Create an Account
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
or
Already have an account?
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
Already have an account?
Join 250,000+ professionals and teams at Microsoft, Shopify, and even NASA. đ
Already have an account? Login
Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.
1 What roles are you open to?
2 Experience level
3 Work style
Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.
Category
Designs, implements, and maintains cloud security infrastructure and strategies for a software platform company.
Responds to security incidents and monitors systems as a SOC analyst, with fluency in Ukrainian language requirements.
Senior Security Engineer owns security initiatives and infrastructure protection for the organization's systems and data.
Senior Security Engineer who owns security initiatives and drives impact within a specialized security team.
Leads security research initiatives focused on identifying and mitigating vulnerabilities in open source software and supply chain infrastructure.
Implements and operationalizes application security testing tools within CI/CD pipelines, writes SAST rules, and helps secure the software development lifecycle.
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nationâs top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
Required Experience:
Preferred:
Experience writing or adapting custom SAST rules (Semgrep or CodeQL)
Familiarity with additional Application Security tools (e.g. Interactive (IAST), Dynamic (DAST) and API security, SCA, etc.)
Familiarity with API Security tools (e.g., NoName, Traceable, Salt, Cequence)
Practical hands-on experience validating vulnerabilities and proficiency with Burp Suite
Strong working knowledge of Secure Development Lifecycles and experience triaging and remediating technical vulnerabilities identified by web application scanning tools
Past experience as an application security practitioner or software engineer
Educational & Professional Credentials:
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you donât miss updates on your application.
Why GuidePoint? GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,200 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the companyâs success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perksâŚ.
Develops and maintains security solutions for corporate cloud platforms, focusing on threat prevention and secure infrastructure.
Administers governance, risk, and compliance processes; coordinates security activities, handles compliance requests, and performs risk assessments with focus on GDPR and data protection.
We are seeking a Technical GRC Analyst to support the day-to-day operation of our governance, risk, compliance, and security assurance processes within a growing EdTech SaaS environment.
This role will focus on administering established policies and workflows, coordinating compliance and security activities, handling requests from across the business, and performing risk assessmentsâparticularly where personal data, information security, and GDPR considerations are involved.
You will play a key role in ensuring that our systems, processes, security tooling, and third-party relationships meet our security, compliance, and data protection standards.
Working closely with the IT & Information Security Manager and wider IT team, you will help maintain audit readiness, support operational security assurance activities, and coordinate remediation and evidence management across the organisation.
The role offers exposure across governance, operational security assurance, compliance, and risk management within a growing SaaS environment.
Key Responsibilities
Administer and operate IT risk, compliance, and security assurance processes aligned to internal policies and regulatory requirements (including GDPR)
Act as a central point of contact for compliance-related requests (e.g. Subject Access Requests (SARs), data sharing requests, access requests, exceptions, and supplier onboarding)
Perform risk assessments using defined criteria, with a focus on data protection and information security risks
Review requests against defined policies and controls, escalating where appropriate in line with internal governance processes
Support third-party / supplier risk assessments, including reviewing security and data protection documentation and tracking follow-up actions
Support periodic reviews of high-risk and business-critical suppliers, applications, and technology platforms to ensure appropriate security, compliance, and data protection controls remain in place
Support the implementation and ongoing operation of compliance and assurance tooling (Vanta), including evidence collection, test management, stakeholder coordination, remediation tracking, and control adoption activities.
Ensure appropriate documentation, audit trails, and evidence are maintained for assessments, compliance activities, and operational processes
Support internal and external audits (e.g. ISO 27001), including evidence gathering, action tracking, and coordination of remediation activities
Monitor compliance with policies and highlight potential risks, gaps, or control weaknesses for review
Support coordination and operational delivery of security improvement initiatives across IT and business teams.
