Total 53 legal public security job vacancies in dsst home office

Fire & Security Install / Commissioning Engineer – Essex



I am currently representing an established security company who have been running for over 20 years who are seeking a fire & security install / commissioning engineer to be working Essex.



Salary Package:

- £36,000 - £42,000
- Company Van – Private Use
- Fuel Card
- 20 Days Holidays
- Call Out Rota
- Overtime



Responsibilities:

- Installing Fire & Security Systems
- Commissioning Fire & Security Systems



Area Of Cover:

- Essex



Please Contact

Alex Bartley

RGB Network

Abartley @ RGB .co .uk

Office: 020 7932 2800

Fire & Security Engineer – Oxford - £40,000



RGB Network are currently representing a well-established and well-respected fire and security company who operate on a nationwide basis, although engineers are kept to local patches depending on where they’re based.



Operating through a number of regional offices throughout the UK, this company has experienced huge growth over the past 20 years and is now offering an excellent opportunity to an experienced fire and security service engineer to join the rapidly expanding team.



Salary Package:

- £35,000 - £40,000
- Company Van
- Travel Time after giving 30 minutes each way
- Call out 1 in 8, £150 standby
- 23 Days Holidays & Bank Holidays
- Plenty of overtime opportunities
- Company pension scheme
- Commission scheme





Responsibilities:

- Service, maintenance and small works on:
- Fire alarm, intruder, CCTV and access control systems





Area Of Cover:

- Oxford/Reading/Swindon





Requirements:

- Full UK driving license
- Relevant qualifications



Please contact:

Alex Bartley

RGB Network

Office: 020 7932 2800

Email: abartley @ rgb .co .uk

Security Engineer – Surrey - £40,000

We Are Currently Representing A NSI Gold Approves Security Specialist Company Who Have Been Running For Over 25 Years, Due To Sheer Growth They Are Now Seeking A Security Engineer That Is Keen To Get Training On Gates And Barriers.

Salary Package:

- £30,000 – £40,000
- 25 Days Holidays & Bank Holidays
- Company Van, Fuel Card
- Travel Time After 45 Minutes Each Way
- Overtime
- Uniform
- Training On Gates & Barriers

Duties:

- Maintenance, Servicing, Repairs, Small Works And Fault Finding
- CCTV, Access Control & Intruder Alarms
- Training On Electric Gates, Industrial Premieres, Barriers & Roller Shutters


Area Of Cover:

- Surrey & Sussex

Requirements:

- IPAF
- PASMA
- Full License
- Enhanced DBS
- BS7036/EN16005 Qualifications

Security Engineer – Surrey - £40,000



We Are Currently Representing A NSI Gold Approves Security Specialist Company Who Have Been Running For Over 25 Years, Due To Sheer Growth They Are Now Seeking A Security Engineer That Is Keen To Get Training On Gates And Barriers.



Salary Package:

- £30,000 – £40,000
- 25 Days Holidays & Bank Holidays
- Company Van, Fuel Card
- Travel Time After 45 Minutes Each Way
- Overtime
- Uniform
- Training On Gates & Barriers



Duties:

- Maintenance, Servicing, Repairs, Small Works And Fault Finding
- CCTV, Access Control & Intruder Alarms
- Training On Electric Gates, Industrial Premieres, Barriers & Roller Shutters



Area Of Cover:

- Surrey & Sussex



Requirements:

- IPAF
- PASMA
- Full License
- Enhanced DBS
- BS7036/EN16005 Qualifications

Please Contact
Georgie Thain
gthain@rgb.co.uk
020 7932 2800

The job description and person specification gives you all the information you need about this role. Please look carefully at the criteria in the person specification and tell us what you have done that shows you meet this in your application. If you need an application form in an alternative format please let our recruitment team know. All information you supply on your application should, to the best of your knowledge, be true and accurate. Still have questions? The recruiting manager would love to hear from you, their contact details can be found in the job advert. We can get a lot of applications for some roles so to be in with the best chance of being shortlisted please make sure you apply as soon as possible. A vacancy may close early if there is a lot of interest in the job. At KCHFT we strongly encourage colleagues in clinical and non-clinical roles who have direct or social contact with patients to be fully vaccinated. In this way we will be doing all we can to ensure your safety and that of your colleagues and the patients we serve. Find out more about the community difference here. Good luck! We cant wait to meet you and welcome you to #teamKCHFT, #cometocommunity.

