4d

Design ● mobile ● mongodb ● ruby ● c++ ● linux ● angular ● python ● Node.js

MURAL is hiring a Remote Senior Application Security Engineer

Mural, the leading visual work platform for the enterprise, makes teamwork feel like less work. Our intuitive visual workspace enables teams to easily work together and collaborate better using proven design-thinking techniques. Built for enterprise teams, Mural meets the most stringent of IT and regulatory requirements. Industry leaders — including IBM, ‌Microsoft, SAP, and Abercrombie & Fitch — choose Mural to help their teams accelerate innovation and problem solving at scale. Whether your team is fully remote, distributed, in the office, or still figuring it out, Mural brings teams across the enterprise together to do the work that matters most.

ABOUT THE TEAM

The product security plays a vital role in identifying and mitigating risks within the Mural product as well as partnering with other engineering teams to recommend product features that enhance security for our customers.

YOUR MISSION

As an Application Security Engineer, your role will involve executing the MURAL product security strategy. You will manage Mural’s public bug bounty submissions, SAST testing within our CI workflow. Collaborating closely with developers, you will work to expand security testing coverage and lead security reviews of MURAL product features. Additionally, you will play a crucial role in educating and promoting secure coding best practices.

WHAT YOU'LL DO

Performing security reviews of Mural product features and architecture
Manage and operate our bug bounty program
Lead penetration testing and manage any risks to remediation
Implementation and operation of SAST and DAST technologies in the CI workflow
Working closely with Engineering teams to track and manage product risks to remediation
Working closely with Engineering to increase coverage of security testing
Communicating and nurturing relationships with security researchers, customers, and other stakeholders
Producing metrics to help track the health of our product vulnerability management strategy
Educating and evangelizing secure coding best practices

WHAT YOU'LL BRING

5+ years experience in a product security focused role
Experience with product security at a multi-tenant SaaS company preferred
Experience with vulnerability management
Deep understanding of web application and mobile application security risks
Deep understanding of Linux, Networking, Cryptography, and Cloud Architecture fundamentals
Software development experience with Node.JS or other frameworks like React, Angular, etc. is a preferred
Familiarity with MongoDB, Node.JS, Ruby, and/or Python is preferred.
If you have participated in public or private Bug Bounty programs, or have any other open source or community contributions, presentations, or blog posts in the security space, please share it with us!
Excellent command of English, both written and verbal

For roles based in New York City, California, Colorado, and Washington, the base salary for this role ranges from $160,000 - $200,000 + benefits. Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation.

Equal Opportunity

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

See more jobs at MURAL

Apply for this job

5d

Security Analyst II

ProArchBengaluru,Karnataka,India, Remote

ProArch is hiring a Remote Security Analyst II

ProArch is a global IT consulting firm providing Security, Data, Application Dev, and Cloud services. Offices are located in the US, UK and India.

As a Security Analyst II (SOC), you will be responsible for monitoring, detecting, and responding to security incidents while utilizing your expertise in M365 security technologies and Microsoft Sentinel to optimize detection and response capabilities. This role is highly technical. You will play a critical role in improving our security operations by creating and refining use cases and detection rules to safeguard our organization and clients from cyber threats. You will also be responsible for all the technical escalations from the junior SOC Analysts. You will have the Shift Lead responsibilities to ensure that the SOC Monitoring and Response is done with quality adhering to the defined SLAs and overlooking at the operations during your shift. Another goal would be to identify improvements and gaps within the SOC operations, creating standard operating procedures, creating workflows for playbooks that can be used by the SOC to respond to security incidents.

Communication skills are essential as this position will be the technical escalation point for the SOC Team. Security Analyst II (SOC) should be able to act proactively to ensure smooth security operations and effective collaboration during the shift. This position should lead by setting a good example and engaging the team to achieve the organizational goals set forth by the Leadership Team for the Security Teams. A key outcome of this position is to continuously improve the efficiency and quality of the security operations center.