Support incident management processes through documentation, tracking, and coordination of follow-up actions
Coordinate security awareness activities, including phishing simulation campaigns and training tracking
Assist with reviews of security tooling configurations and collection of supporting control evidence
Work closely with engineering, product, and business teams to ensure compliance and security processes are understood and followed
Contribute ideas and feedback to improve workflows and operational processes, particularly where they impact scalability, operational efficiency, or customer trust
Skills & Experience
Essential:
Experience in IT risk, compliance, or GRC roles within a SaaS or technology environment
Understanding of GDPR and handling of personal data (especially sensitive or child/student data)
Experience performing risk assessments using structured frameworks and defined processes
Ability to interpret policies and apply them to operational and real-world scenarios
Strong organisational, coordination, and documentation skills (audit trails, evidence, decision logs)
Experience working with cross-functional teams (e.g. engineering, product, operations)
Experience supporting operational security assurance activities, such as evidence collection, control validation, remediation tracking, or audit preparation
Desirable:
Familiarity with ISO 27001, Cyber Essentials, or similar frameworks
Experience supporting audits, evidence collection, or remediation tracking activities
Experience with vendor / third-party risk management
Exposure to data protection processes (e.g. SARs, DPIAs, data sharing assessments)
Exposure to data classification, data governance, or data loss prevention (DLP) processes
Experience with GRC, compliance, or assurance platforms (e.g. Vanta, Drata) and ticketing/workflow management tools
Exposure to Microsoft 365 security and compliance tooling (e.g. Entra ID, Intune, Secure Score, Defender)
Basic understanding of cloud/SaaS architecture and common security controls
Key Behaviours:
Pragmatic approach to risk, with the ability to balance compliance requirements with business needs
Comfortable assessing requests against defined policies and escalating concerns where appropriate
Confident communicating risks, issues, and follow-up actions to stakeholders
Detail-oriented, with a strong focus on documentation, evidence quality, and traceability
Organised and proactive, with the ability to manage multiple tasks and follow through on actions
Able to operate independently within established processes and governance frameworks
Collaborative approach to working with technical and non-technical teams
Bromcom is an equal opportunities employer.
Senior security engineer who designs and implements cloud security, AI security, and product security measures to protect Instacart's infrastructure and systems.
Leads security operations, manages endpoint/network security tools, runs vulnerability and patch management programs, and maintains NIST compliance across the organization.
The Company
Cypress Creek Energy is powering a sustainable future, one project at a time. We develop, finance, own and operate utility-scale and distributed solar and storage projects across the country. Fostering a diverse group of innovative thinkers from all backgrounds, Cypress people are drawn to work in a purpose-driven organization. We hope you will join us.
Overview
Cypress Creek Energy is hiring an Information Security Manager to lead the companyâs security operations and compliance program. This is a hands-on individual contributor role designed for a senior technical security professional ready to take ownership of a complete program â with the opportunity to grow into a leader of a team as the function scales.
The successful candidate brings a balance of deep technical execution and program-level compliance maturity. You will own the day-to-day security tooling stack, lead the companyâs NIST-based compliance program, shape policy in emerging areas including artificial intelligence, and maintain an accurate view of every system in the environment. You will report directly to the Chief Technology Officer and partner closely with IT, Counsels, and business stakeholders across the company.
Responsibilities
Security Operations & Engineering
Compliance & Governance
Leadership & Cross-Functional Partnership
Education & Experience Required
Preferred Qualifications
Location: The preferred location for this role is for our offices in Durham, NC and Washington, DC. Our team operates on a hybrid schedule, with in-office schedule of three days per week.
Compensation: The salary range for the position is $140,000 - $170,000 plus bonus and benefits. Compensation may vary outside of this range depending on a number of factors, including a candidateâs qualifications, skills, competencies and experience, and location.
Benefits:
A note to Recruiting Agencies Cypress Creek Energy Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of CCE and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.
Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply.
Please be aware of recruiting scamsâofficial communications will only come from @ccrenew.com, we will never request personal or financial information, and any suspicious activity should be reported to HR@ccrenew.com.
Develops, tunes, and validates cybersecurity detections to improve threat visibility and MDR operations effectiveness.
Come join Deepwatchâs team of world-class cybersecurity professionals and the brightest minds in the industry. If youâre ready to challenge yourself with work that matters, then this is the place for you. Weâre redefining cybersecurity as one of the fastest growing companies in the U.S. â and we have a blast doing it!
Who We Are
Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatchâs cloud-based security operations platform, Deepwatch provides the industryâs fastest, most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business.
Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit.
Deepwatch recognition includes:
Deepwatch is seeking a Detection Engineer to join our Threat Detection & Research team and help strengthen detection capabilities across customer environments. Reporting to the Sr. Manager, Threat Detection & Research, this role is responsible for developing, tuning, validating, and optimizing cybersecurity detections that improve visibility into evolving threats and enhance the effectiveness of our MDR operations.