Melaksanakan drafting kerja perusahaan dengan pihak eksternal

The job description and person specification gives you all the information you need about this role. Please look carefully at the criteria in the person specification and tell us what you have done that shows you meet this. Still have questions? The recruiting manager would love to hear from you, their contact details can be found in the job advert. We can get a lot of applications for some roles so to be in with the best chance of being shortlisted please make sure you apply as soon as possible. A vacancy may close early if there is a lot of interest in the job. If you need an application form in an alternative format please let our recruitment team know so they can help you with this. All information you supply on your application should, to the best of your knowledge, be true and accurate. Interviews are due to take place on the 25th April. Find out more about the community difference here. Good luck! We cant wait to meet you and welcome you to #teamKCHFT, #cometocommunity Although vaccination against COVID-19 is not mandatory, we are strongly encouraging colleagues in clinical and non-clinical roles who have direct or social contact with patients to be fully vaccinated. In this way we will be doing all we can to ensure your safety and that of your colleagues and the patients we serve.

Job Family:

IT Cyber Security (India)

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

The NHS is changing. More emphasis on community-based care means there’s never been a better time to join us.

We are looking for an enthusiastic and adaptable Cyber Security Specialist to join our professional team.

We’re a close team but we’re never exclusive, if you can bring a professional approach and fresh ideas we would love to hear from you.

Could you use your skills and experience to support the NHS to deliver great patient care? Great patient care needs great people to support clinical teams. That’s where you come in.

We’re always looking for enthusiastic, responsive, and adaptable people to join our outstanding trust. This role is an important one as you’ll be using your knowledge, experience and expertise to provide IT support to our hard-working frontline NHS teams.

We put patients first and we expect all of our colleagues to do the same, so although NHS experience isn’t a requirement for this role you’ll need to share our passion for delivering excellent patient care and keep that passion at the forefront of your professional activity at all times.

The challenges come thick and fast in this role but you’ll know that your input is contributing to the excellent experience our patients and service users have every day.

One of the largest community NHS trusts in the UK, KCHFT are rated ‘outstanding’ by the CQC. We’ve got a passion for delivering high standards of care to patients and deliver excellent services to improve the health of our communities. To do this we need outstanding people who share our valuesCompassionateAspirationalResponsiveExcellent

We’re committed to equality, diversity and inclusion, which leads to better patient care and a happier workforce. So, all our colleagues have equal access to career opportunities.

Flexibility is another way we do this. In the NHS, we’re reminded every day how important life is. As a flexible working friendly organisation, we want you to be able to work in a way that is best for us, for our patients and for you. Speak to us about how we might be able to accommodate a flexible working arrangement without having to sacrifice time for personal interests or family commitments. We’ll support you to work flexibly in a way that will suits us both

Looking for professional development? We can support that too! Ourcareer pathwayswill help you achieve your aspirations

The job description and person specification gives you all the information you need about this role. Please look carefully at the criteria in the person specification and tell us what you have done that shows you meet this.

Still have questions? The recruiting manager would love to hear from you, their contact details can be found in the job advert.

We can get a lot of applications for some roles so to be in with the best chance of being shortlisted please make sure you apply as soon as possible. A vacancy may close early if there is a lot of interest in the job.

If you need an application form in an alternative format please let our recruitment team know so they can help you with this.

All information you supply on your application should, to the best of your knowledge, be true and accurate.

Find out more about the community differencehere.

