California State University, Northridge
Northridge, Los Angeles, CA, USA
CSUN's Commitment to You
CSUN is committed to achieving excellence through teaching, scholarship, learning and inclusion. Our values include a respect for all people, building partnerships with the community and the encouragement of innovation, experimentation and creativity. CSUN strives to cultivate a community in which a diverse population can learn and work in an atmosphere of civility and respect. CSUN is especially interested in candidates who make contributions to equity and inclusion in the pursuit of excellence for all members of the university community.
About the University
One of the largest universities in the country, California State University, Northridge (CSUN) is an urban, comprehensive university that delivers award-winning undergraduate and graduate programs to nearly 40,000 students annually and counts more than 330,000 alumni who elevate Southern California and beyond. Since its founding in 1958, CSUN has made a significant and long-term economic impact on California, generating nearly $1.9 billion in economic impact and more than 11,700 jobs each year. The LAEDC recognized CSUN as its 2015 Eddy Award winner for its positive economic impact. Serving more students on Pell Grants than any other institution in California, CSUN is also a social elevator and one of the most diverse universities in the country. CSUN ranks 13th in awarding bachelor's degrees to underrepresented minority students and seventh in bachelor's degrees to Latino students, serves the 13th largest Jewish student population, and enrolls the largest number of students who are Deaf and hard-of-hearing students of any U.S. state university. The journal Nature recently named CSUN a Rising Star for scientific research, and the NSF ranks CSUN in the top five nationally among similar institutions for graduates who go on to earn doctorates in the sciences. CSUN is where individuals rise. And through them, so does Greater Los Angeles and beyond.
Major Duties
Under general supervision of the Information Security Officer (ISO), the Senior Cloud and Network Security Analyst secures the CSUN computing environment for students, applicants, faculty, and staff.
The incumbent works with a dynamic team under the direction of the ISO to secure the CSUN network, evaluate solutions, implement cutting-edge solutions, monitor and alert using enterprise security solutions as it relates to the systems and networking posture of the institution in a hybrid setup; performs penetration tests; writes clear, meaningful procedures; reviews innovative architectures with other experts across CSUN; designs and delivers reports, assessments, and onsite troubleshooting of enterprise security solution implementations; participates in Incident Response handling and analysis; performs security risk assessment on major network infrastructure projects including network expansion; acts as the subject matter expert in enterprise firewall solutions, Secure Sockets Layer (SSL) and Virtual Private Network (VPN) technologies; provides reports to the Information Security Officer (ISO) ensuring the converged network infrastructure and cloud applications are secure from internal and external security threats; and performs other duties as assigned.
Qualifications
Equivalent to graduation from an accredited four-year college or university in a job-related field.
Five years of full-time, progressively responsible field-related experience in network maintenance with a variety of network devices; with one of the five years, experience with DDNS, VPN, and firewalls desired.
Experience working with SIEM technology and in the security aspects of an enterprise-scale data network (e.g., corporation or university), preferred.
Knowledge, Skills, & Abilities
Extensive knowledge of: data network architecture principles, devices, characteristics, protocols, and LAN/WAN interconnectivity, VLANS, subnetting, DNS, and DHCP.
Thorough knowledge of network monitoring tools, Palo Alto Tools/ anti-malware tools, Wireshark.
Expertise to administer and interpret the campus-wide data network outages and issues.
Knowledge of data network architecture (Alcatel-Lucent, Cisco) including Wi-Fi (Aruba), its functional characteristics and complexity to provide network security related support.
In-depth knowledge of network architecture principles and models; layer-2, layer-3, and/or layer-4 network protocols and technologies; problem determination and resolution; network systems integration and evaluation.
Ability to: assist the Information Security and Network Engineering team in interactive debugging, testing and analysis of security attacks and system failures; lead the support of campus-wide network security debugging; configure and deploy network security devices in a timely manner.
Ability and specialized skills to: communicate effectively both orally and in writing; identify, analyze, diagnose, and resolve systems problems promptly; provide effective training and clear instructions; develop written and oral presentations as needed; work effectively in teams; maintain deadlines; determine priorities; work effectively under pressure; learn the operations of network software and hardware quickly; establish and maintain cooperative working relationships with students, faculty, staff, and administration.
Pay, Benefits, & Work Schedule
The university offers an excellent benefits package.
The salary range for this classification is: $6249 - $11,748 per month.
The anticipated HIRING RANGE: $6249- $9500, dependent upon qualifications and experience.
HOURS: Full Time; 40 hours per week; 8:00am - 5:00pm, Monday through Friday; may include some evenings and weekends.
REG: This is a Regular position with a one-year probationary period.
General Information
This position is a sensitive position as designated by the CSU.
A background check (including a criminal records check) must be completed satisfactorily. Failure to satisfactorily complete the background check may affect the application status of applicants or continued employment of current CSU employees who apply for the position.
The person holding this position may be considered a 'mandated reporter' under the California Child Abuse and Neglect Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment.
How To Apply
Candidates should apply by completing the CSUN on-line application.
NOTE: Internal candidates should apply through the portal by accessing the View Job Openings/Apply link on the Human Resources/Employee pagelet.
OPEN UNTIL FILLED.
In order to be considered in the initial review, applications must be submitted prior to the date listed above. Application submissions received after the initial review date will be reviewed at the discretion of the University.
For more detailed information on the application and hiring process, please visit the link below:
csun.edu/careers
Equal Employment Opportunity
CSUN is an Equal Opportunity Employer and prohibits discrimination on the basis of race, color, ethnicity, religion, national origin, age, gender, gender identity/expression, sexual orientation, genetic information, medical condition, marital status, veteran status, and disability. Our nondiscrimination policy is set forth in CSU Executive Order 1096. Reasonable accommodations will be provided for applicants with disabilities who self-disclose by contacting Recruitment Services at ext. 2101.
