Jobs at Sonoma Consulting Inc.

Analyze system architectures and develop security requirements to enforce client policies and standards. Manage multiple fast-paced projects, identify and document security risks with threat analyses and proposed controls, and communicate findings clearly to stakeholders.

Manage vulnerability data inflow from scanning teams, identify and research findings, coordinate remediation plans with infrastructure tower teams (compute, storage, network, voice), track and report remediation progress, and contribute to multi-disciplined service delivery teams.

Design, assess, and implement cloud security architectures and controls across AWS and other cloud environments. Perform threat modeling, security design reviews, code reviews, and penetration testing. Recommend and operationalize security technologies and policies, troubleshoot security issues, author documentation, and consult with clients to reduce information security risks.

Lead development and execution of an enterprise risk-based information security program. Define policies, guide infrastructure and application security, oversee vulnerability testing, support incident response and investigations, collaborate with IT and business teams on secure development and risk inputs for RFPs, and keep leadership informed on security trends.

Designs, deploys, and manages information security systems (firewalls, IPS/IDS, SIEM, WAF, IAM). Performs vulnerability scanning, incident response, audits, protocol analysis, and security consulting. Develops BCP/DR plans, researches new technologies, and collaborates with legal, HR, and law enforcement on investigations.

Produce and maintain cyber threat actor profiles and intelligence requirements, brief stakeholders up to the Board, integrate cyber risk methodologies, support threat detection with technical analysis, and develop intelligence-sharing relationships with critical infrastructure and financial partners.

Provide enterprise security architecture consulting: advise clients on security strategy, design and implement security solutions, perform risk and network security assessments, develop policies, review system deliverables, and lead senior client engagements and delivery oversight.

Oversee and manage DLP/security responsibilities, take on new tasks and influence others to deliver consistent results, and demonstrate strong analytical skills under varying conditions.

Designs, deploys, and maintains information security systems (firewalls, SIEM, IDS/IPS, WAF), performs audits, incident response, vulnerability management and penetration testing, develops access controls and BCP/DR plans, and advises stakeholders on security risks and remediation.

Serve as Technical Systems Analyst and functional SME for Identity and Access Management. Liaise between non-IT customers, architects, designers and operational teams. Support IDAM application modules, Identity lifecycle, ITSM, Data Center operations, SDLC and project management while coordinating onshore/offshore IT support.

Lead design, implementation, and management of enterprise network security across global offices. Manage firewalls, routers, switches, patch and vulnerability remediation, SIEM/incident escalation, cloud security, and vendor interactions. Drive vulnerability assessments, CVE research, patch processes, documentation, and cross-team remediation efforts to protect systems and applications.

Provide security architecture guidance to project teams, identify and prioritize security requirements, analyze system architectures, perform risk assessments, propose mitigations, ensure designs are secure-by-default, and communicate findings to IT teams and management while supporting multiple concurrent projects.

No responsibilities listed. Based on title, likely responsibilities include monitoring SIEM alerts, investigating security incidents, tuning detections, and producing incident reports.

Design, implement, and support enterprise network security solutions (firewalls, IPS/IDS, proxies, load balancers). Provide after-hours support, troubleshooting, packet analysis, vulnerability management, and collaborate with global partners on security projects and remediation.

Responsible for implementing and maintaining IT security controls, monitoring networks for threats, performing vulnerability assessments, responding to incidents, and supporting compliance and security best practices.

Manage enterprise-level vulnerability remediation across multiple areas, coordinating discovery, prioritization, and remediation tracking to reduce security risk and ensure compliance.

Design, assess, and implement cloud and application security solutions (primarily AWS). Identify risks, propose controls, perform architecture reviews, threat modeling, code/penetration testing, author documentation, and assist clients with security troubleshooting and implementation.

Design and develop Java/J2EE applications using Struts, Spring, Hibernate and Oracle PL/SQL. Build responsive web applications, follow SDLC and project lifecycle for development and maintenance, perform design and architecture reviews, and collaborate in global, multi-stakeholder teams within the financial services domain.

Design, develop and implement Pega-based applications, provide technical consultation, evaluate solutions and performance, create reusable components, manage large-scale implementations and stakeholder engagement, support production issues, and align architecture with enterprise standards.

Build an enterprise-level Sitefinity website and its ecosystem including front/back-end integration, deployment, transactional functions, contract management, and Azure-based infrastructure. Serve as senior front-end developer and technical lead for extensibility and future add-ons.