Good luck! We can’t wait to meet you and welcome you to #teamKCHFT, #cometocommunity

Although vaccination against COVID-19 is not mandatory, we are strongly encouraging colleagues in clinical and non-clinical roles who have direct or social contact with patients to be fully vaccinated. In this way we will be doing all we can to ensure your safety and that of your colleagues and the patients we serve.

It is important to us that all our staff are aligned to our Values and in particular the behaviours we expect from KCHFT managers. With this in mind as part of the selection process for this position you will be asked to complete two other activities in addition to the competency-based interview that you will invited to. This extended selection process is designed to assess your management style and the specific details of the exercises will be given if you are successfully shortlisted. The provisional date of the selection event is 16th April 2024, although this may be subject to change.


This advert closes on Thursday 4 Apr 2024

The job description and person specification gives you all the information you need about this role. Please look carefully at the criteria in the person specification and tell us what you have done that shows you meet this. Still have questions? The recruiting manager would love to hear from you, their contact details can be found in the job advert. We can get a lot of applications for some roles so to be in with the best chance of being shortlisted please make sure you apply as soon as possible. A vacancy may close early if there is a lot of interest in the job. If you need an application form in an alternative format please let our recruitment team know so they can help you with this. All information you supply on your application should, to the best of your knowledge, be true and accurate. Find out more about the community difference here. Good luck! We cant wait to meet you and welcome you to #teamKCHFT, #cometocommunity Although vaccination against COVID-19 is not mandatory, we are strongly encouraging colleagues in clinical and non-clinical roles who have direct or social contact with patients to be fully vaccinated. In this way we will be doing all we can to ensure your safety and that of your colleagues and the patients we serve. It is important to us that all our staff are aligned to our Values and in particular the behaviours we expect from KCHFT managers. With this in mind as part of the selection process for this position you will be asked to complete two other activities in addition to the competency-based interview that you will invited to. This extended selection process is designed to assess your management style and the specific details of the exercises will be given if you are successfully shortlisted. The provisional date of the selection event is 16th April 2024, although this may be subject to change.

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Governance Sr. Analyst is a member of a service-oriented team with upwards to six (6) personnel within the Information Security Governance team that are focused on policy development/management, Engagement Data Security Plan (EDSP) management, Travel assessments, and documentation management. Effectively supports and executes multiple or more complex IT Security Governance projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse security governance, maintaining, and protecting Guidehouse and Client data to the NIST SP 800-171 standards, managing Engagement Data Security Plan (EDSP) implementation and execution for the Company, and manage the compliance and execution of the IT Travel Security program. Reports directly to the IT Security Governance Manager.

• Achieves operational targets within IT Security Governance area with direct impact on results

• Executes daily work within existing procedures and guidelines

• May influence other technical staff through explanation of facts, policies and practices related to job area

• Communicates with contacts typically within the project area or technical department on matters that involve obtaining or providing information requiring some explanation or interpretation in order to reach agreement

• Entry to established level technical individual contributor

• Builds on knowledge of an industry or segment and works to deepen experience across a range of projects

• Follows operating guidelines and identifies recommended enhancements in processes to improve effectiveness of IT Security Governance area

• Works under close to limited supervision on small to midsize projects or assignments

• Requires general instructions for new lines of work or special projects

• Assists with the implementation and executes on technical initiatives and solutions

• Relies on limited experience and judgment to plan and accomplish assigned tasks and goals

What You Will Need:

• United States Citizenship

• Bachelor's Degree preferred

• Minimum 2-4 years of prior relevant experience desired; (Relevant experience may be substituted for formal education or advanced degree)

• Shall possess one or more of the following certifications (preferred):

  • (ISC)2 Certified Information Security Professional (CISSP)

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISO 27001 Certified Lead Auditor

  • ISO 9001 Certified Lead Auditor

  • Project Management Professional (PMP)

  • Security+

• Must be able to work East Coast US business hours

• Experience documenting processes and procedures to comply with required NIST and IT standards