Act as an escalation point for Tier 1 analysts, handling more complex security incidents and alerts.
Investigate, triage, and respond to security incidents detected through the SOAR / SIEM and other security monitoring tools.
Perform in-depth analysis of incidents and recommend containment and remediation actions.
Lead containment and remediation efforts for security incidents.
Develop, test, and fine-tune detection rules and use cases based on log sources, threat intelligence, attack patterns, and client requirements.
Identify emerging threats and incorporate them into use-cases for alerts and detections.
Optimize and refine alert thresholds and logic to minimize false positives and enhance detection accuracy.
Leverage expertise in Microsoft 365 Defender/Defender XDR, Microsoft Defender for Endpoint, Defender for Office 365 and Entra ID Protection to improve overall threat detection and response.
Conduct proactive threat hunting to identify unknown threats across endpoints, identities, and network traffic using available tools and log sources.
Analyze security logs and telemetry data for signs of compromise, anomalous activities, or malicious behavior.
Perform root-cause analysis for security incidents and provide actionable insights to improve security posture.
Prioritize the work effectively and handle shifting priorities professionally.
Work closely with cross-functional teams (IT, Cloud Operations, Application Development) to mitigate security risks and improve incident response capabilities.
Create detailed reports and post-incident analysis to communicate findings and recommendations to technical and non-technical stakeholders.
Contribute to continuous improvement of SOC processes, including SOPs, playbooks, runbooks, and escalation procedures.
Stay updated with the latest threat landscape, vulnerabilities, and attack methods.
Share knowledge and insights with other SOC analysts and participate in team knowledge-sharing sessions.
Participate in red/blue team exercises to test and improve detection and response capabilities.

TECHNICAL SKILLS:

Candidate should have a minimum of 4 years of experience in IT Security with additional background in Security Operations Center. To be successful, this position will require the candidate to have expertise in the following areas:

Strong knowledge of Microsoft Sentinel KQL (Kusto Query Language) for custom queries and rule creation.
Familiarity with Security Information and Event Management (SIEM) systems, particularly Microsoft Sentinel.
Familiarity of how SOAR (Security Orchestration and Automated Response) works and ability to provide workflows which can be used for automating SOC responses.
Experience with endpoint security, identity protection, and network security monitoring.
Perform forensic analysis to understand the scope and impact of incidents.
Incident Handling, take technical investigation ownership of incidents and coordinate response efforts.
Advanced Analysis, perform advanced and complex analysis of sophisticated threats.
Knowledge of security frameworks such as MITRE ATT&CK and CIS controls.
Industry knowledge and experience in Managed Detection and Response (MDR) technologies.
Experience working in a Managed Security Operations or Security Team
Knowledge of ITIL Foundation Framework.
Microsoft Security and Compliance including:

Microsoft Purview, IRM, DLP, Insider Risk
Defender for Endpoint
Defender for Office 365
Defender for Identity
Defender for Cloud Apps
Defender for Cloud
Defender XDR
Defender for IoT
Entra ID Identity Protection
Entra ID & Intune
Microsoft Sentinel

Experience of CrowdStrike EDR and/or IDP is highly desirable.
Knowledge / Experience handling OT Security alerts is desirable.
Vulnerability Management tools including Qualys and Nucleus.
Security Awareness Training using tools such as KnowBe4.
Incident Response Management and Reporting.
Desirable to have knowledge of Compliance Frameworks including:

NIST
CMMC
HIPAA
NERC / CIP
PCI
Privacy such as GDPR and SHIELD

REQUIREMENTS:

This position requires that the applicant be a professional leader. ProArch is looking for a candidate who can fulfill the following:

Outstanding Written, Verbal, Technical, Non-Technical, communication & presentation skills.
Self-directed with the ability to prioritize and handle SOC Operations and Alert inflow.
Experience in mentoring and guiding a highly technical team.
Eager learner continually improving skill sets, earning certifications, and gaining industry knowledge.
Skilled in leading a conversation with client to drive an incident investigation and response.
Exceptional analytical skills
Outstanding written communication and verbal skills
95% of our clients are from Northern USA. A good command over English language is a must.

EDUCATION AND CERTIFICATION:

Bachelor’s degree in computer science/engineering/IT/Computer Applications or significant demonstrable experience in IT Security / IT.
Must have any of these Microsoft Certifications: SC-200, SC-900, AZ-500, SC-300, SC-400.
Certifications such as CEH, CISSP, CompTIA CySA+, or others.

See more jobs at ProArch

Apply for this job

5d

Security System Engineer II

Convergint Federal SolutionsMcLean, VA, Remote

5 years of experience ● Design

Convergint Federal Solutions is hiring a Remote Security System Engineer II

Job Description

As a Security Systems Engineer II at Convergint Federal | SigNet Technologies, you will be an integral part of our team, responsible for designing, implementing, and supporting advanced security systems for our government and federal clients. The Security Systems Engineer II will play a pivotal role in delivering innovative security solutions, ensuring they meet the highest industry standards, and addressing the unique security challenges faced by our clients.

