Top Tech Jobs & Startup Jobs

Establish, maintain, and update information security policies, standards, and frameworks (ISO 27001, PCI DSS, NIST). Manage ISMS and PCI-DSS certification efforts, lead audits and compliance initiatives, and develop processes to validate and track regulatory and standards compliance. Collaborate with cross-functional teams to align security controls with business and regulatory requirements.

Lead and perform advanced red team and penetration testing across applications, infrastructure, cloud, and identity. Simulate real-world attackers, chain vulnerabilities to show business impact, design adversary scenarios, develop tooling and automation, partner with blue teams, and produce technical and executive reports to improve detection and remediation.

Lead and mature the Third-Party Security Management program: manage a team, design assessment frameworks, oversee third-party control validations, negotiate contract security clauses, monitor third-party postures, lead incident response, and report program metrics to senior leadership.

Lead application security efforts: run SAST/DAST and dependency scans, perform manual code reviews, integrate and automate security testing in CI/CD, manage vulnerabilities, support incidents, and train developers.

Monitor and triage security alerts, perform incident investigation and endpoint/network forensics, document cases and escalate appropriately, support containment and remediation, and improve detections and SOC processes using frameworks like MITRE ATT&CK.

Design and lead cybersecurity and fraud-prevention architectures for hybrid cloud environments. Produce high- and low-level security designs, advise stakeholders, guide technical solutioning, evaluate vendors, and embed security across platforms, applications, and infrastructure.

Monitor and triage security alerts, perform incident investigation and response (including network/endpoint forensics), document cases and escalate when needed, support containment and remediation, and recommend detection tuning and SOC improvements.

Define and prioritize security and fraud product features, create user stories and specifications, coordinate stakeholders and vendors (POC/RFI/RFP), support sprints with Scrum Master, and manage post-launch operations including issue resolution and benefit realization.

Define product vision and manage development for security and fraud products. Create feature sets and user stories, consult stakeholders, research solutions, lead vendor selection (POC/RFI/RFP), manage post-launch operations, resolve production issues, and continuously optimize product value.

Lead and execute advanced red team and penetration testing across applications, cloud, identity, and infrastructure. Design adversary simulations using MITRE ATT&CK, identify and chain vulnerabilities to show business impact, develop tooling and automation, partner with blue teams to improve detection, mentor offensive engineers, and produce technical and executive reports to drive remediation and security improvements.