Feb 05, 2019
Full-time
CSUN's Commitment to You
CSUN is committed to achieving excellence through teaching, scholarship, learning and inclusion. Our values include a respect for all people, building partnerships with the community and the encouragement of innovation, experimentation and creativity. CSUN strives to cultivate a community in which a diverse population can learn and work in an atmosphere of civility and respect. CSUN is especially interested in candidates who make contributions to equity and inclusion in the pursuit of excellence for all members of the university community.
About the University
One of the largest universities in the country, California State University, Northridge (CSUN) is an urban, comprehensive university that delivers award-winning undergraduate and graduate programs to nearly 40,000 students annually and counts more than 330,000 alumni who elevate Southern California and beyond. Since its founding in 1958, CSUN has made a significant and long-term economic impact on California, generating nearly $1.9 billion in economic impact and more than 11,700 jobs each year. The LAEDC recognized CSUN as its 2015 Eddy Award winner for its positive economic impact. Serving more students on Pell Grants than any other institution in California, CSUN is also a social elevator and one of the most diverse universities in the country. CSUN ranks 13th in awarding bachelor's degrees to underrepresented minority students and seventh in bachelor's degrees to Latino students, serves the 13th largest Jewish student population, and enrolls the largest number of students who are Deaf and hard-of-hearing students of any U.S. state university. The journal Nature recently named CSUN a Rising Star for scientific research, and the NSF ranks CSUN in the top five nationally among similar institutions for graduates who go on to earn doctorates in the sciences. CSUN is where individuals rise. And through them, so does Greater Los Angeles and beyond.
Major Duties
Under general supervision of the Information Security Officer (ISO), the Senior Cloud and Network Security Analyst secures the CSUN computing environment for students, applicants, faculty, and staff.
The incumbent works with a dynamic team under the direction of the ISO to secure the CSUN network, evaluate solutions, implement cutting-edge solutions, monitor and alert using enterprise security solutions as it relates to the systems and networking posture of the institution in a hybrid setup; performs penetration tests; writes clear, meaningful procedures; reviews innovative architectures with other experts across CSUN; designs and delivers reports, assessments, and onsite troubleshooting of enterprise security solution implementations; participates in Incident Response handling and analysis; performs security risk assessment on major network infrastructure projects including network expansion; acts as the subject matter expert in enterprise firewall solutions, Secure Sockets Layer (SSL) and Virtual Private Network (VPN) technologies; provides reports to the Information Security Officer (ISO) ensuring the converged network infrastructure and cloud applications are secure from internal and external security threats; and performs other duties as assigned.
Qualifications
Equivalent to graduation from an accredited four-year college or university in a job-related field.
Five years of full-time, progressively responsible field-related experience in network maintenance with a variety of network devices; with one of the five years, experience with DDNS, VPN, and firewalls desired.
Experience working with SIEM technology and in the security aspects of an enterprise-scale data network (e.g., corporation or university), preferred.
Knowledge, Skills, & Abilities
Extensive knowledge of: data network architecture principles, devices, characteristics, protocols, and LAN/WAN interconnectivity, VLANS, subnetting, DNS, and DHCP.
Thorough knowledge of network monitoring tools, Palo Alto Tools/ anti-malware tools, Wireshark.
Expertise to administer and interpret the campus-wide data network outages and issues.
Knowledge of data network architecture (Alcatel-Lucent, Cisco) including Wi-Fi (Aruba), its functional characteristics and complexity to provide network security related support.
In-depth knowledge of network architecture principles and models; layer-2, layer-3, and/or layer-4 network protocols and technologies; problem determination and resolution; network systems integration and evaluation.
Ability to: assist the Information Security and Network Engineering team in interactive debugging, testing and analysis of security attacks and system failures; lead the support of campus-wide network security debugging; configure and deploy network security devices in a timely manner.
Ability and specialized skills to: communicate effectively both orally and in writing; identify, analyze, diagnose, and resolve systems problems promptly; provide effective training and clear instructions; develop written and oral presentations as needed; work effectively in teams; maintain deadlines; determine priorities; work effectively under pressure; learn the operations of network software and hardware quickly; establish and maintain cooperative working relationships with students, faculty, staff, and administration.
Pay, Benefits, & Work Schedule
The university offers an excellent benefits package.
The salary range for this classification is: $6249 - $11,748 per month.
The anticipated HIRING RANGE: $6249- $9500, dependent upon qualifications and experience.
HOURS: Full Time; 40 hours per week; 8:00am - 5:00pm, Monday through Friday; may include some evenings and weekends.
REG: This is a Regular position with a one-year probationary period.
General Information
This position is a sensitive position as designated by the CSU.
A background check (including a criminal records check) must be completed satisfactorily. Failure to satisfactorily complete the background check may affect the application status of applicants or continued employment of current CSU employees who apply for the position.
The person holding this position may be considered a 'mandated reporter' under the California Child Abuse and Neglect Reporting Act and is required to comply with the requirements set forth in CSU Executive Order 1083 as a condition of employment.
How To Apply
Candidates should apply by completing the CSUN on-line application.
NOTE: Internal candidates should apply through the portal by accessing the View Job Openings/Apply link on the Human Resources/Employee pagelet.
OPEN UNTIL FILLED.
In order to be considered in the initial review, applications must be submitted prior to the date listed above. Application submissions received after the initial review date will be reviewed at the discretion of the University.
