The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Seattle, Burbank, and Orlando. In order to ensure that our services keep TWDC secure, we follow an ongoing, iterative process, including continued reevaluation of our services over time to address emerging threats as well as changes in business and technology. This process includes: 1. Analysis of known and emerging threats to determine risks against TWDC assets 2. Creation, maintenance, governance and communication of security policies and standards across TWDC 3. Assessment and audit of compliance against the security policies and standards 4. Assurance that TWDC assets are effectively managed and monitored to meet TWDC security criteria We look add people to our team who are focused on delivery, prioritize data-driven decisions over opinions, are continuous learners, passionate about information security and love their work. Responsibilities: The Information Security Program Administration team enables high team performance and effective delivery of services through ongoing monitoring of commitments, continuous operational and financial improvements, and effective collaboration with all stakeholders. The Undergraduate Associate, Security Program Administration assists the Security Program Manager in project, portfolio and financial management activities. He or she will work closely with our Finance partners and various stakeholders to monitor, track, analyze, and report the health and performance of the GIS portfolio. This includes: Working closely with our Finance partners and budget owners to align project planning with the funding request process and available funds – tracking documentation, compiling dashboards, presentations & reports, validating entries, etc Assist with communication and implementation of portfolio management (project governance) processes Partner with extended program management team to improve governance and planning capabilities by integrating optimal ways of planning and organizing, acquiring and implementing, delivering and supporting, and monitoring initiative completion and service performance. Basic Qualifications: Proficiency with MS Office (especially Excel including pivot tables, formulas and charts), SharePoint, PowerPoint Basic technical knowledge and ability Business management (accounting, financial fundamentals) skills Experience or interest working in project management Strong project/team management, finance, and analytical skills Knowledge of accounting fundamentals General understanding of financial acumen A general understanding/knowledge of information security principles Excellent verbal and written communication skills Preferred Qualifications: Previous Project management experience Experience with budget planning and reporting Accounting fundamentals Experience collaborating and coordinating across teams and geographies Required Education: Currently enrolled in an accredited college or university and taking at least one class, or be a recent graduate of an accredited college or university within the last six (6) months at time of application, or be currently participating in the Disney College Program, Disney Culinary Program or Disney Professional Internship Program Preferred Education: Pursuing a business or finance degree with a specialization or interest in technology and/or cybersecurity OR pursing a degree in cybersecurity or technology with a specialization in business or business process management Additional Information: The approximate dates of this internship are August/September 2019 through January 2020 Candidate must be available to work full time hours (approximately 40 hours per week) for the duration of the internship Must be enrolled in a college/university taking at least one class in the semester/quarter (spring/fall) prior to participation in the internship program OR must have graduated from a college/university within the past six (6) months OR currently participating in a Disney College Program or Disney Professional Internship Must be at least 18 years of age Must not have completed one year of continual employment on a Disney internship or program Must possess unrestricted work authorization Housing: Interns must provide their own housing for the duration of their internship program. Transportation: Interns must have reliable transportation to get to and from work for the duration of their internship program. Required Materials: PDF version of resume must be uploaded at time of application

***This position can be based out of one of three corporate office locations: McLean, VA or Memphis, TN or Dallas, TX*** From smartphone capabilities like Digital Key to connected rooms that allow for integrated entertainment, temperature, and lighting controls, Hilton's Global Technology team is responsible for creating the hospitality experience of the future – for our guests, owners, and Team Members. Through innovative technology development and deployment, this team ensures Hilton has the technology needed to support our continued global growth while remaining at the forefront of hospitality technology innovation. What will I be doing? Commercial technology solutions (a.k.a. Commercial Off-The-Shelf – COTS) from third-party vendors support numerous corporate, call center, and hotel technology functions. As the Lead Security Analyst – Commercial Solutions, you will be a technical contributor on Hilton's Information Security, responsible for integrating sound cyber security processes and controls for COTS solutions that handle sensitive data, may impact guest/employee life and safety, and deliver positive guest stay experiences. You will be dedicated and committed to supporting