Value and Beliefs of this Role:
The person in this role must provide world-class service to customers, colleagues, and
communities. It requires a person of integrity, self-accountability, commitment to communicate openly and consistently, delivering results and having fun with laughter daily. In this role we want you to grow with us and deliver results as an exceptional Security Systems Engineer II. This job requires a person who remains professional, organized, collaborative, detail, and task oriented, timely, and creative at problem solving.

Key Responsibilities:

System Design:

Collaborate with clients and project teams to design, develop, and implement security systems, including access control, video surveillance, intrusion detection, and perimeter security.

Technology Integration:

Integrate a wide range of security technologies and systems to create comprehensive and effective security solutions.

Project Management:

Manage the entire project lifecycle, from design and implementation to commissioning and handover, ensuring projects are completed on time and within budget.

Technical Expertise:

Provide technical support and expertise throughout all project phases, including troubleshooting and resolving technical issues.

Compliance:

Ensure that all security system designs and implementations comply with relevant codes, regulations, and industry standards.

Documentation:

Generate detailed technical documentation, including system drawings, installation guides, and equipment lists.

Client Interaction:

Build strong client relationships by providing expert guidance, project updates, and addressing client concerns.

Other Duties: Other duties assigned within reason of current role previously specified.

Qualifications

Bachelor of Science degree Engineering, Computer Science or related field
3 to 5 years of experience in Computer Science or related field
Ability to mentor SSE I
3 to 5 years of experience working with,
- Access Control Systems; Video Management Systems; Intrusion Detection (Perimeter and Interior)
- Strong knowledge of security technologies, including access control, video surveillance, and intrusion detection systems.
- Infrastructure (Interior and Exterior Cabling, Fiber, Network, Wireless)
- Reviewing RFPs, technical specifications, and the production of cost estimate and proposals.
- Providing cost estimates and change orders.
- Interacting with internal and external customers to interpret technical requirements and provide guidance to shape solutions.
- Producing a variety of written documents such as pre or post-bid engineering survey reports; read, interpret, and review electrical, electronic, and electromechanical schematics
- Proficiency in project management and system integration.
- Reviewing and assess CAD drawings produced by in-hours CAD team;
Excellent problem-solving and troubleshooting skills.
Strong communication and interpersonal skills.
Knowledge of government security regulations and clearances is a plus.

Requirements

Active Driver’s License
United States Citizenship
The job may require lifting objects weighing between 25 to 50 pounds. Accommodations can be provided upon request to enable individuals with disabilities to perform the essential functions.
Security Clearances: This position requires a Secret security clearance. The clearance requirements are determined by the agency(s) in which you are assigned. Convergint Federal will sponsor the level of clearance required. However, it will be your responsibility to obtain and maintain your required level of clearance.

See more jobs at Convergint Federal Solutions

Apply for this job

5d

Sr. Cloud Security Engineer

ArduinoTurin, IT - Remote

DevOPS ● terraform ● Design ● docker ● kubernetes ● jenkins ● AWS

Arduino is hiring a Remote Sr. Cloud Security Engineer

Arduino’s mission is to enable people to enhance their lives through accessible open-source electronics and digital technologies. Since 2005 millions of people from around the world starting from young kids to university students and on to people involved in every imaginable profession have been using Arduino to innovate in the fields of music, games and toys, smart homes, farming, autonomous vehicles and many more.

We are now looking for a Sr Cloud Security Engineer to join our team of expert professionals eager to share their knowledge and be part of this vibrant company’s journey towards the democratization of technology. You will be responsible for ensuring the security of Arduino Software and Cloud platforms and also for fostering awareness inside the company about security best practices.

Arduino is a technology-driven company, and you will have the opportunity to join a passionate and collaborative team, within a multinational and driven organization.

What We Offer

A challenging career path in a rapidly growing company with a modern vision and talented teams.
A competitive salary (and benefits) that values people's skills and experience.
A young and inspiring work environment that encourages diversity and cultural exchange.
Individual growth objectives with a dedicated budget for learning/training.
Flexible working hours and working locations, we value work-life balance!
A meaningful work opportunity in a mission-driven company committed to empowering people around the world.