For more detailed information on the application and hiring process, please visit the link below:
csun.edu/careers
Equal Employment Opportunity
CSUN is an Equal Opportunity Employer and prohibits discrimination on the basis of race, color, ethnicity, religion, national origin, age, gender, gender identity/expression, sexual orientation, genetic information, medical condition, marital status, veteran status, and disability. Our nondiscrimination policy is set forth in CSU Executive Order 1096. Reasonable accommodations will be provided for applicants with disabilities who self-disclose by contacting Recruitment Services at ext. 2101.
***This position can be based out of one of three corporate office locations: McLean, VA or Memphis, TN or Dallas, TX***
From smartphone capabilities like Digital Key to connected rooms that allow for integrated entertainment, temperature, and lighting controls, Hilton's Global Technology team is responsible for creating the hospitality experience of the future – for our guests, owners, and Team Members. Through innovative technology development and deployment, this team ensures Hilton has the technology needed to support our continued global growth while remaining at the forefront of hospitality technology innovation.
What will I be doing?
Commercial technology solutions (a.k.a. Commercial Off-The-Shelf – COTS) from third-party vendors support numerous corporate, call center, and hotel technology functions. As the Lead Security Analyst – Commercial Solutions, you will be a technical contributor on Hilton's Information Security, responsible for integrating sound cyber security processes and controls for COTS solutions that handle sensitive data, may impact guest/employee life and safety, and deliver positive guest stay experiences. You will be dedicated and committed to supporting the development, maintenance, and management of processes that provide for initial and ongoing secure implementation of commercial solutions. This includes consistent and repeatable solution security controls.
More specifically, you will:
Perform timely reviews and assessments of the commercial solution architecture and support service delivery processes that help ensure cyber risks are not introduced due to limitations in technology management, maintenance, and support processes.
Integrate commercial solutions into the enterprise technology management and security process (e.g., threat management, logging, patch delivery).
Execute the annual Payment Card Industry (PCI) commercial solutions assessments, as well as other compliance driven requirements (e.g., privacy impact analyses).
This is a new position at Hilton and will report to a new technical leader that will craft the future approach and direction for the role.
What are we looking for?
The success in this role will demonstrate itself through the following attributes and skills:
Experience developing an understanding of how a solution functions through the review of user documentation and inquiries with the vendor
Applied knowledge of base cyber security practices at all layers of the technology stack in the design and/or assessment of commercial solutions:
Network Layer: un-trusted network access controls, application firewall rules and vendor remote access
Platform: AD, Domain Join, service accounts, COTS solution, platform agent interoperability and patching
Devices/IoT: communication requirements and centralized device management
Data and Database: Data types stored, processed, transmitted, database accounts and access controls, and secure database connections
Application: Application access, role based access to admin and business transactions/functions
Experience overseeing multi-functional technology groups comprised of positive partnerships such as solution sponsors, engineers, and support to promote commercial solutions architecture and management practices
Prior experience in managing or implementing a commercial solution is desirable
To fulfill this role successfully, you must possess the following minimum qualifications and experience:
High School Diploma/GED
Three (3) years of related experience
Travel up to 30% of the time
It would be advantageous in this position for you to demonstrate the following capabilities and distinctions:
Five (5) years of related experience
Certification in CISSP
What will it be like to work for Hilton?
Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision to fill the earth with the light and warmth of hospitality unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all!
EOE/AA/Disabled/Veterans
Feb 01, 2019
Full-time
***This position can be based out of one of three corporate office locations: McLean, VA or Memphis, TN or Dallas, TX***
From smartphone capabilities like Digital Key to connected rooms that allow for integrated entertainment, temperature, and lighting controls, Hilton's Global Technology team is responsible for creating the hospitality experience of the future – for our guests, owners, and Team Members. Through innovative technology development and deployment, this team ensures Hilton has the technology needed to support our continued global growth while remaining at the forefront of hospitality technology innovation.
What will I be doing?
Commercial technology solutions (a.k.a. Commercial Off-The-Shelf – COTS) from third-party vendors support numerous corporate, call center, and hotel technology functions. As the Lead Security Analyst – Commercial Solutions, you will be a technical contributor on Hilton's Information Security, responsible for integrating sound cyber security processes and controls for COTS solutions that handle sensitive data, may impact guest/employee life and safety, and deliver positive guest stay experiences. You will be dedicated and committed to supporting the development, maintenance, and management of processes that provide for initial and ongoing secure implementation of commercial solutions. This includes consistent and repeatable solution security controls.
More specifically, you will:
Perform timely reviews and assessments of the commercial solution architecture and support service delivery processes that help ensure cyber risks are not introduced due to limitations in technology management, maintenance, and support processes.
Integrate commercial solutions into the enterprise technology management and security process (e.g., threat management, logging, patch delivery).
Execute the annual Payment Card Industry (PCI) commercial solutions assessments, as well as other compliance driven requirements (e.g., privacy impact analyses).
This is a new position at Hilton and will report to a new technical leader that will craft the future approach and direction for the role.
What are we looking for?
The success in this role will demonstrate itself through the following attributes and skills:
Experience developing an understanding of how a solution functions through the review of user documentation and inquiries with the vendor
Applied knowledge of base cyber security practices at all layers of the technology stack in the design and/or assessment of commercial solutions:
Network Layer: un-trusted network access controls, application firewall rules and vendor remote access
Platform: AD, Domain Join, service accounts, COTS solution, platform agent interoperability and patching
Devices/IoT: communication requirements and centralized device management
Data and Database: Data types stored, processed, transmitted, database accounts and access controls, and secure database connections
Application: Application access, role based access to admin and business transactions/functions
Experience overseeing multi-functional technology groups comprised of positive partnerships such as solution sponsors, engineers, and support to promote commercial solutions architecture and management practices
Prior experience in managing or implementing a commercial solution is desirable
To fulfill this role successfully, you must possess the following minimum qualifications and experience:
High School Diploma/GED
Three (3) years of related experience
Travel up to 30% of the time
It would be advantageous in this position for you to demonstrate the following capabilities and distinctions:
Five (5) years of related experience
Certification in CISSP
What will it be like to work for Hilton?
Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision to fill the earth with the light and warmth of hospitality unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all!
EOE/AA/Disabled/Veterans
The Architect develops, documents, and disseminates information security architectural standards across all of JetBlue’s Information Technology groups. The Architect provides direction to project teams on building the appropriate information security controls into systems in development. The Architect provides direction to system engineers on improving and maintaining the appropriate information security controls for production systems. The Architect is responsible for driving the implementation and adoption of key information security tools.
Essential Responsibilities
Ensures that information security policies, multi-year strategies, standards, procedures, and best practices are developed and communicated with JetBlue's IT Leadership
Develop and execute data security architecture framework
Define and research information security standards; vulnerability analyses and risk assessments; reviewing architecture platforms, applications and integration issues.
Participates in Project Management activities to manage IT Security programs and initiatives;
Participate on the IT Architectural Review Board to drive overall technology direction for JetBlue.
Participates in the development and delivery of a comprehensive information security training program that provides the appropriate training for all crewmembers.
Works with internal and external Auditors to assess compliance with policies, standards, procedures, and best practices.
Review and evaluate firewall change requests.
Other duties as assigned
Minimum Experience and Qualifications
Bachelors in Computer Science.
Four (4) years information technology experience.
Four (4) years information security experience.
Experience delivering comprehensive architecture specifications
Experience providing data protection and web application firewalls
Must be able to work in a team environment as a productive and cordial team player
Must be able to multi-task and prioritize in a fast paced multi-team environment
Ability to present to a variety of audiences
Ability to work to deadlines with quick turnaround
Ability to handle confidential information with professionalism and diplomacy
Must pass a ten (10) year background check and pre-employment drug test
Must be legally eligible to work in the country in which the position is located
Preferred Experience and Qualifications
CISSP certified (or equivalent).
Knowledge of Information security principles.
Understands the concepts of and techniques for secure programming.
Knowledge of security vulnerabilities/weaknesses - fundamental causes of vulnerabilities through which most attacks are exploited.
Able to recognize and categorize the most common types of vulnerabilities and associated attacks.
Familiarity of network Protocols including IP, TCP, UDP, ICMP, ARP, RARP, TFTP, FTP, HTTP, HTTPS, SNMP, and SMTP. Understand how these protocols work, what they are used for, the differences between them, some of the common weaknesses, etc.
Understanding of information security risk analysis.
Knowledge of network applications and services – expertise in the purpose of the application or service, how it works, common usage, secure configurations, and the common types of threats or attacks against the application or service, as well as mitigation strategies.
Host/System Security Issues – expertise in security issues at a host level for the various types of operating systems (Windows and UNIX). Experience in using the operating system (user security issues) and some familiarity in managing and maintaining the operating system as an administrator.
Malicious Code (Viruses, Worms, Trojan Horse programs) – expertise in not only how malicious code is propagated through some of the obvious methods (disks, email, programs, etc.) but also how it can propagate through other means such as PostScript, Word macros, MIME, peer-to-peer file sharing, or boot-sector viruses.
Understanding/Identifying Intruder Techniques - must be able to recognize known intrusion techniques based on the footprints or artifacts left by different types of attack in the incident reports. Know the appropriate methods to protect against these known attack techniques and the risks associated with the attacks. Analysis of and correlation between incidents to notice what has not been seen before.
Working Conditions
Crewmember Expectations:
Regular attendance and punctuality
Potential need to work flexible hours and be available to respond on short-notice
Well groomed and able to maintain a professional appearance
When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of the aircraft
Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Passion and Fun
Equipment:
Computer and other office equipment
Work Environment:
Normal Office Environment
Physical Effort:
Generally not required, or up to 10 pounds occasionally, 0 pounds frequently. (Sedentary
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by the crewmember(s) assigned to this position. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Position Expectations may be subject to change as the needs of the organization change.
JetBlue Airways Corp. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other characteristic protected by law. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Feb 01, 2019
Full-time
The Architect develops, documents, and disseminates information security architectural standards across all of JetBlue’s Information Technology groups. The Architect provides direction to project teams on building the appropriate information security controls into systems in development. The Architect provides direction to system engineers on improving and maintaining the appropriate information security controls for production systems. The Architect is responsible for driving the implementation and adoption of key information security tools.
Essential Responsibilities
Ensures that information security policies, multi-year strategies, standards, procedures, and best practices are developed and communicated with JetBlue's IT Leadership
Develop and execute data security architecture framework
Define and research information security standards; vulnerability analyses and risk assessments; reviewing architecture platforms, applications and integration issues.
Participates in Project Management activities to manage IT Security programs and initiatives;
Participate on the IT Architectural Review Board to drive overall technology direction for JetBlue.
Participates in the development and delivery of a comprehensive information security training program that provides the appropriate training for all crewmembers.
Works with internal and external Auditors to assess compliance with policies, standards, procedures, and best practices.
Review and evaluate firewall change requests.
Other duties as assigned
Minimum Experience and Qualifications
Bachelors in Computer Science.
Four (4) years information technology experience.
Four (4) years information security experience.