This role is ideal for a cybersecurity professional with strong analytical skills, hands-on SIEM experience, and a passion for threat detection engineering. You will work closely with Security Operations, Threat Research, Customer Success, and Engineering teams to improve alert fidelity, reduce false positives, and ensure high-quality detection coverage aligned to modern attacker behaviors and customer security priorities.
In this role, youâll get to:
Develop and document new Detection Capabilities for customer environments
Work with customers to develop a comprehensive strategy for effective detections
Evaluate current monitoring and detection capabilities to identify areas for improvement
Manage detection capabilities to ensure appropriate coverage, effective operation, and adherence to Deepwatch standards
Onboard assigned customers, establishing baseline detection coverage and detection enablement plan post onboarding
Ensure ingested log sources conform to CIM standards
To be successful in this role, youâll need:
Why Deepwatch?
What We Offer:
Deepwatch is excited to provide benefits designed to support team members and their families. Including:
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates, so please donât hesitate to apply â weâd love to hear from you. Please review our DEI Statement here.
Deepwatch welcomes and encourages applications from people with disabilities and accommodations are available on request for candidates taking part in all aspects of the selection process. Please inform your recruiter or contact recruiting@deepwatch.com for further information.
All Deepwatch employees are expected to:
Deepwatch is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, marital status, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law. Â In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.
By submitting your application, you agree that Deepwatch may collect your personal data for recruiting, global organization planning, and related purposes. The Deepwatch Privacy Policy explains what personal information we may process, where we may process your personal information, our purposes for processing your personal information, and the rights you can exercise over Deepwatchâs use of your personal information.
Manages security operations, compliance programs, and incident response while leading SIEM tuning, endpoint/network security, and vulnerability management across the organization.
The Company
Cypress Creek Energy is powering a sustainable future, one project at a time. We develop, finance, own and operate utility-scale and distributed solar and storage projects across the country. Fostering a diverse group of innovative thinkers from all backgrounds, Cypress people are drawn to work in a purpose-driven organization. We hope you will join us.
Overview
Cypress Creek Energy is hiring an Information Security Manager to lead the companyâs security operations and compliance program. This is a hands-on individual contributor role designed for a senior technical security professional ready to take ownership of a complete program â with the opportunity to grow into a leader of a team as the function scales.
The successful candidate brings a balance of deep technical execution and program-level compliance maturity. You will own the day-to-day security tooling stack, lead the companyâs NIST-based compliance program, shape policy in emerging areas including artificial intelligence, and maintain an accurate view of every system in the environment. You will report directly to the Chief Technology Officer and partner closely with IT, Counsels, and business stakeholders across the company.
Responsibilities
Security Operations & Engineering
Compliance & Governance
Leadership & Cross-Functional Partnership
Education & Experience Required
Preferred Qualifications
Location: The preferred location for this role is for our offices in Durham, NC and Washington, DC. Our team operates on a hybrid schedule, with in-office schedule of three days per week.
Compensation: The salary range for the position is $140,000 - $170,000 plus bonus and benefits. Compensation may vary outside of this range depending on a number of factors, including a candidateâs qualifications, skills, competencies and experience, and location.
Benefits:
A note to Recruiting Agencies Cypress Creek Energy Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of CCE and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.
Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply.
Please be aware of recruiting scamsâofficial communications will only come from @ccrenew.com, we will never request personal or financial information, and any suspicious activity should be reported to HR@ccrenew.com.
Leads security operations, compliance, and incident response while managing endpoint, network, and cloud security tooling and NIST-based governance programs.
The Company
Cypress Creek Energy is powering a sustainable future, one project at a time. We develop, finance, own and operate utility-scale and distributed solar and storage projects across the country. Fostering a diverse group of innovative thinkers from all backgrounds, Cypress people are drawn to work in a purpose-driven organization. We hope you will join us.
Overview
Cypress Creek Energy is hiring an Information Security Manager to lead the companyâs security operations and compliance program. This is a hands-on individual contributor role designed for a senior technical security professional ready to take ownership of a complete program â with the opportunity to grow into a leader of a team as the function scales.
The successful candidate brings a balance of deep technical execution and program-level compliance maturity. You will own the day-to-day security tooling stack, lead the companyâs NIST-based compliance program, shape policy in emerging areas including artificial intelligence, and maintain an accurate view of every system in the environment. You will report directly to the Chief Technology Officer and partner closely with IT, Counsels, and business stakeholders across the company.