the development, maintenance, and management of processes that provide for initial and ongoing secure implementation of commercial solutions. This includes consistent and repeatable solution security controls. More specifically, you will: Perform timely reviews and assessments of the commercial solution architecture and support service delivery processes that help ensure cyber risks are not introduced due to limitations in technology management, maintenance, and support processes. Integrate commercial solutions into the enterprise technology management and security process (e.g., threat management, logging, patch delivery). Execute the annual Payment Card Industry (PCI) commercial solutions assessments, as well as other compliance driven requirements (e.g., privacy impact analyses). This is a new position at Hilton and will report to a new technical leader that will craft the future approach and direction for the role. What are we looking for? The success in this role will demonstrate itself through the following attributes and skills: Experience developing an understanding of how a solution functions through the review of user documentation and inquiries with the vendor Applied knowledge of base cyber security practices at all layers of the technology stack in the design and/or assessment of commercial solutions: Network Layer: un-trusted network access controls, application firewall rules and vendor remote access Platform: AD, Domain Join, service accounts, COTS solution, platform agent interoperability and patching Devices/IoT: communication requirements and centralized device management Data and Database: Data types stored, processed, transmitted, database accounts and access controls, and secure database connections Application: Application access, role based access to admin and business transactions/functions Experience overseeing multi-functional technology groups comprised of positive partnerships such as solution sponsors, engineers, and support to promote commercial solutions architecture and management practices Prior experience in managing or implementing a commercial solution is desirable To fulfill this role successfully, you must possess the following minimum qualifications and experience: High School Diploma/GED Three (3) years of related experience Travel up to 30% of the time It would be advantageous in this position for you to demonstrate the following capabilities and distinctions: Five (5) years of related experience Certification in CISSP What will it be like to work for Hilton? Hilton is the leading global hospitality company, spanning the lodging sector from luxurious full-service hotels and resorts to extended-stay suites and mid-priced hotels. For nearly a century, Hilton has offered business and leisure travelers the finest in accommodations, service, amenities and value. Hilton is dedicated to continuing its tradition of providing exceptional guest experiences across its global brands. Our vision to fill the earth with the light and warmth of hospitality unites us as a team to create remarkable hospitality experiences around the world every day. And, our amazing Team Members are at the heart of it all! EOE/AA/Disabled/Veterans

The Architect develops, documents, and disseminates information security architectural standards across all of JetBlue’s Information Technology groups. The Architect provides direction to project teams on building the appropriate information security controls into systems in development.   The Architect provides direction to system engineers on improving and maintaining the appropriate information security controls for production systems.  The Architect is responsible for driving the implementation and adoption of key information security tools. Essential Responsibilities Ensures that  information security policies, multi-year strategies, standards, procedures, and best practices are developed and communicated with JetBlue's IT Leadership Develop and execute data security architecture framework Define and research information security standards; vulnerability analyses and risk assessments; reviewing architecture platforms, applications and integration issues. Participates in Project Management activities to manage IT Security programs and initiatives; Participate on the IT Architectural Review Board to drive overall technology direction for JetBlue. Participates in the development and delivery of a comprehensive information security training program that provides the appropriate training for all crewmembers. Works with internal and external Auditors to assess compliance with policies, standards, procedures, and best practices. Review and evaluate firewall change requests. Other duties as assigned Minimum Experience and Qualifications Bachelors in Computer Science. Four (4) years information technology experience. Four (4) years information security experience. Experience delivering comprehensive architecture specifications Experience providing data protection and web application firewalls Must be able to work in a team environment as a productive and cordial team player Must be able to multi-task and prioritize in a fast paced multi-team environment Ability to present to a variety of audiences Ability to work to deadlines with quick turnaround Ability to handle confidential information with professionalism and diplomacy Must pass a ten (10) year background check and pre-employment drug test Must be legally eligible to work in the country in which the position is located Preferred Experience and Qualifications CISSP certified (or equivalent). Knowledge of Information security principles. Understands the concepts of and techniques for secure programming. Knowledge of security vulnerabilities/weaknesses - fundamental causes of vulnerabilities through which most attacks are exploited. Able to recognize and categorize the most common types of vulnerabilities and associated attacks. Familiarity of network Protocols including IP, TCP, UDP, ICMP, ARP, RARP, TFTP, FTP, HTTP, HTTPS, SNMP, and SMTP.  