Experience delivering comprehensive architecture specifications
Experience providing data protection and web application firewalls
Must be able to work in a team environment as a productive and cordial team player
Must be able to multi-task and prioritize in a fast paced multi-team environment
Ability to present to a variety of audiences
Ability to work to deadlines with quick turnaround
Ability to handle confidential information with professionalism and diplomacy
Must pass a ten (10) year background check and pre-employment drug test
Must be legally eligible to work in the country in which the position is located
Preferred Experience and Qualifications
CISSP certified (or equivalent).
Knowledge of Information security principles.
Understands the concepts of and techniques for secure programming.
Knowledge of security vulnerabilities/weaknesses - fundamental causes of vulnerabilities through which most attacks are exploited.
Able to recognize and categorize the most common types of vulnerabilities and associated attacks.
Familiarity of network Protocols including IP, TCP, UDP, ICMP, ARP, RARP, TFTP, FTP, HTTP, HTTPS, SNMP, and SMTP. Understand how these protocols work, what they are used for, the differences between them, some of the common weaknesses, etc.
Understanding of information security risk analysis.
Knowledge of network applications and services – expertise in the purpose of the application or service, how it works, common usage, secure configurations, and the common types of threats or attacks against the application or service, as well as mitigation strategies.
Host/System Security Issues – expertise in security issues at a host level for the various types of operating systems (Windows and UNIX). Experience in using the operating system (user security issues) and some familiarity in managing and maintaining the operating system as an administrator.
Malicious Code (Viruses, Worms, Trojan Horse programs) – expertise in not only how malicious code is propagated through some of the obvious methods (disks, email, programs, etc.) but also how it can propagate through other means such as PostScript, Word macros, MIME, peer-to-peer file sharing, or boot-sector viruses.
Understanding/Identifying Intruder Techniques - must be able to recognize known intrusion techniques based on the footprints or artifacts left by different types of attack in the incident reports. Know the appropriate methods to protect against these known attack techniques and the risks associated with the attacks. Analysis of and correlation between incidents to notice what has not been seen before.
Working Conditions
Crewmember Expectations:
Regular attendance and punctuality
Potential need to work flexible hours and be available to respond on short-notice
Well groomed and able to maintain a professional appearance
When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of the aircraft
Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Passion and Fun
Equipment:
Computer and other office equipment
Work Environment:
Normal Office Environment
Physical Effort:
Generally not required, or up to 10 pounds occasionally, 0 pounds frequently. (Sedentary
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by the crewmember(s) assigned to this position. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Position Expectations may be subject to change as the needs of the organization change.
JetBlue Airways Corp. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other characteristic protected by law. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Intel's Information Security team is hiring Information Security professionals in all domains of Cyber Security across our locations in the United States, Israel, India and Costa Rica.
Candidates with 5 - 20 years of experience in Cyber Security and with diverse experience in one or several of the key Cyber Security domains are encouraged to apply. Security Management, Governance, Risk, Compliance, Privacy, Vulnerability Management, Data Protection, DLP, Identity and Access Management, Network Security, Application Security, Cryptography, End point security, Security engineering, Security architecture and design, Threat management, Threat intelligence, Security operations, Forensics, Investigations, Audit, Security Operations Center (SOC) and other major areas of Cyber Security are some of the skillsets we are looking for.
If you think you are a passionate security professional and ready to pursue an exciting and satisfying career with Intel, please apply in this requisition.
-----
This position is for Intel's enterprise Information Security team. The Cyber Threat Intelligence Analyst manages threat priorities, detection coverage, and the threat actor portfolio. This role will partner with incident response, red team, and vulnerability and risk management.
Your responsibilities will include but not be limited to:
Track threat actors, campaigns, leading and tailing vulnerabilities and exploits, and associated tactics, techniques, and procedures (TTP).
Covert TTPs into internal SNORT, YARA, and SIEM rules to produce actionable alerts.
Produce clear, concise, and precise oral briefings, technical alerts, and actor profiles in accordance with accepted analytic tradecraft and methodologies.
Reverse engineer malware (static or dynamic) to support incident response and proactively convert malware artifacts into retro-hunts in malware repositories.
Ability to integrate timely, actionable, and relevant TTPs into Red Team operations to emulate actors, model campaigns, and increase detection in assumed areas of risk.
Ability to collect/analyze long-term actor trends to coordinate with peer information and product security, legal, and corporate security teams to reduce business impact.
Coordinate intelligence internally with information security teams and externally with trusted information sharing groups and select industry partnerships.
Qualifications:
The ideal candidate should exhibit the following behavioral traits:
Problem-solving skills
Ability to multitask
Strong written and verbal communication skills
Ability to work in a dynamic and team oriented environment
You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.
Minimum Qualifications:
Bachelor's degree or higher in Computer Science, Math, Statistics, Information Systems, Economics, International relations or any other related area.
Certifications such as CISSP, GIAC, GCIH, GCFA, GREM, OSCP'E, CREST Certified Threat Intelligence Analyst, or FOR578 from certification bodies like ISC2, ISACA, SANS, or comparable intelligence community training are required.
5+ years of experience working as a cyber intelligence analyst, incident responder, Red team operator, reverse engineer, or technical cyber policy analyst.
This U.S. position is open to U.S. Workers Only. A U.S. Worker is someone who is either a U.S. Citizen, U.S. National, U.S. Lawful Permanent Resident, or a person granted Refugee or Asylum status by the U.S. Government. Intel will not sponsor a foreign national for this position.
Preferred Qualifications:
Possess a passion for systems thinking, data analysis, strong analytical skills.
