud and hybrid-cloud architectures Design and maintain secure mobile integration strategies to support field operations and remote workforce connectivity Proficient in mobile computing strategies Audit security events related to critical services and systems Troubleshoot security, mobility, and complex technical issues Work required hours including evenings and weekends in response to service needs, including participating in on-call rotation Manage security on enterprise systems Travel to meetings, training, and conferences (up to 15% travel per year) All NorthWestern Energy employees are required to adhere to company safety standards and the Code of Business Conduct & Ethics Ensure all actions are consistent with NorthWestern Energy's values, mission, and strategic business objective Am I right for this job? Here's the success profile: Demonstrate and maintain a good safety record Bachelor's Degree in information technology, computer science, cybersecurity, or a related field (an equivalent combination of education and experience may be considered) Proficient in Microsoft Office Suite, general computer best practices, and enterprise software systems At least two years of related experience in IT, cybersecurity, or systems administration Experience supporting and securing company-owned mobile devices, laptops, and tablets in an enterprise environment Familiarity with mobile device or unified endpoint management tools Understanding of mobile connectivity, VPN, and conditional access principles for remote and field operations Get Into Energy - Energy Industry Fundamental 2.0 certification is a plus (click the link to certify at no cost) Requisition #4863 Posting Dates: January 15, 2026 through February 8, 2026 Department/Division: Business Technology/Security Employment Physical: Not Required Drug Test: Required Background Check: Required Relocation Benefit: Negotiable Telecommuting: Part-time Negotiable within NorthWestern Energy Service Territory We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, age, disability, veteran status, genetic information or any other protected class in accordance with applicable federal or state laws and statutes. In compliance with the ADA Amendments Act, should you have a disability that requires assistance and/or reasonable accommodation with the job application process, please contact the Human Resources department at ************** or at ****************************** Job Posted by ApplicantPro

Mobile Access Cyber Security Analyst Pay range: $65,000 to $115,000 per year Employment Status: Regular Full-time External candidates apply at northwesternenergy.com Internal candidates apply through iConnect. About this position: The Cyber Security Analyst provides access to applications, data, and other electronic assets; they educate users on good security practices, ensure data is available, and secure systems and applications to help avoid cyber threats. We offer great benefits: NorthWestern Energy is a fully regulated electric and natural gas utility serving Montana, South Dakota and Nebraska. We employ ovre 1,600 amazing people and serve over 800,000 customers who are our neighbors in our communities. We are a top employer and offer competitive benefits, including: * 401K with company match up to 4% and non-elective contribution up to 7% * Healthcare and wellbeing programs, including dental and vision for you, your spouse and dependents, Health Savings Account (HSA), healthcare and dependent care flexible spending account (FSA) * Employee Assistance Programs (Offering up to six free counseling sessions, per person, per issue, per year for employees, spouses and dependents to include financial heath) * Life Insurance (Company pays basic employee policy; spouse, dependent insurance also available) * Tuition reimbursement * Competitive pay (Scheduled performance-based wage increases and annual incentive opportunities.) * Paid company endorsed volunteer opportunities * Paid parental leave * Paid bereavement leave * Paid training opportunities * Paid time off starting on your first day, plus 11 paid holidays Benefits may vary by position or as negotiated as part of a collective bargaining agreement. About this job: * Ensure the integrity and security of server environment and confidential information * Implement and manage user provisioning and de-provisioning * Configure and support applications and appliances for security functions * Support corporate email system, as well as relevant enterprise applications * Manage and secure company-owned mobile devices, field laptops, and other portable endpoints through enterprise mobility management (EMM/UEM) platforms * Develop and maintain mobile security standards for corporate-issued devices, ensuring alignment with company and regulatory policies * Train users on good security awareness including firewalls, network access controls, intrusion detection and prevention, wireless networking, mobile access, and anti-virus and malware systems * Provide user training and support for secure mobile access, remote connectivity, and endpoint hygiene * Research and implement new security systems, devices, and applications * Research, manage and implement threat detection and remediation technologies * Understand cloud and hybrid-cloud architectures * Design and maintain secure mobile integration strategies to support field operations and remote workforce connectivity * Proficient in mobile computing strategies * Audit security events related to critical services and systems * Troubleshoot security, mobility, and complex technical issues * Work required hours including evenings and weekends in response to service needs, including participating in on-call rotation * Manage security on enterprise systems * Travel to meetings, training, and conferences (up to 15% travel per year) * All NorthWestern Energy employees are required to adhere to company safety standards and the Code of Business Conduct & Ethics * Ensure all actions are consistent with NorthWestern Energy's values, mission, and strategic business objective Am I right for this job? Here's the success profile: * Demonstrate and maintain a good safety record * Bachelor's Degree in information technology, computer science, cybersecurity, or a related field (an equivalent combination of education and experience may be considered) * Proficient in Microsoft Office Suite, general computer best practices, and enterprise software systems * At least two years of related experience in IT, cybersecurity, or systems administration * Experience supporting and securing company-owned mobile devices, laptops, and tablets in an enterprise environment * Familiarity with mobile device or unified endpoint management tools * Understanding of mobile connectivity, VPN, and conditional access principles for remote and field operations * Get Into Energy - Energy Industry Fundamental 2.0 certification is a plus (click the link to certify at no cost) Requisition #4863 Posting Dates: January 15, 2026 through February 8, 2026 Department/Division: Business Technology/Security Employment Physical: Not Required Drug Test: Required Background Check: Required Relocation Benefit: Negotiable Telecommuting: Part-time Negotiable within NorthWestern Energy Service Territory We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, gender, age, disability, veteran status, genetic information or any other protected class in accordance with applicable federal or state laws and statutes. In compliance with the ADA Amendments Act, should you have a disability that requires assistance and/or reasonable accommodation with the job application process, please contact the Human Resources department at ************** or at ******************************

Waste Management (WM), a Fortune 250 company, is the leading provider of comprehensive waste and environmental services in North America. We are strongly committed to a foundation of operating excellence, professionalism and financial strength. WM serves nearly 25 million customers in residential, commercial, industrial and municipal markets throughout North America through a network of collection operations, transfer stations, landfills, recycling facilities and waste-based energy production projects. I. Job Summary The Network Security Analyst will focus on designing, implementing, and maintaining secure network security policies to protect organizational assets. This role emphasizes network security engineering, firewall policy management, secure browser configuration, and security tooling/reporting. Analysts will collaborate closely with developers, infrastructure teams, vendors, and security stakeholders to ensure robust security controls across all network layers. Analyst will participate in efforts across these functions including monthly metric and project reporting, hands on engineering tasks across cybersecurity initiatives, and participate in the testing, onboarding, and automation of cybersecurity tools. II. Duties and Responsibilities include the following: To perform this job successfully, an individual must be able to perform each duty satisfactorily. Other ancillary duties may be assigned. Firewall Policy Management: Develop, review, and enforce firewall rules and access control lists to minimize risk. Secure Browser Management: Implement and maintain secure browser configurations and policies across enterprise endpoints. Security Tooling & Reporting: Utilize network monitoring and security tools to generate reports, dashboards, and actionable insights. Incident Support: Assist in investigating and mitigating network-based security incidents. Collaboration: Work closely with developers, infrastructure teams, vendors, and security stakeholders to integrate security into network and application architectures. Compliance & Documentation: Maintain documentation for audits, compliance, and internal security standards. Continuous Improvement: Research emerging network security technologies and recommend enhancements. Other duties may be assigned and may vary by location and/or business needs. Firewall Policy Management: Develop, review, and enforce firewall rules and access control lists to minimize risk. Secure Browser Management: Implement and maintain secure browser configurations and policies across enterprise endpoints. Position may require on-call coverage for evenings, weekends, and holidays. IV. Qualifications A. Education and Experience Required: Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study. Three (3) years of previous experience required. An additional four (4) years of related experience may substitute for the Bachelor's degree. Preferred: Bachelor's Degree and at least three (3) years of experience in network, host, data and/or application security in multiple operating system environments. B. Certificates, Licenses, Registrations or Other Requirements None required. Preferred: Other professional certifications desired include: CWSP, CISA, GIAC Other vendor certifications desired include: CCNA, CCNP, CCSP, MSCE C. Other Knowledge, Skills or Abilities Required Intermediate knowledge or skills in one or more of the following is required: Knowledge of threat and vulnerability and/or identity related processes and technology. Proficiency in vulnerability management tools such as Qualys, Core Impact, WebInspect, etc. D. Other Knowledge, Skills or Abilities that Contribute to Success May require intermediate skills in one or more of the following: Fortune 500 experience. Intermediate