Responsibilities
Security Operations & Engineering
Compliance & Governance
Leadership & Cross-Functional Partnership
Education & Experience Required
Preferred Qualifications
Location: The preferred location for this role is for our offices in Durham, NC and Washington, DC. Our team operates on a hybrid schedule, with in-office schedule of three days per week.
Compensation: The salary range for the position is $140,000 - $170,000 plus bonus and benefits. Compensation may vary outside of this range depending on a number of factors, including a candidateâs qualifications, skills, competencies and experience, and location.
Benefits:
A note to Recruiting Agencies Cypress Creek Energy Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of CCE and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.
Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply.
Please be aware of recruiting scamsâofficial communications will only come from @ccrenew.com, we will never request personal or financial information, and any suspicious activity should be reported to HR@ccrenew.com.
Develops, tunes, and validates cybersecurity detections to improve threat visibility and MDR operational effectiveness across customer environments.
Come join Deepwatchâs team of world-class cybersecurity professionals and the brightest minds in the industry. If youâre ready to challenge yourself with work that matters, then this is the place for you. Weâre redefining cybersecurity as one of the fastest growing companies in the U.S. â and we have a blast doing it!
Who We Are
Deepwatch is the leader in managed security services, protecting organizations from ever-increasing cyber threats 24/7/365. Powered by Deepwatchâs cloud-based security operations platform, Deepwatch provides the industryâs fastest, most comprehensive detection and automated response to cyber threats together with tailored guidance from dedicated experts to mitigate risk and measurably improve security posture. Hundreds of organizations, from Fortune 100 to mid-sized enterprises, trust Deepwatch to protect their business.
Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit.
Deepwatch recognition includes:
Deepwatch is seeking a Detection Engineer to join our Threat Detection & Research team and help strengthen detection capabilities across customer environments. Reporting to the Sr. Manager, Threat Detection & Research, this role is responsible for developing, tuning, validating, and optimizing cybersecurity detections that improve visibility into evolving threats and enhance the effectiveness of our MDR operations.
This role is ideal for a cybersecurity professional with strong analytical skills, hands-on SIEM experience, and a passion for threat detection engineering. You will work closely with Security Operations, Threat Research, Customer Success, and Engineering teams to improve alert fidelity, reduce false positives, and ensure high-quality detection coverage aligned to modern attacker behaviors and customer security priorities.
In this role, youâll get to:
Develop and document new Detection Capabilities for customer environments
Work with customers to develop a comprehensive strategy for effective detections
Evaluate current monitoring and detection capabilities to identify areas for improvement
Manage detection capabilities to ensure appropriate coverage, effective operation, and adherence to Deepwatch standards
Onboard assigned customers, establishing baseline detection coverage and detection enablement plan post onboarding
Ensure ingested log sources conform to CIM standards
To be successful in this role, youâll need:
Why Deepwatch?
What We Offer:
Deepwatch is excited to provide benefits designed to support team members and their families. Including:
We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates, so please donât hesitate to apply â weâd love to hear from you. Please review our DEI Statement here.
Deepwatch welcomes and encourages applications from people with disabilities and accommodations are available on request for candidates taking part in all aspects of the selection process. Please inform your recruiter or contact recruiting@deepwatch.com for further information.
All Deepwatch employees are expected to:
Deepwatch is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability status, marital status, sexual orientation, gender identity, genetic information, protected veteran status, or any other characteristic protected by law. Â In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.
By submitting your application, you agree that Deepwatch may collect your personal data for recruiting, global organization planning, and related purposes. The Deepwatch Privacy Policy explains what personal information we may process, where we may process your personal information, our purposes for processing your personal information, and the rights you can exercise over Deepwatchâs use of your personal information.
Establishes and governs the organization's technology risk management framework, providing independent oversight of technology risks, digital transformation, and data assets.
Welcome to TAL. As a leading life insurer, weâve been protecting Australians for over 150 years. Backed by Daiichi Life, weâre driven by big ambitions and empower to create better products and services.
Together with our Partners, weâre helping millions of Australians live a life filled with choices, options, and freedoms. See the direct impact you make delivering support and financial security with care and expertise. Grow beyond expectations with diverse roles, global connections, and exclusive learning opportunities.
Work with passionate, bright and capable colleagues. Feel inspired by supportive leaders. Collaborate with heart, where flexibility, wellbeing and inclusivity is valued. Together, weâre reimagining insurance.
