This role is ideal for someone who thrives at the intersection of technical expertise, risk management, and cross-functional collaboration.. Conduct threat modeling (STRIDE, PASTA) during product development.. Analyze security testing results and guide vulnerability remediation.. Experience with cloud-native and/or mobile application security design.. Strong grasp of information security principles and defense-in-depth strategies.
KPMG is currently seeking a Director, Senior Cloud Security Architect to join our Global Information Solution Group which is part of KPMG International.. Qualifications: Minimum ten years of recent experience such as security architecture, threat modelling experience, identity management and authentication, software development, cryptography, penetration testing, cloud security, mobile security, and network security. Advanced knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security. Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Azure Cybersecurity Expert, or equivalent are highly desirable. In-depth understanding of cloud security principles, best practices, and industry frameworks such as Cloud Security Alliance (CSA), Center for Internet Security (CIS), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO)
HealthPartners is currently hiring for a Senior Director, Cyber Security and Deputy CISO. It also serves as the organization's Deputy Chief Information Security Officer. Ten (10) years of hands-on experience in cybersecurity, with deep expertise in NIST frameworks, CIS Controls, and SIEM tools. Strong understanding of threat intelligence (e.g., MDR). Strongly prefer experience securing medical devices and healthcare technologies (e.g., MRIs, infusion pumps, lab equipment, Pyxis systems), as well as other IOT and OT devices.
Our critical communications, video security and command center technologies support public safety agencies and enterprises alike, enabling the coordination that's critical for safer communities, safer schools, safer hospitals and safer businesses.. Motorola Solutions (NYSE: MSI) is a global leader in mission-critical communications and analytics.. Our technology platforms in mission-critical communications, command center software and video security & analytics, bolstered by managed & support services, make cities safer and help communities and businesses thrive.. Avigilon's solutions have been installed at thousands of customer sites, including school campuses, transportation systems, healthcare centers, public venues, critical infrastructure, prisons, factories, casinos, airports, financial institutions, government facilities, and retailers.. Reporting to the Regional Sales Director, the Channel Sales Executive acts as a primary contact for all video solutions selling initiatives with end-users in territory, proactively manages their relationships and deploys sales actions and strategies in order to grow business and meet territory revenue goals.
The Security Consultant - Engineering provides subject matter expertise and technical support on Security Incident and Event Management (SIEM) platforms, supporting and delivering practice focused solutions to our customers.. Provide subject matter expertise on Security Incident and Event Management (SIEM) platforms to ensure successful delivery of services to include technologies such as, but not limited to, Palo Alto XSIAM. Deep knowledge of Palo Alto Networks XSIAM: Hands-on experience with XSIAM (Extended Security Intelligence & Automation Management), including deployment, configuration, and ongoing management.. Security Frameworks: Familiarity with MITRE ATT&CK, NIST, and other security frameworks.. Experience with SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) platforms, especially Palo Alto Cortex XSOAR and XSIAM.
We are seeking a highly skilled and experienced Palo Alto Firewall Engineer to join our team. The ideal candidate will have extensive expertise in configuring, managing, and optimizing Palo Alto Networks technologies, including Strata Cloud Manager, Prisma Access, GlobalProtect, Panorama, and Palo Alto's SASE (Secure Access Service Edge) solutions. Utilize Strata Cloud Manager to monitor and manage distributed firewalls. Experience managing Palo Alto Networks technologies should include Strata Cloud Manager, Prisma Access, GlobalProtect VPN solutions, Panorama centralized management platform, and Palo Alto SASE products (e.g. Prisma SD-WAN). Relevant certifications such as Palo Alto Networks Certified Network Security Administrator (PCNSA) or Palo Alto Networks Certified Network Security Engineer (PCNSE).