• Ability to work on many concurrent and changing priorities – flexibility is a must

• Action-oriented and able to manage and meet aggressive timelines and deadlines

• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Experience working with Governance Risk and Compliance tools beyond the manual processes of excel sheets, folders, and emails

• Experience with NIST SP 800-53

• Experience with Microsoft Azure Compliance Center

• Working knowledge of Active Directory, Exchange, SharePoint, and Teams

• Demonstrated ability to learn and document new technologies/solutions

• Experience with ServiceNow is a plus

• Experience working in an ITIL environment

The annual salary range for this position is $65,400.00-$98,200.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Company :

Highmark Health

Job Description : 

JOB SUMMARY

This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.

ESSENTIAL RESPONSIBILITIES

• Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
• Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
• Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
• Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
• Ensure compliance to Corporate and Information Security policies, standards and  procedures.
• Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence;  spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources. 
• Other duties as assigned or requested.

EDUCATION

Required

• Bachelor’s Degree in Information Security, Information Systems,  Information Assurance, Computer Science or related field

Substitutions 

• 6 years of relevant experience substitution for a Bachelor's Degree

Preferred

• Master’s Degree in Computer Science, Information Security or related field

EXPERIENCE

Required

• 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
• 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences                  
• 1 - 3 years in mentoring others in a leadership role                            
• 1 - 3 years in Staff Management  
• 1 - 3 years in developing and executing strategic plans to realize business objectives

Preferred

• 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
• Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework                  
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits                           
• Experience establishing budgets and meeting fiduciary goals
• Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)

LICENSES AND CERTIFICATIONS

Required

• None

Preferred

• Certified Information Systems Security Professional (CISSP) OR
• Certified Information Security Manager (CISM) OR
• Certified in Risk and Information Systems Controls (CRISC) OR
• Information Technology Infrastructure Library (ITIL)

SKILLS

• Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
• Strong teamwork and interpersonal skills                              
• Experience in leading process improvement initiatives                      
• Ability to motivate high performance, multi-discipline teams                            
• Demonstrated competency in project execution
• Demonstrated abilities in relationship management

Languages (Other than English)

None

Travel Requirement
0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-Based

Teaches/Trains others regularly

Frequently

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Pay Range Minimum:

$108,000.00

Pay Range Maximum:

$199,800.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.  The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Company :

enGen

Job Description : 

JOB SUMMARY 

This job implements and administers information security policies and procedures as well as develops and maintains information systems used to uphold those security policies.  Performs various investigations into potential and existing security threats.  Enforces security policies and ensure compliance.  Troubleshoots security issues.  Evaluates security risk assessments and presents security information to workforce and management.  Assists workforce with security based questions and problems.

ESSENTIAL RESPONSIBILITIES 

• Perform operational support of information security technology.
• Perform analysis and resolve problems regarding information security.
• Complete project tasks to enable the on time, within budget and scope delivery of information security projects. 
• Present new and existing information security information to workforce and management.
• Assist in incident response procedures.
• Assist Change Management.
• Assist in conducting application risk assessments against Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry (PCI).
• Assure compliance to required standards, procedures, guidelines and processes.
• Other duties as assigned or requested.

EDUCATION

Required

• Bachelor’s Degree - Information Security, Information Systems,  Information Assurance, Computer Science or related field

Substitutions 

• 5 years of Information Security, Governance, Risk and/or Compliance, Information Technology or Business Analysis

Preferred

• None

EXPERIENCE

Required 

• 3 - 5 years of experience with Information Security and Systems Analysis                         
• 3 - 5 years of experience with Information Security and/or Information Risk Management and/or Information Technology
• 3 - 5 years of experience with Information Security Governance, Risk and/or Compliance functions and activities           
• 3 - 5 years of experience developing, communicating and presenting Information Security and Risk Management concepts to varying audiences                       
• 3 - 5 years of experience with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms

Preferred

• 5 - 7 years of experience with information security and systems analysis                         
• Experience working within an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework      
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits                           
• IT/information security risk advisory experience 
• Governance Risk and Compliance (GRC) tool experience such as ARCHER                    
• In-depth understanding of network security architecture, network and networking protocol 

LICENSES AND CERTIFICATIONS

Required

• None

Preferred

• Certified Information Systems Security Professional (CISSP)
• Security+

SKILLS

• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3    
• Knowledge of NIST Risk Assessment methodology
• Familiarity with secure SDLC best practices
• Knowledge of Microsoft Apps and Suites, Windows server, SharePoint, etc.                 
• Strong teamwork and inter-personal skills

LANGUAGE REQUIREMENT (Other than English)  
None

TRAVEL REQUIREMENT

0 %- 25%

PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS
 

Position Type

Office-Based

Teaches/Trains others regularly

Occasionally

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. 

Pay Range Minimum:

$67,500.00

Pay Range Maximum:

$124,800.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.  The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Who are we?

Senior Staff Engineer, Product Software Security

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

24WD74875

Position Overview

Autodesk's Desktop Virtualization Team within the Enterprise Systems and Experience IT organisation is seeking an Information Security Specialist to help safeguard our digital desktop computer systems. Reporting into our Cloud PC Manager, you'll work with the Autodesk Security Operations teams and help us implement security responses to threats, help implement monitoring tools to protect sensitive data and defend against cyber-attacks. You'll also assist us with maintaining security best practices and educating other team members. Additionally, you'll conduct comprehensive research on vulnerabilities to ensure a clear understanding of their potential impact on the CloudPC service. 

You'll also work with digital desktop customers to remediate security vulnerabilities on desktop OS instances. 

Responsibilities

• Conduct threat modelling reviews, penetration testing, architecture reviews, secure code reviews, and third-party risk assessments

• Provide weekly status reports and project documentation

• Implement vulnerability management on workstations

• Collaborate with cross-functional teams to ensure compliance with company security standards

• Collaborate with the Security Operations team to remediate vulnerabilities promptly

• Proactively identify new solutions to address potential issues

• Implement server and workstation OS hardenings

• Implement cloud provider security hardening best practices

• Implement identity and access management best practices

• Work with customers to troubleshoot digital desktop security implementations

• Monitor weekly security dashboard matrix to ensure we meet established standards

Minimum Qualifications

• 3+ years of experience in a similar position

• Strong problem-solving skills, with the ability to diagnose, debug, and resolve complex issues

• Direct experience with anti-virus software

• Knowledge of risk assessment tools, technologies, and methods

• Knowledge of security tools such as Microsoft Defender for Endpoint and Crowdstrike

• Support efforts in monitoring, detecting, responding to, and investigating security incidents

• Understanding of deploying and maintaining Windows desktop machines.

• Zeal for automation

• Collaborative and experience working with different teams in different time zones

• Experience communicating in writing and verbally to other team members, and comfortable explaining IT security related concepts

Preferred Qualifications

• Work experience with Citrix DaaS

• Detail oriented

Learn More

About Autodesk
Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – our Culture Code is at the core of everything we do. Our values and ways of working help our people thrive and realize their potential, which leads to even better outcomes for our customers.

When you’re an Autodesker, you can be your whole, authentic self and do meaningful work that helps build a better future for all. Ready to shape the world and your future? Join us!

Salary transparency

Salary is one part of Autodesk’s competitive compensation package. Offers are based on the candidate’s experience and geographic location. In addition to base salaries, we also have a significant emphasis on discretionary annual cash bonuses, commissions for sales roles, stock or long-term incentive cash grants, and a comprehensive benefits package.

Diversity & Belonging
We take pride in cultivating a culture of belonging and an equitable workplace where everyone can thrive. Learn more here: https://www.autodesk.com/company/diversity-and-belonging

Are you an existing contractor or consultant with Autodesk?

Please search for open jobs and apply internally (not on this external site).