So, bring a curious mind and an ambition to help us become the progressive, digitally enabled leading insurer.
The Head of Technology Risk is responsible for establishing and governing TALâs Technology Risk Management framework, providing independent oversight of the risks arising from the organisationâs technology landscape, digital transformation programs, and data assets. This role ensures that TALâs technology risk profile is clearly understood, actively managed, and reported within the Boardâs approved risk appetite, and that TAL meets its obligations under APRA CPS 230, CPS 234, and CPS 220.
This is a critical first-line-of-defence leadership role within the Technology function, working in close partnership with the CIO, the broader Technology Leadership Team, Enterprise Risk, and the CISO to embed a strong risk management culture across all technology domains. The Head of Technology Risk is accountable for ensuring that technology risk is identified, assessed, and governed with rigour and transparency, and for providing the CIO and Board with the assurance needed to make confident, risk-informed decisions about TALâs technology investment and operations.
In this role you will:
TAL is one of Australiaâs leading life insurers, committed to inclusion, and supporting the career growth of our diverse workforce. Weâre proud to be:
YouâreâŻalwaysâŻaccountable for your actions. You never give up. You strive to find the best outcomes for customers and partners.âŻAndâŻyou valueâŻworking together to find the best solutions for problems.
As part of the recruitment process, there are several checks which may be conducted to demonstrate your eligibility for a role at TAL including Criminal History, Bankruptcy, Entitlement to Work, Regulatory and Reference Checks.
#LI-Hybrid
Everyone at TAL has a responsibility to do the right thing and is accountable for the way they conduct themselves. Our expectations are that you follow the principles set out in our Code of Conduct when you come to work every day. Risk management is everyoneâs responsibility.
If you are already a TAL employee please apply via the SmartRecruiters button in Workday and navigate to the Employee Portal. This is important to ensure that your application is recorded accurately.
Staff-level threat intelligence analyst leading a research team to investigate threats, produce intelligence reports, and advocate for product improvements across customer networks.
Reports to: Sr. Director of Adversary Tactics
Location: Remote US
Compensation Range: $190,000.00 to $210,000.00Â base plus bonus and equity
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. Thatâs why we build our technology in-house and back it with a 24â7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customersâ protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What Youâll Do:
The Huntress Adversary Tactics team has the unique honor of waking up every morning knowing weâre going to make hackers regret targeting our partners and customers. Weâre looking for someone who wants to pour their creativity into researching, hunting, and uncovering threats in our customer networks. Competitive candidates have experience leading a team of researchers across the threat intelligence cycle. Candidates should also have experience creating Threat Intelligence reports, advocating for product enhancements, and public speaking.
Threat Intelligence Analysts aggregate threat data from the previous month and build out reports for our customers. These reports may also be used for marketing and help illustrate the value of what Huntress provides to customers and the community. Threat Intelligence Analysts are also responsible for writing blog posts and marketing materials regarding emerging threat trends. They also work closely with Security Researchers and Analysts to obtain more context about threat data.
Familiarity with product management, scripting/development, incident response, malware analysis, configuration management, and antivirus technologies is an additional way to differentiate yourself.
As you can imagine, success doesnât happen in a vacuum. An effective hunter fosters highly collaborative environments between the Product, Marketing, and Security Operations Center teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision, ultimately delivering our most impactful features and capabilities.
We defend over 5 million endpoints and 11 million identities, and that number continues to grow each month, across tens of thousands of mid-sized and small business customers. Given this marketâs tighter budgets, itâs impossible to assign human analysts to each client. The Adversary Tactics team addresses this challenge head-on by providing input to build and scale highly automated efficienciesâoften lightly augmented by our Security Operations Analystsâthat make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities:
What You Bring To The Team:
What We Offer:
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.
#BI-Remote
Design and build automated network security pipelines, tooling, and real-time monitoring systems for cloud-native infrastructure protecting sensitive financial data.
Basic Function
Lumin Digital is standing up a dedicated Network Security function within its Risk Engineering group to protect a growing product suite that handles sensitive financial data across multiple product lines. This role exists because the landscape has shifted: in a cloud-native, infrastructure-as-code environment, network security is no longer about managing router ACLsâit is about designing identity-aware policy enforcement, automating end-to-end change management, and building real-time visibility into network activity across both workforce and hosted contexts.
