Top Tech Jobs & Startup Jobs

Perform third-party information security risk assessments (including onsite reviews), review vendor policies and evidence against DB requirements, document security gaps and business impact, coordinate review processes and escalations, and support control framework improvements and stakeholder communications.

Design, implement, and manage secure cloud infrastructure and integrations for GCP and Azure. Automate provisioning with Terraform and GitHub Actions, build security automation with Python, configure and optimize SIEM solutions (Chronicle, Sentinel), and collaborate with vendors and cross-functional teams to enable cloud security monitoring and threat remediation.

Design and drive the enterprise cryptography domain strategy, develop roadmaps, assess current cryptography posture, recommend improvements, and coordinate with security architects and stakeholders to align capabilities and mitigate emerging threats.

Ensure accuracy, completeness, and integrity of Active Directory data by monitoring for anomalies, performing root-cause analysis, producing reports/dashboards, automating cleansing, and partnering with stakeholders to enforce AD data governance.

Design and implement security frameworks for data platforms (Snowflake, GCP, Azure); automate infrastructure and security via IaC; manage CI/CD (GitHub Actions/Runners); integrate and operate SIEM and detection tools; collaborate with cross-functional teams and vendors; document processes and ensure compliance.

Lead and execute technology, security and data audits for DWS IT applications and cloud platforms. Assess control design and effectiveness, plan and perform audits, draft reports, validate findings, support integrated audits, and engage senior stakeholders to drive remediation and risk mitigation.

Detect and hunt cloud-based cyber threats for Google Cloud workloads using cloud SIEM/SOAR. Develop detection use-cases, automation playbooks, dashboards, collaborate with incident response and security teams, and improve security processes and tooling.

Act as subdomain Technical Information Security Officer for applications/infrastructure: perform compliance evaluations, define and support remediation, run risk assessments, ensure security scanning and asset testing, support incident response and privileged access management, enforce policies and recertify technical access.

Lead planning and delivery of Security Monitoring & Remediation projects, enforce governance and PM methodologies, manage risks, financials, and stakeholder communications, and drive security monitoring, detection, and incident response improvements.

Lead end-to-end delivery of network security and cyber resilience solutions (Zero Trust, segmentation, NAC, firewalls), translate designs into implementation roadmaps, identify and drive remediation of security weaknesses, ensure alignment with architecture, risk, and operational resilience, and coordinate stakeholders across engineering, operations, vendors, and global teams.