Develop and manage Google Cloud Platform (GCP) security strategy; use your extensive knowledge of IT security and architecture to create and implement a comprehensive security strategy for GCP and workbench, ensuring it aligns with the firm's goals and addresses evolving threats. Support security operations and incident response by providing expert knowledge of GCP in such activities as incident response, threat hunting, forensic analysis, and remediation; assist with identification of insecure or vulnerable configurations, review security changes, and ensure strong integrated security monitoring. Keep up with the latest cybersecurity practices and technologies, promote skills development within the wider security team by mentoring and leading knowledge-sharing sessions, and provide thought leadership in security monitoring and incident response with GCP. Minimum eight years of recent experience in security architecture, preferably with a specialization in GCP and security tooling integration; deep technical expertise across multiple technical domains, including security incident response. Bachelor's degree from an accredited college or university is preferred; certifications in Certified Information Systems Security Professional (CISSP) and Google Professional Cloud Security Engineer are preferred
Design and implement systems including CCTV, access control, intrusion detection, and biometrics. Lead zoning layouts, mantrap flows, visitor access, and badging protocols. Ensure high resiliency with dual-path communications, UPS backups, and penetration testing programs. Security ecosystems like Genetec, LenelS2, Honeywell, or Avigilon.. Remote-first culture with access to WeWork spaces
Also, the successful candidate should have knowledge of 3rd party security assessments and applicability of SOC1 and SOC2 reports, and concepts of vendor risk management.. Cloud Security –Technical understanding of virtualization, cloud infrastructure, and public cloud offerings and experience designing security configuration and controls within cloud based solutions in Microsoft Azure and Azure PAAS services (SQL, Service Bus, Service Fabric, Data Lake, PowerBI). Infrastructure Security – Experience with the integration of common infrastructure security technologies and solutions into business solution architectures including the integration of identity & access management, intrusion detection and prevention, security monitoring, and data encryption solutions.. Significant experience in implementing security in a Microsoft Azure environment and practical knowledge of implementing global systems using a primarily PaaS and SaaS architecture, especially AI, Blockchain, Quantum Computing, Metaverse subjects.. CISSP, CCSP, CISM, or similar security certifications preferred.
Deep technical expertise in Application Security, Cloud and Data security best practices.. Skilled in DevSecOps practices, automated security integration, and software development lifecycle. Strong knowledge of modern cloud security architectures and tools, including Cloud Access Security Broker (CASB), SaaS Security Posture Management (SSPM), CNAPP, CIEM, CWPP, and CI/CD pipeline protection. Experience with artificial intelligence, with a focus on machine learning and GenAI. Experience automating tests for LLM evaluation scenarios within CI/CD workflow
Develop OSINT tradecraft, principals, and techniques. Knowledgeable about the current open source threat landscape and computer networking/infrastructure concepts. Highly competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools, etc.). A professional portfolio of OSINT related scripts, tools, or frameworks. Demonstrated involvement in the larger OSINT community (please share relevant links)
Vice President - Information Technology page is loaded Vice President - Information Technology Apply locations Minneapolis, MN time type Full time posted on Posted 4 Days Ago job requisition id R27525 Lead IT functions that support platform/applications engineering and Enterprise capabilities across SEI Business Units by ensuring agility, scalability, and automation, ensuring that enterprise applications remain resilient, adaptable, and aligned with business strategy.. Establish and scale DevSecOps practices , embedding security throughout the development and deployment lifecycle.. Cloud-native architectures preferably Google Cloud (AWS, Azure, GCP) and SaaS ecosystems. Proficiency in DevSecOps, CI/CD, and platform engineering best practices. In addition to medical, dental, vision, life and disability plans, SEI employees may take advantage of well-being incentives, parental leave, paid time off, certain paid holidays, tax saving accounts (FSA, HSA), 401(k) retirement benefit, Employee Stock Purchase Plan, tuition assistance as well as entertainment and retail discounts.
Drive integration of security architecture and risk-based design principles into all phases of the product development lifecycle, from concept to post-market surveillance.. Establish and enforce governance processes for incident response planning, penetration testing, patch management, and third-party cybersecurity assurance.. Relevant cybersecurity certifications (e.g., CISSP, CISM, CRISC, GIAC, OffSec).. Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).. Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).