And if you live near one of our offices…

Ping pong and football tournaments (sport or gym benefit is also included for everyone!).
Seasonal celebrations, happy hours, and everyday drinks and snacks at the office.
Sunny rooftop lunch breaks and hamacas for relaxation and concentration.

What you'll work on

Make sure that the data we are trusted to protect is secured to the highest standards;
Guiding the Development and DevOps teams on Security Best Practices;
Provide security guidance on a constant stream of new projects and technologies;
Provide subject matter expertise on architecture, authentication and system security
- Design, implement, and manage security solutions for AWS environment through IaC technologies;
- Implement and manage standard AWS security tools including but not limited to AWS Security Hub, AWS GuardDuty, Inspector, CloudTrail, WAF, KMS, Config, IAM Access Analyzer.
Building secure CI/CD pipelines adopting DevSecOps principles for our applications (Harness Drone, Jenkins, GitHub Actions);
Developing internal tooling and systems that help daily work of our Development and DevOps teams, on top of Cloud services, Kubernetes, Terraform;
Build internal tools for detecting and responding to security problems and incidents
- Monitor cloud environments for security incidents and anomalies, and respond to suspected incidents in a timely manner;
- Collaborate with Infrastructure and Application development teams to integrate security controls in the cloud using standardized configuration tools;
Make intelligent decisions around prioritization of efforts based on risk;
Ensure alignment and compliance with ISO 27001 and provide definition of Security policy for all the organization, including Training of company employees on security policy.

What you bring

Bachelor or Master Degree in Computer Science or related field, or equivalent experience;
5+ years of experience in security engineering or comparable experience (DevOps, SRE);
Experience in Containerisation / Orchestration with Docker and Kubernetes;
Strong, well-rounded background in host, network, and cloud security;
Experience in designing and definition of secure cloud native systems;
Experience with applied cryptography including PKI, SSL, and key management;
Expertise with modern programming languages and software versioning tools (GIT/GitHub);
Knowledge of relevant security compliance, standards and regulations (e.g. ISO, NIST, GDPR, CIS);
Knowledge of internet security issues and the threat landscape (e.g. MITRE ATT&CK, CVEs, CWE);
Experience with security monitoring, incident detection and response to suspected incidents in a timely manner;
Experience with Vulnerability Management, Threat modeling, Risk Assessment and Risk Mitigation;
Good written and oral communication skills in English;
Ability to work with cross-functional teams (including developers, engineers, and IT) and to explain technical concept to non-technical audience (eg training to employees);
Skilled in problem-solving;
Analytical skills; result oriented and continuous learning approach.

Bonus Points

Previous experience working with Infrastructure and DevOps
Working experience with cloud providers like AWS or GCP
Working knowledge of Cloudflare, Auth0, Datadog
Experience with Arduino or other microcontrollers
Experience with hardware security
Experience with the Go programming language

If you're excited about this role or about our company but your experience doesn't align perfectly with the points outlined above, we strongly encourage you to apply anyways. Show us the boards you designed! If in any case we feel you don’t fit for this job we may have something else for you!

See more jobs at Arduino

Apply for this job

7d

Senior Application Security Engineer

LatticeSF, NYC, Remote

remote-first ● Design ● slack ● graphql ● ruby ● c++ ● docker ● typescript ● kubernetes ● python ● AWS

Lattice is hiring a Remote Senior Application Security Engineer

This is Engineering at Lattice

Lattice’s Engineering team is continuously working to better both our product and our craft. We use a modern, cutting-edge tech stack and love experimenting with new technologies. We strive for maintainable, robust, and performant code. We’re highly collaborative and continuously iterative and work closely with designers and product managers. We prioritize not only great technical architecture but also an amazing product experience.

Lattice is looking for someone to help our product developers build applications that our customers can use with confidence, knowing that at Lattice we work with strong security principles in mind. This role will work across a breadth of areas including application security, infrastructure security, and software supply chain. This role will involve both developing and managing tools, as well as acting as a consultant and partner for product developers. As such, it requires a balance of technical know-how and strong collaboration skills. Your days will vary, including: reviewing design proposals, writing design proposals, meeting with development teams to discuss their approaches and challenges, developing training materials, heads-down coding, and triaging bugs to understand their risks and remediations. You will also be involved in deciding how work is done and what tools and processes are appropriate.