knowledge or skills in one or more of the following is required: Knowledge of threat and vulnerability and/or identity related processes and technology. Proficiency in vulnerability management tools such as Qualys, Core Impact, WebInspect, etc. Previous Criminal Justice experience. Technical skills across a broad range of computing platforms and network protocols. Experience in several or more of the following technologies: Firewalls, Intrusion Prevention, Vulnerability Scanning, Data Loss Prevention, Email Security, Endpoint Security, DNS, Web Content Filtering, SEIM, AV, Certificate Authority and encryption. Understanding and experience with IP address space management, subnetting, name resolution, and directory service protocols and be able to participate and guide future network LAN/WAN planning and implementation. Familiarity with key security models and regulations such as ISO 2700X, SOX and PCI. Ability to support both internal and external audits. Experience in the areas of change control, problem management, incident management troubleshooting of security solutions. Ability to multi-task and work on multiple projects at one time. Ability to communicate both written and verbally. Proficiency in investigative practices and procedures (forensics knowledge is a plus). V. Work Environment and Essential Functions Listed below are key points regarding environmental demands and work environment of the job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job. [Note: The following is defaulted for office setting position] Required to use motor coordination with finger dexterity (such as keyboarding, machine operation, etc.) most of the work day; Required to exert physical effort in handling objects less than 30 pounds rarely; Required to be exposed to physical occupational risks (such as cuts, burns, exposure to toxic chemicals, etc.) rarely; Required to be exposed to physical environment which involves dirt, odors, noise, weather extremes or similar elements rarely; Normal setting for this job is: office setting and based onsite at downtown Houston headquarters Monday Through Thursday with a flexibe=le work from home day on Friday. Benefits At Waste Management, each eligible employee receives a competitive total compensation package including Medical, Dental, Vision, Life Insurance and Short Term Disability. As well as a Stock Purchase Plan, Company match on 401K, and more! Our employees also receive Paid Vacation, Holidays, and Personal Days. Please note that benefits may vary by site. If this sounds like the opportunity that you have been looking for, please click "Apply".

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients. We are is seeking a full-time Information Security Analyst to support DoD customer. This position is to provide support in the China Lake, CA area. Responsibilities: Serves as a team member providing network monitoring and scanning functions. Provides network vulnerability scanning to ensure IAVA compliance and remediation. Provides antivirus management using antivirus tools. Provides wireless scanning using network detection software. Implements system security policies, and scans Provides Cybersecurity reporting requirements to appropriate authorities. Provides assistance for personnel / users needing information/assistance with Information Assurance (IA) related issues. Directly supports Information Assurance (IA) requirements, within the immediate area of responsibility (AOR), managing and tracking system administrator elevated level of access to network resources. Works with team members to identify IA trends and suggests long-term strategies to help mitigate IA issues. Assesses procedures and identifies opportunities to improve customer service. Champions customer service and sets and monitors parameters for customer service excellence Oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job Qualifications Requirements: Active SECRET clearance Master's Degree in Engineering, Computer Science, or Information Assurance 6 Bachelor's Degree plus 4 years' additional experience years' additional work experience may be substituted for a Master's Degree Min 10 years of relevant focused experience Must meet specific certification and training requirements in accordance with DoD 8570.1-M, DoDD 8570.1 Experience and Skills: Excellent oral and written skills. Excellent critical thinking skills. Proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook. Ability to work independently and as a team member

Title:Spec IT Security - Lead- Secaucus, New Jersey Duration: Full-time placement Visa: US Citizen & GC only Travel: No Pay rate: Open Interview: phone interview, Skype/Webex Description: Spec IT Security - Lead- Secaucus, New Jersey - M - F Job Summary The Lead IT Security Specialist will lead efforts to improve the IT security program including any security assigned engineering, threat and vulnerability tasks, identity management, Information Security Management and application security programs. Job Responsibilities * Provides support for the team on a 24 hour a day, 7 day a week basis when necessary. * This position provides implementation and support for the day-to-day IT security capabilities of IDS. * Position will be required to analyze data, trends, logs and reports and present data in an organized, professional manner. * Provides guidance and training to less experienced IT Security Specialists. * Provides technical and functional guidance. * Establish technical and process-related documentation and references. Will act as a technical leader. * Will get project responsibility. * Will be accountable for project results. * Accountable for the timeliness and quality of their tasks and assignments. Receives general supervision. Job Requirements * Competent to work independently at the highest technical level most of the time. * Judgment and decision making is related to own task and projects. * In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business, needs to security controls. * Familiar with management frameworks, such as International Organization for Standardization (ISO) 2700x and the ITIL, COBIT and National Institute of Standards and Technology (NIST). In-depth knowledge of risk assessment methods and technologies. * Proficiency in performing risk, business impact, control and vulnerability assessments including network scans, application penetration testing and remediation methods. * Technical knowledge of mainstream operating systems for example, Microsoft Windows and a wide range of security technologies, such as network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools. * Experience in developing, documenting and maintaining security policies, processes, procedures and standards. Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts. * Audit, compliance or governance experience is preferred. * 8+ years experience with the implementation and support of an IT Security program including aspects of threat and vulnerability management, security management, and application security related products, projects, procedures, and processes. * This person should be able to perform a variety of tasks, such as: policy development, risk assessments, installation of security software, configuration of software and problem determination and resolution. * Have knowledge of IT security and related concepts including auditing. * Ability to work under pressure of time constraints and to prioritize. * Strong analytical skills to analyze security requirements and relate them to appropriate security controls. * Ability to interact with company personnel at all levels and across all business units and organizations, and to comprehend business imperatives. * Strong leadership abilities, with the capability to develop an IT security team and guide team members and to work with only minimal supervision. * Excellent written and verbal communication skills. * A strong customer/client focus, with the ability to manage expectations appropriately, to provide a superior customer/client experience and build long-term relationships. * B.S. Degree in Computer Systems Engineering, Computer Science, Computer Information Systems or equivalent education and experience required. * Specialized training in information security helpful. * Specialized training in information security helpful. CISSP and any other security certification preferred. Competencies * Creativity * Timely Decision Making * Peer Relationships * Problem Solving * Intellectual Horsepower * Decision Quality * Directing Others * Presentation Skills All requirements are subject to possible modifications to reasonably accommodate individuals with disabilities. Seniority Level Associate Industry * Information Technology & Services * * Financial Services * * Hospital & Health Care *

Position is available to work in a hybrid work from home capacity. The manager will discuss this in more detail at time of interview. Candidates will need to be local to the Hampton area. If not, they will need to relocate to the area to be considered for this role. Our Company More than a utility company, Unitil provides energy for life. Our work helps keep homes comfortable, businesses thriving and communities connected. Unitil is an investor-owned public utility proudly serving Maine, Massachusetts and New Hampshire. We are dedicated to delivering energy to our customers safely and reliably. Unitil is committed to creating an inclusive environment that welcomes and values the differences among all of our employees, customers, suppliers and the communities in which we live and conduct business. The continued success of Unitil is enhanced through initiatives that promote diversity and value our employees. Take advantage of a comprehensive benefits package. Unitil offers competitive salaries, a consumer-driven health plan, dental and vision coverage, flexible work, company-paid holidays, a, robust, highly competitive retirement plan and educational assistance. * Note: Benefit offerings may differ between union and non-union employee groups Position Purpose Utilizes security software and practices to secure systems. Develops, tests and validates solutions and/or processes to remediate exploitable conditions on servers and other infrastructure assets. Implements software patches and configuration changes to address system vulnerabilities. Assists in the monitoring of IT compliance with SOX, NERC/CIP, Mass. Privacy and other legal and regulatory authorities. Provides back up for cyber team members, as needed. Principal Accountabilities % of time End Results 60% Data Security * Perform activities that ensure the security of corporate data, privacy, and record confidentiality * Participate in periodic risk assessments, to ensure compliance with security standards * Manage processes to assess cyber risk, and facilitate the application of fixes, patches and updates. Coordinate with IT Infrastructure the installation of manual patching of servers * Implement compliance activities with IT Policies, procedures and tests including the Written Information Security, Asset Management, Disaster Recovery, Change Management, Problem Management, and Security Plans 20% Compliance * Assist in coordination of cyber drills, exercises and assessments with internal and external stakeholders * Identifies security risks and exposures, and participate in response activities * Provide reporting needed for IT Control monitoring and responses to external audits, external penetration tests and vulnerability