Understand how these protocols work, what they are used for, the differences between them, some of the common weaknesses, etc. Understanding of information security risk analysis. Knowledge of network applications and services – expertise in the purpose of the application or service, how it works, common usage, secure configurations, and the common types of threats or attacks against the application or service, as well as mitigation strategies. Host/System Security Issues – expertise in security issues at a host level for the various types of operating systems (Windows and UNIX). Experience in using the operating system (user security issues) and some familiarity in managing and maintaining the operating system as an administrator. Malicious Code (Viruses, Worms, Trojan Horse programs) – expertise in not only how malicious code is propagated through some of the obvious methods (disks, email, programs, etc.) but also how it can propagate through other means such as PostScript, Word macros, MIME, peer-to-peer file sharing, or boot-sector viruses. Understanding/Identifying Intruder Techniques - must be able to recognize known intrusion techniques based on the footprints or artifacts left by different types of attack in the incident reports.  Know the appropriate methods to protect against these known attack techniques and the risks associated with the attacks.  Analysis of and correlation between incidents to notice what has not been seen before. Working Conditions Crewmember Expectations: Regular attendance and punctuality Potential need to work flexible hours and be available to respond on short-notice Well groomed and able to maintain a professional appearance When working or traveling on JetBlue flights, and if time permits, all capable crewmembers are asked to assist with light cleaning of the aircraft Must be an appropriate organizational fit for the JetBlue culture, that is, exhibit the JetBlue values of Safety, Caring, Integrity, Passion and Fun Equipment: Computer and other office equipment Work Environment: Normal Office Environment Physical Effort:  Generally not required, or up to 10 pounds occasionally, 0 pounds frequently. (Sedentary Disclaimer: The above statements are intended to describe the general nature and level of work being performed by the crewmember(s) assigned to this position. They are not intended to be an exhaustive list of all responsibilities, duties, and skills required of individuals in this position. Position Expectations may be subject to change as the needs of the organization change. JetBlue Airways Corp. is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability status, pregnancy, genetic information, citizenship status or any other characteristic protected by law. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Intel's Information Security team is hiring Information Security professionals in all domains of Cyber Security across our locations in the United States, Israel, India and Costa Rica. Candidates with 5 - 20 years of experience in Cyber Security and with diverse experience in one or several of the key Cyber Security domains are encouraged to apply. Security Management, Governance, Risk, Compliance, Privacy, Vulnerability Management, Data Protection, DLP, Identity and Access Management, Network Security, Application Security, Cryptography, End point security, Security engineering, Security architecture and design, Threat management, Threat intelligence, Security operations, Forensics, Investigations, Audit, Security Operations Center (SOC) and other major areas of Cyber Security are some of the skillsets we are looking for. If you think you are a passionate security professional and ready to pursue an exciting and satisfying career with Intel, please apply in this requisition. ----- This position is for Intel's enterprise Information Security team. The Cyber Threat Intelligence Analyst manages threat priorities, detection coverage, and the threat actor portfolio. This role will partner with incident response, red team, and vulnerability and risk management. Your responsibilities will include but not be limited to: Track threat actors, campaigns, leading and tailing vulnerabilities and exploits, and associated tactics, techniques, and procedures (TTP). Covert TTPs into internal SNORT, YARA, and SIEM rules to produce actionable alerts. Produce clear, concise, and precise oral briefings, technical alerts, and actor profiles in accordance with accepted analytic tradecraft and methodologies. Reverse engineer malware (static or dynamic) to support incident response and proactively convert malware artifacts into retro-hunts in malware repositories. Ability to integrate timely, actionable, and relevant TTPs into Red Team operations to emulate actors, model campaigns, and increase detection in assumed areas of risk. Ability to collect/analyze long-term actor trends to coordinate with peer information and product security, legal, and corporate security teams to reduce business impact. Coordinate intelligence internally with information security teams and externally with trusted information sharing groups and select industry partnerships. Qualifications: The ideal candidate should exhibit the following behavioral traits: Problem-solving skills Ability to multitask Strong written and verbal communication skills Ability to work in a dynamic and team oriented environment You must possess the below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to the minimum requirements and are considered a plus factor in identifying top candidates. Minimum Qualifications: Bachelor's degree or higher in Computer Science, Math, Statistics, Information Systems, Economics, International relations or any other related area. Certifications such as CISSP, GIAC, GCIH, GCFA, GREM, OSCP'E, CREST Certified Threat Intelligence Analyst, or FOR578 from certification bodies like ISC2, ISACA, SANS, or comparable intelligence community training are required. 