What You Will Do

Mentor and advise product development teams in the area of application security
Assist teams in reproducing, triaging, and addressing application security vulnerabilities
Assist in the implementation of security processes and automated tooling that prevent classes of security issues
Design and implement Typescript code libraries and patterns to improve application security
Perform security-focused code reviews
Work with infrastructure teams to ensure our systems are secure
Support the bug bounty program
Evaluate tools, from SAST/DAST to cloud security analysis tooling, among others
Lead application security reviews and threat modeling, including code review and dynamic testing
Help develop security training and socialize the material with product development teams

What You Will Bring to the Table

Experience it’s important for you to have at some level:

Software development experience, ideally with Javascript/Typescript, or another programming language such as Python or Ruby
Familiarity with secure coding practices
Familiarity with security tools and libraries such as static/dynamic analysis tools and penetration testing tools
Familiarity with and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10)
Strong understanding and experience with common security libraries, security controls, and common security flaws
Strong communication and collaboration skills

Experience that would be helpful:

Familiarity with AI/LLMs for enhancing code quality and automating security analysis.
Familiarity with containerization (Docker, containerd, etc) and Kubernetes
Experience developing and operating cloud systems in AWS
Experience with GraphQL

----

The estimated annual cash salary for this role is $166,000 - $207,500. This position is also eligible for incentive stock options, subject to the terms of Lattice’s applicable plans

Benefits: The Company offers the following benefits for this position, subject to applicable eligibility requirements: Medical insurance; Dental insurance; Vision insurance; Life, AD&D, and Disability Insurance; Emergency Weather Support; Wellness Apps; Paid Parental Leave, Paid Time off inclusive of holidays and sick time; Commuter & Parking Accounts; Lunches in the Office; Workplace Amenities Stipend, Internet and Phone Stipend; One time WFH Office Set-Up Stipend; 401(k) retirement plan; Financial Planning; Learning & Development Budget; Sabbatical Program; and Invest in Your People Fund

*Note on Pay Transparency:

Lattice provides an estimate of the compensation for roles that may be hired as required by state regulations. Compensation may vary based on (a) location, as Lattice factors in specific location when benchmarking compensation for most roles; (b) individual candidate skills and qualifications; and (c) individual candidate experience.

Additionally, Lattice leverages current market data to determine compensation, so posted compensation figures are subject to change as new market data becomes available. The salary, other compensation, and benefits information is accurate as of the date of this posting. Lattice reserves the right to modify this information at any time, subject to applicable law.

#LI-remote

About Lattice

Lattice is on a mission to build cultures where employees and their companies thrive. In an age where employees have more choices than ever before, businesses that put employees first are winning ????– and Lattice is building the tools to empower those people-centric companies.

Lattice is a people success platform that offers performance reviews, employee engagement surveys, real-time feedback, weekly check-ins, goal setting, and career planning in a way that allows companies to focus on employee development, growth, and engagement – yielding stronger employee retention, performance, and impact to the bottom line ????. Since launching in 2016, we have grown to over 5,000+ customers globally, including brands like Slack, Robinhood, and Gusto.

Lattice is committed to equal treatment and opportunity in all aspects of recruitment, selection, and employment without regard to gender, race, religion, national origin, ethnicity, disability, gender identity/expression, sexual orientation, veteran or military status, or any other category protected under the law. Lattice is an equal opportunity employer; committed to a community of inclusion, and an environment free from discrimination, harassment, and retaliation.

By clicking the "Submit Application" button below, you consent to Lattice processing your personal information for the purpose of assessing your candidacy for this position in accordance withLattice's Job Applicant Privacy Policy.

Apply for this job

12d

Cyber Security Engineer

Zone ITCanberra,Australian Capital Territory,Australia, Remote Hybrid

Zone IT is hiring a Remote Cyber Security Engineer

We are looking for a skilled Cyber Security Engineer. In this role, you will be instrumental in safeguarding our organization's IT infrastructure, ensuring the highest levels of security and compliance.

Responsibilities:

Design, implement, and maintain security systems and policies to safeguard data and infrastructure,
Conduct security assessments, audits, and vulnerability assessments to identify and mitigate risks,
Monitor security incidents and conduct forensic investigations as needed,
Develop and update incident response plans and security procedures,
Collaborate with IT teams to integrate security into systems and applications,
Stay current with the latest security trends, vulnerabilities, and technology solutions.