As the Network Security Software Engineer, you will be a domain authority who breaks network security out of the existing Security Engineering and SOC functions, building the specialization from the ground up. You will architect and deliver automated, lights-off pipelinesâusing agentic development practices and tools like Claude Codeâthat turn around security changes faster, go deeper than port and protocol in our defense-in-depth story, and extend coverage to the agents our teams create, not just the people who create them.
We are looking for a senior practitioner who will teach us what great network security looks like in a modern, highly-automated fintech environmentânot someone who needs to be taught.
Essential Functions and Responsibilities:
Own the architecture, implementation, and continuous improvement of Luminâs network security program across cloud, SD-WAN, and ZTNA layersâdesigning identity-aware, policy-driven controls that secure both human and machine (agent) identities.
Design and deliver fully automated, end-to-end network security change management pipelines that eliminate manual toil, accelerate change velocity, and maintain audit-ready evidence at every step.
Build and operate real-time network telemetry, monitoring, and alerting systems that provide deep visibility into network activity â integrating threat intelligence feeds, cloud connectivity data, and asset inventories into a unified, automated network defense posture.
Engineer production-grade tooling and servicesâincluding firewall rule lifecycle management, policy drift detection, configuration compliance validation, and telemetry enrichmentâusing modern backend languages (Python strongly preferred) and infrastructure-as-code.
Manage and tune network-layer detection capabilities â including IDS/IPS signatures, firewall rules, and WAF configuration â to ensure high-fidelity signals for SOC consumption.
Operate at the leading edge of AI-assisted development: write precise engineering specifications, direct AI coding agents (e.g., Claude Code, Cursor), and review/validate generated output to build secure, lights-off agentic pipelines that the broader team can learn from.
Build and maintain API integrations across the network security technology stack (e.g., Cloudflare, Zscaler, cloud-native controls) with reliability, observability, and audit-readiness designed in from day one.
Support compliance audit and assessment activities â including evidence collection, control testing, and auditor walkthroughs for network security domains; maintain an accurate network diagram inventory documenting topology, segmentation boundaries, and data flows.
Partner with the Security Operations Center, SRE, and IT to ensure network security controls integrate cleanly with existing infrastructure pipelines, CI/CD workflows, and incident response processes; participate in security architecture reviews and contribute to runbook development and operational documentationâraising the network security bar across the engineering organization.
Perform other duties as assigned.
Physical Demands:
While performing the duties of this job, the employee is regularly required to sit; use hands to type, handle, or feel and talk or hear.
Specific vision abilities required by this job include close vision.
Ability to occasionally lift/move up to 25 pounds.
Individuals with a disability who are otherwise able to perform the essential functions of the job may request reasonable accommodation through the Human Resources department.
Supervisory Responsibility:
None.
Position Specifications
Education:
Bachelorâs degree in Computer Science, Information Security, Network Engineering, or a related technical field, or equivalent combination of education and experience.
Preferred certifications: CCNP Security, PCNSE (Palo Alto), AWS Solutions Architect, Cloudflare certifications, or equivalent. Relevant certifications are valued but not required if depth of hands-on experience is demonstrated.
Experience:
5+ years of progressive experience in network security engineering, with a demonstrated track record of designing, automating, and operating network security controls in cloud-native or hybrid environments.
Substantive hands-on engineering experience: you write production code, build integrations, and ship toolingânot just policies and diagrams.
Direct experience with network security platforms such as Cloudflare (WAF, Workers, Rulesets, Terraform provider), Zscaler (ZIA, ZPA), Palo Alto, or equivalent tier-one solutions.
Experience in fintech, banking, payments, or other regulated financial services environments (PCI-DSS, SOC 2, ISO 27001) strongly preferred.
Experience with infrastructure-as-code (Terraform, CloudFormation) and CI/CD-driven infrastructure provisioning.
Knowledge, Skills, & Abilities:
Required:
Deep expertise in network security fundamentals: firewall policy design, micro-segmentation, ZTNA, SD-WAN, DDoS mitigation, traffic analysis, DNS security, and certificate/PKI management.
Hands-on experience with agentic coding tools and workflows (Claude Code, Cursor, or equivalent)âor demonstrated eagerness and aptitude to adopt them as a primary development methodology.
Strong proficiency in at least one backend language (Python strongly preferred; Go or similar considered) with the ability to design and build production-grade APIs, automation frameworks, and integration platforms.
Thorough understanding of identity-aware network securityâdesigning controls that authenticate and authorize not just users but services, workloads, and autonomous agents.