assessments. Fulfill audit requests by providing supporting evidence. * Evaluates vendor security assessments and assists in managing the program * Report on compliance activities related to IT NERC, SOX, MA Privacy, PCI and other IT compliancy programs for the company. * Follow IT policies and procedures to ensure the security of information assets against unauthorized or accidental modification, destruction, or disclosure. Work with Application Owners to obtain proper documentation for system/application changes 15% Identity, Credential & Access Management * Work with Application Owners to define critical security groups and process for maintaining 'least privileged' access to systems * System access security administration of critical financial and key critical business systems 5% Assist the Director of Information Security, and other Subject Matter Experts, in the evaluation and implementation of tools, policies and configurations to improve data security and business controls. Research new technologies and/or processes that will assist in achieving these goals. Qualifications * Bachelor's Degree, Information Systems, Computer Science, Information Security or related field (Desired * 7-10 years IT security or information security experience. * Proven ability to engage with Senior Management and regulators. * Knowledge of technical infrastructure, networks, databases and systems. * Knowledge and related experience in IT security issues and techniques. * Effective communication skills, focusing on presentation of technical information. * Strong analytical skills and attention to detail. * Advanced technical degree and/or Security Certifications preferred. Unitil is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. Last Updated: 12/22/25

GardaWorld Security Services is Now Hiring a Surveillance Security Officer! Ready to suit up as a Surveillance Security Guard? What matters most about a role like this is your sharp eye, capturing every detail as you scan a series of screens. Tell us about your strong observation skills with attention to detail. As a Security Officer - Surveillance, you will be the person spotting threats before they escalate in environments such as a security operations centers, call centers, parking gatehouses, etc. What's in it for you: Site Location: Cottage Grove, 53527 Set schedule: Days/shifts vary Competitive hourly wage of $23 / Hour (DailyPay is available for GardaWorld employees!) A comprehensive benefits package including medical, dental, and vision insurance plans, a 401(k) retirement savings plan with employer matching contributions, paid time off (PTO) policy, paid holidays, disability coverage, and life insurance options Career growth opportunities at GardaWorld Uniform provided at no cost Responsibilities of Surveillance Security Guard Monitor security systems to detect any suspicious activity Document observed events and incidents, writing detailed reports Respond quickly to incidents or potential threats Conduct regular patrols to ensure the safety of the premises Control access to secure areas and verify the identities of visitors Analyze security systems to identify potential vulnerabilities or malfunctions Collaborate with law enforcement in case of serious situations or emergencies Ensure the safety and protection of individuals and property Qualifications of a Surveillance Security Guard Must be 21 years or older Must have SOC, GSOC or PSOC experience Be authorized to work in the U.S. Be able to provide documentation of High School Diploma or GED Be able to ace (and pass) an extensive screening process Strong report writing skills Sharp visual activity and exceptional concentration skills Strong proficiency with technology If you have Security, Military, Law Enforcement experience - even better! You have a state license if required In the United States, GardaWorld Security remains the only guarding security company to be Certified by Great Place to Work. Apply today - this could be more than a job! 26% of our corporate employees started as frontline workers. If you're ambitious with an entrepreneurial spirit - someone who wants to be a GardaWorld Ambassador - a promising career awaits you! GardaWorld Security is a global champion in sophisticated and tailored security solutions, employing and training highly skilled and dedicated professionals across the globe. Not the job for you? Make sure to check out all our jobs! We also have tactical, concierge, and even casual roles available. Employment is contingent on the successful completion of a background check and drug screening to be conducted after an offer of employment is extended. It is the policy of GardaWorld Security Services to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, veteran status, or disability in accordance with applicable federal laws. In addition, GardaWorld Security Services complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment including, but not limited to hiring, placement, assignment, promotion, termination, layoffs, recalls, transfers, leaves of absence, compensation, and training. It is also the policy of GardaWorld Security Services not to honor requests that employees be assigned on the basis of sex or any other classification protected by law, unless such request is based on a bona fide occupational qualification for that assignment . Wisconsin License # 16156-62