Requirements:

Bachelor's degree in Computer Science, Information Security, or a related field,
Proven experience as a Cyber Security Engineer or in a similar role,
Strong understanding of network security protocols and firewall systems,
Experience with security information and event management (SIEM) tools,
Relevant certifications (e.g. CISSP, CEH, CISM) are a plus,
Strong analytical and problem-solving skills.

About Us

Zone IT Solutions is Australia based Recruitment Company. We specialize in Digital, ERP and larger IT Services. We offer flexible, efficient and collaborative solutions to any organization that requires IT, experts. Our agile, agnostic and flexible solutions will help you source the IT Expertise you need. Our delivery Offices are in Melbourne, Sydney and India. If you are looking for new opportunities your profile at Careers@zoneitsolutions.com or contact us at 0434189909

Also follow our LinkedIn page for new job opportunities and more.

Zone IT Solutions is an equal opportunity employer and our recruitment process focuses on essential skills and abilities. We welcome applicants from a diverse range of backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally and linguistically diverse (CALD) backgrounds and people with disabilities.

See more jobs at Zone IT

Apply for this job

12d

Senior Network Security Engineer

CloudflareHybrid

Bachelor's degree ● sql ● wordpress ● git ● c++ ● postgresql ● MySQL ● python ● javascript

Cloudflare is hiring a Remote Senior Network Security Engineer

About Us

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.

We realize people do not fit into neat boxes. We are looking for curious and empathetic individuals who are committed to developing themselves and learning new skills, and we are ready to help you do that. We cannot complete our mission without building a diverse and inclusive team. We hire the best people based on an evaluation of their potential and support them throughout their time at Cloudflare. Come join us!

Position Location: Austin, TX

About the Department

The Customer Support Team solves complicated problems and answers technical inquiries via phone, email, chat, and social media. Whether it is a Wordpress blogger using our services for free or a global Enterprise business with petabytes of web traffic, our team is always eager to assist. We are the eyes and ears of Cloudflare, acting as the real-time voice of the customer to help communicate their needs and real-world use cases back to the rest of the company - to help build a better service and future product development.

What You’ll do

Do you love solving complex technical problems and interacting with people? Are you passionate about helping customers and are a standout colleague? Cloudflare is seeking an experienced Network Security Engineer to join our team and support our largest and most technically sophisticated customers in resolving technical problems, threats or attacks on their infrastructure at OSI Layers 3, 4, and 7. This will span the range of Cloudflare products from Magic Transit Infrastructure Protection, Argo Smart Routing, DDoS mitigation and Network Firewall, to using the Web Application firewall (WAF), Spectrum and Rate Limiting to help customers.

Skills, Knowledge, and Experience

Fluent English speaker is a requirement
5-8 years working within a Technical Support team solving various technical issues
Self-driven and capable of learning new technologies / systems / features with little guidance
Fundamental understanding how the Internet works (OSI Model)
Advanced understanding of internet protocols like TCP and UDP
Computer Networking fundamentals, experience with iptables and looking glass
Experience troubleshooting network connectivity issues, BGP routing, and GRE tunnels
Packet capture analysis
Experience in command line and tools, including curl, dig, traceroute, openssl, git
Experience troubleshooting DNS, SSL / TLS, HTTP
Experience in a web development and / or hosting environment such as installing and configuring web servers like Apache, Nginx, Caddy and IIS
Experience writing scripts in Bash, Python, JavaScript or other scripting language
Experience in working as part of a team in a customer-facing role

Responsibilities

Communicate with customers via chat, email, and phone
Compare traffic signatures and attributes including IP addresses, cookie variations, HTTP headers, and JavaScript footprints to determine what is good traffic and what is malicious
DDoS mitigation for OSI layers 3,4, & 7: advise customers on how to filter malicious traffic using Cloudflare tools like Magic Transit, Network Firewall, WAF, IP reputation lists, packet inspection, blocklisting, allowlisting, and rate limiting
Work with Engineering and Operations teams to mitigate attacks, suggest steps to mitigate, and apply the appropriate mitigation when applicable
Work with Engineering and Product teams to improve products and tools

Availability and Schedule Requirements

Flexibility to work varying work schedules including; Tuesday through Saturday, Sunday through Thursday, holidays, weekends, more than 5 days in a row, or additional hours on occasion.

Bonus Points

You are familiar with Cloudflare and are actively using our platform
You have worked with PostgreSQL, MySQL, MS SQL, and other database servers
You are fluent and can troubleshoot in other languages beyond English and Spanish

What Makes Cloudflare Special?