Demonstrated ability to write clear, precise engineering specifications and technical documentation; comfortable operating on a distributed, async-first team where written clarity drives outcomes.
Sound engineering judgment: able to evaluate AI-generated code for correctness, security implications, and maintainability; able to architect systems for reliability and observability.
Strong cross-functional communication skills: able to translate network security requirements into actionable engineering work and influence peers across Security, SRE, and Platform teams.
Preferred:
Experience building real-time telemetry, monitoring, and threat detection pipelines for network traffic.
Familiarity with agent-to-agent authentication, service mesh architectures, and securing AI/ML workload communications.
Experience integrating threat intelligence feeds and automating indicator-of-compromise enrichment into network defense workflows.
Travel:
$145,000 - $175,000 a year
LIFE AT LUMIN DIGITAL
Lumin Digital is a trailblazer in digital banking solutions, driven by a unique approach to technology, service, and people. We empower credit unions and banks by creating cutting-edge digital experiences that continuously serve, engage, and grow their membership base â and as a 100% cloud-native company, weâre purpose-built to unlock the full advantages of the cloud for financial institutions and their users.
At Lumin, we thrive on curiosity and innovation. Our culture is built on trust in our expertise and decisions, respect for diverse perspectives and talents, and boldness in pursuing new ideas. These values shape a workplace where collaboration thrives, ideas flourish, and new possibilities are discovered every day. We encourage our team to explore, experiment, and challenge the status quo â because continuous improvement isnât just a goal, itâs how we operate.
Benefits Include We take care of our people with medical, dental, and vision insurance, a 401(k) with company match, flexible PTO plus 12 paid holidays, paid sick leave, and paid parental and family leave. We also offer a lifestyle spending account, tuition reimbursement, and a cell phone stipend. Additional details are provided during the interview process.
Lumin Digital is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other legally protected basis. For more information, visit lumindigital.com.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Staff analyst leads threat intelligence research, writes customer reports and blog posts on emerging threats, and collaborates with security teams to uncover and document adversary tactics.
Reports to: Sr. Director of Adversary Tactics
Location: Remote US
Compensation Range: $190,000.00 to $210,000.00Â base plus bonus and equity
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. Thatâs why we build our technology in-house and back it with a 24â7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customersâ protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What Youâll Do:
The Huntress Adversary Tactics team has the unique honor of waking up every morning knowing weâre going to make hackers regret targeting our partners and customers. Weâre looking for someone who wants to pour their creativity into researching, hunting, and uncovering threats in our customer networks. Competitive candidates have experience leading a team of researchers across the threat intelligence cycle. Candidates should also have experience creating Threat Intelligence reports, advocating for product enhancements, and public speaking.
Threat Intelligence Analysts aggregate threat data from the previous month and build out reports for our customers. These reports may also be used for marketing and help illustrate the value of what Huntress provides to customers and the community. Threat Intelligence Analysts are also responsible for writing blog posts and marketing materials regarding emerging threat trends. They also work closely with Security Researchers and Analysts to obtain more context about threat data.
Familiarity with product management, scripting/development, incident response, malware analysis, configuration management, and antivirus technologies is an additional way to differentiate yourself.
As you can imagine, success doesnât happen in a vacuum. An effective hunter fosters highly collaborative environments between the Product, Marketing, and Security Operations Center teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision, ultimately delivering our most impactful features and capabilities.
We defend over 5 million endpoints and 11 million identities, and that number continues to grow each month, across tens of thousands of mid-sized and small business customers. Given this marketâs tighter budgets, itâs impossible to assign human analysts to each client. The Adversary Tactics team addresses this challenge head-on by providing input to build and scale highly automated efficienciesâoften lightly augmented by our Security Operations Analystsâthat make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities:
What You Bring To The Team:
What We Offer:
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.
#BI-Remote
Establishes and governs technology risk management frameworks, provides independent oversight of technology risks, and ensures compliance with regulatory requirements.
Welcome to TAL. As a leading life insurer, weâve been protecting Australians for over 150 years. Backed by Daiichi Life, weâre driven by big ambitions and empower to create better products and services.
Together with our Partners, weâre helping millions of Australians live a life filled with choices, options, and freedoms. See the direct impact you make delivering support and financial security with care and expertise. Grow beyond expectations with diverse roles, global connections, and exclusive learning opportunities.
