Teams at Dream (dreamgroup.com)

Lead design and operation of the organization's GRC program: develop policies and risk processes, manage risk register, drive compliance and audits, oversee vendor risk assessments, track remediation, and partner with IT, Security, Legal and business teams to align governance with operations.

Lead end-to-end QA for cyber-focused features: define and execute test plans (functional, integration, API, regression, exploratory), analyze logs, investigate defects, validate automation coverage, collaborate with developers and product, use AI tools to enhance testing, and contribute to QA documentation and release readiness.

Conduct deep CTI research and infrastructure/campaign analysis, identify and validate IOCs, normalize and maintain intelligence in STIX 2.1, and produce actionable reports and watchlists. Collaborate with Engineering, MLOps, and Data to translate intelligence into alerts and customer outputs while ensuring governance, sourcing, and data-quality standards.