Jobs at OCC

Lead security assessments and third-party risk reviews, collaborate with security engineering and threat teams, manage observation risk tracking, recommend risk methodologies, enhance Security Assurance processes (including automation/AI opportunities), and support remediation, training, and governance activities.

Manage the Middleware messaging team, oversee software installation, configuration, and maintenance, ensure service availability, and lead high-complexity projects.

The Manager, Platform Engineering leads a product-focused team to enhance developer experience through tooling and workflows while engaging engineering teams to drive adoption and improve processes.

Perform security risk assessments for third parties and new technologies, collaborate with engineering and threat teams on onboarding/PoCs, oversee security observation risk tracking, review configuration compliance for Windows/Linux, prepare executive reporting, manage intake and remediation tracking, and support audit/compliance validation and knowledge transfer to analysts.

Conduct security risk assessments for third parties and new technologies, collaborate with engineering and threat teams on onboarding/PoCs, oversee security observation tracking and configuration compliance (Windows/Linux/CIS), prepare executive reporting, assist intake and remediation tracking, and mentor junior analysts.

Manage day-to-day database administration staff and operations to ensure availability, integrity, and recoverability of corporate databases. Support project and production databases, review/approve design changes, coordinate cross-department activities, hire/train/evaluate staff, and manage budget and departmental objectives.

The Executive Director will lead Platform Engineering Governance, SRE practices, cloud strategy, metrics reporting, and compliance. The role requires strategic vision, deep technical expertise, and effective management of high-performing teams to ensure operational excellence and risk management.

The Principal, Patching and Vulnerability Management Coordinator oversees patching and vulnerability management across on-premises and AWS environments, ensuring security, leading program execution, and fostering team development.

Lead development and improvement of enterprise desktop and VDI environments through packaging, automation, scripting, and troubleshooting. Design and implement end-user automation, maintain OS base builds and security patching, resolve production desktop issues, document architectures, and mentor team members while participating in on-call support.

Perform Tier 2 security monitoring, advanced log and network analysis, and incident response. Investigate escalated incidents, contain and remediate threats, develop IR/SOAR playbooks, collaborate with threat intelligence and IT teams, mentor Tier 1 analysts, and support continuous SOC process improvements.

Perform advanced security monitoring and incident response as a Tier 2 analyst: investigate complex incidents, contain and remediate threats, develop playbooks, collaborate with threat intelligence and IT teams, mentor Tier 1 analysts, and contribute to SOC process improvements and post-incident reviews.

Lead and execute comprehensive Red Team engagements across network, application, cloud, mobile, physical, and social-engineering domains. Develop C2 infrastructure, leverage AI/LLMs, perform threat modeling, validate remediations, produce evidence-based reports, advise stakeholders, support audits, and mentor cross-functional security teams to improve detection and defenses.

Lead and manage a cyber monitoring and incident response team (4-6 staff), perform Tier-3 security analysis, drive alert tuning and reduction, implement automation/AI solutions, ensure compliance, develop playbooks, and deliver security metrics to leadership.

Perform advanced security monitoring and incident response: investigate escalated incidents, analyze logs/network/endpoint data, contain and remediate threats, collaborate with threat intelligence and IT teams, mentor Tier 1 analysts, and improve SOC detection and processes while participating in 24x7 on-call rotation.

Lead adversarial red team operations by designing and executing covert red team simulations across network, application, cloud, mobile, physical, and social domains. Develop C2 infrastructure, use AI/LLMs to accelerate offensive tradecraft, perform threat modeling and risk assessments, validate remediations, produce evidence-based reports, mentor junior staff, and ensure alignment with regulations and security best practices.

The role involves gathering requirements and data analysis to support governance and quality measures, implementing data quality solutions, managing workflows, and ensuring data lineage and accuracy across diverse environments.

Manage administration and communications for health, welfare, retirement and wellbeing programs. Administer leaves of absence, coordinate vendors, ensure compliance (FMLA, ADA, ERISA, COBRA, HIPAA), run wellness initiatives, support open enrollment and system activities (Workday/SharePoint), analyze program utilization, and lead Total Rewards projects and process improvements.

Lead and manage cyber defense operations including incident response, threat and vulnerability analysis, security monitoring and tool administration. Drive remediation projects, implement monitoring use cases, oversee security tooling (SIEM, EDR, DLP), ensure evidence preservation, report metrics to senior leadership, and support regulatory compliance. Provide 24x7 on-call and shift coverage and lead cross-functional teams to improve enterprise security posture.

The Associate Principal, Regulatory Policy analyzes regulatory developments, supports advocacy strategies, manages submissions, and prepares materials for senior leadership, collaborating across departments and engaging with regulators.

Lead operational support for privileged access management, implement AI security capabilities, and maintain security architecture. Collaborate to strengthen cybersecurity posture.