5+ years of experience working as a cyber intelligence analyst, incident responder, Red team operator, reverse engineer, or technical cyber policy analyst. This U.S. position is open to U.S. Workers Only. A U.S. Worker is someone who is either a U.S. Citizen, U.S. National, U.S. Lawful Permanent Resident, or a person granted Refugee or Asylum status by the U.S. Government. Intel will not sponsor a foreign national for this position. Preferred Qualifications: Possess a passion for systems thinking, data analysis, strong analytical skills. Integrate IOCs, detection rules, and correlation rules in accordance with CND-based models (Kill Chain, Pyramid of Pain, ATT&CK, etc.) with security operations tools. Experience in Agile/Kanban enterprise-scale software development. Industry or sector leadership in designing and improving the field of cyber intelligence. Change agent with ability to drive accountability and cross-team outcomes across a matrixed global team environment across time zones and international geographies. Knowledge, Skills, Abilities: Scripting languages: Python, Ruby, JavaScript. Network security tools: DNS monitoring tools, NIPS/NIDS rules, Next generation firewalls. Malware reversing: Dynamic and static malware analysis, reversing engineering tools. Email security tools: Proxy tools, anti-phishing software, and e-mail content scanning. Host based security: HIPS/HIDS correlation rules, endpoint detection and response tools. Analytic tradecraft: structured analytic techniques and/or Intelligence community standards. Intelligence enrichment tools: PassiveDNS, Domain Registration, VirusTotal, OSINT collection. Candidates should be willing to relocate to Folsom, California or Portland, Oregon area. Inside this Business Group Intel's Information Technology Group (IT) designs, deploys and supports the information technology architecture and hardware/software applications for Intel. This includes the LAN, WAN, telephony, data centers, client PCs, backup and restore, and enterprise applications. IT is also responsible for e-Commerce development, data hosting and delivery of Web content and services. Other Locations US, Arizona, Phoenix; US, California, San Jose Posting Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

The Boeing Company is looking for a Cyber Security Specialist to join our Architecture, Integration, and Emerging Technologies team in the Information Security organization in Bellevue, WA. Responsibilities Conduct security evaluation of mobile devices and mobile OS Enhance integrated approach for mobile application security Support projects that focus on emerging technologies (e.g. cloud and mobility); work with senior security integrator to identify security requirements and complete integrated design of complex solutions Perform threat analysis and review threat models Understand security requirements and approval processes for various security domains Perform cloud security reviews to ensure company data is secure Maintain understanding of security capabilities of strategic IS products and new technologies Create and maintain project management dashboards in Team Foundation Server (TFS), automate processes by leveraging TFS Maintain internal computing standards, design patterns, and practices Perform additional duties as assigned Boeing is the world's largest aerospace company and leading manufacturer of commercial airplanes and defense, space and security systems. We are bold innovators and dreamers. Join us, and you can build something better for yourself and for our customers and for the world. Division CIO, Information & Analytics Relocation Assistance Available Yes. Available for eligible candidates, if authorized. Qualifications This position must meet Export Control compliance requirements, therefore a “US Person” as defined by 22 C.F.R.§120.15 is required. “US Person” includes US Citizen, lawful permanent resident, refugee, or asylee Basic Qualifications (Required Skills/Experience): 1+ years of cyber security experience Preferred Qualifications (Desired Skills/Experience): Possesses one or more security certifications relevant to the position such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH) Certified Cloud Security Professional (CCSP), etc. Threat modeling experience Understanding of security best practices, threats, and mitigating techniques Possesses knowledge of cloud-based solutions and mobile technologies Strong analytical, architecture, and integration skills Strong written and verbal communication skills Strong focus on first time quality Desire to grow technical skills and ability to learn new technologies swiftly High attention to detail, self-starter, result driven Ability to work in a cross-functional team Typical Education/Experience Bachelor's degree in Computer Science, Cyber Security, Information Technologies, or a related field, or equivalent practical experience Experience Level Individual Contributor Job Type Standard Travel Yes, 10 % of the Time Contingent Upon Program Award No Union No Job Code 3AQ2N2