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project Galileo: We equip politically and artistically important organizations and journalists with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.

Athenian Project: We created Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration.

1.1.1.1: We released 1.1.1.1to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitmentand ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you!

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law.We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail athr@cloudflare.comor via mail at 101 Townsend St. San Francisco, CA 94107.

See more jobs at Cloudflare

Apply for this job

13d

Remote - Cyber Security Engineer

The CreditAustria, Remote

azure ● AWS

The Credit is hiring a Remote Remote - Cyber Security Engineer

Join The Credit Pros for a 100% FULL-TIME REMOTE OPPORTUNITY:

Unlock Your Potential in the Thriving Credit Repair Industry!

Are you ready to take your career to new heights? At The Credit Pros, we believe that unique perspectives drive innovation and success. We're seeking talented individuals who are passionate, eager to learn, and thrive on fresh challenges. If you're ready to join a team that works hard and plays hard, look no further – you're destined to be a future TCP employee.

About Us:

The Credit Pros is a national leader in credit repair, dedicated to helping clients eliminate negative, inaccurate, outdated, and erroneous items from their credit reports. Our mission extends beyond repair – we educate clients on how the credit system works and empower them to proactively improve their financial well-being. As an Inc. 5000 company, we're at the forefront of industry growth, committed to building an exceptional organization that positively impacts the lives of both our clients and employees. Our dedication to excellence has earned us recognition as one of Inc. Magazine's top 50 places to work and a prestigious Smart CEO Magazine Corporate Culture Award.

Summary:

The Cyber Security Engineer will be responsible for overseeing the entire security landscape of The Credit Pros. From securing our cloud infrastructure (Azure and AWS) to protecting core applications, managing access control, and ensuring the security of all devices and networks. This includes driving key initiatives such as identity management, disaster recovery planning, and leading incident response efforts. The role covers end-to-end security, ensuring compliance with industry standards and safeguarding sensitive data across all aspects of our IT environment.

What you'll be Doing

End-to-End Security Management: Oversee the overall security of our infrastructure, including cloud environments (Azure and AWS) and core applications, ensuring robust protection across all systems and layers.

Infrastructure Security: Implement and maintain secure configurations for all cloud services, networks, and applications, safeguarding the organization’s critical assets and data.

Access Control & Identity Management (IAM): Manage and enforce identity and access management policies, ensuring proper access controls are in place for all users, systems, and devices.

Core Application Security: Ensure that all business-critical applications are fully secured against vulnerabilities, regularly perform assessments, and address potential security gaps.

Device & Endpoint Security: Manage the security of all employee devices, including enforcing BYOD policies and ensuring endpoint security measures are consistently applied.

Network Security: Design and maintain secure network architectures, including VPNs, firewalls, and monitoring, to protect internal and external communications.

Disaster Recovery & Incident Response: Lead the development and implementation of disaster recovery and incident response plans, ensuring quick and effective responses to security incidents.

Penetration Testing & Vulnerability Management: Conduct regular penetration testing and vulnerability assessments to proactively identify and mitigate potential threats.

Ransomware & Phishing Defense: Implement and manage strategies for ransomware prevention and conduct phishing simulations to educate and protect employees.

Compliance & PCI DSS: Ensure that all systems and processes adhere to industry regulations, with a focus on PCI DSS compliance and other relevant standards.

What we are looking for:

3+ years of experience in cybersecurity roles, with a focus on cloud security, network security, and incident response.

Strong experience with Azure and AWS security configurations.

Expertise in managing VPNs, firewalls, and endpoint security.

Proven experience with penetration testing, vulnerability assessments, and leading disaster recovery plans.

Knowledge of PCI DSS compliance is a strong plus.

At least one relevant certification required (e.g., CISSP, CEH, CompTIA Security+, CCSP).

Hands-on experience with ransomware prevention and phishing simulations.

What's in it for you!

Work with a Remote First digitally automated credit repair company which aims at helping Americans attain financial success
Base Salary: US$20 to US$30/hour
Fulltime permanent position offering 40+ hrs of work per week
Base Salary + Flexible Accruing Paid Time Off, Company Holidays, Birthday Time Off and others
Health, Dental and Vision Insurance

See more jobs at The Credit

Apply for this job

13d

Remote - Cyber Security Engineer

The CreditPoland, Remote