Job Description Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Information Systems Security Engineer III (ISSE III). This position is an exempt role that support will be provided on site in the government customer's area of operation in the Philadelphia, PA location. ----------------------------------------------------- Active Secret Clearance Required -------------------------------------- RESPONSIBILIES Assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans, which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M). Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify and tailor IT and Cyber Security (CS) control baselines based on RMF guidelines and categorization of the RMF boundary. Perform Ports, Protocols, and Services Management (PPSM). Perform IT and CS vulnerability-level risk assessments. Execute security control testing as required by a risk assessment or annual security review (ASR). Mitigate and remediate IT and CS system level vulnerabilities for all assets within the boundary per STIG requirements. Develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS). Develop and maintain system level IT and CS policies and procedures for respective RMF boundaries in accordance with guidance provided by the command ISSMs. Implement and assess STIG and SRGs. Perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG. Deploy security updates to Information System components. Perform routine audits of IT system hardware and software components. Maintain inventory of Information System components. Participate in IT change control and configuration management processes. Upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM). Image or re-image assets that are part of the assigned RMF boundary. Install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets. Assist with removal of Solid-State Drive (SSD), Hard Disk Drive (HDD) or other critical components of assets before destruction and removal from the RMF boundary. Support configuration change documentation and control processes and maintaining DOD STIG Compliance. Support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware; This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware. Report compliance issues of network hardware to management to avoid operational loss of the network. EXPERIENCE AND EDUCATION REQUIREMENTS: Secret security clearance required Bachelor's degree in computer science, information technology, or an equivalent STEM l degree from an accredited college or university. Minimum five (5) years professional relevant experience:; or 7 years of professional experiance without bachalors degree Must Meet DoD IAT-III level Certification Requirements: At a minimum 2-3 of one of the following certifications: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP Experience and Skills: Excellent oral and written skills. Excellent critical thinking skills. Proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook. Ability to work independently and as a team member Ability to learn and apply technical concepts to assigned duties

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Information Systems Security Engineer III (ISSE III). This position is an exempt role that support will be provided on site in the government customer's area of operation in the Philadelphia, PA location. ----------------------------------------------------- Active Secret Clearance Required -------------------------------------- RESPONSIBILIES Assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans, which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M). Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify and tailor IT and Cyber Security (CS) control baselines based on RMF guidelines and categorization of the RMF boundary. Perform Ports, Protocols, and Services Management (PPSM). Perform IT and CS vulnerability-level risk assessments. Execute security control testing as required by a risk assessment or annual security review (ASR). Mitigate and remediate IT and CS system level vulnerabilities for all assets within the boundary per STIG requirements. Develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS). Develop and maintain system level IT and CS policies and procedures for respective RMF boundaries in accordance with guidance provided by the command ISSMs. Implement and assess STIG and SRGs. Perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG. Deploy security updates to Information System components. Perform routine audits of IT system hardware and software components. Maintain inventory of Information System components. Participate in IT change control and configuration management processes. Upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM). Image or re-image assets that are part of the assigned RMF boundary. Install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries' assets. Assist with removal of Solid-State Drive (SSD), Hard Disk Drive (HDD) or other critical components of assets before destruction and removal from the RMF boundary. Support configuration change documentation and control processes and maintaining DOD STIG Compliance. Support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware; This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware. Report compliance issues of network hardware to management to avoid operational loss of the network. EXPERIENCE AND EDUCATION REQUIREMENTS: Secret security clearance required Bachelor's degree in computer science, information technology, or an equivalent STEM l degree from an accredited college or university. Minimum five (5) years professional relevant experience:; or 7 years of professional experiance without bachalors degree Must Meet DoD IAT-III level Certification Requirements: At a minimum 2-3 of one of the following certifications: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP Experience and Skills: Excellent oral and written skills. Excellent critical thinking skills. Proficient in Microsoft applications such as Word, Excel, PowerPoint, and Outlook. Ability to work independently and as a team member Ability to learn and apply technical concepts to assigned duties