Integrate IOCs, detection rules, and correlation rules in accordance with CND-based models (Kill Chain, Pyramid of Pain, ATT&CK, etc.) with security operations tools.
Experience in Agile/Kanban enterprise-scale software development.
Industry or sector leadership in designing and improving the field of cyber intelligence.
Change agent with ability to drive accountability and cross-team outcomes across a matrixed global team environment across time zones and international geographies.
Knowledge, Skills, Abilities:
Scripting languages: Python, Ruby, JavaScript.
Network security tools: DNS monitoring tools, NIPS/NIDS rules, Next generation firewalls.
Malware reversing: Dynamic and static malware analysis, reversing engineering tools.
Email security tools: Proxy tools, anti-phishing software, and e-mail content scanning.
Host based security: HIPS/HIDS correlation rules, endpoint detection and response tools.
Analytic tradecraft: structured analytic techniques and/or Intelligence community standards.
Intelligence enrichment tools: PassiveDNS, Domain Registration, VirusTotal, OSINT collection.
Candidates should be willing to relocate to Folsom, California or Portland, Oregon area.
Inside this Business Group
Intel's Information Technology Group (IT) designs, deploys and supports the information technology architecture and hardware/software applications for Intel. This includes the LAN, WAN, telephony, data centers, client PCs, backup and restore, and enterprise applications. IT is also responsible for e-Commerce development, data hosting and delivery of Web content and services.
Other Locations
US, Arizona, Phoenix; US, California, San Jose
Posting Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
Feb 01, 2019
Full-time
Intel's Information Security team is hiring Information Security professionals in all domains of Cyber Security across our locations in the United States, Israel, India and Costa Rica.
Candidates with 5 - 20 years of experience in Cyber Security and with diverse experience in one or several of the key Cyber Security domains are encouraged to apply. Security Management, Governance, Risk, Compliance, Privacy, Vulnerability Management, Data Protection, DLP, Identity and Access Management, Network Security, Application Security, Cryptography, End point security, Security engineering, Security architecture and design, Threat management, Threat intelligence, Security operations, Forensics, Investigations, Audit, Security Operations Center (SOC) and other major areas of Cyber Security are some of the skillsets we are looking for.
If you think you are a passionate security professional and ready to pursue an exciting and satisfying career with Intel, please apply in this requisition.
-----
This position is for Intel's enterprise Information Security team. The Cyber Threat Intelligence Analyst manages threat priorities, detection coverage, and the threat actor portfolio. This role will partner with incident response, red team, and vulnerability and risk management.
Your responsibilities will include but not be limited to:
Track threat actors, campaigns, leading and tailing vulnerabilities and exploits, and associated tactics, techniques, and procedures (TTP).
Covert TTPs into internal SNORT, YARA, and SIEM rules to produce actionable alerts.
Produce clear, concise, and precise oral briefings, technical alerts, and actor profiles in accordance with accepted analytic tradecraft and methodologies.
Reverse engineer malware (static or dynamic) to support incident response and proactively convert malware artifacts into retro-hunts in malware repositories.
Ability to integrate timely, actionable, and relevant TTPs into Red Team operations to emulate actors, model campaigns, and increase detection in assumed areas of risk.
Ability to collect/analyze long-term actor trends to coordinate with peer information and product security, legal, and corporate security teams to reduce business impact.
Coordinate intelligence internally with information security teams and externally with trusted information sharing groups and select industry partnerships.
Qualifications:
The ideal candidate should exhibit the following behavioral traits:
Problem-solving skills
Ability to multitask
Strong written and verbal communication skills
Ability to work in a dynamic and team oriented environment
You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates.
Minimum Qualifications:
Bachelor's degree or higher in Computer Science, Math, Statistics, Information Systems, Economics, International relations or any other related area.
Certifications such as CISSP, GIAC, GCIH, GCFA, GREM, OSCP'E, CREST Certified Threat Intelligence Analyst, or FOR578 from certification bodies like ISC2, ISACA, SANS, or comparable intelligence community training are required.
5+ years of experience working as a cyber intelligence analyst, incident responder, Red team operator, reverse engineer, or technical cyber policy analyst.
This U.S. position is open to U.S. Workers Only. A U.S. Worker is someone who is either a U.S. Citizen, U.S. National, U.S. Lawful Permanent Resident, or a person granted Refugee or Asylum status by the U.S. Government. Intel will not sponsor a foreign national for this position.
Preferred Qualifications:
Possess a passion for systems thinking, data analysis, strong analytical skills.
Integrate IOCs, detection rules, and correlation rules in accordance with CND-based models (Kill Chain, Pyramid of Pain, ATT&CK, etc.) with security operations tools.
Experience in Agile/Kanban enterprise-scale software development.
Industry or sector leadership in designing and improving the field of cyber intelligence.
Change agent with ability to drive accountability and cross-team outcomes across a matrixed global team environment across time zones and international geographies.
Knowledge, Skills, Abilities:
Scripting languages: Python, Ruby, JavaScript.
Network security tools: DNS monitoring tools, NIPS/NIDS rules, Next generation firewalls.
Malware reversing: Dynamic and static malware analysis, reversing engineering tools.
Email security tools: Proxy tools, anti-phishing software, and e-mail content scanning.
Host based security: HIPS/HIDS correlation rules, endpoint detection and response tools.
Analytic tradecraft: structured analytic techniques and/or Intelligence community standards.
Intelligence enrichment tools: PassiveDNS, Domain Registration, VirusTotal, OSINT collection.
Candidates should be willing to relocate to Folsom, California or Portland, Oregon area.