Work with passionate, bright and capable colleagues. Feel inspired by supportive leaders. Collaborate with heart, where flexibility, wellbeing and inclusivity is valued. Together, weâre reimagining insurance.
So, bring a curious mind and an ambition to help us become the progressive, digitally enabled leading insurer.
The Head of Technology Risk is responsible for establishing and governing TALâs Technology Risk Management framework, providing independent oversight of the risks arising from the organisationâs technology landscape, digital transformation programs, and data assets. This role ensures that TALâs technology risk profile is clearly understood, actively managed, and reported within the Boardâs approved risk appetite, and that TAL meets its obligations under APRA CPS 230, CPS 234, and CPS 220.
This is a critical first-line-of-defence leadership role within the Technology function, working in close partnership with the CIO, the broader Technology Leadership Team, Enterprise Risk, and the CISO to embed a strong risk management culture across all technology domains. The Head of Technology Risk is accountable for ensuring that technology risk is identified, assessed, and governed with rigour and transparency, and for providing the CIO and Board with the assurance needed to make confident, risk-informed decisions about TALâs technology investment and operations.
In this role you will:
TAL is one of Australiaâs leading life insurers, committed to inclusion, and supporting the career growth of our diverse workforce. Weâre proud to be:
YouâreâŻalwaysâŻaccountable for your actions. You never give up. You strive to find the best outcomes for customers and partners.âŻAndâŻyou valueâŻworking together to find the best solutions for problems.
As part of the recruitment process, there are several checks which may be conducted to demonstrate your eligibility for a role at TAL including Criminal History, Bankruptcy, Entitlement to Work, Regulatory and Reference Checks.
#LI-Hybrid
Everyone at TAL has a responsibility to do the right thing and is accountable for the way they conduct themselves. Our expectations are that you follow the principles set out in our Code of Conduct when you come to work every day. Risk management is everyoneâs responsibility.
If you are already a TAL employee please apply via the SmartRecruiters button in Workday and navigate to the Employee Portal. This is important to ensure that your application is recorded accurately.
Leads threat intelligence research, creates customer threat reports, and writes content on emerging security threats and adversary tactics.
Reports to: Sr. Director of Adversary Tactics
Location: Remote US
Compensation Range: $190,000.00 to $210,000.00Â base plus bonus and equity
What We Do:
Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.
Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. Thatâs why we build our technology in-house and back it with a 24â7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customersâ protection.
Huntress now secures more than 5M endpoints and 11M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.
What Youâll Do:
The Huntress Adversary Tactics team has the unique honor of waking up every morning knowing weâre going to make hackers regret targeting our partners and customers. Weâre looking for someone who wants to pour their creativity into researching, hunting, and uncovering threats in our customer networks. Competitive candidates have experience leading a team of researchers across the threat intelligence cycle. Candidates should also have experience creating Threat Intelligence reports, advocating for product enhancements, and public speaking.
Threat Intelligence Analysts aggregate threat data from the previous month and build out reports for our customers. These reports may also be used for marketing and help illustrate the value of what Huntress provides to customers and the community. Threat Intelligence Analysts are also responsible for writing blog posts and marketing materials regarding emerging threat trends. They also work closely with Security Researchers and Analysts to obtain more context about threat data.
Familiarity with product management, scripting/development, incident response, malware analysis, configuration management, and antivirus technologies is an additional way to differentiate yourself.
As you can imagine, success doesnât happen in a vacuum. An effective hunter fosters highly collaborative environments between the Product, Marketing, and Security Operations Center teams to accelerate our mission and secure the 99% of businesses that fall below the enterprise poverty line. This collaboration is needed to produce and prioritize a unified technical vision, ultimately delivering our most impactful features and capabilities.
We defend over 5 million endpoints and 11 million identities, and that number continues to grow each month, across tens of thousands of mid-sized and small business customers. Given this marketâs tighter budgets, itâs impossible to assign human analysts to each client. The Adversary Tactics team addresses this challenge head-on by providing input to build and scale highly automated efficienciesâoften lightly augmented by our Security Operations Analystsâthat make intruders earn every inch of their access while maintaining affordability and healthy gross margins.
Responsibilities:
What You Bring To The Team:
What We Offer:
Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.
We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.
We do discriminate against hackers who try to exploit businesses of all sizes.
Accommodations:
If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to accommodations@huntresslabs.com . Please note that non-accommodation requests to this inbox will not receive a response.
Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.
#BI-Remote
