Top Tech Jobs & Startup Jobs

Lead and execute IT compliance audits and risk assessments focused on PCI. Test and document system records, prepare audit plans and written reports, identify root causes, recommend controls, and provide technical guidance and mentoring to audit staff.

Administer user credentials and maintain RACF, network, User-ID and user groups. Apply IT security policies, troubleshoot low-to-medium security issues, support SAP security and participate on teams and process-improvement projects. Make routine decisions for exceptions and contribute to projects related to existing tools and processes.

Perform software vulnerability assessments (blackbox/whitebox), remediate OWASP Top 10 issues, and advise development teams. Leverage penetration testing frameworks, scanners, and source code analysis while working with Java/.NET web apps and SQL databases. Communicate findings and conduct debriefs with engineering teams.

Support email security initiatives: analyze gateway logs and reports, implement and test email authentication (SPF, DKIM, S/MIME), evaluate email security products, create/update process documentation, and coordinate with internal and external stakeholders to enforce email security controls.

Provide technical security advisory and operational security for information systems, manage day-to-day security operations, perform vulnerability and risk assessments, support Certification & Accreditation, produce SSPs/C&A documentation and SOPs, and evaluate/manage security solutions and changes for classified processing.

Work on infrastructure email security projects: coordinate with teams, analyze gateway logs, implement SPF/DKIM/S/MIME controls, test email security software, and maintain process documentation.

Lead design, implementation, tuning, and administration of enterprise ArcSight SIEM (ESM/Logger/SmartConnectors). Develop content (reports, filters, dashboards, FlexConnectors), optimize deployments, translate use cases to detection content, and support DoD information assurance and log management requirements.

Manage and maintain application, network, and data security; administer user credentials and SAP security (roles, objects, user profiles); operate RACF and related security tools; resolve low-to-medium security incidents; follow and refine security processes; consult with business owners and participate on cross-functional teams.

Lead execution of SOC1/SSAE16 audits and manage IT risk, compliance, and security controls. Advise stakeholders on IT risk mitigation, vendor controls, incident management, IAM, and security monitoring. Develop policies, metrics, documentation, and remediation plans; support audits, provide technical support for security tools, and lead multiple initiatives to improve enterprise IT risk and compliance maturity.

Manage and operate network security tools (Juniper firewalls, McAfee ePO, WSUS), administer Windows/Linux systems, analyze security events from firewalls/IDS/HIPS/AD/syslog, test and validate intrusion detection rules, investigate intrusion events, and support ICS/SCADA and process control network security.