Inside this Business Group
Intel's Information Technology Group (IT) designs, deploys and supports the information technology architecture and hardware/software applications for Intel. This includes the LAN, WAN, telephony, data centers, client PCs, backup and restore, and enterprise applications. IT is also responsible for e-Commerce development, data hosting and delivery of Web content and services.
Other Locations
US, Arizona, Phoenix; US, California, San Jose
Posting Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.
The Boeing Company is looking for a Cyber Security Specialist to join our Architecture, Integration, and Emerging Technologies team in the Information Security organization in Bellevue, WA.
Responsibilities
Conduct security evaluation of mobile devices and mobile OS
Enhance integrated approach for mobile application security
Support projects that focus on emerging technologies (e.g. cloud and mobility); work with senior security integrator to identify security requirements and complete integrated design of complex solutions
Perform threat analysis and review threat models
Understand security requirements and approval processes for various security domains
Perform cloud security reviews to ensure company data is secure
Maintain understanding of security capabilities of strategic IS products and new technologies
Create and maintain project management dashboards in Team Foundation Server (TFS), automate processes by leveraging TFS
Maintain internal computing standards, design patterns, and practices
Perform additional duties as assigned
Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are bold innovators and dreamers. Join us, and you can build something better for yourself and for our customers and for the world.
Division CIO, Information & Analytics
Relocation Assistance Available Yes. Available for eligible candidates, if authorized.
Qualifications
This position must meet Export Control compliance requirements, therefore a “US Person” as defined by 22 C.F.R.§120.15 is required. “US Person” includes US Citizen, lawful permanent resident, refugee, or asylee
Basic Qualifications (Required Skills/Experience):
1+ years of cyber security experience
Preferred Qualifications (Desired Skills/Experience):
Possesses one or more security certifications relevant to the position such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH)
Certified Cloud Security Professional (CCSP), etc.
Threat modeling experience
Understanding of security best practices, threats, and mitigating techniques
Possesses knowledge of cloud-based solutions and mobile technologies
Strong analytical, architecture, and integration skills
Strong written and verbal communication skills
Strong focus on first time quality
Desire to grow technical skills and ability to learn new technologies swiftly
High attention to detail, self-starter, result driven
Ability to work in a cross-functional team
Typical Education/Experience
Bachelor's degree in Computer Science, Cyber Security, Information Technologies, or a related field, or equivalent practical experience
Experience Level Individual Contributor
Job Type Standard
Travel Yes, 10 % of the Time
Contingent Upon Program Award No
Union No
Job Code 3AQ2N2
Feb 01, 2019
Full-time
The Boeing Company is looking for a Cyber Security Specialist to join our Architecture, Integration, and Emerging Technologies team in the Information Security organization in Bellevue, WA.
Responsibilities
Conduct security evaluation of mobile devices and mobile OS
Enhance integrated approach for mobile application security
Support projects that focus on emerging technologies (e.g. cloud and mobility); work with senior security integrator to identify security requirements and complete integrated design of complex solutions
Perform threat analysis and review threat models
Understand security requirements and approval processes for various security domains
Perform cloud security reviews to ensure company data is secure
Maintain understanding of security capabilities of strategic IS products and new technologies
Create and maintain project management dashboards in Team Foundation Server (TFS), automate processes by leveraging TFS
Maintain internal computing standards, design patterns, and practices
Perform additional duties as assigned
Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are bold innovators and dreamers. Join us, and you can build something better for yourself and for our customers and for the world.
Division CIO, Information & Analytics
Relocation Assistance Available Yes. Available for eligible candidates, if authorized.
Qualifications
This position must meet Export Control compliance requirements, therefore a “US Person” as defined by 22 C.F.R.§120.15 is required. “US Person” includes US Citizen, lawful permanent resident, refugee, or asylee
Basic Qualifications (Required Skills/Experience):
1+ years of cyber security experience
Preferred Qualifications (Desired Skills/Experience):
Possesses one or more security certifications relevant to the position such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH)
Certified Cloud Security Professional (CCSP), etc.
Threat modeling experience
Understanding of security best practices, threats, and mitigating techniques
Possesses knowledge of cloud-based solutions and mobile technologies
Strong analytical, architecture, and integration skills
Strong written and verbal communication skills
Strong focus on first time quality
Desire to grow technical skills and ability to learn new technologies swiftly
High attention to detail, self-starter, result driven
Ability to work in a cross-functional team
Typical Education/Experience
Bachelor's degree in Computer Science, Cyber Security, Information Technologies, or a related field, or equivalent practical experience
Experience Level Individual Contributor
Job Type Standard
Travel Yes, 10 % of the Time
Contingent Upon Program Award No
Union No
Job Code 3AQ2N2
Hunt and eliminate malware within Stripe networks
The security concerns are ever-evolving, making the security team an extremely dynamic environment to work in. Our ultimate goal is to secure Stripe, secure Stripe users, and secure the Internet.
For the Threat Engineering Team, signature based detection is not enough - Stripe strives for world class security that recognizes abnormal through aggressive baselining of endpoints and servers.
Stripe’s threat engineering team recognizes that, in order to manage and defend against an attack, one must understand the attack and approaches each challenge with an adversary mindset. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do.
You will:
Develop general techniques and frameworks that will enable other engineering teams to find flaws before they are introduced into production
Be a security subject matter expert and respond to any internal security engineering questions/request
Work with other teams to help architect solutions that are inherently secure
Perform penetration testing on our internal and external applications
Threat model existing applications
Perform reactive incident response when a security event occurs
Perform proactive research to detect new attack vectors
Architect and create frameworks that prevent current and future attack scenarios
Create and execute training exercises to advance developers’ security knowledge
Research, architect, and execute solutions that will advance internal security monitoring & controls
Our ideal candidate for this role:
Can write defensive, maintainable code that solves real-world problems for our users
Has previously held security role in professional environment
Has software engineering experience in production environment
Has a security-specific background
Has a knack for finding flaws in software and can efficiently communicate how to fix them
Has the ability to find creative ways of reducing risk of inherently insecure efforts
Can think about problems from an out-of-the box perspective
Can think like an attacker and preemptively determine how malicious actors will attack Stripe
What’s it like to work at Stripe?
Stripe is helping the internet fulfill its potential as a platform for economic progress by building software tools that accelerate global economic access and technological development. Stripe makes it easy to start, run and scale an internet business from anywhere in the world.
Stripe is, at its heart, an engineering company. To provide a missing pillar of core internet infrastructure, we hire people with a broad set of technical skills (and from a wide variety of backgrounds) who are ready to take on some of the most challenging problems in the industry – from reliably handling 100M API requests per day, to building adaptive machine learning as a result of years of data science and infrastructure work, and enabling entrepreneurs worldwide to start a global internet business.
We look at Stripe as a constant work in progress and the same is true of our people; for all of us, we believe the best is yet to come. We’re here to support each other in our curiosity and creativity – which we pursue through thoughtful discussion and knowledge-sharing among a diverse set of peers and colleagues.
We encourage all engineers to transition teams once every year and a half and also take on short-term projects with other teams across Stripe. This enables engineers to learn how different parts of Stripe work while also establishing stronger ties and cross-pollination between groups.
We contribute to existing open-source projects and the people working on them, and we release several tools as open-source.
We want to work in a company of warm, inclusive people who treat their colleagues exceptionally well. The kind of people who are committed to going out of their way to help other Stripes in the short-term and pushing them to improve over the long-term (by helping them to get better at what they do).
We’re a highly cross-functional organization and view that as part of the fun: we design our space to encourage as much collaboration as possible. We have long tables in the kitchen for a reason (to enable everyone to meet new people and learn from them). We also have a culture of transparency that we carry through to email communication, ensuring that Stripes all around the world have the information they need to make good local decisions.
In both our products and our people, we aim to reflect, represent and advocate for all of our users, globally. Our users transcend geography, culture and language; what we share, collectively, is a drive to create a fairer, more economically interconnected world.
Feb 01, 2019
Full-time
Hunt and eliminate malware within Stripe networks
The security concerns are ever-evolving, making the security team an extremely dynamic environment to work in. Our ultimate goal is to secure Stripe, secure Stripe users, and secure the Internet.
For the Threat Engineering Team, signature based detection is not enough - Stripe strives for world class security that recognizes abnormal through aggressive baselining of endpoints and servers.
Stripe’s threat engineering team recognizes that, in order to manage and defend against an attack, one must understand the attack and approaches each challenge with an adversary mindset. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do.
You will:
Develop general techniques and frameworks that will enable other engineering teams to find flaws before they are introduced into production
Be a security subject matter expert and respond to any internal security engineering questions/request
Work with other teams to help architect solutions that are inherently secure
Perform penetration testing on our internal and external applications
Threat model existing applications
Perform reactive incident response when a security event occurs
Perform proactive research to detect new attack vectors
Architect and create frameworks that prevent current and future attack scenarios
Create and execute training exercises to advance developers’ security knowledge
Research, architect, and execute solutions that will advance internal security monitoring & controls
Our ideal candidate for this role:
Can write defensive, maintainable code that solves real-world problems for our users
Has previously held security role in professional environment
Has software engineering experience in production environment
Has a security-specific background
Has a knack for finding flaws in software and can efficiently communicate how to fix them
Has the ability to find creative ways of reducing risk of inherently insecure efforts
Can think about problems from an out-of-the box perspective
Can think like an attacker and preemptively determine how malicious actors will attack Stripe
What’s it like to work at Stripe?
Stripe is helping the internet fulfill its potential as a platform for economic progress by building software tools that accelerate global economic access and technological development. Stripe makes it easy to start, run and scale an internet business from anywhere in the world.
Stripe is, at its heart, an engineering company. To provide a missing pillar of core internet infrastructure, we hire people with a broad set of technical skills (and from a wide variety of backgrounds) who are ready to take on some of the most challenging problems in the industry – from reliably handling 100M API requests per day, to building adaptive machine learning as a result of years of data science and infrastructure work, and enabling entrepreneurs worldwide to start a global internet business.
We look at Stripe as a constant work in progress and the same is true of our people; for all of us, we believe the best is yet to come. We’re here to support each other in our curiosity and creativity – which we pursue through thoughtful discussion and knowledge-sharing among a diverse set of peers and colleagues.
We encourage all engineers to transition teams once every year and a half and also take on short-term projects with other teams across Stripe. This enables engineers to learn how different parts of Stripe work while also establishing stronger ties and cross-pollination between groups.
We contribute to existing open-source projects and the people working on them, and we release several tools as open-source.
We want to work in a company of warm, inclusive people who treat their colleagues exceptionally well. The kind of people who are committed to going out of their way to help other Stripes in the short-term and pushing them to improve over the long-term (by helping them to get better at what they do).
We’re a highly cross-functional organization and view that as part of the fun: we design our space to encourage as much collaboration as possible. We have long tables in the kitchen for a reason (to enable everyone to meet new people and learn from them). We also have a culture of transparency that we carry through to email communication, ensuring that Stripes all around the world have the information they need to make good local decisions.
In both our products and our people, we aim to reflect, represent and advocate for all of our users, globally. Our users transcend geography, culture and language; what we share, collectively, is a drive to create a fairer, more economically interconnected world.
